$ rpki-client -vvf rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft File: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft (raw, json) Hash identifier: qERW58AeRpFY40kMWjmGR2aoix3PDKxIXcOanx4ihGA= Subject key identifier: D0:1D:45:9A:55:C9:DA:CB:4D:D9:87:7B:4E:CB:44:AE:0C:3C:03:F7 Authority key identifier: E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 Certificate issuer: /CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Certificate serial: 050D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft Manifest number: 050D Signing time: Tue 04 Nov 2025 23:39:58 +0000 Manifest this update: Tue 04 Nov 2025 23:39:58 +0000 Manifest next update: Tue 11 Nov 2025 23:39:58 +0000 Files and hashes: 1: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl (hash: oAQr2abHIsO3yjLAuncTZuIiVoVhYhJdadNDIyBrbWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1293 (0x50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F35BB, serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Validity Not Before: Nov 4 23:39:58 2025 GMT Not After : Nov 11 23:39:58 2025 GMT Subject: CN=690a8ece-912e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5f:cf:5d:f1:1c:5d:31:fc:ac:b4:9c:d3:a6: aa:03:63:6d:b1:79:1a:5e:a5:22:c1:c5:9c:6e:f4: d5:d9:3c:ad:71:64:9f:3d:02:78:5b:6d:35:4c:73: 34:f4:61:ba:22:24:2d:83:bd:6d:88:3f:b1:3e:aa: c8:a0:4a:6f:ba:4c:9d:16:8d:ba:24:88:d5:2d:0d: 14:16:db:a1:40:86:28:c5:48:ba:1a:21:9b:ad:64: 6c:49:23:fd:c5:b1:06:c3:bf:f3:ab:7b:4f:e3:80: 78:3e:26:52:96:dc:1b:f1:3f:96:df:40:5b:09:cb: ce:d8:c8:8b:ea:3f:8b:ca:de:ee:f9:67:c1:01:12: 35:19:c0:20:7b:a0:58:51:8c:68:81:a0:0d:8c:24: 26:9d:e2:6c:a1:26:09:0b:81:d4:49:fd:7a:c5:39: 5c:87:e6:38:9e:f7:d2:b6:f2:7c:86:7e:f7:b9:67: b6:8f:a2:ce:77:e3:27:5c:94:cd:e8:6b:2d:55:95: c5:2d:4c:08:5a:26:49:d7:3c:5b:cd:52:73:0e:78: c8:92:24:6c:ca:84:fa:87:1c:0a:e6:a3:19:38:bb: 0a:8d:dc:15:1d:92:89:3c:8e:35:43:aa:34:8e:dc: 0c:81:a3:54:a3:a1:f0:09:26:6c:60:45:55:dd:b5: ac:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1D:45:9A:55:C9:DA:CB:4D:D9:87:7B:4E:CB:44:AE:0C:3C:03:F7 X509v3 Authority Key Identifier: keyid:E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:12:6d:fd:2a:c4:d8:f5:c0:82:3d:d2:92:0a:0a:c0:c5:35: 4f:6a:31:06:98:e7:6e:94:41:5b:02:d7:ff:53:33:7a:3b:b0: 7a:96:0b:a8:3d:da:c2:26:56:9a:ae:04:b5:c3:0e:0c:62:e6: a3:2c:26:10:8d:49:9c:a7:6e:68:37:b7:04:1e:79:21:aa:15: 3b:12:e2:85:bf:f5:b1:a6:a2:e1:4c:ed:8e:4d:0d:7c:ea:ad: 95:e3:0f:5a:56:2e:1b:ba:e9:fa:aa:b3:12:46:10:6f:fb:58: 19:7f:69:5d:4b:20:9c:83:8b:08:21:89:e2:80:f2:f8:ac:82: 37:67:fa:d6:b4:95:b9:80:f9:af:36:24:14:8f:28:43:ab:b7: e3:68:10:36:1a:b3:5d:b5:cd:d2:33:f8:9e:55:a3:1e:5a:45: 8d:a7:45:18:b2:1f:c8:bf:eb:35:6f:51:d7:49:24:9e:2b:a9: cd:ad:f8:ad:53:d6:a0:23:00:b4:a9:6c:c1:68:fe:ac:ee:ad: 65:6d:d6:e2:af:ef:73:c7:f2:38:88:4f:b3:66:62:e8:71:62: 4d:ac:60:1f:ae:dc:47:3b:52:13:67:cd:ed:fb:d5:f2:bf:4f: 96:a6:4a:d4:65:7d:ca:19:31:1a:a1:fa:fc:b6:78:e6:bd:1c: eb:c7:e8:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM1QkIxMTAvBgNVBAUTKEU2MUZBMTI0QTYxOEUyNTY2N0NDMzFDQ0ZDNDkxNkNF MDc2RkRBNTcwHhcNMjUxMTA0MjMzOTU4WhcNMjUxMTExMjMzOTU4WjAYMRYwFAYD VQQDEw02OTBhOGVjZS05MTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1F/PXfEcXTH8rLSc06aqA2NtsXkaXqUiwcWcbvTV2TytcWSfPQJ4W201THM0 9GG6IiQtg71tiD+xPqrIoEpvukydFo26JIjVLQ0UFtuhQIYoxUi6GiGbrWRsSSP9 xbEGw7/zq3tP44B4PiZSltwb8T+W30BbCcvO2MiL6j+Lyt7u+WfBARI1GcAge6BY UYxogaANjCQmneJsoSYJC4HUSf16xTlch+Y4nvfStvJ8hn73uWe2j6LOd+MnXJTN 6GstVZXFLUwIWiZJ1zxbzVJzDnjIkiRsyoT6hxwK5qMZOLsKjdwVHZKJPI41Q6o0 jtwMgaNUo6HwCSZsYEVV3bWsLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAdRZpV ydrLTdmHe07LRK4MPAP3MB8GA1UdIwQYMBaAFOYfoSSmGOJWZ8wxzPxJFs4Hb9pX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzVCQi8wNzYzN0QwMjI3 RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRsWm56REhNX0VrV3pnZHYy bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoLWhKS1lZNGxabnpESE1fRWtXemdkdjJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzVCQi8wNzYzN0QwMjI3RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRs Wm56REhNX0VrV3pnZHYybGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJEm39KsTY9cCCPdKSCgrAxTVPajEGmOdulEFbAtf/UzN6O7B6lguo PdrCJlaargS1ww4MYuajLCYQjUmcp25oN7cEHnkhqhU7EuKFv/WxpqLhTO2OTQ18 6q2V4w9aVi4buun6qrMSRhBv+1gZf2ldSyCcg4sIIYnigPL4rII3Z/rWtJW5gPmv NiQUjyhDq7fjaBA2GrNdtc3SM/ieVaMeWkWNp0UYsh/Iv+s1b1HXSSSeK6nNrfit U9agIwC0qWzBaP6s7q1lbdbir+9zx/I4iE+zZmLocWJNrGAfrtxHO1ITZ83t+9Xy v0+WpkrUZX3KGTEaofr8tnjmvRzrx+ge -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:11 2025 by rpki-client