$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft File: m505clsn1CAoE4UWNJL_dfFRE9o.mft (raw, json) Hash identifier: 1z9Hk18PzY3mQZiVT8phvrICrlkKgIPRdNHvkbohrEU= Subject key identifier: 46:7E:38:61:C4:6A:23:85:EF:DC:F5:52:D6:34:96:1E:BB:B8:92:87 Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA Certificate issuer: /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft Manifest number: 3B Signing time: Fri 07 Nov 2025 02:47:32 +0000 Manifest this update: Fri 07 Nov 2025 02:47:32 +0000 Manifest next update: Fri 14 Nov 2025 02:47:32 +0000 Files and hashes: 1: m505clsn1CAoE4UWNJL_dfFRE9o.crl (hash: 2pjGwvdkz12FkXOCGMCTOrD2/l1Rkx2LrzY5sLCtc8U=) 2: D24370A6638211F087594469C4F9AE02.roa (hash: BC9hUQT1LjynnO8EIFYzWbutVI812gfFy3AK+b9ATvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 02:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA Validity Not Before: Nov 7 02:47:32 2025 GMT Not After : Nov 14 02:47:32 2025 GMT Subject: CN=690d5dc4-8902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:23:4a:e5:ff:aa:99:e5:a5:bd:21:60:93: e8:fc:a2:5e:53:3f:0f:28:56:19:22:30:c2:04:f8: 92:39:15:57:37:0c:a7:ca:97:42:79:b9:09:e8:8a: 1f:91:de:96:b9:f2:9b:28:a8:0d:29:6b:a4:33:98: d9:48:80:f3:61:eb:20:98:8d:84:7e:d2:0f:db:68: 97:15:f7:54:d8:b2:28:ef:de:59:04:54:31:40:e9: af:1f:02:65:43:75:96:c3:5d:df:70:ba:0b:c8:15: 2d:05:c4:9a:82:99:cb:81:51:11:73:56:19:eb:36: f2:bc:56:85:fd:01:b9:9d:81:f1:8b:02:ff:7a:de: 23:f7:db:c7:2d:d5:28:36:a0:f1:1f:dc:53:67:f6: 6d:a4:25:6b:ad:cf:28:24:c8:68:d2:71:a8:ef:2c: f1:ed:2d:1f:49:29:f5:da:67:9c:40:89:12:53:2c: 19:02:09:0c:ab:a7:10:ce:fa:fb:36:eb:0d:0e:db: 6b:2d:e5:e4:4f:49:15:7c:6f:16:e4:1f:96:fb:50: ef:59:21:2b:e3:c8:29:0f:bf:3c:68:00:d3:0e:b1: 31:43:40:3f:8e:11:0c:b7:e4:ec:1b:3a:f7:c6:83: 2f:d3:6d:68:ac:64:c6:a0:2d:e3:cf:75:73:32:89: e9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7E:38:61:C4:6A:23:85:EF:DC:F5:52:D6:34:96:1E:BB:B8:92:87 X509v3 Authority Key Identifier: keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:c9:ee:aa:f0:a9:af:e7:1f:5e:8a:cf:ad:58:91:a4:70:d9: b6:1a:38:ed:09:cf:61:85:c4:47:d9:68:3c:78:d9:00:0f:1a: 9f:69:2d:0c:fe:c8:71:cb:66:21:11:23:e8:40:30:c3:cc:ba: 56:f9:9c:32:2d:fe:9b:7d:a1:30:78:ab:ea:b2:c5:a9:9b:69: 5f:f6:e2:0a:af:e9:94:46:ea:52:1f:c9:26:8d:fa:fa:45:43: 1a:50:27:64:d3:51:84:a3:25:68:f7:c2:82:ee:95:d8:81:07: 25:4b:1b:2a:96:3e:e1:62:03:0b:f3:bf:38:b1:c3:8a:92:db: 74:e5:10:fc:47:ee:12:7a:5e:58:7b:c0:d3:b6:20:1f:dc:51: 47:67:ec:d1:89:82:02:0b:9c:01:2d:60:50:00:9e:d1:f8:ac: 19:f8:4b:06:a5:e5:ed:b8:8c:99:8b:66:64:a1:3a:3a:44:64: 3c:fb:77:b1:ff:65:b0:a7:81:17:83:ad:de:4f:38:80:b6:f7: 94:7f:ff:9d:d0:f3:cf:2f:35:a9:03:72:0a:ff:75:4c:7f:b3: 67:8b:17:47:6e:50:6f:81:16:b5:cf:27:44:43:4c:be:79:3e: d4:a2:80:a2:14:5c:cc:db:d2:3a:93:4b:77:4e:61:13:08:6a: eb:3c:86:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoOUI5RDM5NzI1QjI3RDQyMDI4MTM4NTE2MzQ5MkZGNzVG MTUxMTNEQTAeFw0yNTExMDcwMjQ3MzJaFw0yNTExMTQwMjQ3MzJaMBgxFjAUBgNV BAMTDTY5MGQ1ZGM0LTg5MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/FyNK5f+qmeWlvSFgk+j8ol5TPw8oVhkiMMIE+JI5FVc3DKfKl0J5uQnoih+R 3pa58psoqA0pa6QzmNlIgPNh6yCYjYR+0g/baJcV91TYsijv3lkEVDFA6a8fAmVD dZbDXd9wugvIFS0FxJqCmcuBURFzVhnrNvK8VoX9AbmdgfGLAv963iP328ct1Sg2 oPEf3FNn9m2kJWutzygkyGjScajvLPHtLR9JKfXaZ5xAiRJTLBkCCQyrpxDO+vs2 6w0O22st5eRPSRV8bxbkH5b7UO9ZISvjyCkPvzxoANMOsTFDQD+OEQy35OwbOvfG gy/TbWisZMagLePPdXMyiekbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURn44YcRq I4Xv3PVS1jSWHru4kocwHwYDVR0jBBgwFoAUm505clsn1CAoE4UWNJL/dfFRE9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzYyMjZDOTM2NjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNBb0U0VVdOSkxfZGZGUkU5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbTUwNWNsc24xQ0FvRTRVV05KTF9kZkZSRTlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RUYyLzYyMjZDOTM2NjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNB b0U0VVdOSkxfZGZGUkU5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJHJ7qrwqa/nH16Kz61YkaRw2bYaOO0Jz2GFxEfZaDx42QAPGp9pLQz+ yHHLZiERI+hAMMPMulb5nDIt/pt9oTB4q+qyxambaV/24gqv6ZRG6lIfySaN+vpF QxpQJ2TTUYSjJWj3woLuldiBByVLGyqWPuFiAwvzvzixw4qS23TlEPxH7hJ6Xlh7 wNO2IB/cUUdn7NGJggILnAEtYFAAntH4rBn4Swal5e24jJmLZmShOjpEZDz7d7H/ ZbCngReDrd5POIC295R//53Q888vNakDcgr/dUx/s2eLF0duUG+BFrXPJ0RDTL55 PtSigKIUXMzb0jqTS3dOYRMIaus8hlE= -----END CERTIFICATE-----Generated at Fri Nov 7 20:40:51 2025 by rpki-client