$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json) Hash identifier: Sul88+gDOZysORFVOo7ULSMHIOYhUuv4CJrrbPuNXGo= Subject key identifier: 86:61:4C:AC:EF:D2:7C:D9:3D:E3:31:F0:F3:EC:81:B3:59:74:B6:BA Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Certificate serial: 0D06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft Manifest number: 0CF7 Signing time: Tue 04 Nov 2025 18:12:28 +0000 Manifest this update: Tue 04 Nov 2025 18:12:27 +0000 Manifest next update: Tue 11 Nov 2025 18:12:27 +0000 Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: yeWuoUkdME16zDTJqT9cEhoPgYTiQfQ8xZxEe6969uw=) 2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: ovp+DvhtxAcfaLvm4B/msgxFKoL594Nnc6PIvhnqZGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3334 (0xd06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Validity Not Before: Nov 4 18:12:27 2025 GMT Not After : Nov 11 18:12:27 2025 GMT Subject: CN=690a420b-eb7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:88:14:4b:15:fa:14:9a:ec:07:e5:e0:00: 9f:70:fa:fe:0f:66:d1:13:2f:ee:4e:5a:47:36:e4: 35:e5:31:c5:cb:bc:0b:74:9f:32:0e:74:51:c3:75: cf:99:51:cd:b4:45:48:e7:77:89:62:35:db:95:b2: 93:49:8d:85:0d:17:48:af:1c:2a:9a:d9:a9:6d:b3: c0:95:ad:3b:03:00:a7:33:e8:47:54:93:56:13:5a: 04:6b:4a:ce:28:81:fd:fa:61:ac:0e:56:19:77:b3: 7a:74:2a:85:f7:cb:d0:69:cc:a4:0a:9b:60:15:99: d2:99:ce:9d:9f:18:5a:a8:2f:94:3a:3b:4c:e8:0b: 60:1f:24:69:0a:ea:a3:87:5f:ff:11:51:99:3b:d5: d0:f5:9e:9f:34:5c:94:9d:85:60:16:b8:af:04:fc: 97:a8:03:e5:ed:7c:78:47:88:18:3a:db:1d:9c:e6: 21:e8:09:37:9e:06:c1:cc:52:43:fd:f4:2b:f1:56: af:3a:76:39:9f:b0:bb:f8:a2:16:ee:56:b9:77:69: 2b:1b:ba:fd:d5:95:32:6c:4e:48:94:ca:16:fb:1e: b9:de:4e:f7:23:31:e4:26:ee:58:18:e7:62:72:dc: 66:80:ec:0b:f7:92:2d:3b:f2:28:6a:b3:0c:97:9c: 88:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:61:4C:AC:EF:D2:7C:D9:3D:E3:31:F0:F3:EC:81:B3:59:74:B6:BA X509v3 Authority Key Identifier: keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:78:12:b8:7a:02:62:77:49:11:5a:f7:a6:71:14:0c:06:24: 9b:8e:ef:86:3a:22:73:c6:4a:b5:da:76:a8:7f:ab:97:6f:02: b5:f7:01:91:cd:bd:9e:b7:0f:d9:8d:b8:b4:e7:e5:38:5a:15: e3:c1:d0:36:66:1d:49:61:ff:19:62:30:79:22:9a:23:1b:99: f2:b7:8d:d8:08:6b:08:c6:a7:32:9a:3a:10:7b:bf:4a:22:68: dd:79:32:f9:06:fa:15:2c:c1:69:7a:79:35:90:9e:a9:24:eb: 13:ed:e2:ae:6a:6d:50:07:68:d6:0f:34:30:6a:05:e1:6d:52: b8:5b:25:ca:c1:79:05:1e:04:e4:56:5e:29:d5:c1:e6:6a:d3: 71:a9:7d:a5:e9:35:f8:f5:ab:c3:b8:9b:6b:79:79:f4:9f:8b: 08:ea:53:92:3a:76:d1:e2:9d:b1:e5:f2:cf:59:67:46:42:c8: 99:a4:6c:78:58:97:bc:a3:07:58:a1:ff:f8:ff:e8:c5:19:17: 2d:bd:a5:77:b4:e5:22:43:2b:cc:c5:00:14:d6:33:36:72:79: 5c:78:8e:9c:83:7d:33:bd:af:20:94:8e:54:97:c9:50:f0:08: 3b:12:0b:cd:db:86:d4:56:4c:30:f8:d0:21:aa:3f:4b:78:9b: bd:e2:5f:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwNEUxMTAvBgNVBAUTKEU0RENFQzU5NUExQkI2NzM4OTcyMjM2NTZBQzYzOUI5 NTM1MkRENzMwHhcNMjUxMTA0MTgxMjI3WhcNMjUxMTExMTgxMjI3WjAYMRYwFAYD VQQDEw02OTBhNDIwYi1lYjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArC6IFEsV+hSa7Afl4ACfcPr+D2bREy/uTlpHNuQ15THFy7wLdJ8yDnRRw3XP mVHNtEVI53eJYjXblbKTSY2FDRdIrxwqmtmpbbPAla07AwCnM+hHVJNWE1oEa0rO KIH9+mGsDlYZd7N6dCqF98vQacykCptgFZnSmc6dnxhaqC+UOjtM6AtgHyRpCuqj h1//EVGZO9XQ9Z6fNFyUnYVgFrivBPyXqAPl7Xx4R4gYOtsdnOYh6Ak3ngbBzFJD /fQr8VavOnY5n7C7+KIW7la5d2krG7r91ZUybE5IlMoW+x653k73IzHkJu5YGOdi ctxmgOwL95ItO/IoarMMl5yI/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZhTKzv 0nzZPeMx8PPsgbNZdLa6MB8GA1UdIwQYMBaAFOTc7FlaG7ZziXIjZWrGOblTUt1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjA0RS85MUI1QzBDMEY0 RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRuT0pjaU5sYXNZNXVWTlMz WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVOenNXVm9idG5PSmNpTmxhc1k1dVZOUzNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjA0RS85MUI1QzBDMEY0RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRu T0pjaU5sYXNZNXVWTlMzWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxeBK4egJid0kRWvemcRQMBiSbju+GOiJzxkq12naof6uXbwK19wGR zb2etw/Zjbi05+U4WhXjwdA2Zh1JYf8ZYjB5IpojG5nyt43YCGsIxqcymjoQe79K ImjdeTL5BvoVLMFpenk1kJ6pJOsT7eKuam1QB2jWDzQwagXhbVK4WyXKwXkFHgTk Vl4p1cHmatNxqX2l6TX49avDuJtreXn0n4sI6lOSOnbR4p2x5fLPWWdGQsiZpGx4 WJe8owdYof/4/+jFGRctvaV3tOUiQyvMxQAU1jM2cnlceI6cg30zva8glI5Ul8lQ 8Ag7EgvN24bUVkww+NAhqj9LeJu94l99 -----END CERTIFICATE-----Generated at Wed Nov 5 08:27:38 2025 by rpki-client