$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft File: 5yN2M529XTAqWcz6d6wJzRcjlU0.mft (raw, json) Hash identifier: MU/g8KHw1Ge1JRGoCc4EwOdMppJwEJ5UTtDYzecJyZA= Subject key identifier: 70:E9:97:B6:42:F3:66:54:60:9C:0E:8E:12:CA:EE:C4:5F:2A:45:25 Authority key identifier: E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D Certificate issuer: /CN=A91CD60C/serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft Manifest number: C4 Signing time: Mon 03 Nov 2025 05:56:13 +0000 Manifest this update: Mon 03 Nov 2025 05:56:12 +0000 Manifest next update: Mon 10 Nov 2025 05:56:12 +0000 Files and hashes: 1: 5yN2M529XTAqWcz6d6wJzRcjlU0.crl (hash: ItKVpCXH0aMCOIweQTavOwcN2Li1DR2yjpScG9OnWwM=) 2: AC8EE79E975B11EFB1D18E82C4F9AE02.roa (hash: sqDKPZ1qrocmicYcNGEqHeOR7eFUFOhb8W65lVkqel0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD60C, serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Validity Not Before: Nov 3 05:56:12 2025 GMT Not After : Nov 10 05:56:12 2025 GMT Subject: CN=690843fd-bb08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:77:bc:91:b1:e6:00:8f:3f:55:ba:aa:b2:a3: 5f:b1:37:23:b2:b2:f0:54:fe:15:cb:b2:e3:36:7f: 8e:52:e7:8f:5f:4c:8d:4c:01:94:40:3e:c6:7b:e1: d0:e9:f7:dd:ae:36:7a:61:30:dd:9b:a8:ae:69:04: 7b:28:d2:98:9b:3c:3c:dd:92:be:49:ed:7d:43:3c: 25:05:73:57:7b:34:97:c6:4a:53:16:e9:bb:b3:c4: ff:2e:83:3f:68:cb:f5:83:c2:69:05:3a:be:8b:06: c9:84:a4:f9:dc:c2:f0:6a:a3:06:b8:d1:4a:c3:c0: 05:48:4c:4d:5e:be:8e:6d:29:38:1e:68:b0:4e:ba: 18:5b:4f:77:1b:cc:10:f9:66:c0:33:26:6f:e2:b7: 02:d1:2d:07:6c:03:9c:e4:c4:7d:b6:0b:b0:dd:b1: d5:55:e4:31:4e:89:e4:42:c8:e2:98:6f:40:e9:6d: 99:2d:d6:67:e4:d5:7b:f0:c0:e6:4f:13:f7:2e:f1: 08:14:b0:83:98:a0:51:9d:0d:a7:b2:88:c5:21:95: 94:f8:2d:8a:66:47:ee:2e:1b:9a:d9:a1:8f:61:df: dc:4f:05:d4:b0:58:f3:1e:ae:8a:e9:15:28:f2:1a: 8e:f0:26:b3:0f:57:ed:da:18:a1:08:20:eb:a9:e4: 7d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E9:97:B6:42:F3:66:54:60:9C:0E:8E:12:CA:EE:C4:5F:2A:45:25 X509v3 Authority Key Identifier: keyid:E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:a5:26:cb:b2:61:31:c3:d1:ac:c9:3c:6b:bc:ac:54:4e:3c: 0b:fc:ed:62:bc:87:c6:48:4f:f6:74:5c:4f:f5:4a:2a:1a:96: bb:c3:ca:6f:f1:9d:fb:4d:0f:63:ed:cc:ab:0d:24:0f:b6:09: ff:eb:ac:46:7f:ba:53:55:55:95:55:ad:6c:46:6e:69:28:46: bb:fd:af:51:e4:98:68:a2:b3:9f:90:e4:34:8a:34:0a:e2:76: cd:25:a0:fd:aa:f5:42:2c:1a:39:ba:fa:75:d6:70:f5:b9:f6: 5f:ee:8c:3b:43:49:45:13:9a:9a:ed:fb:ff:ee:02:ef:3f:db: b2:37:23:bd:ec:79:37:b2:2d:1e:04:db:b4:23:1a:8a:d2:a8: a3:c9:45:1d:30:7f:05:a0:98:f8:0a:ba:a5:19:0c:3e:c8:68: 5c:66:88:f9:70:36:85:8c:b8:86:1d:f0:fd:d4:af:d5:93:cd: 21:77:02:45:a6:e0:e5:3b:f5:42:77:a0:28:63:57:aa:fc:77: fa:a0:a3:d9:7b:b8:85:3b:07:01:02:16:1a:85:92:10:c7:f4: d9:4a:db:47:12:b3:9e:d8:03:a3:94:45:33:35:72:d2:5f:18: 4a:b9:42:27:09:b8:1d:a4:f1:aa:78:b3:43:a6:be:61:86:af: 3a:67:06:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q2MEMxMTAvBgNVBAUTKEU3MjM3NjMzOURCRDVEMzAyQTU5Q0NGQTc3QUMwOUNE MTcyMzk1NEQwHhcNMjUxMTAzMDU1NjEyWhcNMjUxMTEwMDU1NjEyWjAYMRYwFAYD VQQDEw02OTA4NDNmZC1iYjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63e8kbHmAI8/VbqqsqNfsTcjsrLwVP4Vy7LjNn+OUuePX0yNTAGUQD7Ge+HQ 6ffdrjZ6YTDdm6iuaQR7KNKYmzw83ZK+Se19QzwlBXNXezSXxkpTFum7s8T/LoM/ aMv1g8JpBTq+iwbJhKT53MLwaqMGuNFKw8AFSExNXr6ObSk4HmiwTroYW093G8wQ +WbAMyZv4rcC0S0HbAOc5MR9tguw3bHVVeQxTonkQsjimG9A6W2ZLdZn5NV78MDm TxP3LvEIFLCDmKBRnQ2nsojFIZWU+C2KZkfuLhua2aGPYd/cTwXUsFjzHq6K6RUo 8hqO8CazD1ft2hihCCDrqeR9IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDpl7ZC 82ZUYJwOjhLK7sRfKkUlMB8GA1UdIwQYMBaAFOcjdjOdvV0wKlnM+nesCc0XI5VN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDYwQy8xODhGMTE3Mjk3 M0QxMUVGQTUxOTYwNThDNEY5QUUwMi81eU4yTTUyOVhUQXFXY3o2ZDZ3SnpSY2ps VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV5TjJNNTI5WFRBcVdjejZkNndKelJjamxVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDYwQy8xODhGMTE3Mjk3M0QxMUVGQTUxOTYwNThDNEY5QUUwMi81eU4yTTUyOVhU QXFXY3o2ZDZ3SnpSY2psVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDApSbLsmExw9GsyTxrvKxUTjwL/O1ivIfGSE/2dFxP9UoqGpa7w8pv 8Z37TQ9j7cyrDSQPtgn/66xGf7pTVVWVVa1sRm5pKEa7/a9R5JhoorOfkOQ0ijQK 4nbNJaD9qvVCLBo5uvp11nD1ufZf7ow7Q0lFE5qa7fv/7gLvP9uyNyO97Hk3si0e BNu0IxqK0qijyUUdMH8FoJj4CrqlGQw+yGhcZoj5cDaFjLiGHfD91K/Vk80hdwJF puDlO/VCd6AoY1eq/Hf6oKPZe7iFOwcBAhYahZIQx/TZSttHErOe2AOjlEUzNXLS XxhKuUInCbgdpPGqeLNDpr5hhq86ZwZ+ -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:35 2025 by rpki-client