$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft File: E5kSHmqxW_iSv4n71dqfNIaDl_g.mft (raw, json) Hash identifier: 1V3oSayRxD+2Pf/vkGlciO3rJ5ijmw+SEhvbSj9sYHM= Subject key identifier: DC:48:96:BB:27:E8:DC:4D:F8:B3:D8:F0:5B:D6:CC:55:18:A9:B4:09 Authority key identifier: 13:99:12:1E:6A:B1:5B:F8:92:BF:89:FB:D5:DA:9F:34:86:83:97:F8 Certificate issuer: /CN=A91DA736/serialNumber=1399121E6AB15BF892BF89FBD5DA9F34868397F8 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5kSHmqxW_iSv4n71dqfNIaDl_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft Manifest number: 2F Signing time: Mon 03 Nov 2025 07:38:23 +0000 Manifest this update: Mon 03 Nov 2025 07:38:22 +0000 Manifest next update: Mon 10 Nov 2025 07:38:22 +0000 Files and hashes: 1: E5kSHmqxW_iSv4n71dqfNIaDl_g.crl (hash: XkohzancM9GYTNzARKJLWmZWGFb9Ia8iIpHnpKviDT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.crl rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5kSHmqxW_iSv4n71dqfNIaDl_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA736, serialNumber=1399121E6AB15BF892BF89FBD5DA9F34868397F8 Validity Not Before: Nov 3 07:38:22 2025 GMT Not After : Nov 10 07:38:22 2025 GMT Subject: CN=69085bee-d570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3c:e2:fd:c0:33:3d:23:2b:0c:76:62:19:0e: e5:ae:15:da:2f:2c:97:f9:8b:1e:fb:b9:a5:4c:9a: 08:fe:f1:dd:29:cc:dc:86:1f:36:69:b3:87:86:d1: 65:78:0e:f5:98:dd:b1:f4:fb:c6:e4:23:d4:7a:1f: f1:f6:c8:1a:d4:18:de:58:85:36:85:4e:53:36:59: 84:1d:34:71:ea:25:1e:98:ca:9b:ff:b2:ca:0a:f5: 40:70:f0:c7:37:11:db:62:91:85:d0:92:e9:95:e6: 56:92:79:10:16:01:b6:f1:de:62:67:a4:a8:f9:ca: e4:c1:e1:07:aa:e9:85:08:e0:7a:de:a3:df:3f:09: c1:8d:97:5f:4f:cc:49:9d:1b:e2:2a:42:17:0d:e2: 6d:aa:3a:89:ef:b2:c0:b6:aa:fb:98:ca:00:66:74: 5a:6d:28:ed:4d:9d:24:7f:5a:d1:6f:3a:46:d0:40: 16:77:b8:77:34:14:97:b0:77:b1:8f:c7:c6:26:b5: ab:ae:8a:21:f5:c9:62:42:09:e6:d5:08:c8:d0:72: ec:36:6a:45:01:39:17:fd:ce:41:58:2f:a4:fa:d3: 92:90:4b:ee:ef:85:e8:3b:f8:8e:5e:da:e4:bd:08: 69:da:4b:ac:c3:54:35:4a:4c:8e:9d:fe:f6:0f:10: 51:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:48:96:BB:27:E8:DC:4D:F8:B3:D8:F0:5B:D6:CC:55:18:A9:B4:09 X509v3 Authority Key Identifier: keyid:13:99:12:1E:6A:B1:5B:F8:92:BF:89:FB:D5:DA:9F:34:86:83:97:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5kSHmqxW_iSv4n71dqfNIaDl_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:54:20:90:3a:fe:9d:c4:1d:c7:88:2b:2b:35:26:bc:bf:28: 