$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft File: r5ACm-EBySLPz0vRRdevHcZA5eA.mft (raw, json) Hash identifier: OV9RkHS2vJNpp9G9UuRdML6HIvmVIO0AfQr/NgYEK8I= Subject key identifier: 68:57:7F:A0:E0:29:48:24:A1:35:28:95:23:A1:D8:E4:F2:4E:BA:1B Authority key identifier: AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 Certificate issuer: /CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Certificate serial: 0A41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft Manifest number: 0A37 Signing time: Sun 02 Nov 2025 19:42:15 +0000 Manifest this update: Sun 02 Nov 2025 19:42:14 +0000 Manifest next update: Sun 09 Nov 2025 19:42:14 +0000 Files and hashes: 1: r5ACm-EBySLPz0vRRdevHcZA5eA.crl (hash: 8/BZwhAjvEoppmJnTk4d9g9k/C+3hJtFW2H6/TVruZQ=) 2: EE675FC27BED11EABD4A3A27C4F9AE02.roa (hash: qJ4Xg9nEOiVPnUmULztNOTN0r580BUywYygdp4on9WI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2625 (0xa41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2646, serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Validity Not Before: Nov 2 19:42:14 2025 GMT Not After : Nov 9 19:42:14 2025 GMT Subject: CN=6907b417-644a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:bc:f2:4d:9a:74:d3:38:bc:8e:b7:b8:3c: 8a:83:d2:d4:e7:39:98:89:c5:9a:40:c7:fb:ff:85: 74:05:a6:6f:91:02:00:d9:62:06:d5:a4:14:7a:6d: 1f:68:9f:5a:37:bc:c1:f3:92:b0:0c:52:04:35:ed: f2:d1:0f:ed:4d:d7:15:8e:b7:f8:74:13:dd:6d:00: 94:0b:99:b1:ae:ca:b9:60:b6:76:0b:a6:5f:19:4a: 26:ba:7f:d2:5f:28:14:5f:6e:c6:91:7e:10:7b:c6: bd:11:7d:c7:20:00:00:92:5d:0f:ba:cb:6a:b8:8d: 54:5f:cf:ef:f6:f6:d4:94:f4:11:20:5d:ec:4a:1c: aa:b8:31:f7:bc:18:b4:ed:1e:a7:be:3c:4c:87:fa: 9c:f6:1d:e9:e4:8d:6a:10:92:bd:1a:51:9a:f5:21: cc:38:2f:5c:81:57:e2:8a:92:5a:1c:e8:3a:3e:12: 15:ac:f1:52:00:c9:04:49:87:c5:f9:65:a6:da:bf: c4:fa:e1:6b:ba:18:ec:51:86:d1:19:0c:69:e8:d8: 01:60:11:b1:2d:bd:da:c0:c6:14:d5:1e:eb:93:03: 17:f9:ef:2f:ae:be:0b:66:f2:d6:7a:21:64:1a:12: 8c:ae:d4:d6:1f:61:05:78:e3:8f:dc:33:1b:6f:c4: f9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:57:7F:A0:E0:29:48:24:A1:35:28:95:23:A1:D8:E4:F2:4E:BA:1B X509v3 Authority Key Identifier: keyid:AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:4e:6a:a3:12:1c:3d:9c:fd:b7:6d:5e:6c:a0:6c:92:85:ae: 3d:2d:5d:d5:f4:66:0a:3a:d6:63:25:cd:da:ec:38:70:41:18: 3a:c9:16:80:1f:bd:9c:d7:5e:46:6d:19:9a:83:bb:ab:67:cd: 5c:a0:1d:cd:33:8d:62:1a:04:a0:18:73:72:e1:0d:e5:72:d5: 8e:91:27:54:c9:57:eb:0f:f7:8b:66:6e:a9:ad:fe:27:8a:04: c3:94:67:98:0e:d3:49:c8:46:f2:5c:75:75:71:09:10:a9:3f: 1e:62:c4:9c:09:be:70:72:72:0b:39:c6:23:63:95:d0:52:c0: b7:88:5a:e6:b7:5b:37:1b:61:42:4b:bc:18:55:4f:0e:d2:e2: 41:60:14:51:b8:61:f7:f2:d7:70:29:9c:90:b1:0c:4b:3e:25: 90:d0:8f:ed:37:e0:8a:eb:08:05:b7:89:a3:47:4c:a9:80:f7: 02:95:80:6c:34:57:0f:32:26:e2:50:3e:8e:e3:45:97:4a:cd: 41:42:eb:ad:77:6e:52:84:f0:76:40:76:ab:6d:c8:02:9d:0a: 11:33:47:17:95:38:46:c9:45:71:d4:aa:d2:c7:15:e4:f6:12: fc:51:4b:c0:f0:ea:26:39:2f:1b:0a:2f:77:3b:75:6b:a2:47: ff:06:a2:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NDYxMTAvBgNVBAUTKEFGOTAwMjlCRTEwMUM5MjJDRkNGNEJEMTQ1RDdBRjFE QzY0MEU1RTAwHhcNMjUxMTAyMTk0MjE0WhcNMjUxMTA5MTk0MjE0WjAYMRYwFAYD VQQDEw02OTA3YjQxNy02NDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdS88k2adNM4vI63uDyKg9LU5zmYicWaQMf7/4V0BaZvkQIA2WIG1aQUem0f aJ9aN7zB85KwDFIENe3y0Q/tTdcVjrf4dBPdbQCUC5mxrsq5YLZ2C6ZfGUomun/S XygUX27GkX4Qe8a9EX3HIAAAkl0PustquI1UX8/v9vbUlPQRIF3sShyquDH3vBi0 7R6nvjxMh/qc9h3p5I1qEJK9GlGa9SHMOC9cgVfiipJaHOg6PhIVrPFSAMkESYfF +WWm2r/E+uFruhjsUYbRGQxp6NgBYBGxLb3awMYU1R7rkwMX+e8vrr4LZvLWeiFk GhKMrtTWH2EFeOOP3DMbb8T5BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhXf6Dg KUgkoTUolSOh2OTyTrobMB8GA1UdIwQYMBaAFK+QApvhAckiz89L0UXXrx3GQOXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY0Ni9EMjAzN0QxMjdC RUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlTTFB6MHZSUmRldkhjWkE1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I1QUNtLUVCeVNMUHowdlJSZGV2SGNaQTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY0Ni9EMjAzN0QxMjdCRUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlT TFB6MHZSUmRldkhjWkE1ZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHTmqjEhw9nP23bV5soGySha49LV3V9GYKOtZjJc3a7DhwQRg6yRaA H72c115GbRmag7urZ81coB3NM41iGgSgGHNy4Q3lctWOkSdUyVfrD/eLZm6prf4n igTDlGeYDtNJyEbyXHV1cQkQqT8eYsScCb5wcnILOcYjY5XQUsC3iFrmt1s3G2FC S7wYVU8O0uJBYBRRuGH38tdwKZyQsQxLPiWQ0I/tN+CK6wgFt4mjR0ypgPcClYBs NFcPMibiUD6O40WXSs1BQuutd25ShPB2QHarbcgCnQoRM0cXlThGyUVx1KrSxxXk 9hL8UUvA8OomOS8bCi93O3Vrokf/BqL7 -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:40 2025 by rpki-client