$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json) Hash identifier: pQCiEVn6oVQ9LNU6VqaPfNjp3r+IbnvO9/bNNKhhDC0= Subject key identifier: 2F:B4:07:12:63:31:D7:62:EB:85:47:29:FB:1B:FF:E5:88:BA:FE:C0 Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Certificate serial: 04F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft Manifest number: 04F1 Signing time: Tue 04 Nov 2025 23:47:33 +0000 Manifest this update: Tue 04 Nov 2025 23:47:32 +0000 Manifest next update: Tue 11 Nov 2025 23:47:32 +0000 Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: BgIbbZgQy2ztjQQn0zTKMO+6hJCGIA/RQiAKdq93qyA=) 2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: +rLDpG6E4AF0Dcxf7o8iMswR6KeKAMAGKwbYTVWTRnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1270 (0x4f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ABA, serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Validity Not Before: Nov 4 23:47:32 2025 GMT Not After : Nov 11 23:47:32 2025 GMT Subject: CN=690a9094-0ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0f:64:e8:a8:72:06:bd:a2:94:17:3a:a2:0a: b6:e8:4e:a9:08:93:3a:88:79:94:0c:be:a6:8e:a2: 4f:0d:fc:aa:81:b3:3f:fc:22:07:be:31:ec:74:0a: 04:e2:3d:f7:cc:22:7b:e2:97:af:22:60:ef:fd:5b: 1a:f5:b6:c2:51:dd:8f:c6:ca:2a:a5:4b:8c:67:1b: 5e:b8:1c:cc:85:37:af:5c:e2:4b:4f:78:70:ac:56: d8:1d:aa:36:64:c0:e5:6b:93:03:57:ea:f8:11:78: 04:3a:ca:83:fe:36:bb:01:1f:d3:ed:97:29:e8:d7: e7:81:56:ad:2d:ad:cd:da:8a:51:0f:88:f5:7a:ff: ba:82:ab:ff:14:55:06:f8:c6:8f:c1:23:97:81:3c: fe:ed:ec:a4:4c:7b:04:3b:de:c2:1a:ed:cd:df:09: eb:aa:1c:d9:11:b2:21:53:97:bd:04:2d:9b:fb:18: e4:05:af:89:c7:30:c9:fc:d7:46:67:05:9e:51:14: 9f:bd:d7:01:98:e6:66:d8:7b:79:d8:51:f6:5a:c9: 5f:14:00:86:e3:5e:9d:32:29:d0:ed:2c:1c:bf:2c: 9f:93:f6:52:f5:a1:3f:24:f0:fb:f4:3a:92:43:21: f0:7c:89:48:18:f1:75:a4:a2:b1:8c:4a:b4:ec:20: 1d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B4:07:12:63:31:D7:62:EB:85:47:29:FB:1B:FF:E5:88:BA:FE:C0 X509v3 Authority Key Identifier: keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:16:a0:6d:33:5a:9e:83:29:24:66:4c:ed:45:09:1f:fe:bb: 11:56:d1:f3:d2:90:79:67:43:50:ab:e4:77:7c:30:7b:1b:36: 5c:37:15:1e:47:78:88:c6:89:16:73:04:96:18:71:71:a9:f4: 50:bb:8c:5b:6c:a5:f9:19:0e:ae:12:5b:13:68:48:7f:63:e1: b3:58:c7:6a:8e:5f:9b:d9:4d:3f:cf:bb:72:3c:10:cc:ee:5b: 35:a7:fc:17:1f:10:a5:4d:a6:7e:9b:2f:fb:43:dc:33:71:31: 20:d1:16:a6:0c:1b:68:70:57:a3:69:5c:37:60:0b:cc:1e:5d: 0f:b9:cb:d6:7b:69:83:fb:ae:21:0a:1c:f6:c4:0f:27:6a:7b: d2:27:b3:15:1b:85:22:f2:ee:8a:6b:5a:5f:d3:e3:2a:db:32: c4:c5:95:5b:3e:2e:93:b0:da:b4:49:21:b1:95:77:15:cb:2f: 7f:3b:5a:5f:5d:a7:83:03:84:ec:84:e9:b2:a0:ff:8f:57:c2: e8:8c:26:19:47:0f:1f:2b:a4:cf:e6:bd:af:35:8d:da:e0:48: 6e:e1:ff:45:61:c6:97:7b:90:20:5e:b6:f5:36:9c:a8:6d:0b: 48:57:11:28:79:f3:c1:bc:96:77:a8:5c:24:4e:0d:fe:e5:2c: 33:cd:8c:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBQkExMTAvBgNVBAUTKEU1OTkzMTU1QzQ0NDNBMkU1NkMwREUyMzMzQTQ0QjU2 Q0FENDkxOUMwHhcNMjUxMTA0MjM0NzMyWhcNMjUxMTExMjM0NzMyWjAYMRYwFAYD VQQDEw02OTBhOTA5NC0wZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8A9k6KhyBr2ilBc6ogq26E6pCJM6iHmUDL6mjqJPDfyqgbM//CIHvjHsdAoE 4j33zCJ74pevImDv/Vsa9bbCUd2PxsoqpUuMZxteuBzMhTevXOJLT3hwrFbYHao2 ZMDla5MDV+r4EXgEOsqD/ja7AR/T7Zcp6NfngVatLa3N2opRD4j1ev+6gqv/FFUG +MaPwSOXgTz+7eykTHsEO97CGu3N3wnrqhzZEbIhU5e9BC2b+xjkBa+JxzDJ/NdG ZwWeURSfvdcBmOZm2Ht52FH2WslfFACG416dMinQ7Swcvyyfk/ZS9aE/JPD79DqS QyHwfIlIGPF1pKKxjEq07CAdpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+0BxJj Mddi64VHKfsb/+WIuv7AMB8GA1UdIwQYMBaAFOWZMVXERDouVsDeIzOkS1bK1JGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0FCQS85ODVGMDkyMjM1 NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9pNVd3TjRqTTZSTFZzclVr WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaa3hWY1JFT2k1V3dONGpNNlJMVnNyVWtady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0FCQS85ODVGMDkyMjM1NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9p NVd3TjRqTTZSTFZzclVrWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwFqBtM1qegykkZkztRQkf/rsRVtHz0pB5Z0NQq+R3fDB7GzZcNxUe R3iIxokWcwSWGHFxqfRQu4xbbKX5GQ6uElsTaEh/Y+GzWMdqjl+b2U0/z7tyPBDM 7ls1p/wXHxClTaZ+my/7Q9wzcTEg0RamDBtocFejaVw3YAvMHl0PucvWe2mD+64h Chz2xA8nanvSJ7MVG4Ui8u6Ka1pf0+Mq2zLExZVbPi6TsNq0SSGxlXcVyy9/O1pf XaeDA4TshOmyoP+PV8LojCYZRw8fK6TP5r2vNY3a4Ehu4f9FYcaXe5AgXrb1Npyo bQtIVxEoefPBvJZ3qFwkTg3+5SwzzYyl -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:34 2025 by rpki-client