$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft File: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft (raw, json) Hash identifier: H2wFljvcVCc78aO73/yXDwFqn3OBKdV/Lf+pYbHFjuU= Subject key identifier: F3:27:F7:25:FF:3F:B2:B5:8B:7E:91:CD:67:AD:BA:21:0F:67:52:E2 Authority key identifier: E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79 Certificate issuer: /CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379 Certificate serial: 1404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft Manifest number: 13DC Signing time: Tue 04 Nov 2025 17:03:29 +0000 Manifest this update: Tue 04 Nov 2025 17:03:28 +0000 Manifest next update: Tue 11 Nov 2025 17:03:28 +0000 Files and hashes: 1: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl (hash: 6cO1P95YoGDegRDVNCqggLa5B3gOmY3+9GDsUwwiCxo=) 2: 3F6E94ACF5CF11EF90104A57C4F9AE02.roa (hash: /ZIUoYPB1EIQasu4GhEyvD9OIV83dzAypvtiMc9qVo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5124 (0x1404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F0A, serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379 Validity Not Before: Nov 4 17:03:28 2025 GMT Not After : Nov 11 17:03:28 2025 GMT Subject: CN=690a31e1-7359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a9:e4:04:c2:5c:da:18:58:03:77:fb:81:75: 26:54:6f:fc:8f:6f:ef:6e:ef:04:e8:b5:9b:ca:15: c5:b6:64:79:64:22:3c:c3:98:29:20:7a:99:ae:eb: a5:a6:f2:a9:bd:a3:7b:f2:4f:a1:27:f6:cf:24:d1: cd:5c:74:82:9d:c8:f0:00:54:c8:27:24:01:65:8c: 93:bb:c5:2e:5f:5d:fb:71:e1:66:34:26:f7:00:60: a8:b5:3c:b1:df:62:74:a4:65:06:06:17:bf:f4:ae: 4d:e8:55:39:b3:fd:0e:00:eb:d6:96:a8:d7:d7:fe: 00:d3:c9:16:02:21:c3:af:f9:d5:89:ae:cb:a9:90: ec:58:b4:7f:b2:b5:13:e4:07:a4:81:ce:81:75:17: 26:9e:57:86:cb:0a:fe:4d:1b:0a:f4:47:99:ee:26: d0:5f:b7:1a:8e:a6:2d:bf:db:bc:40:1b:2a:22:84: 2c:44:bb:fe:33:50:d0:84:48:75:95:55:03:20:fe: ba:ca:17:d1:77:11:42:85:b7:7a:04:d5:4d:bb:41: e3:99:6d:03:98:fe:c4:c7:29:52:03:82:79:8d:11: 98:62:00:c3:d5:2e:a6:96:24:e4:be:5e:f6:0d:c6: 32:cb:60:42:3d:8a:31:33:a8:41:96:82:ad:10:fc: 88:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:27:F7:25:FF:3F:B2:B5:8B:7E:91:CD:67:AD:BA:21:0F:67:52:E2 X509v3 Authority Key Identifier: keyid:E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1e:86:6c:81:50:bc:75:4e:2d:bb:04:56:e6:f3:f4:00:31: cb:6c:75:8b:41:62:aa:b3:2e:ad:42:f1:16:a7:2e:60:a4:7e: 93:65:e9:c3:08:1b:f6:fe:fe:ed:5d:a9:3e:b4:04:ed:89:ea: 24:c8:af:ca:de:0a:63:57:cb:40:2d:91:34:86:f1:da:14:57: 3d:71:fd:82:38:14:02:77:19:9c:60:d7:ca:12:2c:c9:12:59: 47:58:c9:86:83:35:ad:45:87:c4:36:e2:29:e7:2b:e8:c7:ce: 2c:93:48:d9:58:87:ae:21:52:56:82:20:fd:e2:4f:3b:cd:8d: b7:fd:99:58:08:80:f7:d4:8c:4a:f5:f5:e1:d7:68:11:fc:20: 21:5e:54:f5:42:88:9f:6d:fc:8d:d8:da:e5:fe:c9:54:7f:20: 23:8a:66:8a:07:ea:26:da:e0:27:29:d5:5d:74:0a:c2:e5:ad: ea:57:7c:81:03:4d:b5:be:0e:a3:fa:d2:9e:f7:6e:e7:fa:5b: b8:ab:45:09:7a:ce:0c:ed:2f:37:aa:87:7b:d8:d0:2a:f6:c5: 81:35:1e:f4:63:63:e1:b4:b0:6b:c5:cf:81:f9:fc:a1:a4:c3: e4:9f:3b:0f:bc:2c:ef:5f:9d:c3:74:e1:88:0a:2c:c1:5f:5d: 1d:08:11:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGMEExMTAvBgNVBAUTKEU0NkJCRjAxNzY4OTU2RTg2NkFFQzQ0M0YyQkIxMzUw MUYyRTczNzkwHhcNMjUxMTA0MTcwMzI4WhcNMjUxMTExMTcwMzI4WjAYMRYwFAYD VQQDEw02OTBhMzFlMS03MzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKnkBMJc2hhYA3f7gXUmVG/8j2/vbu8E6LWbyhXFtmR5ZCI8w5gpIHqZruul pvKpvaN78k+hJ/bPJNHNXHSCncjwAFTIJyQBZYyTu8UuX137ceFmNCb3AGCotTyx 32J0pGUGBhe/9K5N6FU5s/0OAOvWlqjX1/4A08kWAiHDr/nVia7LqZDsWLR/srUT 5Aekgc6BdRcmnleGywr+TRsK9EeZ7ibQX7cajqYtv9u8QBsqIoQsRLv+M1DQhEh1 lVUDIP66yhfRdxFChbd6BNVNu0HjmW0DmP7ExylSA4J5jRGYYgDD1S6mliTkvl72 DcYyy2BCPYoxM6hBloKtEPyI9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMn9yX/ P7K1i36RzWetuiEPZ1LiMB8GA1UdIwQYMBaAFORrvwF2iVboZq7EQ/K7E1AfLnN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUYwQS9FODYwMjFENkEy M0MxMUU4OEE2RkU2NkNDNEY5QUUwMi81R3VfQVhhSlZ1aG1yc1JEOHJzVFVCOHVj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHdV9BWGFKVnVobXJzUkQ4cnNUVUI4dWMzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUYwQS9FODYwMjFENkEyM0MxMUU4OEE2RkU2NkNDNEY5QUUwMi81R3VfQVhhSlZ1 aG1yc1JEOHJzVFVCOHVjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrHoZsgVC8dU4tuwRW5vP0ADHLbHWLQWKqsy6tQvEWpy5gpH6TZenD CBv2/v7tXak+tATtieokyK/K3gpjV8tALZE0hvHaFFc9cf2COBQCdxmcYNfKEizJ EllHWMmGgzWtRYfENuIp5yvox84sk0jZWIeuIVJWgiD94k87zY23/ZlYCID31IxK 9fXh12gR/CAhXlT1QoifbfyN2Nrl/slUfyAjimaKB+om2uAnKdVddArC5a3qV3yB A021vg6j+tKe927n+lu4q0UJes4M7S83qod72NAq9sWBNR70Y2PhtLBrxc+B+fyh pMPknzsPvCzvX53DdOGICizBX10dCBEn -----END CERTIFICATE-----Generated at Wed Nov 5 05:22:45 2025 by rpki-client