$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft File: 5xqfIU6Aybw7LSOf-LmqtxP27bc.mft (raw, json) Hash identifier: QrJPwMJjEfYWNZlBu6wnTczxrjsLrjyDITlMQ/wxxw8= Subject key identifier: A3:87:C7:48:DB:5D:07:6A:B9:4B:62:1C:7F:88:20:11:DD:55:87:CB Authority key identifier: E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 Certificate issuer: /CN=A91E8525/serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Certificate serial: 1A26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft Manifest number: 1A13 Signing time: Tue 04 Nov 2025 16:27:53 +0000 Manifest this update: Tue 04 Nov 2025 16:27:53 +0000 Manifest next update: Tue 11 Nov 2025 16:27:53 +0000 Files and hashes: 1: 5xqfIU6Aybw7LSOf-LmqtxP27bc.crl (hash: 1BqmAX+EzrtHAzxftGdgRsUKW0vlMofWMfJDEkF/5lg=) 2: 3A21C144E51211EBB1225278C4F9AE02.roa (hash: nW5GBU8+whiRwJPpyl+4Uvg+meP7sM49SIVv5JyITRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6694 (0x1a26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8525, serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Validity Not Before: Nov 4 16:27:53 2025 GMT Not After : Nov 11 16:27:53 2025 GMT Subject: CN=690a2989-65e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:95:dc:82:1c:58:0c:b7:95:13:ff:2a:1e:18: b5:9d:12:ca:07:cc:b5:6f:1a:48:bf:74:a3:b0:d2: 47:1b:68:fa:57:12:86:6f:1f:97:e3:83:80:66:40: cc:c7:9b:a0:ff:17:b2:fe:36:ec:d9:a1:92:f3:7c: 0e:82:75:35:4d:0a:bd:d5:d9:a5:16:52:8b:c2:de: 62:f8:1b:83:97:98:90:db:09:a7:ee:e2:58:36:95: 7a:7a:60:24:c9:83:32:12:54:e8:0c:65:71:07:16: 68:71:87:99:8e:64:9b:7e:2e:6b:c0:7f:6b:40:ec: b9:5e:f9:38:09:ba:d6:ec:ce:92:5a:98:96:45:cc: d7:45:f5:1a:f7:94:7c:a0:67:7e:f6:b1:c6:8f:cc: 11:ec:73:13:51:c6:77:33:83:69:7c:3e:e8:34:e1: 31:44:c2:d9:33:90:25:cb:36:b3:c7:e7:e3:be:6b: e3:76:b6:af:05:63:a9:77:f0:c0:62:21:ed:46:96: 5d:d0:fa:e8:68:f3:10:a8:98:65:8d:c9:b4:c8:7c: a6:eb:c7:90:7d:ff:83:ac:aa:01:16:74:f3:ef:83: a5:ca:cd:96:c8:d2:36:c1:96:2a:5e:d6:16:02:34: 4d:45:27:c5:4d:bd:6f:45:56:23:9f:c4:de:6d:0f: 2b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:87:C7:48:DB:5D:07:6A:B9:4B:62:1C:7F:88:20:11:DD:55:87:CB X509v3 Authority Key Identifier: keyid:E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:10:5d:e4:fd:6a:64:63:5e:59:52:50:4d:46:80:73:57:4d: 68:a9:35:b6:fb:51:5e:07:5a:41:2d:86:b9:4c:3f:23:1a:78: 6a:e9:5f:40:f1:a4:1d:89:18:74:ad:c4:81:ea:e8:d7:f7:e2: 05:ae:07:1d:f3:49:26:35:0b:ef:5d:47:f7:81:8d:58:75:8d: 23:f1:76:2b:9e:ad:4f:a0:f5:a7:ed:c6:ca:c3:90:3a:c5:11: aa:60:1d:0a:40:cd:d9:56:a3:a7:1b:ee:7a:5b:08:ee:07:0f: e3:bf:f9:ce:38:ca:55:a8:6f:2b:dc:9f:78:bd:90:0f:51:32: e5:5c:40:d6:c1:57:ad:37:82:7b:43:1b:83:3f:18:53:d3:61: 92:ca:f5:40:9a:27:85:cc:c8:b4:16:e5:1a:1b:84:cc:90:c4: 60:e7:8d:53:07:23:33:2a:59:54:63:11:de:a1:08:84:85:09: ef:7e:3c:33:f5:c0:83:06:76:ba:9a:31:f9:4a:1a:92:1f:da: aa:fa:7e:b1:38:9f:92:e7:f0:bd:53:c3:31:63:e9:7e:93:9e: 43:bf:01:d1:5c:b4:38:a9:b4:48:c9:0b:94:a1:c2:29:c6:92: 06:15:74:48:fb:23:39:ae:6e:0d:74:46:f5:59:8b:ef:e2:37: 4d:60:fe:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1MjUxMTAvBgNVBAUTKEU3MUE5RjIxNEU4MEM5QkMzQjJEMjM5RkY4QjlBQUI3 MTNGNkVEQjcwHhcNMjUxMTA0MTYyNzUzWhcNMjUxMTExMTYyNzUzWjAYMRYwFAYD VQQDEw02OTBhMjk4OS02NWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5XcghxYDLeVE/8qHhi1nRLKB8y1bxpIv3SjsNJHG2j6VxKGbx+X44OAZkDM x5ug/xey/jbs2aGS83wOgnU1TQq91dmlFlKLwt5i+BuDl5iQ2wmn7uJYNpV6emAk yYMyElToDGVxBxZocYeZjmSbfi5rwH9rQOy5Xvk4CbrW7M6SWpiWRczXRfUa95R8 oGd+9rHGj8wR7HMTUcZ3M4NpfD7oNOExRMLZM5Alyzazx+fjvmvjdravBWOpd/DA YiHtRpZd0ProaPMQqJhljcm0yHym68eQff+DrKoBFnTz74Olys2WyNI2wZYqXtYW AjRNRSfFTb1vRVYjn8TebQ8rxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOHx0jb XQdquUtiHH+IIBHdVYfLMB8GA1UdIwQYMBaAFOcanyFOgMm8Oy0jn/i5qrcT9u23 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODUyNS81MjIxMjYxMDYx MkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXlidzdMU09mLUxtcXR4UDI3 YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4cWZJVTZBeWJ3N0xTT2YtTG1xdHhQMjdiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODUyNS81MjIxMjYxMDYxMkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXli dzdMU09mLUxtcXR4UDI3YmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9EF3k/WpkY15ZUlBNRoBzV01oqTW2+1FeB1pBLYa5TD8jGnhq6V9A 8aQdiRh0rcSB6ujX9+IFrgcd80kmNQvvXUf3gY1YdY0j8XYrnq1PoPWn7cbKw5A6 xRGqYB0KQM3ZVqOnG+56WwjuBw/jv/nOOMpVqG8r3J94vZAPUTLlXEDWwVetN4J7 QxuDPxhT02GSyvVAmieFzMi0FuUaG4TMkMRg541TByMzKllUYxHeoQiEhQnvfjwz 9cCDBna6mjH5ShqSH9qq+n6xOJ+S5/C9U8MxY+l+k55DvwHRXLQ4qbRIyQuUocIp xpIGFXRI+yM5rm4NdEb1WYvv4jdNYP6C -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:37 2025 by rpki-client