$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft File: fHiVltWjewRcnZ8TpCAMHodHf3Q.mft (raw, json) Hash identifier: gOm6lDca2euKWvHOqFzLmjjQ9VjYU4JpaOqRucgvwno= Subject key identifier: 34:5C:EE:C5:4C:68:96:EE:80:0C:6E:12:2B:7D:C1:9F:CF:6B:D5:49 Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 Certificate issuer: /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft Manifest number: 04 Signing time: Wed 05 Nov 2025 08:17:54 +0000 Manifest this update: Wed 05 Nov 2025 08:17:53 +0000 Manifest next update: Wed 12 Nov 2025 08:17:53 +0000 Files and hashes: 1: fHiVltWjewRcnZ8TpCAMHodHf3Q.crl (hash: YwRJycmmTRSBM5HSCF6SkHIqRaXFeE3Kz7owyaG1Z7w=) 2: 9402F1E2B95711F0959B8139C4F9AE02.roa (hash: yGR2xqnv87rJpxXoRJ5BLEOl4DCEpjBSrdz8OkezYaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Validity Not Before: Nov 5 08:17:53 2025 GMT Not After : Nov 12 08:17:53 2025 GMT Subject: CN=690b0831-b25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:7b:03:0a:36:65:18:00:d7:3e:37:e2:05: a6:41:19:d1:b9:3a:2a:ef:82:e1:85:23:07:82:7a: 40:c7:98:b8:60:47:e4:cc:47:27:f2:2d:9a:7d:51: 2f:71:e7:93:db:e9:9a:f5:43:4a:2d:12:cb:1b:b1: 45:24:cf:d8:90:2a:6b:ee:73:d2:24:16:20:54:a6: 1e:19:b2:cb:05:a8:85:ba:1c:b9:85:62:65:a0:77: 68:90:48:90:cf:91:5f:af:01:34:fc:b6:23:ca:4a: 90:e5:0d:d0:aa:45:00:85:15:36:91:8b:a0:8c:74: 28:0e:8e:73:1c:24:88:07:cc:3e:07:af:6c:3d:ee: 79:75:21:df:ce:7d:e7:ad:21:de:38:c1:31:92:23: 55:50:14:97:a5:8c:96:26:f2:f2:04:29:8f:2b:4d: 63:a9:dc:7d:05:af:fc:10:96:6d:f3:45:27:69:e5: 48:45:72:d5:f4:c1:ad:15:aa:39:07:1e:9a:12:e0: 5a:ce:92:4f:16:65:de:f9:c4:7d:bf:48:5a:13:24: 9d:df:71:92:58:2f:c9:ae:e3:d6:77:aa:5d:c7:a8: 63:81:78:af:f7:60:eb:c3:33:08:40:b4:f0:43:53: c0:7f:a7:25:d1:e7:14:76:66:32:e3:f6:96:a2:4f: 0f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5C:EE:C5:4C:68:96:EE:80:0C:6E:12:2B:7D:C1:9F:CF:6B:D5:49 X509v3 Authority Key Identifier: keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:39:ae:fb:39:0c:94:da:b2:1d:17:38:6b:ef:68:4c:cd:67: 75:c4:71:f9:f1:8c:8e:67:2d:b3:6c:64:30:0d:59:07:2d:cf: 90:3b:cb:2e:ec:81:f7:f8:06:dd:2c:9d:7b:ba:bb:d5:d9:9f: bf:e1:85:19:d2:fc:ba:1e:75:54:f1:88:0a:49:3f:30:d5:b4: 96:dd:d4:df:64:3b:dc:a1:9e:f1:12:3d:5c:22:5b:6e:0d:8e: ea:b8:d5:d2:48:8e:20:8d:40:9a:f4:1c:52:fb:5b:a0:55:03: 51:89:da:63:8b:86:c1:e0:9d:b6:df:0c:45:52:85:73:c6:71: fb:14:fa:f3:bb:15:bc:d2:56:eb:52:74:85:dc:4e:be:25:76: c0:1b:ad:9f:ba:cd:85:e4:a8:64:24:29:27:28:52:1f:6a:8e: 52:7b:b5:80:94:d3:13:39:98:30:0b:46:bb:22:eb:64:fe:e8: 16:fd:7a:2f:8c:56:c4:ac:5f:e0:d1:87:8c:fb:9c:99:33:cc: 3c:61:2b:b5:90:60:92:16:40:74:1f:c0:19:c1:e0:49:c1:3d: e2:e6:89:59:e6:4b:6c:8e:bc:a9:e5:bd:5c:1b:4e:6d:bd:5b: bb:17:cd:73:45:e5:cd:b3:93:c2:fb:4d:9c:d2:c4:ef:dd:72: 2c:55:1b:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNENDExMC8GA1UEBRMoN0M3ODk1OTZENUEzN0IwNDVDOUQ5RjEzQTQyMDBDMUU4 NzQ3N0Y3NDAeFw0yNTExMDUwODE3NTNaFw0yNTExMTIwODE3NTNaMBgxFjAUBgNV BAMTDTY5MGIwODMxLWIyNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCns3sDCjZlGADXPjfiBaZBGdG5OirvguGFIweCekDHmLhgR+TMRyfyLZp9US9x 55Pb6Zr1Q0otEssbsUUkz9iQKmvuc9IkFiBUph4ZsssFqIW6HLmFYmWgd2iQSJDP kV+vATT8tiPKSpDlDdCqRQCFFTaRi6CMdCgOjnMcJIgHzD4Hr2w97nl1Id/Ofeet Id44wTGSI1VQFJeljJYm8vIEKY8rTWOp3H0Fr/wQlm3zRSdp5UhFctX0wa0VqjkH HpoS4FrOkk8WZd75xH2/SFoTJJ3fcZJYL8mu49Z3ql3HqGOBeK/3YOvDMwhAtPBD U8B/pyXR5xR2ZjLj9paiTw+5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNFzuxUxo lu6ADG4SK33Bn89r1UkwHwYDVR0jBBgwFoAUfHiVltWjewRcnZ8TpCAMHodHf3Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0Q0L0Q0N0Y0OTBDQjk1 NTExRjA5QTdGNkQ3MUM0RjlBRTAyL2ZIaVZsdFdqZXdSY25aOFRwQ0FNSG9kSGYz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZkhpVmx0V2pld1Jjblo4VHBDQU1Ib2RIZjNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0Q0L0Q0N0Y0OTBDQjk1NTExRjA5QTdGNkQ3MUM0RjlBRTAyL2ZIaVZsdFdqZXdS Y25aOFRwQ0FNSG9kSGYzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIc5rvs5DJTash0XOGvvaEzNZ3XEcfnxjI5nLbNsZDANWQctz5A7yy7s gff4Bt0snXu6u9XZn7/hhRnS/LoedVTxiApJPzDVtJbd1N9kO9yhnvESPVwiW24N juq41dJIjiCNQJr0HFL7W6BVA1GJ2mOLhsHgnbbfDEVShXPGcfsU+vO7FbzSVutS dIXcTr4ldsAbrZ+6zYXkqGQkKScoUh9qjlJ7tYCU0xM5mDALRrsi62T+6Bb9ei+M VsSsX+DRh4z7nJkzzDxhK7WQYJIWQHQfwBnB4EnBPeLmiVnmS2yOvKnlvVwbTm29 W7sXzXNF5c2zk8L7TZzSxO/dcixVG3Y= -----END CERTIFICATE-----Generated at Thu Nov 6 07:03:58 2025 by rpki-client