$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json) Hash identifier: VOMDJnTDv9qUYFzOazCId74C3C/bOXNJUKVuTMjpvm4= Subject key identifier: 35:D0:B7:B6:34:1F:F3:F2:22:F1:91:44:9E:F4:83:C3:1F:B6:C9:AE Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft Manifest number: A5 Signing time: Fri 17 Oct 2025 09:38:12 +0000 Manifest this update: Fri 17 Oct 2025 09:38:10 +0000 Manifest next update: Fri 24 Oct 2025 09:38:10 +0000 Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: VhrUThQ/cX1asPdfmBEJ4DSTsn6D6aoRMXo9DYwKcic=) 2: 1506B298B00711EF863A582EC4F9AE02.roa (hash: PjiKcHZxo3PwYpPFYpla6KazUuXCJGnKHspIakJqo2E=) 3: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: jpijFayg1AhLIehVWTrf1nyIqutL0nvGe/8hsMY0L/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 09:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Validity Not Before: Oct 17 09:38:10 2025 GMT Not After : Oct 24 09:38:10 2025 GMT Subject: CN=68f20e83-53b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:08:5a:06:f0:0d:ca:d8:28:d1:0a:4e:9f:b8: ad:0a:78:be:e2:bf:b1:3b:ed:15:6d:72:a2:90:7e: f0:a9:7e:3d:36:4e:cf:97:41:14:d8:9e:13:d7:5b: 1c:6a:fc:1c:a8:0d:d3:27:ff:6b:b3:c4:c2:d8:26: d7:ea:81:ef:17:bc:64:26:e0:7a:2d:3f:e2:de:cc: 74:32:39:50:ec:f8:a0:23:cb:67:d7:18:af:e2:eb: c1:0b:a7:2c:61:30:a3:1b:c1:82:7d:76:39:76:87: ca:47:77:75:0a:48:e2:00:92:03:a5:59:b8:6d:b2: 70:45:75:db:c6:a2:ba:61:bd:5f:29:40:b1:6d:0e: 67:98:f2:74:82:10:01:0b:eb:4d:bf:4b:6c:24:68: fd:5e:b4:22:ac:5e:c3:36:fd:38:6b:8e:58:bf:07: 7c:6f:40:49:2c:8c:7c:8f:4a:26:68:a3:7f:00:d3: a9:5f:9c:02:97:8c:d1:94:79:21:7b:08:c5:04:3c: 1e:d7:70:93:66:86:98:8e:18:74:8b:e0:cc:2f:f0: ef:a6:d1:b2:9f:4f:d7:f6:03:7c:51:09:0f:6a:59: 3b:61:1a:c3:f2:62:54:95:48:85:a2:8a:03:c4:21: 2d:4a:fa:7b:12:0f:6a:6a:06:ff:52:b6:f8:5a:3a: 3d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D0:B7:B6:34:1F:F3:F2:22:F1:91:44:9E:F4:83:C3:1F:B6:C9:AE X509v3 Authority Key Identifier: keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:98:41:8b:63:d1:ef:7d:2c:9f:e9:04:5a:9a:61:40:a1:5a: a6:6b:a6:02:14:37:6e:d7:15:e3:20:35:a1:3e:85:a1:e9:0e: af:4a:9c:b8:00:9b:fd:2c:fe:d8:21:0c:f5:15:54:f9:78:3a: 77:2f:8e:15:0d:68:c3:5d:55:99:59:c3:e0:ac:78:41:7b:76: 97:15:d5:73:eb:22:fa:4e:a9:e3:0e:77:fb:0e:0a:c8:97:39: 9a:4b:66:1f:53:d4:2c:c7:8e:e7:58:f3:09:c7:ea:1c:83:34: 4f:e6:aa:cb:33:cb:4d:dd:62:9f:00:ed:86:81:7f:6f:54:da: cb:58:2b:1d:d6:33:4f:b9:73:1c:b6:61:b3:4b:a7:1c:21:82: b3:08:42:79:29:3d:16:46:2f:3c:c5:79:93:1c:19:7f:e3:74: 1a:a5:08:32:98:22:cb:d3:5c:a1:97:cb:22:00:9b:05:8e:f0: f7:7a:78:1a:91:30:5f:38:f8:3d:2f:f8:20:d7:f8:0f:6a:5e: e1:a7:26:f4:72:20:88:03:0f:82:25:e2:7c:68:b3:d2:cd:f3: 37:45:1c:67:64:61:0d:bf:69:b2:c3:5b:2c:70:0a:c8:04:45: 7a:69:38:f8:93:d4:4e:a2:76:9e:80:84:ff:66:9e:07:cf:7b: 1e:24:34:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU1RTUxMTAvBgNVBAUTKDY5MjM2RTU5OTYzMDBBMkZENzg1RUY4NTc4M0M1QzI5 QzVCNEU4NzQwHhcNMjUxMDE3MDkzODEwWhcNMjUxMDI0MDkzODEwWjAYMRYwFAYD VQQDEw02OGYyMGU4My01M2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QhaBvANytgo0QpOn7itCni+4r+xO+0VbXKikH7wqX49Nk7Pl0EU2J4T11sc avwcqA3TJ/9rs8TC2CbX6oHvF7xkJuB6LT/i3sx0MjlQ7PigI8tn1xiv4uvBC6cs YTCjG8GCfXY5dofKR3d1CkjiAJIDpVm4bbJwRXXbxqK6Yb1fKUCxbQ5nmPJ0ghAB C+tNv0tsJGj9XrQirF7DNv04a45Yvwd8b0BJLIx8j0omaKN/ANOpX5wCl4zRlHkh ewjFBDwe13CTZoaYjhh0i+DML/DvptGyn0/X9gN8UQkPalk7YRrD8mJUlUiFoooD xCEtSvp7Eg9qagb/Urb4Wjo9dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXQt7Y0 H/PyIvGRRJ70g8MftsmuMB8GA1UdIwQYMBaAFGkjblmWMAov14XvhXg8XCnFtOh0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTVFNS9GMEU3NkUxMkFG QkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9hU051V1pZd0NpX1hoZS1GZUR4Y0tjVzA2 SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FTTnVXWll3Q2lfWGhlLUZlRHhjS2NXMDZIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTVFNS9GMEU3NkUxMkFGQkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9hU051V1pZd0Np X1hoZS1GZUR4Y0tjVzA2SFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsmEGLY9HvfSyf6QRammFAoVqma6YCFDdu1xXjIDWhPoWh6Q6vSpy4 AJv9LP7YIQz1FVT5eDp3L44VDWjDXVWZWcPgrHhBe3aXFdVz6yL6TqnjDnf7DgrI lzmaS2YfU9Qsx47nWPMJx+ocgzRP5qrLM8tN3WKfAO2GgX9vVNrLWCsd1jNPuXMc tmGzS6ccIYKzCEJ5KT0WRi88xXmTHBl/43QapQgymCLL01yhl8siAJsFjvD3enga kTBfOPg9L/gg1/gPal7hpyb0ciCIAw+CJeJ8aLPSzfM3RRxnZGENv2myw1sscArI BEV6aTj4k9ROonaegIT/Zp4Hz3seJDSA -----END CERTIFICATE-----Generated at Sat Oct 18 23:32:27 2025 by rpki-client