$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft File: slUrOLjFywk1yUD6YJgOpvUQz4Y.mft (raw, json) Hash identifier: B/7PRnB4c3UJZxziKWrPzYzu7pLUDiz7oP7TfkpsVfU= Subject key identifier: 91:F0:A5:56:8E:C4:B8:AF:D9:EC:70:AA:73:3E:36:B9:22:FD:BB:7C Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 Certificate issuer: /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft Manifest number: E3 Signing time: Mon 27 Oct 2025 07:35:55 +0000 Manifest this update: Mon 27 Oct 2025 07:35:54 +0000 Manifest next update: Mon 03 Nov 2025 07:35:54 +0000 Files and hashes: 1: slUrOLjFywk1yUD6YJgOpvUQz4Y.crl (hash: uQSfy5IW4qPtAy0iB71Mraias+zUL7XVH0XHVf/AuHU=) 2: 6A1352D0ABF311F08AAF8C15C4F9AE02.roa (hash: apdSkaCqoiH/lYU2QXojNuaxdofwm63fhIsxxWErIiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 07:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5786, serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Validity Not Before: Oct 27 07:35:54 2025 GMT Not After : Nov 3 07:35:54 2025 GMT Subject: CN=68ff20da-51d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:86:1b:d7:2e:8b:b3:f9:be:b4:c8:ab:79:0d: a5:40:06:a8:c8:15:86:4e:f4:8c:7a:d9:7d:19:fb: 0a:3a:c3:2c:9c:ff:da:b8:e5:6e:77:fc:be:c0:2e: 67:39:ca:e1:bf:1b:77:21:d3:4e:60:d7:2a:c0:86: f0:60:0f:4c:a7:ff:cb:16:7d:26:76:d6:d0:7c:0d: 3a:33:29:72:ee:56:95:56:02:dc:10:dd:1a:d7:50: cf:8a:21:8e:5c:a9:54:fe:ad:24:bc:5a:76:f9:9c: 2c:92:11:f5:d8:f0:f4:7d:89:fd:0a:25:9c:00:48: 2e:ff:18:54:e4:ea:a6:9b:9b:be:f0:bc:b5:ed:a2: 7e:7e:67:52:d1:23:43:13:9d:2b:88:80:d4:a0:cb: c3:2b:2c:89:63:24:2d:b2:ff:92:f6:98:ad:9e:b4: c3:a4:7b:47:76:56:8c:f7:6a:41:8b:33:03:25:34: 08:dc:9b:89:22:08:90:5f:02:df:44:bb:d2:fa:7c: c9:86:cf:04:39:fd:b8:9e:4f:ec:8e:e3:83:91:36: 68:95:5d:a9:d4:f9:6f:36:01:3f:e1:2e:ef:97:37: e7:82:58:bb:cd:2d:e8:dd:27:ac:ea:49:17:18:25: dd:14:c6:06:14:16:66:b3:8f:4a:25:bb:13:1f:dc: 35:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F0:A5:56:8E:C4:B8:AF:D9:EC:70:AA:73:3E:36:B9:22:FD:BB:7C X509v3 Authority Key Identifier: keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ea:dc:1e:dd:ce:6f:14:3e:76:4f:ad:bc:c1:70:e7:04:d3: 4c:02:61:f6:e8:33:d6:e3:02:f1:a3:52:8b:4c:17:fd:06:a3: a3:83:e1:c9:93:c4:df:0a:6c:d9:06:a4:d5:12:8e:7a:81:5f: 8e:b5:7b:32:6a:64:90:8f:b7:27:27:96:5c:3b:39:2f:5c:2b: 82:3a:50:64:82:11:3b:2c:9a:83:76:bf:8c:5d:90:af:84:61: 07:52:e4:ae:40:77:92:15:e8:7f:54:ee:a7:d0:7b:b1:66:8f: 93:19:f0:9b:d7:87:9f:3c:b4:b8:bd:5a:f2:e5:a0:16:6b:9e: 22:cc:2a:59:65:e1:2e:50:f5:c1:e0:05:ed:ab:cf:74:9f:cd: 2a:f1:a8:5c:1a:5b:18:31:fb:2d:00:2b:32:f7:03:2c:85:b1: f5:bb:69:a4:ea:9b:49:63:0c:b5:39:6c:e0:b1:02:15:30:81: fc:59:cb:49:80:fd:44:b9:22:6f:6f:15:37:a7:95:ea:1a:fd: 23:86:2d:cd:d8:c6:11:c9:bc:fa:c0:98:93:9f:3b:c1:3e:fe: 89:c3:f6:2f:28:3a:ef:36:06:b7:4d:b4:52:df:92:3e:99:5b: 5f:12:55:5b:5f:4a:79:fb:1c:50:5b:4c:7f:66:00:2a:61:fc: d4:2e:83:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3ODYxMTAvBgNVBAUTKEIyNTUyQjM4QjhDNUNCMDkzNUM5NDBGQTYwOTgwRUE2 RjUxMENGODYwHhcNMjUxMDI3MDczNTU0WhcNMjUxMTAzMDczNTU0WjAYMRYwFAYD VQQDEw02OGZmMjBkYS01MWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYYb1y6Ls/m+tMireQ2lQAaoyBWGTvSMetl9GfsKOsMsnP/auOVud/y+wC5n Ocrhvxt3IdNOYNcqwIbwYA9Mp//LFn0mdtbQfA06Myly7laVVgLcEN0a11DPiiGO XKlU/q0kvFp2+ZwskhH12PD0fYn9CiWcAEgu/xhU5Oqmm5u+8Ly17aJ+fmdS0SND E50riIDUoMvDKyyJYyQtsv+S9pitnrTDpHtHdlaM92pBizMDJTQI3JuJIgiQXwLf RLvS+nzJhs8EOf24nk/sjuODkTZolV2p1PlvNgE/4S7vlzfngli7zS3o3Ses6kkX GCXdFMYGFBZms49KJbsTH9w1ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHwpVaO xLiv2exwqnM+Nrki/bt8MB8GA1UdIwQYMBaAFLJVKzi4xcsJNclA+mCYDqb1EM+G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTc4Ni9FNTc3MTM4MDVB RTExMUVGQkI1QzU3MkRDNEY5QUUwMi9zbFVyT0xqRnl3azF5VUQ2WUpnT3B2VVF6 NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NsVXJPTGpGeXdrMXlVRDZZSmdPcHZVUXo0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTc4Ni9FNTc3MTM4MDVBRTExMUVGQkI1QzU3MkRDNEY5QUUwMi9zbFVyT0xqRnl3 azF5VUQ2WUpnT3B2VVF6NFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL6twe3c5vFD52T628wXDnBNNMAmH26DPW4wLxo1KLTBf9BqOjg+HJ k8TfCmzZBqTVEo56gV+OtXsyamSQj7cnJ5ZcOzkvXCuCOlBkghE7LJqDdr+MXZCv hGEHUuSuQHeSFeh/VO6n0HuxZo+TGfCb14efPLS4vVry5aAWa54izCpZZeEuUPXB 4AXtq890n80q8ahcGlsYMfstACsy9wMshbH1u2mk6ptJYwy1OWzgsQIVMIH8WctJ gP1EuSJvbxU3p5XqGv0jhi3N2MYRybz6wJiTnzvBPv6Jw/YvKDrvNga3TbRS35I+ mVtfElVbX0p5+xxQW0x/ZgAqYfzULoNq -----END CERTIFICATE-----Generated at Tue Oct 28 16:05:45 2025 by rpki-client