$ rpki-client -vvf rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft File: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft (raw, json) Hash identifier: QpIAm1oRjYgRfi2s9T5Uf7Q3AfusV5fKjX8z46HMxDg= Subject key identifier: FD:99:5B:D1:01:CB:5D:6B:3F:3B:28:59:C2:69:E9:9F:69:DE:84:6A Authority key identifier: E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73 Certificate issuer: /CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft Manifest number: 01BF Signing time: Mon 03 Nov 2025 03:09:07 +0000 Manifest this update: Mon 03 Nov 2025 03:09:07 +0000 Manifest next update: Mon 10 Nov 2025 03:09:07 +0000 Files and hashes: 1: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl (hash: 1NAT8589UOavhBvHeIkNDSQWtvn9VyK5MDA9yAthzT0=) 2: F4C13F18066811F0B521BF2FC4F9AE02.roa (hash: 3QKkD65qHOB5c8IaweySFDogSMcVT6Hz9Y4s2qa90So=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ABFE, serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73 Validity Not Before: Nov 3 03:09:07 2025 GMT Not After : Nov 10 03:09:07 2025 GMT Subject: CN=69081cd3-b6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:67:be:d7:32:e7:c9:a8:cc:fe:ec:36:0a: 74:18:c4:96:d7:29:c4:95:16:7b:e8:a3:28:ea:91: c2:b8:c3:e6:cf:29:7d:f2:aa:86:9e:4e:67:52:ad: 59:90:46:5a:41:d2:b7:88:9e:5c:2b:d3:9d:49:8d: cd:77:a6:71:f5:a9:86:5c:b3:8f:37:b7:38:86:b5: 49:c9:95:f9:e5:8c:97:48:ec:18:33:dc:99:2d:92: 4e:ad:ac:bc:cd:45:a6:94:a6:72:17:ae:fa:72:f3: bb:fd:ce:08:52:ef:12:24:f0:01:67:f0:68:c4:7e: 09:c3:74:f0:2f:fa:24:07:78:62:ba:e9:f7:b7:00: 57:4e:ca:3b:fa:89:3d:28:03:c3:58:44:e5:50:b1: ba:05:ad:98:00:dc:e8:35:7b:49:af:e9:ed:76:a4: ca:c3:08:81:50:fa:bd:97:77:3c:0a:41:2d:1f:91: 4f:df:6d:50:74:b5:95:cb:9a:88:bb:f3:4f:ac:7f: fc:b2:32:c3:be:9c:e0:1a:9c:40:ca:18:06:d7:94: e9:15:4f:b9:dd:76:4a:71:20:b6:b1:ed:09:cb:11: e1:bc:fb:0d:8b:40:40:47:80:be:fb:5a:64:e8:15: 4c:57:61:51:78:8d:b5:5d:04:fb:d2:c4:2e:85:6a: a5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:99:5B:D1:01:CB:5D:6B:3F:3B:28:59:C2:69:E9:9F:69:DE:84:6A X509v3 Authority Key Identifier: keyid:E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:d9:80:87:a0:f8:1d:6f:13:91:27:7c:59:5f:52:6b:99:95: 72:71:6a:a5:a9:48:d8:0a:ee:8d:31:5a:24:ff:b0:fa:47:5f: c8:b0:eb:36:c7:4c:4c:54:6a:23:38:38:5e:ab:af:81:0a:f1: 7b:e8:fb:d4:07:0e:d6:af:61:db:fe:70:31:e3:43:10:58:f8: b9:f6:f7:48:ea:e7:5c:98:11:ab:57:04:d7:7d:29:83:de:f5: 58:e8:7c:0b:ac:73:29:d5:fb:ee:74:a2:d9:9a:6f:f8:4f:7c: 9d:09:13:00:c9:cf:01:7f:d1:fa:a9:47:60:f9:e6:f7:5f:ef: 15:dc:25:8c:a0:c3:8f:0c:c3:b1:5b:08:11:24:82:3b:1c:e5: 70:49:df:c5:9d:50:a9:b8:d3:0c:7f:75:50:6b:17:af:12:cf: 6a:f8:00:f1:0c:5b:27:f9:01:d3:39:97:c6:4d:38:90:94:ed: 78:c8:25:82:a6:44:f6:a2:11:20:de:f1:f6:19:3f:6f:0a:87: 56:32:af:ac:62:f5:66:52:54:63:1f:72:7a:3f:93:0e:2f:e6: b2:9e:f7:8f:de:02:d3:53:77:7a:5a:d4:c1:23:34:c6:70:c7: a4:ef:33:4a:dc:c7:21:00:38:3c:b9:39:a2:2f:85:52:d4:ee: 57:15:c8:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FCRkUxMTAvBgNVBAUTKEU1ODhDNzNFNkNCNEZEQjM4Qjg0RUU0MEY4RjlCNjRD NTBCRTRCNzMwHhcNMjUxMTAzMDMwOTA3WhcNMjUxMTEwMDMwOTA3WjAYMRYwFAYD VQQDEw02OTA4MWNkMy1iNmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvdnvtcy58mozP7sNgp0GMSW1ynElRZ76KMo6pHCuMPmzyl98qqGnk5nUq1Z kEZaQdK3iJ5cK9OdSY3Nd6Zx9amGXLOPN7c4hrVJyZX55YyXSOwYM9yZLZJOray8 zUWmlKZyF676cvO7/c4IUu8SJPABZ/BoxH4Jw3TwL/okB3hiuun3twBXTso7+ok9 KAPDWETlULG6Ba2YANzoNXtJr+ntdqTKwwiBUPq9l3c8CkEtH5FP321QdLWVy5qI u/NPrH/8sjLDvpzgGpxAyhgG15TpFU+53XZKcSC2se0JyxHhvPsNi0BAR4C++1pk 6BVMV2FReI21XQT70sQuhWqlNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2ZW9EB y11rPzsoWcJp6Z9p3oRqMB8GA1UdIwQYMBaAFOWIxz5stP2zi4TuQPj5tkxQvktz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUJGRS9GMUQ1NTg3RTI1 RjExMUVFQjdCNDgwNThDNEY5QUUwMi81WWpIUG15MF9iT0xoTzVBLVBtMlRGQy1T M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZakhQbXkwX2JPTGhPNUEtUG0yVEZDLVMzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUJGRS9GMUQ1NTg3RTI1RjExMUVFQjdCNDgwNThDNEY5QUUwMi81WWpIUG15MF9i T0xoTzVBLVBtMlRGQy1TM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr2YCHoPgdbxORJ3xZX1JrmZVycWqlqUjYCu6NMVok/7D6R1/IsOs2 x0xMVGojODheq6+BCvF76PvUBw7Wr2Hb/nAx40MQWPi59vdI6udcmBGrVwTXfSmD 3vVY6HwLrHMp1fvudKLZmm/4T3ydCRMAyc8Bf9H6qUdg+eb3X+8V3CWMoMOPDMOx WwgRJII7HOVwSd/FnVCpuNMMf3VQaxevEs9q+ADxDFsn+QHTOZfGTTiQlO14yCWC pkT2ohEg3vH2GT9vCodWMq+sYvVmUlRjH3J6P5MOL+aynveP3gLTU3d6WtTBIzTG cMek7zNK3MchADg8uTmiL4VS1O5XFciQ -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:57 2025 by rpki-client