$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft File: sBO5crQspa2fahYr87XHT5M8HgU.mft (raw, json) Hash identifier: CIJKzMTlU6W0j2bTgW/KyznrnjyqmvKg8qG5h2GEmRo= Subject key identifier: 41:A3:1A:6A:D5:CC:D0:7F:8F:65:93:BB:58:18:77:C9:77:39:80:32 Authority key identifier: B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05 Certificate issuer: /CN=A91E2B66/serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05 Certificate serial: 05CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft Manifest number: 05C3 Signing time: Mon 06 Oct 2025 23:15:34 +0000 Manifest this update: Mon 06 Oct 2025 23:15:33 +0000 Manifest next update: Mon 13 Oct 2025 23:15:33 +0000 Files and hashes: 1: sBO5crQspa2fahYr87XHT5M8HgU.crl (hash: dJmAQPhI7s16arvMk+1hgoHbb6rhrvUj+/80tsk2v4o=) 2: 5334D20CDA5E11EBA323F462C4F9AE02.roa (hash: grIWyyq0MDFCb7a6KfrpTu3LAH64VdoYs4KvoLwKfQg=) 3: 53AD6F32DA5E11EBA323F462C4F9AE02.roa (hash: /1rRME/YWECCYt6toeN715tq9fDj34iC1+mJGA+LM6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Oct 2025 23:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1485 (0x5cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2B66, serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05 Validity Not Before: Oct 6 23:15:33 2025 GMT Not After : Oct 13 23:15:33 2025 GMT Subject: CN=68e44d95-6f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:5b:79:b0:21:68:6c:29:9b:a4:a1:57:3c: e7:ea:d9:ca:48:50:d8:21:8a:ca:62:7d:b1:46:b3: 28:a9:0f:f8:f5:7f:63:b3:9c:12:d3:c4:79:58:15: b2:e6:07:08:9c:93:75:da:93:50:37:de:e6:c3:63: ab:ac:04:9c:e8:97:c6:f3:23:42:39:68:a0:43:f6: 8b:e3:e2:85:0c:a9:f5:41:e3:60:d5:08:94:16:e6: 2b:c8:23:e5:cb:8a:f4:7b:df:a8:e4:ab:7a:f8:94: 07:b5:1f:23:70:f1:70:1b:be:53:74:89:2a:63:be: 6d:ca:fa:04:2a:4e:38:1c:25:ba:c8:5e:91:fd:40: d9:27:9b:ef:d3:68:2f:19:13:65:5b:5e:7f:7f:c8: 8a:f3:a3:a3:ed:7f:78:a0:33:9f:bf:23:55:d7:e7: 42:70:90:6d:b4:3e:5a:79:af:fe:86:c9:ac:8d:a1: 6d:9d:44:3a:c7:27:55:91:0e:12:40:3d:01:59:62: 21:a1:8d:b0:42:2e:99:58:90:0d:3a:67:53:9e:bb: 54:be:6c:6a:02:2b:f4:dc:b3:bc:8b:25:ed:64:38: 68:cf:2f:7b:51:aa:94:66:70:01:5c:99:4d:b9:41: 92:dd:38:05:bf:42:c2:44:cc:92:4c:65:8b:00:1c: e4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A3:1A:6A:D5:CC:D0:7F:8F:65:93:BB:58:18:77:C9:77:39:80:32 X509v3 Authority Key Identifier: