$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json) Hash identifier: 8laD2qMSxSWb4YuTvXqhmlkxE/SODw9P74Rnsibb75Q= Subject key identifier: E7:44:E5:CB:11:95:1C:BE:76:F6:4A:20:A7:C4:97:D0:A2:C3:63:4A Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft Manifest number: 01A5 Signing time: Sun 19 Oct 2025 05:47:10 +0000 Manifest this update: Sun 19 Oct 2025 05:47:09 +0000 Manifest next update: Sun 26 Oct 2025 05:47:09 +0000 Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: S3KQcIfuXWD+zkzI0zNdqmB6v2zexMqnVQGC7W9X90o=) 2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: ZqsBefU5j7GUz5qH7o82aafqjpUX9O/Biz1HkkL6OG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Validity Not Before: Oct 19 05:47:09 2025 GMT Not After : Oct 26 05:47:09 2025 GMT Subject: CN=68f47b5d-d220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9f:23:fe:84:3a:ff:25:0f:78:36:0c:50:c6: 11:63:7c:ff:7d:96:ca:e0:49:be:40:48:c9:72:2d: 0e:7a:cb:b5:96:e1:b6:bd:d0:71:c6:3d:fe:61:4c: f2:6c:58:7f:1c:08:f4:bc:b0:78:47:97:5d:8b:ea: 84:96:62:ea:8f:c7:f7:0a:79:c0:6c:b6:bf:ab:93: 18:ad:94:f4:b8:4d:9b:f8:32:57:12:4f:57:6a:22: 01:48:5e:cc:bf:f2:2f:28:18:25:a5:a9:60:93:e2: 9d:ec:d3:9f:e7:5d:bf:2b:d2:6f:8a:bc:72:44:fa: 5b:76:30:00:2b:30:5b:e6:1b:70:ba:5b:da:52:02: 9f:a3:10:1c:29:4d:cf:99:dc:19:12:c6:db:36:83: b5:42:b8:47:25:89:4e:3a:d9:2b:94:db:30:99:1d: 71:73:41:68:ce:43:e5:3d:13:00:7a:c1:d7:7c:72: b9:f2:88:a7:f4:bb:35:be:2c:ee:3c:3a:4e:55:45: 73:60:02:99:b6:36:0f:0f:aa:38:c8:96:5f:84:72: e8:c5:76:cb:9e:c6:d6:4a:24:27:f4:31:e6:7f:70: 16:8f:c0:5f:f0:04:61:76:97:52:f3:7c:31:eb:49: 8c:ef:c0:36:38:11:81:2c:cb:45:86:11:12:1e:17: b8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:44:E5:CB:11:95:1C:BE:76:F6:4A:20:A7:C4:97:D0:A2:C3:63:4A X509v3 Authority Key Identifier: keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:b8:21:d6:5e:91:aa:b6:60:a7:b1:fb:14:15:3b:f0:aa:62: e4:01:70:ff:7d:89:23:61:89:ff:58:75:04:81:de:19:e3:66: c5:47:65:0f:80:9f:ee:f1:67:3d:6d:95:19:58:99:f0:8d:ce: 61:06:86:fc:3d:f0:d3:85:ab:a3:45:4b:35:80:3c:6c:13:6e: 9f:17:ba:5f:74:c0:a0:ff:f2:03:4c:9d:38:b9:31:f3:62:e5: 2d:29:6e:f4:c5:8a:96:0a:5e:51:82:99:b1:6d:ef:01:d5:1b: a7:80:8f:f6:bb:66:a1:b5:a6:c6:51:fa:b6:ed:86:14:d7:dc: 28:bf:56:e5:ba:c2:65:9a:62:1d:b0:7d:c8:0f:25:d5:8f:12: d6:9e:b8:53:22:37:a5:b8:59:ed:99:de:41:d2:3b:53:6f:20: 44:c4:8f:70:21:58:de:0c:30:35:d9:d9:e0:0b:a7:82:f5:80: 67:00:57:b1:bd:d2:ff:5d:ce:d0:72:96:d4:37:12:63:9e:11: c8:80:2a:10:1b:77:d2:ed:01:30:e8:02:97:71:e3:41:e2:25: 20:d3:57:8c:65:68:64:5e:2f:0c:5d:2b:3e:d4:73:33:62:5d: 04:ca:bc:4a:d7:b0:e7:d9:fd:1b:9b:c6:10:4d:43:7a:13:9e: 1f:73:7e:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2 QUFDN0JCMDAwHhcNMjUxMDE5MDU0NzA5WhcNMjUxMDI2MDU0NzA5WjAYMRYwFAYD VQQDEw02OGY0N2I1ZC1kMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJ8j/oQ6/yUPeDYMUMYRY3z/fZbK4Em+QEjJci0Oesu1luG2vdBxxj3+YUzy bFh/HAj0vLB4R5ddi+qElmLqj8f3CnnAbLa/q5MYrZT0uE2b+DJXEk9XaiIBSF7M v/IvKBglpalgk+Kd7NOf512/K9JvirxyRPpbdjAAKzBb5htwulvaUgKfoxAcKU3P mdwZEsbbNoO1QrhHJYlOOtkrlNswmR1xc0FozkPlPRMAesHXfHK58oin9Ls1vizu PDpOVUVzYAKZtjYPD6o4yJZfhHLoxXbLnsbWSiQn9DHmf3AWj8Bf8ARhdpdS83wx 60mM78A2OBGBLMtFhhESHhe4zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdE5csR lRy+dvZKIKfEl9Ciw2NKMB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw TXYyZ0hBdjZZbTlxckh1d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCouCHWXpGqtmCnsfsUFTvwqmLkAXD/fYkjYYn/WHUEgd4Z42bFR2UP gJ/u8Wc9bZUZWJnwjc5hBob8PfDThaujRUs1gDxsE26fF7pfdMCg//IDTJ04uTHz YuUtKW70xYqWCl5Rgpmxbe8B1RungI/2u2ahtabGUfq27YYU19wov1blusJlmmId sH3IDyXVjxLWnrhTIjeluFntmd5B0jtTbyBExI9wIVjeDDA12dngC6eC9YBnAFex vdL/Xc7QcpbUNxJjnhHIgCoQG3fS7QEw6AKXceNB4iUg01eMZWhkXi8MXSs+1HMz Yl0EyrxK17Dn2f0bm8YQTUN6E54fc35k -----END CERTIFICATE-----Generated at Sun Oct 19 16:34:21 2025 by rpki-client