$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: OM4QFg0kQ90NxLdh/U6rkL/SQZdQ/jVi7wyjJbjHZL0= Subject key identifier: 6F:60:04:EB:58:48:72:E4:BD:41:A0:76:B8:91:8B:30:DB:B3:E5:55 Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 0994 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 098C Signing time: Mon 10 Nov 2025 19:08:57 +0000 Manifest this update: Mon 10 Nov 2025 19:08:57 +0000 Manifest next update: Mon 17 Nov 2025 19:08:56 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: yKtkqs70dCilp8YwnM0Q4orzIroHa64nRpndQezeV9s=) 2: 156CEB62DC6011ECB2698C14C4F9AE02.roa (hash: reuaGLtn1xD8mIcBhpyoMRgE/LzBHNExqumLX0mZnsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 17 Nov 2025 19:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2452 (0x994) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: Nov 10 19:08:57 2025 GMT Not After : Nov 17 19:08:56 2025 GMT Subject: CN=69123849-6cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:07:3c:48:cf:c3:18:0a:94:eb:05:d6:28: 22:e4:9f:18:34:67:d8:18:77:31:60:97:e8:0c:8d: 36:06:2b:f9:99:2a:76:98:fd:0f:80:94:07:6c:c7: 3d:ea:ec:e7:27:57:07:1c:69:c7:8a:c0:b2:ab:b3: 59:d5:5f:c2:72:33:b5:13:c7:b3:7e:b0:78:53:f7: b2:8e:8d:5e:d7:82:04:09:c8:3a:7a:d4:75:ba:05: c4:48:5a:a1:53:da:03:78:d4:ce:43:0e:9b:09:f6: 1a:9e:d1:2e:b4:ef:cc:81:ab:9a:23:1f:e0:8f:f2: bd:88:86:cf:61:1c:c6:29:8e:2a:8b:09:ed:88:5c: 08:0a:f7:7d:7e:41:49:4d:78:10:81:37:0a:06:f7: b9:d3:a1:00:79:05:8b:7c:ac:31:73:30:c5:c8:f5: 48:d9:5a:20:23:90:13:be:69:19:ae:c0:37:a9:d4: d9:8a:b2:df:e2:18:33:9a:84:e3:85:25:5c:c0:6d: 0d:13:22:73:06:8c:c9:24:f5:fc:23:14:ab:f9:f0: f6:41:77:6c:5a:34:46:e9:ba:32:ae:15:1a:9f:9e: a0:fd:7d:51:f6:04:0f:d7:c1:bd:d7:d0:4c:88:60: 00:10:39:30:ed:a3:63:3d:7d:ae:c6:28:d8:b3:bd: 91:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:60:04:EB:58:48:72:E4:BD:41:A0:76:B8:91:8B:30:DB:B3:E5:55 X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:10:46:18:89:50:81:0d:23:29:b9:35:be:aa:91:a1:64:56: 4c:86:4a:20:a7:a6:d9:ab:1e:d5:98:49:aa:6e:c6:e2:d1:bd: 52:02:e9:f9:63:0b:a3:2a:77:fe:14:7b:49:3d:86:d6:ac:8e: 42:17:62:bc:67:68:55:88:04:e5:6c:47:fe:96:20:1f:7e:f4: 51:6a:43:a5:33:93:97:27:16:6f:c4:67:3b:f2:90:5b:a8:c3: 55:d5:56:b7:21:f7:b8:f6:cf:eb:e9:fa:e3:ae:a5:e1:1f:62: 5c:2f:e1:4b:8a:b7:f0:f6:b2:3c:e4:b8:05:7d:28:52:a9:94: 4f:fc:84:bc:5e:32:ad:35:e9:cd:cb:70:91:12:91:b6:cf:a7: da:32:cd:49:74:a0:5d:b5:e4:25:9a:0d:31:73:4a:2f:09:3a: d4:be:ff:31:b9:82:72:c5:71:d7:1f:23:05:2b:1c:56:bb:39: 49:25:89:10:77:7d:98:8b:03:71:23:9b:6c:a4:24:1d:27:9c: 30:11:bb:b6:22:d3:1b:36:f8:c7:02:45:06:cb:1f:70:0c:7f: 9d:e9:5d:d2:d4:12:56:6f:e4:35:88:34:97:a7:4c:a7:f0:e0: 5c:50:44:75:c7:26:94:5d:46:b2:23:1b:45:5a:1a:51:80:dd: da:39:29:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjUxMTEwMTkwODU3WhcNMjUxMTE3MTkwODU2WjAYMRYwFAYD VQQDEw02OTEyMzg0OS02Y2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDkHPEjPwxgKlOsF1igi5J8YNGfYGHcxYJfoDI02Biv5mSp2mP0PgJQHbMc9 6uznJ1cHHGnHisCyq7NZ1V/CcjO1E8ezfrB4U/eyjo1e14IECcg6etR1ugXESFqh U9oDeNTOQw6bCfYantEutO/MgauaIx/gj/K9iIbPYRzGKY4qiwntiFwICvd9fkFJ TXgQgTcKBve506EAeQWLfKwxczDFyPVI2VogI5ATvmkZrsA3qdTZirLf4hgzmoTj hSVcwG0NEyJzBozJJPX8IxSr+fD2QXdsWjRG6boyrhUan56g/X1R9gQP18G919BM iGAAEDkw7aNjPX2uxijYs72RiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9gBOtY SHLkvUGgdriRizDbs+VVMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/EEYYiVCBDSMpuTW+qpGhZFZMhkogp6bZqx7VmEmqbsbi0b1SAun5 YwujKnf+FHtJPYbWrI5CF2K8Z2hViATlbEf+liAffvRRakOlM5OXJxZvxGc78pBb qMNV1Va3Ife49s/r6frjrqXhH2JcL+FLirfw9rI85LgFfShSqZRP/IS8XjKtNenN y3CREpG2z6faMs1JdKBdteQlmg0xc0ovCTrUvv8xuYJyxXHXHyMFKxxWuzlJJYkQ d32YiwNxI5tspCQdJ5wwEbu2ItMbNvjHAkUGyx9wDH+d6V3S1BJWb+Q1iDSXp0yn 8OBcUER1xyaUXUayIxtFWhpRgN3aOSk5 -----END CERTIFICATE-----Generated at Tue Nov 11 17:47:12 2025 by rpki-client