$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft File: w5bB5QN9M19zQcouz4ImEwDN_pU.mft (raw, json) Hash identifier: nqwGZJd1QieUci2dbSYVzabiieiHWlXPYvwQ5RFcU+Y= Subject key identifier: BB:1B:CF:1E:B0:69:2A:89:74:B0:EF:8D:3D:6C:3B:32:EC:49:8B:29 Authority key identifier: C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 Certificate issuer: /CN=A91EC38C/serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Certificate serial: 0503 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft Manifest number: 04FE Signing time: Sun 02 Nov 2025 23:40:01 +0000 Manifest this update: Sun 02 Nov 2025 23:40:00 +0000 Manifest next update: Sun 09 Nov 2025 23:40:00 +0000 Files and hashes: 1: w5bB5QN9M19zQcouz4ImEwDN_pU.crl (hash: OYXI+GHFqhKwFwVhwRPBxkUV01MuTFXqeXbh9Ogpr04=) 2: FCF7126E310711ECBFFF5E62C4F9AE02.roa (hash: F3pgM3DGI+wP2jrjrPXa65ZGlXf9TnXpF1OSKK2H5GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1283 (0x503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC38C, serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Validity Not Before: Nov 2 23:40:00 2025 GMT Not After : Nov 9 23:40:00 2025 GMT Subject: CN=6907ebd1-ec63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:38:76:23:c2:10:0f:16:45:f6:2e:34:2c: 5e:aa:fc:48:fa:4b:6d:75:57:7e:cc:b5:32:b8:06: a8:f8:39:50:34:a1:f6:4c:63:06:4c:74:6d:a9:de: 26:35:b2:9f:e3:9e:e9:75:46:45:81:9b:aa:04:fd: cc:ab:ee:57:bc:50:e4:66:2d:d9:20:20:04:64:00: 20:a2:6f:eb:f2:e9:18:4b:cf:1e:23:e0:56:be:f8: 7b:6d:76:d0:2e:56:55:40:2f:49:6c:5c:4d:bd:12: c4:c1:6d:20:e1:9e:d4:72:ac:e4:4c:72:9f:be:5c: 59:52:3a:6e:8a:25:97:e6:63:f5:f5:77:6b:8c:ef: 7c:ac:cf:2b:a6:93:58:81:f8:97:a8:e4:7e:77:1c: 1a:33:80:6d:98:e0:2f:58:2c:57:79:a5:2f:77:ce: db:39:60:2e:0d:9c:6e:c8:eb:50:ab:7e:92:62:0c: 76:4b:72:19:a2:be:31:33:a5:69:cf:31:af:8e:08: 64:c8:64:6a:b4:96:51:9f:bc:d1:f3:cd:a4:9e:ed: 9a:a8:b1:ba:d7:b4:8d:5f:31:41:5a:cb:28:b8:02: 87:d6:96:a9:e9:60:81:9c:7f:4f:ed:63:db:1d:a9: 6f:f9:70:7f:df:ce:26:d2:4a:48:1a:ab:35:25:9e: 78:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1B:CF:1E:B0:69:2A:89:74:B0:EF:8D:3D:6C:3B:32:EC:49:8B:29 X509v3 Authority Key Identifier: keyid:C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:b1:5b:29:62:86:0a:dc:97:26:6b:cb:a2:25:66:71:62:16: 15:26:80:31:85:65:f2:b3:91:16:a2:bd:79:59:8b:21:29:cd: 47:30:5d:7c:fd:a9:b8:9d:62:7f:54:ff:b9:ec:01:66:60:90: 6b:f8:7b:64:63:30:c0:c9:9d:39:bb:07:67:c4:83:6c:eb:ef: 67:76:11:47:bb:8d:90:98:8f:f8:3c:d9:79:62:4a:0d:a6:2e: db:70:e4:9f:5e:21:f4:b7:80:b6:00:37:be:d4:11:11:2b:00: e1:ce:50:de:be:9f:93:04:bb:38:85:1c:3d:23:da:e2:23:4c: 06:04:33:7c:b6:ff:d9:48:f7:75:96:e2:ba:e8:72:ff:5e:05: d8:da:22:0b:f4:34:21:94:eb:f8:06:6c:91:f2:b5:d5:43:1e: 8b:ee:3c:67:08:5f:81:7a:58:be:00:1e:b5:e6:f8:19:2e:18: 67:07:68:36:4f:5e:4a:73:9d:f7:88:88:d4:a3:1b:c5:18:a1: 6a:47:eb:08:d7:dc:47:a8:82:5d:6c:8b:e1:83:a5:25:cd:e0: 61:28:d1:d4:a5:ff:7c:74:d8:3b:37:3e:92:c5:ad:68:2f:ef: ea:9b:13:76:0e:f6:9b:8c:66:8f:e0:d7:c7:a4:29:27:7d:07: e6:81:e8:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzOEMxMTAvBgNVBAUTKEMzOTZDMUU1MDM3RDMzNUY3MzQxQ0EyRUNGODIyNjEz MDBDREZFOTUwHhcNMjUxMTAyMjM0MDAwWhcNMjUxMTA5MjM0MDAwWjAYMRYwFAYD VQQDEw02OTA3ZWJkMS1lYzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2Y4diPCEA8WRfYuNCxeqvxI+kttdVd+zLUyuAao+DlQNKH2TGMGTHRtqd4m NbKf457pdUZFgZuqBP3Mq+5XvFDkZi3ZICAEZAAgom/r8ukYS88eI+BWvvh7bXbQ LlZVQC9JbFxNvRLEwW0g4Z7UcqzkTHKfvlxZUjpuiiWX5mP19XdrjO98rM8rppNY gfiXqOR+dxwaM4BtmOAvWCxXeaUvd87bOWAuDZxuyOtQq36SYgx2S3IZor4xM6Vp zzGvjghkyGRqtJZRn7zR882knu2aqLG617SNXzFBWssouAKH1pap6WCBnH9P7WPb Halv+XB/384m0kpIGqs1JZ54hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsbzx6w aSqJdLDvjT1sOzLsSYspMB8GA1UdIwQYMBaAFMOWweUDfTNfc0HKLs+CJhMAzf6V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzM4Qy84NzA0OERBQTMx MDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0xOXpRY291ejRJbUV3RE5f cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c1YkI1UU45TTE5elFjb3V6NEltRXdETl9wVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzM4Qy84NzA0OERBQTMxMDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0x OXpRY291ejRJbUV3RE5fcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBisVspYoYK3Jcma8uiJWZxYhYVJoAxhWXys5EWor15WYshKc1HMF18 /am4nWJ/VP+57AFmYJBr+HtkYzDAyZ05uwdnxINs6+9ndhFHu42QmI/4PNl5YkoN pi7bcOSfXiH0t4C2ADe+1BERKwDhzlDevp+TBLs4hRw9I9riI0wGBDN8tv/ZSPd1 luK66HL/XgXY2iIL9DQhlOv4BmyR8rXVQx6L7jxnCF+Beli+AB615vgZLhhnB2g2 T15Kc533iIjUoxvFGKFqR+sI19xHqIJdbIvhg6UlzeBhKNHUpf98dNg7Nz6Sxa1o L+/qmxN2DvabjGaP4NfHpCknfQfmgeiY -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:23 2025 by rpki-client