$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft File: U05nXomsmsMC9TCid1KM-Bo8UwY.mft (raw, json) Hash identifier: a61EwFdtc3McZHpsBSxJ+U1wpjKWjqJRxNSoTxoFBDc= Subject key identifier: C2:77:9E:BD:5B:C9:40:9C:0B:3C:4F:39:22:7B:FC:0C:78:A9:A8:48 Authority key identifier: 53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06 Certificate issuer: /CN=A91CC1EB/serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306 Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft Manifest number: 05E5 Signing time: Tue 04 Nov 2025 23:08:32 +0000 Manifest this update: Tue 04 Nov 2025 23:08:31 +0000 Manifest next update: Tue 11 Nov 2025 23:08:31 +0000 Files and hashes: 1: U05nXomsmsMC9TCid1KM-Bo8UwY.crl (hash: zp9pjEfINey7ZprIV9IGSUSl5Satc2pt2qI9oGxbOGM=) 2: 5C0006B4E1B711EEA6D7F740C4F9AE02.roa (hash: 4jfL7SNWxDFOPvyEexB/Au04m937KqyBQLuHPsEG/BI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1EB, serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306 Validity Not Before: Nov 4 23:08:31 2025 GMT Not After : Nov 11 23:08:31 2025 GMT Subject: CN=690a8770-9d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:94:70:8b:6e:dc:60:8d:55:63:fb:e5:49: e4:e9:18:d6:51:0a:a0:06:f5:6f:ec:a5:66:81:cf: b3:ef:3b:bf:97:67:9f:4b:3e:03:06:fa:79:96:76: 20:a6:ca:2b:fa:2e:96:22:e5:53:21:1d:60:4b:43: e3:f5:1b:4d:5b:37:1b:d9:b7:ba:68:0c:c1:3d:01: 20:c0:f9:7e:58:b0:0e:1f:33:aa:bb:05:8d:90:d9: 8e:c7:e6:10:fb:69:6c:62:a6:b9:cd:1b:a8:34:d5: 6c:85:c9:86:c7:6b:bd:74:41:8c:22:76:88:e2:35: 63:49:1c:83:52:3d:04:85:8a:03:a4:f7:1a:28:94: 8f:17:c5:64:37:2a:f3:61:29:cf:bd:69:78:ab:06: b6:bc:1d:64:ec:fc:a2:95:61:b9:9a:88:a1:b0:31: d0:39:39:c2:8d:de:ef:30:32:16:a7:d9:4f:af:35: 7d:a2:29:ca:29:61:bd:cc:e3:e7:6d:b3:b2:b5:66: ae:da:2a:9c:43:45:7e:df:e4:03:82:b3:81:a2:fb: 76:aa:92:fb:ca:d4:cd:f1:cd:f3:2b:aa:4a:19:0d: a8:a1:6e:53:3b:fb:66:08:f3:16:db:9f:40:0f:8f: bc:52:d5:d2:e1:e9:1d:7f:70:83:50:1f:54:30:a3: a7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:77:9E:BD:5B:C9:40:9C:0B:3C:4F:39:22:7B:FC:0C:78:A9:A8:48 X509v3 Authority Key Identifier: keyid:53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:26:ac:ae:21:23:77:d6:10:06:0f:7d:7e:c7:ac:bb:50:11: bc:57:87:dd:93:bb:0a:19:97:4a:c4:7d:92:de:6d:d2:ca:6f: 24:45:9b:f0:1f:f5:a2:93:71:1e:a7:fa:1c:4e:7d:40:53:4d: e4:32:79:c1:df:4b:7a:55:dd:c9:86:ea:18:f0:40:f6:7d:36: 46:65:85:d6:03:86:c9:f0:7b:99:e8:57:01:96:1b:91:39:22: e6:6f:92:d4:7d:2b:6d:a9:1e:7a:84:87:00:52:2e:e6:ff:43: 57:87:ac:2f:dc:e1:81:b2:6d:24:8b:61:07:57:f2:18:2d:94: 90:d2:8a:04:f4:28:ab:ba:41:1c:91:da:eb:6e:14:d8:00:8a: d4:ba:ab:89:8a:93:92:1e:1f:af:21:03:9c:91:6e:21:c1:2f: 08:9b:3a:f1:db:8b:a4:1e:90:58:1a:44:54:65:e7:48:66:46: d1:1d:1b:12:6a:5d:65:83:a0:44:fc:e2:d8:59:df:da:4b:b6: 6e:a2:80:5c:9d:ff:b7:50:3c:ce:e3:d3:22:62:de:fe:31:3b: e9:f9:57:50:e6:08:01:03:fc:3d:0e:fa:4b:95:ba:e3:da:12: 2e:28:f2:0f:09:fa:8d:28:bb:1b:b1:e7:0b:55:31:9c:f5:cd: ff:61:6a:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxRUIxMTAvBgNVBAUTKDUzNEU2NzVFODlBQzlBQzMwMkY1MzBBMjc3NTI4Q0Y4 MUEzQzUzMDYwHhcNMjUxMTA0MjMwODMxWhcNMjUxMTExMjMwODMxWjAYMRYwFAYD VQQDEw02OTBhODc3MC05ZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtueUcItu3GCNVWP75Unk6RjWUQqgBvVv7KVmgc+z7zu/l2efSz4DBvp5lnYg psor+i6WIuVTIR1gS0Pj9RtNWzcb2be6aAzBPQEgwPl+WLAOHzOquwWNkNmOx+YQ +2lsYqa5zRuoNNVshcmGx2u9dEGMInaI4jVjSRyDUj0EhYoDpPcaKJSPF8VkNyrz YSnPvWl4qwa2vB1k7PyilWG5moihsDHQOTnCjd7vMDIWp9lPrzV9oinKKWG9zOPn bbOytWau2iqcQ0V+3+QDgrOBovt2qpL7ytTN8c3zK6pKGQ2ooW5TO/tmCPMW259A D4+8UtXS4ekdf3CDUB9UMKOnewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJ3nr1b yUCcCzxPOSJ7/Ax4qahIMB8GA1UdIwQYMBaAFFNOZ16JrJrDAvUwondSjPgaPFMG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFFQi9BQzM4NEFBNkRE ODIxMUVCOTU4RDFDMzBDNEY5QUUwMi9VMDVuWG9tc21zTUM5VENpZDFLTS1CbzhV d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UwNW5Yb21zbXNNQzlUQ2lkMUtNLUJvOFV3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFFQi9BQzM4NEFBNkREODIxMUVCOTU4RDFDMzBDNEY5QUUwMi9VMDVuWG9tc21z TUM5VENpZDFLTS1CbzhVd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARJqyuISN31hAGD31+x6y7UBG8V4fdk7sKGZdKxH2S3m3Sym8kRZvw H/Wik3Eep/ocTn1AU03kMnnB30t6Vd3JhuoY8ED2fTZGZYXWA4bJ8HuZ6FcBlhuR OSLmb5LUfSttqR56hIcAUi7m/0NXh6wv3OGBsm0ki2EHV/IYLZSQ0ooE9CirukEc kdrrbhTYAIrUuquJipOSHh+vIQOckW4hwS8Imzrx24ukHpBYGkRUZedIZkbRHRsS al1lg6BE/OLYWd/aS7ZuooBcnf+3UDzO49MiYt7+MTvp+VdQ5ggBA/w9DvpLlbrj 2hIuKPIPCfqNKLsbsecLVTGc9c3/YWqL -----END CERTIFICATE-----Generated at Wed Nov 5 17:02:26 2025 by rpki-client