$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft File: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft (raw, json) Hash identifier: PcL2MrjfrwkeaPu5+kT8N+fiL0gpc7Yeit5dh3Zaijc= Subject key identifier: 57:41:E5:F9:F7:5C:D0:3B:64:15:6D:01:B7:71:97:F1:28:4C:88:97 Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB Certificate issuer: /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Certificate serial: 1260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft Manifest number: 123E Signing time: Sun 26 Oct 2025 17:24:18 +0000 Manifest this update: Sun 26 Oct 2025 17:24:18 +0000 Manifest next update: Sun 02 Nov 2025 17:24:18 +0000 Files and hashes: 1: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl (hash: LrfRTKUqX8m9ZyHf2MBNcwOJnNrnTpAjI3rhHCdEiGM=) 2: D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa (hash: IlsMtwiQzSq4LTeLK5xGeprYL7keFREC86Udlg/108c=) 3: 29ED0D46839011EE946C5E63C4F9AE02.roa (hash: Ra6HDO1XoeogbYK2SKPiF6ZGlKvyMdWPBrFkbBpAK0o=) 4: 4551BE2CD19D11EAA120EE14C4F9AE02.roa (hash: hm02D0CoN1wXYmBN20AJ0Eit445l76gPSN2cqsUGYq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 17:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4704 (0x1260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Validity Not Before: Oct 26 17:24:18 2025 GMT Not After : Nov 2 17:24:18 2025 GMT Subject: CN=68fe5942-3d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6c:ba:e8:07:cf:27:8b:c1:53:d6:7f:9d:f1: 0e:ed:9d:55:de:79:67:4d:73:44:b8:95:da:97:60: 88:f4:ec:df:c3:60:4a:78:73:2c:f1:46:fb:48:94: 00:38:25:b8:94:a0:c9:5d:82:e0:71:ed:5d:e1:4f: c3:78:37:4f:07:b4:8f:7b:b9:b0:37:b1:10:5a:0b: d0:84:da:ce:11:88:46:e7:d9:7d:75:07:cd:51:26: 1b:42:9f:61:e4:ba:59:9d:6d:11:69:0c:c5:a5:a8: e2:13:9e:d3:19:21:6a:9c:70:46:49:03:5d:ed:e9: c8:fd:d3:07:ca:15:2f:cc:db:b1:11:68:56:9e:61: 3b:23:77:7f:b0:c5:66:f8:9c:83:2d:83:ac:38:f3: 81:d1:78:03:27:4d:de:0a:54:4b:a9:d2:88:9a:31: 32:1e:57:7e:8f:f5:01:fa:a0:79:5e:31:7d:06:e8: ad:a2:a2:5d:76:27:96:60:da:fe:33:79:37:b3:7d: a6:a3:a1:10:da:8a:b3:e7:78:51:71:fb:5e:4f:4d: 2f:25:7d:bf:22:6f:e1:61:6a:98:e3:58:ec:b9:2d: 47:e1:b8:4a:1c:23:75:ad:c8:0f:5a:13:b9:21:c7: 61:21:e0:50:50:79:fe:a9:4f:3a:79:c1:c8:0c:66: 6a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:41:E5:F9:F7:5C:D0:3B:64:15:6D:01:B7:71:97:F1:28:4C:88:97 X509v3 Authority Key Identifier: keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:09:9a:b3:28:8b:ac:d5:8c:39:7f:e3:bd:e6:7a:1c:22:b6: 59:db:ff:9a:21:9e:83:b6:66:98:8e:44:c2:15:6a:0a:b4:73: ae:bb:72:72:e8:0f:c0:0f:23:0d:47:5f:51:f3:46:21:3f:9c: 5e:82:15:68:43:9b:7a:b2:01:d8:2e:87:c4:7c:9e:0b:e3:26: fa:83:93:67:c4:26:66:be:ca:69:8f:b6:07:d7:b0:70:be:ef: 06:82:42:24:d7:af:e8:dc:43:de:12:c1:35:7b:a4:2a:04:b0: 83:f7:06:75:8f:0f:fd:9a:14:b2:b4:f0:2a:f1:f7:46:15:e4: 76:5f:ff:bb:a2:96:7d:0c:ff:f1:77:7f:87:87:91:ee:75:fc: 36:e9:63:f4:b2:63:28:04:2f:55:40:7e:69:e4:63:78:be:f3: 67:ff:35:d2:3b:53:2e:9e:ce:fc:79:76:09:e3:02:7e:1f:d8: bb:ec:b6:f0:ad:b6:5b:16:c8:52:03:47:10:6a:3a:65:57:28: 3e:a2:0b:b0:0e:aa:98:a2:77:32:43:56:1f:12:f4:7d:97:80: 9e:4d:48:6f:ce:78:36:67:bd:c9:f2:26:1b:c6:5e:b0:94:23: e2:b5:c7:40:90:92:19:44:40:19:87:0e:9d:c8:08:8f:b5:c4: 29:75:a8:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMzMxMTAvBgNVBAUTKDM3OTc0MzcxNENFMDEyMjMwQUE5NzhCQjFBQThDNzkw RTcwNjY3QUIwHhcNMjUxMDI2MTcyNDE4WhcNMjUxMTAyMTcyNDE4WjAYMRYwFAYD VQQDEw02OGZlNTk0Mi0zZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWy66AfPJ4vBU9Z/nfEO7Z1V3nlnTXNEuJXal2CI9Ozfw2BKeHMs8Ub7SJQA OCW4lKDJXYLgce1d4U/DeDdPB7SPe7mwN7EQWgvQhNrOEYhG59l9dQfNUSYbQp9h 5LpZnW0RaQzFpajiE57TGSFqnHBGSQNd7enI/dMHyhUvzNuxEWhWnmE7I3d/sMVm +JyDLYOsOPOB0XgDJ03eClRLqdKImjEyHld+j/UB+qB5XjF9BuitoqJddieWYNr+ M3k3s32mo6EQ2oqz53hRcfteT00vJX2/Im/hYWqY41jsuS1H4bhKHCN1rcgPWhO5 IcdhIeBQUHn+qU86ecHIDGZqzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdB5fn3 XNA7ZBVtAbdxl/EoTIiXMB8GA1UdIwQYMBaAFDeXQ3FM4BIjCql4uxqox5DnBmer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UzMy84NzdBNzlCNkU5 RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0VpTUtxWGk3R3FqSGtPY0da NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041ZERjVXpnRWlNS3FYaTdHcWpIa09jR1o2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UzMy84NzdBNzlCNkU5RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0Vp TUtxWGk3R3FqSGtPY0daNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9CZqzKIus1Yw5f+O95nocIrZZ2/+aIZ6DtmaYjkTCFWoKtHOuu3Jy 6A/ADyMNR19R80YhP5xeghVoQ5t6sgHYLofEfJ4L4yb6g5NnxCZmvsppj7YH17Bw vu8GgkIk16/o3EPeEsE1e6QqBLCD9wZ1jw/9mhSytPAq8fdGFeR2X/+7opZ9DP/x d3+Hh5Hudfw26WP0smMoBC9VQH5p5GN4vvNn/zXSO1Muns78eXYJ4wJ+H9i77Lbw rbZbFshSA0cQajplVyg+oguwDqqYoncyQ1YfEvR9l4CeTUhvzng2Z73J8iYbxl6w lCPitcdAkJIZREAZhw6dyAiPtcQpdajs -----END CERTIFICATE-----Generated at Mon Oct 27 17:00:04 2025 by rpki-client