$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft File: e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json) Hash identifier: C8nPh/lMT0WcuhqfNxe5zhA49FXIpJmFvZBlHq1+BS8= Subject key identifier: 80:85:F7:CE:DF:E8:1B:52:C7:C0:4F:B6:C7:B7:7C:DE:AA:26:67:F3 Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Certificate serial: 08F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft Manifest number: 08ED Signing time: Fri 31 Oct 2025 20:33:25 +0000 Manifest this update: Fri 31 Oct 2025 20:33:24 +0000 Manifest next update: Fri 07 Nov 2025 20:33:24 +0000 Files and hashes: 1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: yOoE4XUv+eC5gNTg7QsgSQXHn8Arm0bH1J/gjcBLJCw=) 2: 5DD88088AF2E11F0915FDA4FC4F9AE02.roa (hash: TwAE0GwwENS3YfjFl+npdZSwgXWk0lVtJ+TPHotvZA8=) 3: E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa (hash: Kmb540TuRA2tDqqWRgz9hrAljHHHHmzFl7Y1Ysy+4gE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 20:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2295 (0x8f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Validity Not Before: Oct 31 20:33:24 2025 GMT Not After : Nov 7 20:33:24 2025 GMT Subject: CN=69051d15-b2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:fb:74:df:f9:ac:fb:c2:ca:a7:91:8a:de: 96:5c:d4:61:4d:9e:1d:4b:95:35:f9:71:a8:73:8a: 68:8f:d3:76:10:5c:25:a3:cb:96:02:b5:bc:51:5c: a5:d4:8d:28:b3:62:41:27:b8:7a:cd:33:75:ef:ad: 8c:c1:0d:41:90:7e:8f:8e:d3:88:8b:b6:fd:79:b6: 1b:e7:b8:6c:7a:ce:19:69:78:4f:49:a3:dd:ba:65: 92:43:67:0d:c4:22:1d:c4:75:7c:12:10:8d:0d:2a: f2:eb:09:37:59:f7:7e:44:2b:af:59:5f:df:25:43: 93:05:73:ca:26:d2:14:25:3b:47:4d:08:7d:5a:e6: 47:9d:f0:8a:a8:98:20:88:c4:85:2c:96:be:96:47: c1:c5:39:ac:f2:61:ef:9e:e2:a7:0f:a6:ae:ed:6a: e5:1b:84:66:7b:90:63:f9:05:64:e2:7d:98:29:84: e0:38:b8:d9:e9:fd:c2:0b:38:ee:c8:d9:7d:d1:ce: af:aa:1e:4b:6b:7d:47:6a:80:8f:91:94:cf:bc:0f: 87:b4:61:04:ea:c7:e1:b6:89:18:27:ec:ef:c5:3c: 33:ac:8a:8f:29:f5:8f:c9:e7:12:1e:53:86:70:ef: 20:b3:94:6a:ec:6a:a6:22:57:1c:4a:37:9e:dc:34: ca:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:85:F7:CE:DF:E8:1B:52:C7:C0:4F:B6:C7:B7:7C:DE:AA:26:67:F3 X509v3 Authority Key Identifier: keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:15:3e:15:b3:82:ff:53:cb:96:f3:c8:91:10:c8:31:f7:b0: 40:bf:76:1e:0b:7d:35:e8:ce:2b:2b:42:47:1f:14:12:47:64: 63:63:94:92:07:ea:56:f4:7a:01:0d:c7:d2:7e:a0:9e:35:61: e8:7b:18:88:ea:31:89:a1:ba:ca:fa:99:fc:d0:c7:34:82:34: 9a:08:09:68:3d:05:d8:3f:ac:53:30:24:83:f4:37:75:ce:1b: ab:e3:3e:72:58:da:11:8d:8c:7c:c2:2d:c3:f3:4a:f8:10:bf: 22:26:8f:c5:1e:20:80:fa:dc:21:8e:e3:b8:f7:f8:c0:da:dc: 11:bb:0c:25:4f:af:a1:11:1d:ec:7a:42:e8:cc:4f:1e:9e:b0: 66:2c:3f:a5:ca:20:b3:6c:6d:ef:4b:23:d2:c4:5a:9a:22:43: fe:ce:05:12:8c:ca:41:e8:43:fa:b1:2e:1b:48:4c:df:e3:4a: a7:d8:dd:a6:cd:70:36:47:23:2c:11:05:52:bc:97:46:23:67: fe:ba:d3:e1:25:0a:17:8b:db:3c:52:da:fa:97:f0:6f:96:74: a1:e9:1e:06:e0:42:45:9a:56:a0:61:c6:dc:80:72:94:56:ed: 9c:68:07:0b:c9:81:4a:f9:8d:7f:73:3e:5b:2e:d7:bf:e3:58: 65:cd:e9:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE NDdEMENCQTQwHhcNMjUxMDMxMjAzMzI0WhcNMjUxMTA3MjAzMzI0WjAYMRYwFAYD VQQDEw02OTA1MWQxNS1iMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyur7dN/5rPvCyqeRit6WXNRhTZ4dS5U1+XGoc4poj9N2EFwlo8uWArW8UVyl 1I0os2JBJ7h6zTN1762MwQ1BkH6PjtOIi7b9ebYb57hses4ZaXhPSaPdumWSQ2cN xCIdxHV8EhCNDSry6wk3Wfd+RCuvWV/fJUOTBXPKJtIUJTtHTQh9WuZHnfCKqJgg iMSFLJa+lkfBxTms8mHvnuKnD6au7WrlG4Rme5Bj+QVk4n2YKYTgOLjZ6f3CCzju yNl90c6vqh5La31HaoCPkZTPvA+HtGEE6sfhtokYJ+zvxTwzrIqPKfWPyecSHlOG cO8gs5Rq7GqmIlccSjee3DTKvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICF987f 6BtSx8BPtse3fN6qJmfzMB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYxQi8yM0YzMDU1MEJDNEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBP S2lsdXNjZlg3LWJVZlF5NlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoFT4Vs4L/U8uW88iREMgx97BAv3YeC3016M4rK0JHHxQSR2RjY5SS B+pW9HoBDcfSfqCeNWHoexiI6jGJobrK+pn80Mc0gjSaCAloPQXYP6xTMCSD9Dd1 zhur4z5yWNoRjYx8wi3D80r4EL8iJo/FHiCA+twhjuO49/jA2twRuwwlT6+hER3s ekLozE8enrBmLD+lyiCzbG3vSyPSxFqaIkP+zgUSjMpB6EP6sS4bSEzf40qn2N2m zXA2RyMsEQVSvJdGI2f+utPhJQoXi9s8Utr6l/BvlnSh6R4G4EJFmlagYcbcgHKU Vu2caAcLyYFK+Y1/cz5bLte/41hlzel0 -----END CERTIFICATE-----Generated at Sat Nov 1 14:10:37 2025 by rpki-client