$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft File: P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json) Hash identifier: mDQwH5H0lAJvIhZVsIHFGukIS4eBgV6W3NtJnmQQybI= Subject key identifier: D1:B5:ED:AE:FD:10:10:F0:3F:F6:3C:4B:8A:71:DC:DF:00:48:C3:0B Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 Certificate issuer: /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft Manifest number: 01B1 Signing time: Wed 05 Nov 2025 03:23:26 +0000 Manifest this update: Wed 05 Nov 2025 03:23:26 +0000 Manifest next update: Wed 12 Nov 2025 03:23:26 +0000 Files and hashes: 1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: tA7hy8km4dyRV+of8M/XNs+4s/O8OLhdnBjflSdeSeU=) 2: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (hash: 0UTp5Ayv/ftDBInci/moVW1XbBA3xfvlEMb4Bw4foQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC2A9, serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Validity Not Before: Nov 5 03:23:26 2025 GMT Not After : Nov 12 03:23:26 2025 GMT Subject: CN=690ac32e-e3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:49:74:b6:c9:7e:91:c8:f5:5e:b0:8e:e6:ea: c7:35:6a:e4:85:30:5f:4a:ad:e0:10:fe:4f:11:2c: 34:42:1a:af:67:03:93:a5:83:4d:21:a8:1a:1b:13: 72:30:75:38:1c:79:5d:cc:20:0f:ca:33:5e:19:ef: 26:b1:05:0e:c0:38:9e:b1:b5:d7:24:d2:b5:75:47: 8d:28:f1:2f:ec:32:4b:e8:56:05:0c:68:c2:75:99: de:b6:2e:bf:63:03:bc:9b:9c:46:08:8a:3d:d3:8c: b9:b9:eb:c7:eb:7e:e7:e9:3e:ea:77:33:92:f1:8d: 39:9c:1f:a0:5c:6e:57:fe:16:c0:aa:c7:b6:f1:e6: 14:7f:0f:5d:77:b5:48:4e:6d:b4:41:17:39:c2:28: 83:9d:31:a9:c9:7b:f5:57:5e:b0:12:1b:5c:6c:48: 57:b6:d0:49:5a:51:40:81:de:7e:e2:82:db:25:9c: da:cf:61:6f:a6:46:84:50:7e:5c:65:a6:de:ee:83: 2a:6a:ba:f8:94:59:4c:f0:61:15:45:4d:ab:0f:22: 21:31:db:54:4f:21:d5:0b:8f:4c:43:b6:b1:3f:d1: 09:80:a5:ec:80:c7:61:32:cf:06:4c:01:28:88:b4: 6b:e3:4a:bc:5a:f6:b6:66:2f:f2:e1:38:1d:ff:83: 32:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B5:ED:AE:FD:10:10:F0:3F:F6:3C:4B:8A:71:DC:DF:00:48:C3:0B X509v3 Authority Key Identifier: keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c1:e8:4d:c7:45:db:b5:c6:9e:40:5b:32:99:23:b7:d6:84: 11:68:f7:83:cf:5c:45:7a:ba:20:24:de:1a:df:a8:26:e8:1e: 11:38:99:f8:11:4b:fe:a7:62:2d:1a:b7:e8:2c:42:a9:01:eb: 30:85:93:88:05:cb:94:00:62:64:c8:5d:28:9c:2d:20:65:9d: 38:bb:64:c6:35:0e:cc:4e:2c:e4:a3:13:18:ff:4d:63:a8:9a: 3f:f1:6e:47:8e:28:72:dd:7c:5f:59:20:eb:2f:eb:a5:0e:d2: 66:b3:8c:32:4e:1c:d7:cf:be:6f:ff:2a:f0:0a:99:04:be:13: 32:76:a8:b1:f8:fe:9f:76:06:e0:ee:d4:9b:61:69:00:31:1c: a1:ec:84:ab:77:b2:d9:ac:f6:88:f6:98:2a:84:86:fb:cc:27: e3:fa:73:df:3f:43:16:10:f4:54:14:e6:ca:3f:67:b7:70:0d: ac:91:e4:2d:df:87:92:f2:18:c8:ca:ce:19:e3:1b:b2:65:87: 5d:40:58:c3:cc:17:f7:0e:e3:c7:9f:96:c6:bb:42:5c:c4:6b: ad:34:76:48:54:1d:67:94:e5:4d:b8:f0:ca:39:f9:1c:9e:24: 34:86:54:18:7c:ea:b9:33:25:dc:44:bd:7b:f4:57:56:9d:8a: 92:ac:8d:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyQTkxMTAvBgNVBAUTKDNGOTk2MjYxQUIzRDFFRjA0MTY2MUIzQUVGN0Q4OTMy QjU3MDI2MzcwHhcNMjUxMTA1MDMyMzI2WhcNMjUxMTEyMDMyMzI2WjAYMRYwFAYD VQQDEw02OTBhYzMyZS1lM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ul0tsl+kcj1XrCO5urHNWrkhTBfSq3gEP5PESw0QhqvZwOTpYNNIagaGxNy MHU4HHldzCAPyjNeGe8msQUOwDiesbXXJNK1dUeNKPEv7DJL6FYFDGjCdZneti6/ YwO8m5xGCIo904y5uevH637n6T7qdzOS8Y05nB+gXG5X/hbAqse28eYUfw9dd7VI Tm20QRc5wiiDnTGpyXv1V16wEhtcbEhXttBJWlFAgd5+4oLbJZzaz2FvpkaEUH5c Zabe7oMqarr4lFlM8GEVRU2rDyIhMdtUTyHVC49MQ7axP9EJgKXsgMdhMs8GTAEo iLRr40q8Wva2Zi/y4Tgd/4MyVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNG17a79 EBDwP/Y8S4px3N8ASMMLMB8GA1UdIwQYMBaAFD+ZYmGrPR7wQWYbOu99iTK1cCY3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzJBOS9EOEREQzFBNjM0 QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2QkJaaHM2NzMySk1yVndK amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bGlZYXM5SHZCQlpoczY3MzJKTXJWd0pqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzJBOS9EOEREQzFBNjM0QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2 QkJaaHM2NzMySk1yVndKamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWwehNx0XbtcaeQFsymSO31oQRaPeDz1xFerogJN4a36gm6B4ROJn4 EUv+p2ItGrfoLEKpAeswhZOIBcuUAGJkyF0onC0gZZ04u2TGNQ7MTizkoxMY/01j qJo/8W5Hjihy3XxfWSDrL+ulDtJms4wyThzXz75v/yrwCpkEvhMydqix+P6fdgbg 7tSbYWkAMRyh7ISrd7LZrPaI9pgqhIb7zCfj+nPfP0MWEPRUFObKP2e3cA2skeQt 34eS8hjIys4Z4xuyZYddQFjDzBf3DuPHn5bGu0JcxGutNHZIVB1nlOVNuPDKOfkc niQ0hlQYfOq5MyXcRL179FdWnYqSrI1A -----END CERTIFICATE-----Generated at Wed Nov 5 16:40:57 2025 by rpki-client