$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft File: l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json) Hash identifier: rcWJ+R0Ny/ODWPbJ96H87uUtMmKZBLXxBwLK5pXXKfw= Subject key identifier: 93:C5:AB:95:37:5A:72:1A:80:B5:43:67:90:E5:CB:65:6F:53:34:9C Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B Certificate serial: 0CC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft Manifest number: 0CC1 Signing time: Tue 04 Nov 2025 18:15:54 +0000 Manifest this update: Tue 04 Nov 2025 18:15:53 +0000 Manifest next update: Tue 11 Nov 2025 18:15:53 +0000 Files and hashes: 1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: 8AhC7zrevut8Rxu+VNP/nR5Eg7bWY77ar2rH8JSolhE=) 2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: ivTBLc1IHemjBh5C9Wu0pV5fBOGymo+VSgfkbB+w5w8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3272 (0xcc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B Validity Not Before: Nov 4 18:15:53 2025 GMT Not After : Nov 11 18:15:53 2025 GMT Subject: CN=690a42d9-fa2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1b:27:34:37:bc:6d:7c:39:df:29:51:b1:e3: 58:db:b9:15:1d:23:c3:25:cf:13:c9:e3:b7:06:61: 93:7c:39:4a:d7:dc:37:64:cf:44:de:97:7b:5b:38: 9c:4b:b4:d5:ca:ac:d5:f9:cd:6b:bb:30:13:13:be: 77:39:c5:d6:5a:36:74:be:b0:ee:fe:40:70:6f:8a: 4a:6d:35:eb:ad:ce:8c:d7:0b:02:b6:25:69:2c:dc: f9:bd:8a:94:f1:4d:5a:21:bf:ed:8b:a2:de:3a:96: 17:24:8e:15:89:8f:45:4c:22:81:eb:8d:69:f9:9a: f7:a0:73:a0:11:48:69:fe:f7:7d:46:82:65:d6:1d: ff:ca:36:72:ba:af:87:ed:3c:0a:e3:e7:75:20:89: 85:b4:74:1c:e5:24:28:4a:f5:13:85:89:98:cb:80: 1c:db:7b:42:54:68:26:a5:33:df:14:4f:d9:79:45: 15:d9:2e:fb:c0:7f:ef:e6:62:61:24:15:eb:41:e1: 20:22:65:ec:2a:f8:e4:a7:6f:08:f9:2c:4c:3c:2a: 40:08:b1:4f:67:8c:21:26:a6:49:27:65:67:6e:61: 70:94:e2:92:ea:ce:2a:82:2b:6f:8a:d0:82:f2:61: aa:86:6d:93:3b:7b:f1:4e:ce:81:41:02:d1:87:66: 7c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C5:AB:95:37:5A:72:1A:80:B5:43:67:90:E5:CB:65:6F:53:34:9C X509v3 Authority Key Identifier: keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:ba:c2:d7:88:10:85:42:32:e6:40:9c:3f:84:68:74:c0:4a: 7c:5e:cc:95:6d:85:26:2a:5a:3f:ec:7f:48:06:59:81:ce:f3: 1d:57:92:47:e8:28:ce:33:44:24:87:65:80:9c:26:27:fb:f5: 44:c6:ef:83:84:16:b7:17:4e:23:70:ed:f6:f7:35:b4:d4:da: e6:b6:b9:d4:8c:29:18:4a:33:70:2c:5b:99:a5:a8:d5:84:2a: a2:3c:8c:05:17:ca:e8:a4:ac:92:0b:cc:b8:81:92:22:ff:20: 60:97:8c:f7:61:19:fa:21:6f:b0:ef:33:73:d0:44:b3:60:1f: 16:02:c1:8c:be:22:96:dd:81:32:6b:73:c4:32:8e:61:a2:29: f1:50:66:19:47:24:24:3e:c1:e9:37:19:04:e4:1d:a8:ca:3e: 31:56:71:e6:57:e4:76:f9:b3:cd:b8:35:fa:9d:ee:13:71:40: 96:df:43:b8:2f:1f:69:1b:1d:e8:5f:d0:bc:89:4b:3f:b4:75: c1:29:3e:29:fb:72:f7:a8:f7:06:bf:62:6a:92:18:a0:fa:91: 49:7f:f4:58:34:3a:4f:11:0f:2d:37:52:3c:8d:c6:e6:80:f5: 21:da:96:92:3e:9c:c1:a7:2e:cb:5c:4e:df:dd:53:1e:75:80: aa:c3:59:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0RTYxMTAvBgNVBAUTKDk3RjlCOTA2Mjg0NzY1MzA4RUMyNjg4NTVENTYzREFC OTE4NjMwNUIwHhcNMjUxMTA0MTgxNTUzWhcNMjUxMTExMTgxNTUzWjAYMRYwFAYD VQQDEw02OTBhNDJkOS1mYTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xsnNDe8bXw53ylRseNY27kVHSPDJc8TyeO3BmGTfDlK19w3ZM9E3pd7Wzic S7TVyqzV+c1ruzATE753OcXWWjZ0vrDu/kBwb4pKbTXrrc6M1wsCtiVpLNz5vYqU 8U1aIb/ti6LeOpYXJI4ViY9FTCKB641p+Zr3oHOgEUhp/vd9RoJl1h3/yjZyuq+H 7TwK4+d1IImFtHQc5SQoSvUThYmYy4Ac23tCVGgmpTPfFE/ZeUUV2S77wH/v5mJh JBXrQeEgImXsKvjkp28I+SxMPCpACLFPZ4whJqZJJ2VnbmFwlOKS6s4qgitvitCC 8mGqhm2TO3vxTs6BQQLRh2Z8TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPFq5U3 WnIagLVDZ5Dly2VvUzScMB8GA1UdIwQYMBaAFJf5uQYoR2UwjsJohV1WPauRhjBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRFNi8yQjNCMkZDRUZD NkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpUQ093bWlGWFZZOXE1R0dN RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfbTVCaWhIWlRDT3dtaUZYVlk5cTVHR01Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRFNi8yQjNCMkZDRUZDNkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpU Q093bWlGWFZZOXE1R0dNRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVusLXiBCFQjLmQJw/hGh0wEp8XsyVbYUmKlo/7H9IBlmBzvMdV5JH 6CjOM0Qkh2WAnCYn+/VExu+DhBa3F04jcO329zW01NrmtrnUjCkYSjNwLFuZpajV hCqiPIwFF8ropKySC8y4gZIi/yBgl4z3YRn6IW+w7zNz0ESzYB8WAsGMviKW3YEy a3PEMo5hoinxUGYZRyQkPsHpNxkE5B2oyj4xVnHmV+R2+bPNuDX6ne4TcUCW30O4 Lx9pGx3oX9C8iUs/tHXBKT4p+3L3qPcGv2Jqkhig+pFJf/RYNDpPEQ8tN1I8jcbm gPUh2paSPpzBpy7LXE7f3VMedYCqw1mm -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:44 2025 by rpki-client