$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: jVNfOarVHbeLsdiJs2udSSgHbLcG/XIDxmogCJZSRRk= Subject key identifier: B0:83:08:79:23:A4:2C:0D:9B:EE:85:5F:F1:49:B5:52:49:6F:87:9D Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 01F7 Signing time: Thu 23 Oct 2025 04:01:09 +0000 Manifest this update: Thu 23 Oct 2025 04:01:08 +0000 Manifest next update: Thu 30 Oct 2025 04:01:08 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: lrBI2iEocJkI33Cjq0bixNlMgZxLkCRm1DPht9o13wc=) 2: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: KSItAPOjkLG7UWPYALBIyJeHmExySZ4KDwSB7GWXFrI=) 3: 9AB64290908211EF9877C022C4F9AE02.roa (hash: 53832RqqEhC0WAnEbw/uqzZOjibGBYS5qoQ5I8q+Q+o=) 4: B780E2A097F711EF89B09770C4F9AE02.roa (hash: DB23UT2fsXrp5BzUdZvw+7TC7FTSDlXyxizqnQeaxYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Oct 23 04:01:08 2025 GMT Not After : Oct 30 04:01:08 2025 GMT Subject: CN=68f9a884-e3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:05:36:da:a3:75:a4:90:f4:dd:b1:dd:85:21: c2:09:e0:62:6d:49:a4:c0:8c:99:e0:bb:44:1c:7b: 81:1c:ea:97:e1:1b:e5:a2:bc:63:28:21:f9:3a:81: 43:2f:18:e2:23:7c:16:40:f7:03:3c:9e:c8:fa:fb: c4:1d:0e:ed:75:0f:1f:50:75:14:4b:9a:d7:80:02: c4:3f:6d:c3:0f:39:00:26:57:cf:93:68:56:f3:a0: 68:79:71:3f:de:e3:85:93:dd:b1:b5:2a:f5:80:2a: 1f:d5:db:b5:b2:da:d9:13:bf:68:75:5b:1e:bc:21: 0f:c5:d7:c9:3e:c1:5a:f3:c2:9e:8e:73:56:67:7e: 59:cc:49:14:54:78:34:3a:ff:3d:56:9d:18:8f:c3: b5:bf:ed:cf:6d:a2:38:69:80:2c:56:6f:93:5c:06: 65:b8:24:72:9a:ee:47:3f:f5:ad:14:5d:3c:13:61: 77:96:61:dd:b7:76:9a:54:60:86:67:79:56:b2:c6: 96:c2:ae:b7:b9:61:5e:f7:d1:58:ba:73:36:2d:08: 93:6a:38:83:21:db:9a:05:51:48:48:e8:a0:05:66: 1d:2a:76:cb:d7:1d:3e:fa:d0:50:02:0b:ca:92:cd: c1:6d:45:23:f8:69:b3:54:b0:83:07:5c:6d:a4:17: 0e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:83:08:79:23:A4:2C:0D:9B:EE:85:5F:F1:49:B5:52:49:6F:87:9D X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:86:f7:f3:38:49:ed:db:d9:04:5d:3e:e1:c2:37:9a:66:7d: ad:63:df:53:99:d0:e1:87:87:35:81:33:6c:23:ba:ee:69:69: 5f:1e:68:0f:95:22:90:27:b5:71:17:69:1a:b8:6e:b2:a7:26: 23:84:e2:54:66:5e:48:0f:9e:a5:14:9f:8e:18:f4:05:8f:47: 40:9f:26:8d:b7:a3:f6:e1:e0:8f:ac:bc:87:27:74:ee:32:17: be:90:e4:75:78:10:ea:44:4e:5b:03:42:0b:eb:90:a1:b3:ca: dc:75:cc:e9:18:e3:e2:6a:00:08:92:21:92:ca:ec:77:d1:ce: dc:05:8d:2b:97:3f:c2:da:1f:6a:54:3f:80:67:a3:d3:3c:20: d1:e5:f5:2b:f7:d1:22:88:f5:bc:04:2f:1a:16:5a:6b:a5:51: 00:1d:64:03:25:f7:11:90:36:5d:a9:0e:4f:07:ec:48:77:e9: a1:65:6c:c2:66:f4:91:cf:1e:df:ca:f0:ab:87:ec:c2:58:93: b5:16:2f:61:66:41:17:0a:df:6c:f2:bc:d0:99:6f:86:5f:0e: e9:d2:10:01:c4:40:41:85:73:ba:3d:f9:86:10:e0:db:97:d4: c5:4f:f2:03:bc:c3:34:ab:7d:e7:13:40:14:ee:dc:cc:80:22: 35:8b:f8:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjUxMDIzMDQwMTA4WhcNMjUxMDMwMDQwMTA4WjAYMRYwFAYD VQQDEw02OGY5YTg4NC1lM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwU22qN1pJD03bHdhSHCCeBibUmkwIyZ4LtEHHuBHOqX4RvlorxjKCH5OoFD LxjiI3wWQPcDPJ7I+vvEHQ7tdQ8fUHUUS5rXgALEP23DDzkAJlfPk2hW86BoeXE/ 3uOFk92xtSr1gCof1du1strZE79odVsevCEPxdfJPsFa88KejnNWZ35ZzEkUVHg0 Ov89Vp0Yj8O1v+3PbaI4aYAsVm+TXAZluCRymu5HP/WtFF08E2F3lmHdt3aaVGCG Z3lWssaWwq63uWFe99FYunM2LQiTajiDIduaBVFISOigBWYdKnbL1x0++tBQAgvK ks3BbUUj+GmzVLCDB1xtpBcOpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCDCHkj pCwNm+6FX/FJtVJJb4edMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDhvfzOEnt29kEXT7hwjeaZn2tY99TmdDhh4c1gTNsI7ruaWlfHmgP lSKQJ7VxF2kauG6ypyYjhOJUZl5ID56lFJ+OGPQFj0dAnyaNt6P24eCPrLyHJ3Tu Mhe+kOR1eBDqRE5bA0IL65Chs8rcdczpGOPiagAIkiGSyux30c7cBY0rlz/C2h9q VD+AZ6PTPCDR5fUr99EiiPW8BC8aFlprpVEAHWQDJfcRkDZdqQ5PB+xId+mhZWzC ZvSRzx7fyvCrh+zCWJO1Fi9hZkEXCt9s8rzQmW+GXw7p0hABxEBBhXO6PfmGEODb l9TFT/IDvMM0q33nE0AU7tzMgCI1i/j/ -----END CERTIFICATE-----Generated at Fri Oct 24 18:54:49 2025 by rpki-client