$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json) Hash identifier: eC+9MZfCiPN+yeW/wDiGnD6Qcy1YbjFr5hRe1htwDoI= Subject key identifier: AF:0A:4C:74:C3:0C:B9:89:7E:7F:F4:10:75:E3:3F:5C:C3:9E:E0:F5 Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Certificate serial: 1220 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft Manifest number: 120B Signing time: Thu 06 Nov 2025 16:38:11 +0000 Manifest this update: Thu 06 Nov 2025 16:38:11 +0000 Manifest next update: Thu 13 Nov 2025 16:38:11 +0000 Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: U09BpubXiXxSJKjmzS2EMJwQxvatYFrW7JJCRxXtVrI=) 2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: TiqURCOWDtFV1lphAi7QXXgszXNq/kYQUGQ1WC3OpiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 16:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4640 (0x1220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Validity Not Before: Nov 6 16:38:11 2025 GMT Not After : Nov 13 16:38:11 2025 GMT Subject: CN=690ccef3-e1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:f4:11:06:b7:58:62:56:7f:8a:2a:77:98:b9: de:ca:6c:f6:53:9a:fe:0b:9e:31:65:63:91:2d:4b: 76:7d:bc:29:e8:12:28:82:a8:ed:0b:b5:6f:89:24: f4:0e:ea:ed:77:71:56:1e:97:ab:8b:9e:d9:17:47: 01:2c:2a:ee:eb:e3:09:c8:08:6f:8c:2e:97:5e:14: 8e:92:1b:83:dd:0b:e1:bf:07:91:15:c5:3e:4e:78: 4d:83:70:c2:1e:1a:79:d8:ad:24:7d:43:08:f3:2f: 17:12:89:93:38:1f:75:49:92:38:e9:49:ee:47:0b: 31:d7:b9:a0:dc:ff:b0:fe:29:b8:76:ef:14:b5:61: 9b:7d:05:4d:09:d2:60:5e:a6:a5:76:45:27:4e:2b: e8:ec:ed:9f:5f:f3:18:6e:a4:47:b8:fb:be:0a:82: 4d:7b:4b:44:cb:87:26:cf:35:09:d9:d5:f1:ed:8b: 81:a2:16:d4:8f:2d:48:55:d5:37:19:3c:8e:a3:10: 77:e6:dd:02:08:38:8b:24:34:0d:05:4a:13:bd:a2: cc:8e:b7:4c:a1:93:08:14:87:7f:bf:f1:bf:33:90: 46:03:18:7e:8a:c6:45:4f:1e:67:00:49:b7:72:2d: 1c:27:19:7d:80:e4:9e:2b:59:36:08:88:08:ee:f2: 23:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0A:4C:74:C3:0C:B9:89:7E:7F:F4:10:75:E3:3F:5C:C3:9E:E0:F5 X509v3 Authority Key Identifier: keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:00:9a:8f:ca:06:ac:ef:b0:22:95:3a:2a:89:74:b1:31:6e: 8c:6e:ce:c0:eb:4f:cc:69:70:b0:72:82:60:b9:b6:31:e7:cd: 94:15:04:ee:bd:f0:0a:99:67:91:ec:b2:a6:3a:21:a8:88:b4: 7e:5a:56:cc:7a:b0:c9:f0:e6:67:88:b2:67:c5:59:54:dd:f7: 72:a7:1b:9a:00:6b:0b:7c:5d:75:f5:5a:d2:7f:a4:ef:b5:5d: 9d:fa:e1:83:7d:e5:fb:af:7a:c7:c5:8b:3f:9d:0a:92:04:6d: 04:78:1e:f9:f2:c5:2a:40:ab:66:ad:91:7c:ad:d6:62:82:90: e8:1c:93:5e:e4:46:a6:e2:3b:83:40:4e:0b:fc:b1:44:78:22: 91:57:fe:1f:8f:81:65:a1:c3:1d:ff:ab:cf:15:29:7a:68:ce: 52:89:8d:f9:01:27:10:19:1f:77:9f:73:bb:5a:fb:ed:67:f3: 3a:b2:22:45:1b:43:57:61:77:d4:08:e8:b3:e4:56:15:eb:e4: 00:c8:20:80:fa:8f:b3:82:f4:70:2d:79:3d:a8:7a:60:78:9a: e8:ef:9e:a1:44:66:45:c1:1c:65:b7:a3:62:d1:25:97:03:2d: 80:bb:1b:0f:8f:9d:d0:10:66:53:7c:0a:da:88:d6:7c:40:c3: 2b:57:86:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKDBCOUIyQkZDMUM2QjJDMDk2Nzc2QUY3NTdEM0FGMTQ1 NDdFNDNFNzIwHhcNMjUxMTA2MTYzODExWhcNMjUxMTEzMTYzODExWjAYMRYwFAYD VQQDEw02OTBjY2VmMy1lMWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+vQRBrdYYlZ/iip3mLneymz2U5r+C54xZWORLUt2fbwp6BIogqjtC7VviST0 Durtd3FWHperi57ZF0cBLCru6+MJyAhvjC6XXhSOkhuD3QvhvweRFcU+TnhNg3DC Hhp52K0kfUMI8y8XEomTOB91SZI46UnuRwsx17mg3P+w/im4du8UtWGbfQVNCdJg XqaldkUnTivo7O2fX/MYbqRHuPu+CoJNe0tEy4cmzzUJ2dXx7YuBohbUjy1IVdU3 GTyOoxB35t0CCDiLJDQNBUoTvaLMjrdMoZMIFId/v/G/M5BGAxh+isZFTx5nAEm3 ci0cJxl9gOSeK1k2CIgI7vIjtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8KTHTD DLmJfn/0EHXjP1zDnuD1MB8GA1UdIwQYMBaAFAubK/wcaywJZ3avdX068UVH5D5y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9DRUNFOEM5QUY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxBbG5kcTkxZlRyeFJVZmtQ bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M1c3JfQnhyTEFsbmRxOTFmVHJ4UlVma1BuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjY0Ni9DRUNFOEM5QUY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxB bG5kcTkxZlRyeFJVZmtQbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1AJqPygas77AilToqiXSxMW6Mbs7A60/MaXCwcoJgubYx582UFQTu vfAKmWeR7LKmOiGoiLR+WlbMerDJ8OZniLJnxVlU3fdypxuaAGsLfF119VrSf6Tv tV2d+uGDfeX7r3rHxYs/nQqSBG0EeB758sUqQKtmrZF8rdZigpDoHJNe5Eam4juD QE4L/LFEeCKRV/4fj4FlocMd/6vPFSl6aM5SiY35AScQGR93n3O7WvvtZ/M6siJF G0NXYXfUCOiz5FYV6+QAyCCA+o+zgvRwLXk9qHpgeJro756hRGZFwRxlt6Ni0SWX Ay2AuxsPj53QEGZTfAraiNZ8QMMrV4ZA -----END CERTIFICATE-----Generated at Fri Nov 7 13:00:40 2025 by rpki-client