keyid:B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:fc:cf:82:cf:0f:8c:cf:e1:c9:8d:34:fb:a0:8c:fb:f4:13: 66:3f:f4:c8:09:e9:8a:98:0c:d4:8b:f5:8c:35:06:cc:1a:d6: 8f:ad:2b:a8:0d:c7:68:51:65:2b:b7:cd:b3:5d:c3:21:45:14: d8:48:ec:3e:cd:1e:ef:4d:3b:03:d7:3b:4b:fa:53:39:c2:3d: f8:08:4c:cb:86:ea:26:09:3e:69:81:9c:ef:e3:1f:e1:79:96: 78:d9:d5:06:5a:c5:9e:62:f4:58:d3:b1:e2:99:28:26:f2:33: a8:b3:5f:53:91:5e:34:4a:e7:f1:21:da:5c:41:7b:d5:2a:ca: da:2c:e6:d0:0c:fe:2c:e4:d3:7c:ea:df:a1:bc:cc:4a:0a:d8: ae:f8:21:97:23:14:b9:bb:6f:4c:68:3a:e1:a4:9e:db:24:75: 3a:53:83:18:ce:21:95:e5:15:43:6f:82:12:47:25:a7:1d:1b: 28:a2:81:a3:3b:71:f0:84:78:0a:91:e7:ef:de:e4:9b:fd:b9: be:08:6e:1f:36:48:e1:22:9b:2b:fc:60:ef:d7:93:35:33:12: 03:c8:77:f9:f2:e8:27:32:00:0e:c5:8b:4d:c7:50:2f:a9:51: cf:ad:89:07:be:2c:34:df:2a:d0:4f:cd:72:a2:08:57:c0:d1: b5:ac:eb:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJCNjYxMTAvBgNVBAUTKEIwMTNCOTcyQjQyQ0E1QUQ5RjZBMTYyQkYzQjVDNzRG OTMzQzFFMDUwHhcNMjUxMDA2MjMxNTMzWhcNMjUxMDEzMjMxNTMzWjAYMRYwFAYD VQQDEw02OGU0NGQ5NS02ZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/9bebAhaGwpm6ShVzzn6tnKSFDYIYrKYn2xRrMoqQ/49X9js5wS08R5WBWy 5gcInJN12pNQN97mw2OrrASc6JfG8yNCOWigQ/aL4+KFDKn1QeNg1QiUFuYryCPl y4r0e9+o5Kt6+JQHtR8jcPFwG75TdIkqY75tyvoEKk44HCW6yF6R/UDZJ5vv02gv GRNlW15/f8iK86Oj7X94oDOfvyNV1+dCcJBttD5aea/+hsmsjaFtnUQ6xydVkQ4S QD0BWWIhoY2wQi6ZWJANOmdTnrtUvmxqAiv03LO8iyXtZDhozy97UaqUZnABXJlN uUGS3TgFv0LCRMySTGWLABzk2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGjGmrV zNB/j2WTu1gYd8l3OYAyMB8GA1UdIwQYMBaAFLATuXK0LKWtn2oWK/O1x0+TPB4F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkI2Ni81M0U4RkJFQURB NUIxMUVCODNCRTM3MUFDNEY5QUUwMi9zQk81Y3JRc3BhMmZhaFlyODdYSFQ1TThI Z1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCTzVjclFzcGEyZmFoWXI4N1hIVDVNOEhnVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkI2Ni81M0U4RkJFQURBNUIxMUVCODNCRTM3MUFDNEY5QUUwMi9zQk81Y3JRc3Bh MmZhaFlyODdYSFQ1TThIZ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv/M+Czw+Mz+HJjTT7oIz79BNmP/TICemKmAzUi/WMNQbMGtaPrSuo DcdoUWUrt82zXcMhRRTYSOw+zR7vTTsD1ztL+lM5wj34CEzLhuomCT5pgZzv4x/h eZZ42dUGWsWeYvRY07HimSgm8jOos19TkV40SufxIdpcQXvVKsraLObQDP4s5NN8 6t+hvMxKCtiu+CGXIxS5u29MaDrhpJ7bJHU6U4MYziGV5RVDb4ISRyWnHRsoooGj O3HwhHgKkefv3uSb/bm+CG4fNkjhIpsr/GDv15M1MxIDyHf58ugnMgAOxYtNx1Av qVHPrYkHviw03yrQT81yoghXwNG1rOvl -----END CERTIFICATE-----Generated at Wed Oct 8 21:25:29 2025 by rpki-client