$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft File: 5CK_AmFA0gPv1r_eruJoqosEZtU.mft (raw, json) Hash identifier: ACCpOsbpj+3v2CnYF862ZUokRNpug6hrfVWI7zehYhg= Subject key identifier: AF:63:1A:F9:A1:3E:C2:40:DD:61:F1:7A:D9:FE:09:53:1A:2F:E3:E1 Authority key identifier: E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5 Certificate issuer: /CN=A91C3174/serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5 Certificate serial: 031D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft Manifest number: 0318 Signing time: Mon 03 Nov 2025 01:05:26 +0000 Manifest this update: Mon 03 Nov 2025 01:05:26 +0000 Manifest next update: Mon 10 Nov 2025 01:05:26 +0000 Files and hashes: 1: 5CK_AmFA0gPv1r_eruJoqosEZtU.crl (hash: mpvfqe/jC9av0iUtumH45tqxB0pnrZaKqyg6t41ekI4=) 2: 9A4B6146EED111EC9BDD4C49C4F9AE02.roa (hash: KkExhLw32KhJNP1vh+cfX+3O2VUbbBLKFmBZMRijetQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 797 (0x31d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3174, serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5 Validity Not Before: Nov 3 01:05:26 2025 GMT Not After : Nov 10 01:05:26 2025 GMT Subject: CN=6907ffd6-0afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:53:69:c6:70:f7:39:88:d4:4e:cc:dc:8a:f1: 3d:a8:d8:89:13:ad:ff:1b:18:77:c5:53:80:5a:ec: 68:0b:d0:aa:a4:62:4f:e4:70:e5:fa:9c:ea:31:57: 9c:69:40:a0:44:75:67:58:5f:e9:70:1c:27:78:15: fd:5c:af:ff:28:4f:04:3b:68:58:62:37:77:19:8f: 7e:21:3d:16:a1:28:35:4f:58:a6:50:b2:5d:57:e3: 51:42:89:1c:63:c7:47:e0:09:3d:cd:1f:b8:0a:d4: 59:52:ac:ea:2c:5c:cc:c6:10:40:44:33:4d:88:a2: 5e:69:59:ea:cc:e2:fb:c4:0c:88:f1:b5:85:8e:cd: e0:03:60:f4:31:97:b5:8a:b4:8f:60:a1:0d:2f:66: 35:7e:24:41:18:a9:b9:4f:96:ee:db:2b:99:64:0d: 6b:66:c6:1c:b5:6a:e1:8a:a5:98:09:9c:7c:65:85: b4:4b:62:b3:4d:2f:0e:e9:56:a9:23:98:ce:6c:4b: 42:69:9a:b2:4d:ff:cd:7d:2e:3d:0c:65:6c:df:4c: b4:35:5c:b7:da:fe:d1:18:6b:2d:59:c1:8a:ed:34: ce:b2:f6:17:87:76:6b:79:3b:65:ed:06:3b:05:59: 45:f4:38:65:bb:52:21:2d:f3:1b:70:8c:36:f5:dc: f8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:63:1A:F9:A1:3E:C2:40:DD:61:F1:7A:D9:FE:09:53:1A:2F:E3:E1 X509v3 Authority Key Identifier: keyid:E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:48:27:f0:0e:49:d9:de:f8:2b:57:b8:0a:cd:45:4e:31:91: 7e:86:0f:38:54:f3:f7:7f:4e:2d:91:d5:79:9e:c2:37:3c:01: 84:7b:e8:d8:a6:c2:ef:e1:4c:2f:34:6c:d9:c0:59:b8:71:cd: f0:e2:a8:f2:f4:6f:b5:f5:ab:89:9e:da:62:e1:7b:50:2c:85: b0:ad:b4:89:9d:59:11:42:eb:7c:c5:e1:0f:b2:b3:9a:50:be: 1d:d8:59:7c:53:6b:22:6e:1e:99:4c:35:f8:f3:88:c8:97:35: 9b:21:64:50:8a:85:81:dd:5e:78:16:51:9e:ff:9c:8e:87:8f: e1:21:40:d2:32:a8:6f:bc:be:4d:43:76:51:92:3c:66:23:58: f8:13:2f:c2:7d:5c:7e:5d:49:f3:9b:71:5a:ee:d3:79:61:1c: 38:a6:b0:e8:49:f8:c2:c8:b8:34:9f:d5:2a:cb:1e:4f:d3:f4: c3:d0:c2:11:9b:d2:3c:36:d7:28:e2:5e:4a:68:d0:c5:13:d7: 84:9b:59:ce:d0:be:5e:67:d4:87:89:e8:3b:31:3c:51:11:77: 1e:e1:f4:7a:13:e5:b8:90:6d:13:92:5d:d9:07:f9:ec:a9:dd: 38:f4:a2:11:d4:39:ff:bb:f1:e7:4a:fb:49:8c:44:c9:5c:6c: d0:27:e9:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxNzQxMTAvBgNVBAUTKEU0MjJCRjAyNjE0MEQyMDNFRkQ2QkZERUFFRTI2OEFB OEIwNDY2RDUwHhcNMjUxMTAzMDEwNTI2WhcNMjUxMTEwMDEwNTI2WjAYMRYwFAYD VQQDEw02OTA3ZmZkNi0wYWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslNpxnD3OYjUTszcivE9qNiJE63/Gxh3xVOAWuxoC9CqpGJP5HDl+pzqMVec aUCgRHVnWF/pcBwneBX9XK//KE8EO2hYYjd3GY9+IT0WoSg1T1imULJdV+NRQokc Y8dH4Ak9zR+4CtRZUqzqLFzMxhBARDNNiKJeaVnqzOL7xAyI8bWFjs3gA2D0MZe1 irSPYKENL2Y1fiRBGKm5T5bu2yuZZA1rZsYctWrhiqWYCZx8ZYW0S2KzTS8O6Vap I5jObEtCaZqyTf/NfS49DGVs30y0NVy32v7RGGstWcGK7TTOsvYXh3ZreTtl7QY7 BVlF9Dhlu1IhLfMbcIw29dz4uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9jGvmh PsJA3WHxetn+CVMaL+PhMB8GA1UdIwQYMBaAFOQivwJhQNID79a/3q7iaKqLBGbV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzE3NC9CMTMxRjg5Q0VF Q0QxMUVDOENGNDQ3MUVDNEY5QUUwMi81Q0tfQW1GQTBnUHYxcl9lcnVKb3Fvc0Va dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDS19BbUZBMGdQdjFyX2VydUpvcW9zRVp0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzE3NC9CMTMxRjg5Q0VFQ0QxMUVDOENGNDQ3MUVDNEY5QUUwMi81Q0tfQW1GQTBn UHYxcl9lcnVKb3Fvc0VadFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVSCfwDknZ3vgrV7gKzUVOMZF+hg84VPP3f04tkdV5nsI3PAGEe+jY psLv4UwvNGzZwFm4cc3w4qjy9G+19auJntpi4XtQLIWwrbSJnVkRQut8xeEPsrOa UL4d2Fl8U2sibh6ZTDX484jIlzWbIWRQioWB3V54FlGe/5yOh4/hIUDSMqhvvL5N Q3ZRkjxmI1j4Ey/CfVx+XUnzm3Fa7tN5YRw4prDoSfjCyLg0n9Uqyx5P0/TD0MIR m9I8Ntco4l5KaNDFE9eEm1nO0L5eZ9SHieg7MTxREXce4fR6E+W4kG0Tkl3ZB/ns qd049KIR1Dn/u/HnSvtJjETJXGzQJ+mu -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:28 2025 by rpki-client