$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft File: 05fnjG3TxpaFEzQVMschiNd1Z68.mft (raw, json) Hash identifier: vxN7Qha2tly8VTqg5JBv7BjexCFJFSdDK9uSH33pH/Y= Subject key identifier: 9C:02:4B:A1:1F:EA:57:FB:47:EE:7D:3A:08:A7:15:BD:84:41:E0:46 Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF Certificate issuer: /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Certificate serial: 030E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft Manifest number: 0309 Signing time: Mon 03 Nov 2025 01:07:16 +0000 Manifest this update: Mon 03 Nov 2025 01:07:16 +0000 Manifest next update: Mon 10 Nov 2025 01:07:16 +0000 Files and hashes: 1: 05fnjG3TxpaFEzQVMschiNd1Z68.crl (hash: 3H+lTAOxinxPf65dXmYAimgJmjhDW2aDELV46nOaqCU=) 2: DE183F1CF46611EC815F7283C4F9AE02.roa (hash: 9MdpJxrwdV0aU1f/zX8n/hykvTdPQn1kKe0kWScV57Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 782 (0x30e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3CA7, serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Validity Not Before: Nov 3 01:07:16 2025 GMT Not After : Nov 10 01:07:16 2025 GMT Subject: CN=69080044-5d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:bf:6c:d9:66:e2:1b:1b:ac:c5:9e:c3:29: ad:31:61:06:e7:12:d5:11:f4:e7:32:1b:10:70:c8: e3:d2:e5:33:75:35:93:9b:ee:a4:35:55:0e:d9:b3: 39:35:a5:bc:3e:70:07:a9:3a:08:22:f4:64:f8:c3: f5:c2:ac:16:1e:95:16:6d:9e:34:aa:0b:50:8e:5c: 76:03:31:af:80:e6:13:99:ff:85:3d:a2:b1:2b:cf: 82:62:c2:e1:ee:5a:98:d1:ac:08:11:d4:df:ef:96: f3:b4:26:76:4a:3c:cf:08:4f:11:43:80:e6:7b:d3: 6f:fe:c5:fa:88:c6:52:87:d7:42:67:ab:6a:60:d7: da:c7:da:a2:ee:7a:1a:5d:c9:0f:62:ce:df:63:0e: 99:74:3a:f8:f6:50:10:f1:05:f7:9b:b0:80:d3:43: f7:ea:39:56:0a:10:9f:43:b3:0f:da:b0:00:f0:31: 97:b5:43:87:c6:fc:d3:be:d6:9e:e4:4f:2c:b9:7a: 44:fa:c8:22:e7:5e:93:74:2e:fe:f9:72:22:c0:09: 00:63:d8:12:69:32:55:30:bc:86:21:ef:91:a8:11: fb:ef:e6:b1:aa:10:a4:4c:d3:c9:6a:bd:6e:3a:ca: e4:b8:dd:24:8b:b9:d0:d1:c8:24:31:fd:b4:bb:94: a0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:02:4B:A1:1F:EA:57:FB:47:EE:7D:3A:08:A7:15:BD:84:41:E0:46 X509v3 Authority Key Identifier: keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:8e:e2:a2:f5:e4:cf:81:80:ab:31:ab:0c:14:c9:de:01:cc: 66:b0:01:b1:c1:c9:d5:a1:cb:75:7f:57:7a:1a:76:f1:02:e6: 03:00:62:a2:58:ca:e1:b1:9f:f6:70:6e:6f:a0:56:c5:75:88: b3:b2:3d:62:b9:12:fe:bb:5f:25:bb:6d:18:3c:fa:9e:5f:60: 58:69:93:bc:78:fe:e1:22:71:68:db:9a:80:c4:f8:0b:0a:25: 39:8c:38:81:72:72:0e:31:b7:6a:4f:6d:e3:a9:32:f7:80:5a: 99:9e:b2:a3:a1:d1:4b:9c:46:88:8e:30:04:99:b2:18:c9:9c: a0:ae:f6:9b:7a:55:4b:60:08:d4:42:19:8d:be:af:88:9e:7b: 77:af:d0:8b:97:66:4a:90:8f:9b:f2:98:57:92:cc:3e:15:e1: d7:91:9d:55:ec:d7:86:10:b6:ec:fc:c7:cc:0e:d5:24:1d:44: 82:c3:0f:64:a8:7f:1a:d4:99:6f:23:ae:7a:4f:d8:67:9a:97: 54:0a:ce:78:ca:2d:b7:60:4f:4b:b3:dc:60:ef:85:83:14:61: 6d:13:37:93:a8:ae:e4:06:16:c2:29:cc:33:19:4f:4d:c7:09: 2b:df:fa:44:4e:d2:0a:c7:ef:aa:af:5b:f0:5e:f7:d4:bf:5c: b3:9e:31:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNDQTcxMTAvBgNVBAUTKEQzOTdFNzhDNkREM0M2OTY4NTEzMzQxNTMyQzcyMTg4 RDc3NTY3QUYwHhcNMjUxMTAzMDEwNzE2WhcNMjUxMTEwMDEwNzE2WjAYMRYwFAYD VQQDEw02OTA4MDA0NC01ZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkS/bNlm4hsbrMWewymtMWEG5xLVEfTnMhsQcMjj0uUzdTWTm+6kNVUO2bM5 NaW8PnAHqToIIvRk+MP1wqwWHpUWbZ40qgtQjlx2AzGvgOYTmf+FPaKxK8+CYsLh 7lqY0awIEdTf75bztCZ2SjzPCE8RQ4Dme9Nv/sX6iMZSh9dCZ6tqYNfax9qi7noa XckPYs7fYw6ZdDr49lAQ8QX3m7CA00P36jlWChCfQ7MP2rAA8DGXtUOHxvzTvtae 5E8suXpE+sgi516TdC7++XIiwAkAY9gSaTJVMLyGIe+RqBH77+axqhCkTNPJar1u OsrkuN0ki7nQ0cgkMf20u5SgTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwCS6Ef 6lf7R+59OginFb2EQeBGMB8GA1UdIwQYMBaAFNOX54xt08aWhRM0FTLHIYjXdWev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0NBNy8zRjBFMEUwNkY0 NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhwYUZFelFWTXNjaGlOZDFa NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1Zm5qRzNUeHBhRkV6UVZNc2NoaU5kMVo2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0NBNy8zRjBFMEUwNkY0NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhw YUZFelFWTXNjaGlOZDFaNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2juKi9eTPgYCrMasMFMneAcxmsAGxwcnVoct1f1d6GnbxAuYDAGKi WMrhsZ/2cG5voFbFdYizsj1iuRL+u18lu20YPPqeX2BYaZO8eP7hInFo25qAxPgL CiU5jDiBcnIOMbdqT23jqTL3gFqZnrKjodFLnEaIjjAEmbIYyZygrvabelVLYAjU QhmNvq+Innt3r9CLl2ZKkI+b8phXksw+FeHXkZ1V7NeGELbs/MfMDtUkHUSCww9k qH8a1JlvI656T9hnmpdUCs54yi23YE9Ls9xg74WDFGFtEzeTqK7kBhbCKcwzGU9N xwkr3/pETtIKx++qr1vwXvfUv1yznjEF -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:40 2025 by rpki-client