$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft File: B7JffmXLYnEIsNlMGPf1edM0eBg.mft (raw, json) Hash identifier: N9EpPVXD9WvhSOEGhqhpbI/tpVZUywhDcV1bKvbZoOI= Subject key identifier: A2:CC:B9:FC:FF:AB:E7:58:E0:CA:63:42:77:23:F5:EC:28:EC:91:F6 Authority key identifier: 07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18 Certificate issuer: /CN=A911CB05/serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft Manifest number: C5 Signing time: Mon 03 Nov 2025 05:48:45 +0000 Manifest this update: Mon 03 Nov 2025 05:48:44 +0000 Manifest next update: Mon 10 Nov 2025 05:48:44 +0000 Files and hashes: 1: B7JffmXLYnEIsNlMGPf1edM0eBg.crl (hash: 5l1/hZA2G60nMr6T9ALO/ukwZb4aPskEquKWtnpLKX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CB05, serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818 Validity Not Before: Nov 3 05:48:44 2025 GMT Not After : Nov 10 05:48:44 2025 GMT Subject: CN=6908423c-cdb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:4d:b2:79:8f:5c:1e:4f:ba:68:c4:36:5b: 50:13:06:ed:4b:14:53:13:08:71:8d:0e:21:54:8b: f2:ef:c5:1c:b9:a6:fe:77:b2:b5:df:43:52:33:62: f0:f1:58:c5:69:60:a6:97:5b:e4:29:4f:4b:83:93: 39:13:3e:ce:ce:8c:da:ac:47:3b:30:7a:8c:3d:a9: c3:0c:cc:8a:14:09:93:1e:a2:b5:5d:4e:3c:c5:b7: 70:60:22:e9:79:d0:2a:4a:3f:71:7c:6c:7e:c3:7e: 02:35:16:27:50:f7:18:69:73:db:55:b2:bc:42:10: e8:91:6c:53:98:a2:da:1f:42:fb:1c:7f:2a:7d:3f: c1:89:26:00:bd:7b:a2:90:b2:97:53:22:5d:6e:29: 81:c6:5c:14:03:42:72:d3:df:fa:03:d9:ff:97:51: f7:1c:27:4d:4a:7a:b0:0f:b1:7c:31:e3:8f:40:b2: 2b:dd:7b:ed:e1:be:15:f7:73:8c:d5:58:12:2c:91: 5b:21:17:0c:fa:36:05:b9:4c:b9:b8:e6:2f:05:79: 9c:99:a8:8b:65:87:03:64:88:11:a8:9e:0d:a2:40: c0:f5:f6:fc:8a:08:ad:64:ae:71:3c:cd:12:51:d0: f3:c4:94:6b:7e:b7:68:9b:5e:9b:fe:f4:c9:d0:05: 5f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CC:B9:FC:FF:AB:E7:58:E0:CA:63:42:77:23:F5:EC:28:EC:91:F6 X509v3 Authority Key Identifier: keyid:07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:1d:23:b4:55:18:68:18:04:64:0c:1d:f2:2c:19:5a:25:0b: b3:26:87:02:e5:32:ff:f0:73:fd:0c:87:25:96:29:a0:d4:89: fd:b9:1b:3e:fa:5b:ad:d0:7b:5c:ca:4a:30:76:db:85:86:98: 4e:72:65:19:c6:2e:1d:15:49:1b:8d:61:bb:08:00:e8:70:0c: 0e:75:01:28:20:dc:eb:b0:3b:9c:53:ea:3a:f9:b7:bd:5a:fa: 02:94:ac:57:a0:a9:ae:13:c6:5b:9c:63:8d:50:33:23:cf:a7: 79:36:94:59:d5:15:fd:3b:5a:e4:05:aa:15:41:00:cb:8c:cf: 78:04:54:18:2a:8d:c4:1b:44:ed:26:34:ce:ee:68:02:23:13: 6b:16:e5:da:25:de:3f:7a:36:89:22:45:83:06:73:9d:99:2e: 7a:44:17:83:53:cc:24:17:c7:3d:51:6b:f0:f2:92:5b:e1:55: 45:a3:40:9e:e2:64:81:04:d3:cf:bf:92:11:48:58:73:7d:4b: 95:f8:32:c3:47:62:60:78:42:68:1f:da:b0:39:fa:65:8c:69: 24:d7:22:0f:a2:54:78:47:3c:c8:5b:23:cd:65:a1:1e:fc:5f: 7f:ce:ce:22:dd:d9:4c:9a:32:e6:8c:5f:9f:fa:50:6d:61:26: 3b:d1:9a:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNCMDUxMTAvBgNVBAUTKDA3QjI1RjdFNjVDQjYyNzEwOEIwRDk0QzE4RjdGNTc5 RDMzNDc4MTgwHhcNMjUxMTAzMDU0ODQ0WhcNMjUxMTEwMDU0ODQ0WjAYMRYwFAYD VQQDEw02OTA4NDIzYy1jZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7NNsnmPXB5PumjENltQEwbtSxRTEwhxjQ4hVIvy78Ucuab+d7K130NSM2Lw 8VjFaWCml1vkKU9Lg5M5Ez7OzozarEc7MHqMPanDDMyKFAmTHqK1XU48xbdwYCLp edAqSj9xfGx+w34CNRYnUPcYaXPbVbK8QhDokWxTmKLaH0L7HH8qfT/BiSYAvXui kLKXUyJdbimBxlwUA0Jy09/6A9n/l1H3HCdNSnqwD7F8MeOPQLIr3Xvt4b4V93OM 1VgSLJFbIRcM+jYFuUy5uOYvBXmcmaiLZYcDZIgRqJ4NokDA9fb8igitZK5xPM0S UdDzxJRrfrdom16b/vTJ0AVfdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLMufz/ q+dY4MpjQncj9ewo7JH2MB8GA1UdIwQYMBaAFAeyX35ly2JxCLDZTBj39XnTNHgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0IwNS9GQTUyREVDMjhB OUExMUVGQjhBQTU2NDhDNEY5QUUwMi9CN0pmZm1YTFluRUlzTmxNR1BmMWVkTTBl QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3SmZmbVhMWW5FSXNObE1HUGYxZWRNMGVCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0IwNS9GQTUyREVDMjhBOUExMUVGQjhBQTU2NDhDNEY5QUUwMi9CN0pmZm1YTFlu RUlzTmxNR1BmMWVkTTBlQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5HSO0VRhoGARkDB3yLBlaJQuzJocC5TL/8HP9DIcllimg1In9uRs+ +lut0HtcykowdtuFhphOcmUZxi4dFUkbjWG7CADocAwOdQEoINzrsDucU+o6+be9 WvoClKxXoKmuE8ZbnGONUDMjz6d5NpRZ1RX9O1rkBaoVQQDLjM94BFQYKo3EG0Tt JjTO7mgCIxNrFuXaJd4/ejaJIkWDBnOdmS56RBeDU8wkF8c9UWvw8pJb4VVFo0Ce 4mSBBNPPv5IRSFhzfUuV+DLDR2JgeEJoH9qwOfpljGkk1yIPolR4RzzIWyPNZaEe /F9/zs4i3dlMmjLmjF+f+lBtYSY70Zp8 -----END CERTIFICATE-----Generated at Tue Nov 4 08:29:02 2025 by rpki-client