$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json) Hash identifier: l426Ho0Th+FflmGr4iPUUs3MLN0tuiwc6eAnTlIl1CA= Subject key identifier: F9:92:6E:12:1A:0B:BC:56:18:D7:E8:99:B7:BA:4C:96:4B:F8:DE:CC Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft Manifest number: C1 Signing time: Mon 03 Nov 2025 05:53:53 +0000 Manifest this update: Mon 03 Nov 2025 05:53:53 +0000 Manifest next update: Mon 10 Nov 2025 05:53:53 +0000 Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: qFY35o0bveH4tmG/fyg3cVo5ek1V6/vcu+WP69oR4wk=) 2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: JjgqoANmsusAqQnFWaBmauCJuNgw+HQl/ZcBjvaDkfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Validity Not Before: Nov 3 05:53:53 2025 GMT Not After : Nov 10 05:53:53 2025 GMT Subject: CN=69084371-e94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:ed:1a:25:91:85:b0:12:e6:ca:34:e9:35: 60:89:40:3a:f5:4f:e1:ff:5f:65:b9:29:f2:de:3f: 9a:de:de:da:dc:53:ff:62:fe:92:d8:22:46:32:4c: 10:a9:cf:f5:c5:5f:f3:9c:95:13:86:84:f0:d2:82: 31:7a:3a:d7:2d:91:f6:af:91:61:5b:4b:27:cc:99: 55:de:53:0b:6f:aa:14:7b:7f:5b:45:84:5b:3a:11: 38:94:82:6a:11:80:5d:b0:be:71:15:ef:00:11:1f: 47:10:4a:2d:04:34:68:c9:e0:65:63:4e:1e:6e:cf: 9f:46:9b:64:9a:99:00:50:3d:70:d5:77:04:7e:8c: b5:ae:30:a0:16:7b:0b:4e:c7:ef:c3:cc:73:9c:8f: 95:a1:52:f3:d9:cf:68:87:ca:16:dc:27:6b:52:1f: d3:34:5c:57:6c:d8:3a:b0:8f:0b:51:b2:ee:f1:6f: 66:9b:34:05:7e:66:20:65:34:b7:60:b0:48:2c:8b: 8d:29:78:b3:88:cc:59:2c:15:98:ce:de:fd:18:44: 76:8e:14:f6:cc:7e:16:9b:6c:a3:d8:2d:fc:8c:68: b3:92:69:8f:d3:06:f0:a6:e0:3c:af:3f:07:65:20: 4c:95:11:e6:05:17:49:7b:60:cf:19:4d:8e:eb:8c: d4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:92:6E:12:1A:0B:BC:56:18:D7:E8:99:B7:BA:4C:96:4B:F8:DE:CC X509v3 Authority Key Identifier: keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:1e:fd:73:2e:6b:23:30:bc:26:38:76:56:c2:35:f2:48:f2: c1:9c:65:b3:b6:a9:72:07:f0:b2:c4:52:ce:86:eb:20:3c:91: 3e:05:25:d4:51:4b:ca:2e:24:f9:d4:e0:55:b0:aa:f5:2a:14: 73:a0:16:7c:a2:0f:f0:ca:a5:b6:e9:f1:2c:bf:0d:80:c3:c1: bb:2e:68:f1:e9:60:22:03:2a:db:1c:d5:3e:aa:49:c4:9e:f0: b7:7d:5c:63:fd:5f:9e:72:9c:87:2c:5b:85:21:19:9c:08:e6: d1:ac:da:ca:58:14:a9:6b:2f:e0:44:83:e1:69:3d:b8:ac:2e: 5c:70:42:11:ef:2c:f5:e0:0c:f2:d1:61:2e:77:d3:d6:a0:cf: f3:48:6e:66:dd:24:9d:60:c4:98:4b:aa:5e:67:28:b7:a5:f3: 03:ef:da:12:f7:b8:5f:85:1b:d6:f1:e2:7c:2e:fd:4b:a8:7c: c2:7b:8c:50:5d:eb:33:d7:7a:02:fb:2f:bc:f7:af:86:23:b1: b0:18:74:d5:1c:a2:4a:d5:e2:34:1e:45:30:9d:25:95:24:3e: 80:8b:72:ed:08:2a:68:2b:6f:bd:e3:43:43:a6:d2:96:1a:b0: 69:c0:07:df:50:09:d4:c2:33:2e:9d:31:4f:35:6f:42:bf:d5: 02:d6:48:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU1NEExMTAvBgNVBAUTKEU2NzU4QjlBMzc1OTgyQzJDNEQxQzc2NDlBMzFFNENG MjdENUE2ODAwHhcNMjUxMTAzMDU1MzUzWhcNMjUxMTEwMDU1MzUzWjAYMRYwFAYD VQQDEw02OTA4NDM3MS1lOTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT7tGiWRhbAS5so06TVgiUA69U/h/19luSny3j+a3t7a3FP/Yv6S2CJGMkwQ qc/1xV/znJUThoTw0oIxejrXLZH2r5FhW0snzJlV3lMLb6oUe39bRYRbOhE4lIJq EYBdsL5xFe8AER9HEEotBDRoyeBlY04ebs+fRptkmpkAUD1w1XcEfoy1rjCgFnsL Tsfvw8xznI+VoVLz2c9oh8oW3CdrUh/TNFxXbNg6sI8LUbLu8W9mmzQFfmYgZTS3 YLBILIuNKXiziMxZLBWYzt79GER2jhT2zH4Wm2yj2C38jGizkmmP0wbwpuA8rz8H ZSBMlRHmBRdJe2DPGU2O64zUTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmSbhIa C7xWGNfombe6TJZL+N7MMB8GA1UdIwQYMBaAFOZ1i5o3WYLCxNHHZJox5M8n1aaA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTU0QS84MjJGQzIyMDkx RjcxMUVGQURFMTEyNjZDNEY5QUUwMi81bldMbWpkWmdzTEUwY2RrbWpIa3p5ZlZw b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuV0xtamRaZ3NMRTBjZGttakhrenlmVnBvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTU0QS84MjJGQzIyMDkxRjcxMUVGQURFMTEyNjZDNEY5QUUwMi81bldMbWpkWmdz TEUwY2RrbWpIa3p5ZlZwb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABHv1zLmsjMLwmOHZWwjXySPLBnGWztqlyB/CyxFLOhusgPJE+BSXU UUvKLiT51OBVsKr1KhRzoBZ8og/wyqW26fEsvw2Aw8G7Lmjx6WAiAyrbHNU+qknE nvC3fVxj/V+ecpyHLFuFIRmcCObRrNrKWBSpay/gRIPhaT24rC5ccEIR7yz14Azy 0WEud9PWoM/zSG5m3SSdYMSYS6peZyi3pfMD79oS97hfhRvW8eJ8Lv1LqHzCe4xQ Xesz13oC+y+896+GI7GwGHTVHKJK1eI0HkUwnSWVJD6Ai3LtCCpoK2+940NDptKW GrBpwAffUAnUwjMunTFPNW9Cv9UC1kgQ -----END CERTIFICATE-----Generated at Tue Nov 4 07:22:43 2025 by rpki-client