76:be:5f:20:45:73:1b:1c:80:d9:33:96:dc:9e:f3:ff:5c:30: f8:31:a5:09:ac:8c:a2:31:bd:21:22:94:4b:6f:13:39:a4:79: 3c:6e:d1:c5:5a:76:ba:f5:16:26:3b:0f:2e:b8:89:08:5a:c5: 68:6f:80:1e:1e:ae:8e:9f:f5:d1:34:f3:94:bf:ef:90:f4:80: 6d:99:68:10:bf:4c:db:cb:aa:fb:d8:b0:61:a5:6d:df:bc:54: 44:53:59:32:33:c6:1c:7c:4a:14:45:a4:b2:9d:ed:c7:00:de: ad:5f:e8:dd:43:20:73:eb:98:bd:a4:35:00:0b:3d:a6:cd:4a: a7:9a:1c:67:6f:1f:8e:df:33:81:9c:b6:b7:50:68:9c:92:13: bc:f3:ea:03:42:c0:a7:07:4b:d8:aa:b9:22:e7:d1:ea:97:c1: 4e:d4:70:c6:68:9c:b3:5e:ff:00:11:f1:9f:8d:e2:de:25:ae: 49:c8:b4:3a:12:f2:70:12:52:0a:59:fd:70:6d:be:f7:44:f4: a9:c2:81:30:8a:8d:d5:95:39:fc:c0:27:37:1d:94:ad:92:fb: 7a:4c:57:08:a5:cc:c1:23:99:9c:68:85:d3:bb:86:71:ed:94: 0b:89:26:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTczNjExMC8GA1UEBRMoMTM5OTEyMUU2QUIxNUJGODkyQkY4OUZCRDVEQTlGMzQ4 NjgzOTdGODAeFw0yNTExMDMwNzM4MjJaFw0yNTExMTAwNzM4MjJaMBgxFjAUBgNV BAMTDTY5MDg1YmVlLWQ1NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBPOL9wDM9IysMdmIZDuWuFdovLJf5ix77uaVMmgj+8d0pzNyGHzZps4eG0WV4 DvWY3bH0+8bkI9R6H/H2yBrUGN5YhTaFTlM2WYQdNHHqJR6Yypv/ssoK9UBw8Mc3 EdtikYXQkumV5laSeRAWAbbx3mJnpKj5yuTB4Qeq6YUI4Hreo98/CcGNl19PzEmd G+IqQhcN4m2qOonvssC2qvuYygBmdFptKO1NnSR/WtFvOkbQQBZ3uHc0FJewd7GP x8YmtauuiiH1yWJCCebVCMjQcuw2akUBORf9zkFYL6T605KQS+7vheg7+I5e2uS9 CGnaS6zDVDVKTI6d/vYPEFHJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3EiWuyfo 3E34s9jwW9bMVRiptAkwHwYDVR0jBBgwFoAUE5kSHmqxW/iSv4n71dqfNIaDl/gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNzM2LzlDODdGMzg0NzMy MTExRjA4MUQ4QkUwQ0M0RjlBRTAyL0U1a1NIbXF4V19pU3Y0bjcxZHFmTklhRGxf Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRTVrU0htcXhXX2lTdjRuNzFkcWZOSWFEbF9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB NzM2LzlDODdGMzg0NzMyMTExRjA4MUQ4QkUwQ0M0RjlBRTAyL0U1a1NIbXF4V19p U3Y0bjcxZHFmTklhRGxfZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKhUIJA6/p3EHceIKys1Jry/KHa+XyBFcxscgNkzltye8/9cMPgxpQms jKIxvSEilEtvEzmkeTxu0cVadrr1FiY7Dy64iQhaxWhvgB4ero6f9dE085S/75D0 gG2ZaBC/TNvLqvvYsGGlbd+8VERTWTIzxhx8ShRFpLKd7ccA3q1f6N1DIHPrmL2k NQALPabNSqeaHGdvH47fM4GctrdQaJySE7zz6gNCwKcHS9iquSLn0eqXwU7UcMZo nLNe/wAR8Z+N4t4lrknItDoS8nASUgpZ/XBtvvdE9KnCgTCKjdWVOfzAJzcdlK2S +3pMVwilzMEjmZxohdO7hnHtlAuJJqI= -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:07 2025 by rpki-client