$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft File: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft (raw, json) Hash identifier: ttaBwp/f9a3imrQZ9ZQSS+crcCwzW/MR2NcbOhCy79U= Subject key identifier: A5:BB:5D:B2:43:9F:27:E7:72:0E:D7:E1:A4:E4:B9:30:F3:01:66:31 Authority key identifier: E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF Certificate issuer: /CN=A91D60CF/serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft Manifest number: 0103 Signing time: Wed 05 Nov 2025 05:09:52 +0000 Manifest this update: Wed 05 Nov 2025 05:09:51 +0000 Manifest next update: Wed 12 Nov 2025 05:09:51 +0000 Files and hashes: 1: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl (hash: xFJQa/CyaonZIGeyDn9FBGtcX94HFk2YaFtH5NM0lCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF Validity Not Before: Nov 5 05:09:51 2025 GMT Not After : Nov 12 05:09:51 2025 GMT Subject: CN=690adc1f-c62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4b:e5:01:48:2f:32:e7:fe:7e:a0:60:84:87: a1:fc:bc:a7:35:71:1a:60:1a:e3:89:1d:73:72:12: 88:83:0b:5b:f0:a0:d6:dc:d0:2b:19:37:94:56:b3: bd:5c:ce:d1:dc:ad:6c:ab:d9:08:5c:da:4d:3f:ee: 10:e3:25:28:66:32:39:b9:97:ad:2a:bf:de:9c:eb: ab:83:0a:2c:e8:4c:14:7c:b7:1f:9a:a5:40:ed:6d: 2b:17:84:a2:cf:01:03:2a:ca:2e:b2:5c:58:20:86: 74:f4:6e:10:f1:d0:7e:4f:33:13:f9:3a:6e:83:3c: f0:ef:fc:b4:72:3a:59:7c:08:0a:af:b9:7a:e7:cb: 7f:a3:07:6e:28:2d:dc:e7:43:6f:eb:56:ed:ba:74: c1:05:4b:04:87:88:d4:06:4b:31:46:64:d2:3d:78: 81:ae:a3:03:dc:86:f5:26:14:c0:8b:c6:a7:6b:a7: 9a:69:ec:6f:a2:76:5e:10:c2:b8:3c:a0:3c:9d:cd: 36:0c:40:06:19:e2:76:8f:e5:8a:7b:35:07:9c:9f: 58:b6:21:e6:7c:81:c9:79:d6:eb:1a:a0:25:06:22: 9b:88:a6:dd:e5:03:a7:4d:67:37:a1:c8:ba:19:74: 05:fd:83:81:87:fe:a9:4f:36:a8:6d:90:7a:09:fa: f7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BB:5D:B2:43:9F:27:E7:72:0E:D7:E1:A4:E4:B9:30:F3:01:66:31 X509v3 Authority Key Identifier: keyid:E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:90:a9:9c:df:14:fa:88:4d:e5:01:b1:a9:12:d8:69:2e:8f: 3b:61:b4:7f:8b:5d:bf:01:d5:44:13:a3:b1:23:3b:8f:42:88: 24:fe:9b:53:5b:bb:f7:29:ef:a0:90:39:dd:cf:0c:0c:f7:2c: 0a:24:92:b4:38:76:72:4b:30:e0:91:f6:ca:ae:52:f5:cc:8b: 47:18:c0:d6:fa:cd:d3:a6:70:9a:aa:a8:19:16:41:f3:14:b7: ee:eb:60:20:e4:a5:8d:07:10:24:2e:8e:48:4f:7c:c3:aa:ce: 2c:87:c0:a5:60:2f:c3:38:b8:fc:3b:ed:09:df:df:0a:cb:8c: 18:a5:ea:0b:0f:ae:ee:49:0b:d3:15:21:0e:22:33:47:d3:bf: c2:41:5e:2c:d2:4b:5f:b9:29:88:38:af:47:dc:37:93:fc:7f: 39:19:e3:b2:aa:f0:7c:3c:c0:4a:ca:9d:fc:76:62:6c:c9:6e: 37:09:95:e3:41:19:73:af:b9:7f:1b:2a:4f:9f:ee:d7:07:76: 19:28:3d:a4:74:a5:8e:51:85:bd:68:4b:00:c0:4f:23:db:df: e9:08:f5:78:5b:b7:7c:96:81:15:c6:a3:2e:b3:d1:30:26:6f: fb:3f:26:25:5c:14:e2:c0:b4:0a:88:7f:07:69:b3:6f:23:47: 54:0d:41:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKEU2NEUwMjE3NzQzNUFFRjFDQkZENjI0RTI2NjdFNjk2 OUFBRkFBRkYwHhcNMjUxMTA1MDUwOTUxWhcNMjUxMTEyMDUwOTUxWjAYMRYwFAYD VQQDEw02OTBhZGMxZi1jNjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EvlAUgvMuf+fqBghIeh/LynNXEaYBrjiR1zchKIgwtb8KDW3NArGTeUVrO9 XM7R3K1sq9kIXNpNP+4Q4yUoZjI5uZetKr/enOurgwos6EwUfLcfmqVA7W0rF4Si zwEDKsouslxYIIZ09G4Q8dB+TzMT+Tpugzzw7/y0cjpZfAgKr7l658t/owduKC3c 50Nv61btunTBBUsEh4jUBksxRmTSPXiBrqMD3Ib1JhTAi8ana6eaaexvonZeEMK4 PKA8nc02DEAGGeJ2j+WKezUHnJ9YtiHmfIHJedbrGqAlBiKbiKbd5QOnTWc3oci6 GXQF/YOBh/6pTzaobZB6Cfr3SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKW7XbJD nyfncg7X4aTkuTDzAWYxMB8GA1UdIwQYMBaAFOZOAhd0Na7xy/1iTiZn5paar6r/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FRjgxMzdFNDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi81azRDRjNRMXJ2SExfV0pPSm1mbWxwcXZx djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVrNENGM1ExcnZITF9XSk9KbWZtbHBxdnF2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FRjgxMzdFNDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi81azRDRjNRMXJ2 SExfV0pPSm1mbWxwcXZxdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQkKmc3xT6iE3lAbGpEthpLo87YbR/i12/AdVEE6OxIzuPQogk/ptT W7v3Ke+gkDndzwwM9ywKJJK0OHZySzDgkfbKrlL1zItHGMDW+s3TpnCaqqgZFkHz FLfu62Ag5KWNBxAkLo5IT3zDqs4sh8ClYC/DOLj8O+0J398Ky4wYpeoLD67uSQvT FSEOIjNH07/CQV4s0ktfuSmIOK9H3DeT/H85GeOyqvB8PMBKyp38dmJsyW43CZXj QRlzr7l/GypPn+7XB3YZKD2kdKWOUYW9aEsAwE8j29/pCPV4W7d8loEVxqMus9Ew Jm/7PyYlXBTiwLQKiH8HabNvI0dUDUEE -----END CERTIFICATE-----Generated at Wed Nov 5 16:32:23 2025 by rpki-client