$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft File: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft (raw, json) Hash identifier: OgTJ2zg2cMy8BlU2YG4a9YN65rmHP5MHJsCqqvsNJho= Subject key identifier: 12:FC:1F:53:2C:F2:A2:6C:F0:90:E8:A6:E8:D9:CC:DB:30:D7:60:65 Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 Certificate issuer: /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Certificate serial: 04FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft Manifest number: 04F7 Signing time: Mon 27 Oct 2025 00:42:27 +0000 Manifest this update: Mon 27 Oct 2025 00:42:27 +0000 Manifest next update: Mon 03 Nov 2025 00:42:27 +0000 Files and hashes: 1: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl (hash: 3RhQiVpHdqhc8z8SethcnjDq1Pn198gfxFz93cFgCRY=) 2: BA7E6B1A30B911EC974C3830C4F9AE02.roa (hash: DlfXyvIdL0s+0tBp2hXjHGEv5V90Epcx4LrbGdX7dDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1276 (0x4fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8790, serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Validity Not Before: Oct 27 00:42:27 2025 GMT Not After : Nov 3 00:42:27 2025 GMT Subject: CN=68febff3-251e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7a:49:24:0e:2a:28:04:2e:ef:98:1e:02:0f: d7:f0:61:6c:19:6a:9c:14:96:26:55:71:a6:8a:44: 1e:cc:8d:24:2c:31:6f:a2:f5:c9:c7:6b:01:dd:14: 65:cf:39:63:a8:5e:98:6d:02:34:c2:02:78:ac:93: 36:4a:24:72:4e:02:f7:4e:dc:43:3c:d9:59:9c:fe: 17:bc:20:50:c3:20:9b:97:28:c0:16:9c:15:fb:08: 06:ee:0b:bf:1b:56:90:88:03:26:ee:35:1a:0d:30: bf:8b:17:4b:ab:3c:59:c6:a3:9b:d4:16:73:32:5d: 6a:bb:0a:38:4f:0a:1d:68:e1:26:fb:60:2f:74:f2: b9:a3:61:20:60:c3:4b:6b:13:2c:e2:25:11:0b:d5: e9:4b:63:e7:e0:59:d1:29:8c:26:5f:a9:c1:0a:ae: 1f:1c:73:d7:9f:7b:e0:df:88:bb:60:f8:14:9c:8e: 11:38:94:d2:54:28:56:bc:da:25:79:26:35:ac:15: 99:de:af:d0:22:52:c0:2f:48:5a:57:1a:2f:5d:52: 12:79:8e:b5:fe:a3:c6:a8:eb:12:88:d3:a5:4c:a9: 2a:b9:51:09:62:65:71:85:ba:16:30:92:04:8c:5c: 29:87:fe:f0:df:b0:87:ec:d0:82:57:89:c4:e2:83: 6f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FC:1F:53:2C:F2:A2:6C:F0:90:E8:A6:E8:D9:CC:DB:30:D7:60:65 X509v3 Authority Key Identifier: keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:b6:dc:d9:ea:19:83:d6:28:52:fa:22:8c:19:52:ce:e8:94: 4b:a7:93:3c:a2:32:6a:34:8f:db:27:9f:bc:da:8c:9b:84:6c: a4:9f:3a:4a:db:8f:9c:5f:fe:f8:89:cc:59:50:6f:d8:d9:b9: 93:d0:a3:eb:e9:67:db:b5:46:09:bc:34:38:b3:19:dd:02:fa: 5f:64:99:fe:34:8f:56:75:8c:bc:c7:69:0d:cb:59:8b:89:e8: 61:65:23:5b:21:3d:27:3a:60:70:87:91:53:54:97:41:6c:36: d4:09:a4:d9:b8:85:d3:ae:1a:84:99:0a:70:68:69:95:a4:a2: 3c:b9:e6:f2:d2:04:54:63:d8:15:ac:af:7e:53:0e:d3:cb:de: 73:5b:97:16:ea:55:82:ef:3b:01:d3:64:4e:3c:0a:95:fc:10: 0c:af:82:75:3d:c7:75:61:8a:ff:59:22:5d:db:b8:66:24:5d: 9e:c1:7f:64:7d:96:01:44:37:42:fd:d1:4d:3e:59:45:56:80: 76:08:39:86:4c:d8:6a:5c:aa:1f:dc:c8:c8:e2:60:6a:b5:68: 97:2e:64:47:1f:67:ff:17:39:7a:4d:9f:d2:4b:b9:be:05:d7: 2f:3c:eb:cc:ff:a2:8d:f5:ed:4c:be:42:2a:65:32:ec:d1:8b: e4:3c:d5:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg3OTAxMTAvBgNVBAUTKEU1QTRENEY5NTYwQjVCNUM1QzVGRTREMDYxQjRCODgx QzhEMjIzNTIwHhcNMjUxMDI3MDA0MjI3WhcNMjUxMTAzMDA0MjI3WjAYMRYwFAYD VQQDEw02OGZlYmZmMy0yNTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHpJJA4qKAQu75geAg/X8GFsGWqcFJYmVXGmikQezI0kLDFvovXJx2sB3RRl zzljqF6YbQI0wgJ4rJM2SiRyTgL3TtxDPNlZnP4XvCBQwyCblyjAFpwV+wgG7gu/ G1aQiAMm7jUaDTC/ixdLqzxZxqOb1BZzMl1quwo4TwodaOEm+2AvdPK5o2EgYMNL axMs4iURC9XpS2Pn4FnRKYwmX6nBCq4fHHPXn3vg34i7YPgUnI4ROJTSVChWvNol eSY1rBWZ3q/QIlLAL0haVxovXVISeY61/qPGqOsSiNOlTKkquVEJYmVxhboWMJIE jFwph/7w37CH7NCCV4nE4oNv5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBL8H1Ms 8qJs8JDopujZzNsw12BlMB8GA1UdIwQYMBaAFOWk1PlWC1tcXF/k0GG0uIHI0iNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODc5MC8zM0ZFMzYyNjMw QjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcxeGNYLVRRWWJTNGdjalNJ MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVhVFUtVllMVzF4Y1gtVFFZYlM0Z2NqU0kxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODc5MC8zM0ZFMzYyNjMwQjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcx eGNYLVRRWWJTNGdjalNJMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVttzZ6hmD1ihS+iKMGVLO6JRLp5M8ojJqNI/bJ5+82oybhGyknzpK 24+cX/74icxZUG/Y2bmT0KPr6WfbtUYJvDQ4sxndAvpfZJn+NI9WdYy8x2kNy1mL iehhZSNbIT0nOmBwh5FTVJdBbDbUCaTZuIXTrhqEmQpwaGmVpKI8ueby0gRUY9gV rK9+Uw7Ty95zW5cW6lWC7zsB02ROPAqV/BAMr4J1Pcd1YYr/WSJd27hmJF2ewX9k fZYBRDdC/dFNPllFVoB2CDmGTNhqXKof3MjI4mBqtWiXLmRHH2f/Fzl6TZ/SS7m+ BdcvPOvM/6KN9e1MvkIqZTLs0YvkPNXF -----END CERTIFICATE-----Generated at Tue Oct 28 12:59:46 2025 by rpki-client