$ rpki-client -vvf rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft File: s5m0raB1Aagp1W8h2o613DIDSlY.mft (raw, json) Hash identifier: yrljJ8/olZrr4Il9H2u0S/E+plgVVRr+nav33ZeqwvU= Subject key identifier: 84:3C:5D:FB:12:C3:18:5E:BC:76:41:C3:58:FA:E8:23:D0:62:9F:F8 Authority key identifier: B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56 Certificate issuer: /CN=A91D98FC/serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56 Certificate serial: 0CFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft Manifest number: 0CF1 Signing time: Tue 04 Nov 2025 18:12:20 +0000 Manifest this update: Tue 04 Nov 2025 18:12:20 +0000 Manifest next update: Tue 11 Nov 2025 18:12:20 +0000 Files and hashes: 1: s5m0raB1Aagp1W8h2o613DIDSlY.crl (hash: 7USW0HB7V7efChW/VLYCPkalncVkmb9WyCAZ7dUgWR8=) 2: 238AAE04B3CD11EF82D5B34FC4F9AE02.roa (hash: Vh7yMYlqWkmmCVoJUzEKALaYDnLO+UKuaoILrbL+tGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3327 (0xcff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D98FC, serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56 Validity Not Before: Nov 4 18:12:20 2025 GMT Not After : Nov 11 18:12:20 2025 GMT Subject: CN=690a4204-5c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e8:8d:c3:84:7a:37:dc:8d:96:33:0e:81:62: 68:46:50:e0:14:31:7e:12:3a:28:bf:eb:92:c5:ef: f6:84:5b:d1:ad:03:83:e0:55:91:81:6e:f5:2a:cf: 0a:12:c7:3d:0c:26:2c:62:49:ab:17:5c:ec:a4:b1: 30:99:93:3a:82:a1:14:83:79:ef:09:91:31:5e:a9: b2:81:49:42:58:e5:de:15:b6:7e:48:64:d6:b5:d7: 9c:79:b8:21:34:63:9e:90:3b:8c:b9:56:fa:da:57: de:79:dc:25:40:a6:01:8e:e5:a7:1d:cb:ca:3a:05: 79:4b:28:64:8e:8a:30:be:e1:48:ad:f4:d3:64:bc: b5:80:6f:13:d3:45:c8:5e:c4:c7:0d:b3:be:43:74: ac:f6:96:4a:24:9e:05:28:5c:03:b5:69:a7:50:f7: 59:ab:f8:f9:46:88:ce:56:fd:48:da:4b:8c:c8:e7: f2:d0:9c:b8:c6:7d:66:87:c2:92:7b:af:91:ae:01: 92:cd:78:df:7c:d2:ff:1f:c8:79:bd:63:e6:05:79: 04:6c:84:99:e3:a4:20:44:49:46:f8:f0:20:ea:c1: b0:63:8d:d2:9f:99:9e:6d:93:b7:34:45:d5:b6:b4: 00:4a:14:66:6f:2d:d8:cb:d5:75:3b:30:11:1b:55: 9e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3C:5D:FB:12:C3:18:5E:BC:76:41:C3:58:FA:E8:23:D0:62:9F:F8 X509v3 Authority Key Identifier: keyid:B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:54:ff:ec:3c:39:6c:63:6e:65:e3:ae:3e:0b:f7:6d:1d:26: c3:6c:62:87:27:78:eb:3f:32:13:d0:88:68:59:d0:2b:f7:0e: 0c:55:ce:8e:89:aa:0a:0d:9c:05:cd:18:27:2b:a9:05:b6:ad: 84:19:0c:b0:34:bd:51:d2:b9:96:bf:f3:a0:5b:fe:be:45:86: f7:35:4e:a7:24:97:0d:c4:5b:6e:db:4d:fb:12:96:0b:20:40: e0:3c:7e:78:ae:61:26:ac:92:e0:f1:be:0f:b1:e2:3a:96:bd: b9:cd:ee:6b:55:92:41:3a:a8:04:2c:ca:39:ab:1d:2c:0e:ef: 32:9c:1c:c5:92:95:6c:61:b1:5b:38:72:14:c9:9f:34:45:6d: ff:91:38:69:1d:d3:32:30:2a:59:c3:23:33:a2:05:cd:82:51: b5:d3:9c:d0:41:d6:a7:ad:b2:97:a2:ef:d5:03:ad:aa:60:68: 52:a0:c7:a9:70:d6:11:00:8a:5d:30:30:da:89:3b:e3:eb:a1: 24:a8:3e:f8:b7:ee:c4:b6:19:d6:a6:f9:b9:9d:16:15:c1:70: b5:5d:2d:a4:26:cf:2b:fb:a3:ec:9d:20:12:60:6d:0b:91:11: ed:28:4b:ce:7d:6b:e3:80:4e:28:7b:61:47:2a:7d:d6:d4:f0: 22:0b:5c:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk4RkMxMTAvBgNVBAUTKEIzOTlCNEFEQTA3NTAxQTgyOUQ1NkYyMURBOEVCNURD MzIwMzRBNTYwHhcNMjUxMTA0MTgxMjIwWhcNMjUxMTExMTgxMjIwWjAYMRYwFAYD VQQDEw02OTBhNDIwNC01YzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+iNw4R6N9yNljMOgWJoRlDgFDF+Ejoov+uSxe/2hFvRrQOD4FWRgW71Ks8K Esc9DCYsYkmrF1zspLEwmZM6gqEUg3nvCZExXqmygUlCWOXeFbZ+SGTWtdecebgh NGOekDuMuVb62lfeedwlQKYBjuWnHcvKOgV5SyhkjoowvuFIrfTTZLy1gG8T00XI XsTHDbO+Q3Ss9pZKJJ4FKFwDtWmnUPdZq/j5RojOVv1I2kuMyOfy0Jy4xn1mh8KS e6+RrgGSzXjffNL/H8h5vWPmBXkEbISZ46QgRElG+PAg6sGwY43Sn5mebZO3NEXV trQAShRmby3Yy9V1OzARG1We/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQ8XfsS wxhevHZBw1j66CPQYp/4MB8GA1UdIwQYMBaAFLOZtK2gdQGoKdVvIdqOtdwyA0pW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOThGQy8xQzg5OUUyNkY0 RUMxMUU5OEZCRTlCMEZDNEY5QUUwMi9zNW0wcmFCMUFhZ3AxVzhoMm82MTNESURT bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1bTByYUIxQWFncDFXOGgybzYxM0RJRFNsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OThGQy8xQzg5OUUyNkY0RUMxMUU5OEZCRTlCMEZDNEY5QUUwMi9zNW0wcmFCMUFh Z3AxVzhoMm82MTNESURTbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMVP/sPDlsY25l464+C/dtHSbDbGKHJ3jrPzIT0IhoWdAr9w4MVc6O iaoKDZwFzRgnK6kFtq2EGQywNL1R0rmWv/OgW/6+RYb3NU6nJJcNxFtu2037EpYL IEDgPH54rmEmrJLg8b4PseI6lr25ze5rVZJBOqgELMo5qx0sDu8ynBzFkpVsYbFb OHIUyZ80RW3/kThpHdMyMCpZwyMzogXNglG105zQQdanrbKXou/VA62qYGhSoMep cNYRAIpdMDDaiTvj66EkqD74t+7EthnWpvm5nRYVwXC1XS2kJs8r+6PsnSASYG0L kRHtKEvOfWvjgE4oe2FHKn3W1PAiC1xJ -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:22 2025 by rpki-client