$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft File: L2sefhQB3gCsju23qFkNA9xUD3g.mft (raw, json) Hash identifier: FvdVcJepVJIX0K0DMPihKGdNkXWd38aaQHLHpm54DHE= Subject key identifier: C7:E8:31:6A:2F:25:9D:0B:D2:32:E3:74:59:F1:D1:20:60:A7:39:1B Authority key identifier: 2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 Certificate issuer: /CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft Manifest number: A5 Signing time: Mon 03 Nov 2025 06:16:20 +0000 Manifest this update: Mon 03 Nov 2025 06:16:20 +0000 Manifest next update: Mon 10 Nov 2025 06:16:20 +0000 Files and hashes: 1: L2sefhQB3gCsju23qFkNA9xUD3g.crl (hash: RXrCf78cFd+mj5iEm5juv4wjkJ/KVrf1ziJgM+IgUaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD38B, serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Validity Not Before: Nov 3 06:16:20 2025 GMT Not After : Nov 10 06:16:20 2025 GMT Subject: CN=690848b4-93ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:03:45:30:4f:e0:79:3b:aa:f1:0f:82:99:81: d2:87:b0:02:92:e1:86:43:a0:79:39:96:05:19:04: 8a:69:f5:e7:74:98:4c:96:c6:27:18:34:fb:3a:72: 79:5a:93:64:c0:cb:b0:4c:44:1c:62:74:73:5f:dd: 77:14:21:1c:67:5a:2c:05:f5:28:30:de:91:71:19: 2b:80:07:80:4a:1b:3f:44:ef:7d:eb:6f:a3:62:a5: 8d:07:07:a0:da:ca:56:90:ad:87:18:2a:19:d6:9d: af:b1:af:ac:95:f3:34:9c:20:7b:58:16:3d:9b:6b: 49:fc:43:b5:d0:26:1b:7a:ae:c4:d2:e0:50:f4:2c: b1:f6:89:c3:e6:9a:32:9e:9d:0c:73:86:91:51:d2: bb:99:40:96:d3:e5:58:26:4d:90:0e:a9:85:fc:65: 48:f2:d7:7a:a6:f1:e8:c4:c5:49:18:76:a0:da:28: 96:92:22:2b:cb:f3:ed:09:8d:0e:11:9a:91:24:8d: e3:0d:fd:d3:0c:b5:a3:82:c0:22:4d:0e:be:67:af: c8:72:b9:1e:03:d9:e3:8f:8a:a8:17:0d:c8:7f:4e: 7e:ab:63:39:d3:ae:41:53:a1:46:9b:a8:0e:84:ca: 43:d3:9f:28:b4:12:2b:72:fb:6a:02:b1:97:c2:cd: 53:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E8:31:6A:2F:25:9D:0B:D2:32:E3:74:59:F1:D1:20:60:A7:39:1B X509v3 Authority Key Identifier: keyid:2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:02:34:0c:cc:a5:3b:aa:c4:88:3a:82:1f:8f:dc:36:ec:e7: 1a:23:65:fc:ce:2e:1f:f7:46:af:4d:dd:59:9b:94:a5:18:b0: 7c:14:79:63:2f:83:f0:87:28:9c:c2:bf:7e:03:1b:c1:d3:31: 7c:71:ec:23:f7:0c:16:af:c8:95:64:84:20:ef:a6:54:14:ab: a2:18:23:75:1a:de:90:2d:c0:4b:cf:36:0a:60:14:ff:d8:4c: 1c:7b:d1:fa:f6:09:0e:ef:1f:7f:fa:29:c2:27:b7:9c:57:d1: 0b:a7:a8:36:52:49:c1:86:a9:fe:bb:32:d9:91:2d:72:60:d0: b0:07:23:b8:74:c7:88:2e:95:91:0b:f0:a8:75:9c:fe:cf:d8: 58:bc:28:32:a7:36:df:2f:0c:da:91:ed:f5:62:29:1b:47:f4: ed:93:83:1f:37:f3:26:4a:ba:df:4b:a2:c4:9f:0e:e3:4c:90: 84:0c:32:44:a5:2d:e0:f8:c4:ad:fd:5a:76:ae:df:34:64:1f: 95:3f:c2:b7:17:1c:3b:78:b1:62:8a:e2:f5:a0:16:00:ef:96: 20:0d:10:88:e4:e8:a3:5a:21:88:8a:ee:b3:4d:57:89:db:28: 99:29:89:f2:05:5f:95:ff:bb:4c:81:43:22:94:60:d2:e2:dc: e9:9d:82:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzOEIxMTAvBgNVBAUTKDJGNkIxRTdFMTQwMURFMDBBQzhFRURCN0E4NTkwRDAz REM1NDBGNzgwHhcNMjUxMTAzMDYxNjIwWhcNMjUxMTEwMDYxNjIwWjAYMRYwFAYD VQQDEw02OTA4NDhiNC05M2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwNFME/geTuq8Q+CmYHSh7ACkuGGQ6B5OZYFGQSKafXndJhMlsYnGDT7OnJ5 WpNkwMuwTEQcYnRzX913FCEcZ1osBfUoMN6RcRkrgAeAShs/RO9962+jYqWNBweg 2spWkK2HGCoZ1p2vsa+slfM0nCB7WBY9m2tJ/EO10CYbeq7E0uBQ9Cyx9onD5poy np0Mc4aRUdK7mUCW0+VYJk2QDqmF/GVI8td6pvHoxMVJGHag2iiWkiIry/PtCY0O EZqRJI3jDf3TDLWjgsAiTQ6+Z6/IcrkeA9njj4qoFw3If05+q2M5065BU6FGm6gO hMpD058otBIrcvtqArGXws1TKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfoMWov JZ0L0jLjdFnx0SBgpzkbMB8GA1UdIwQYMBaAFC9rHn4UAd4ArI7tt6hZDQPcVA94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM4Qi9BMUFCMkFCQ0JB ODkxMUVGOUIzMzg1MTJDNEY5QUUwMi9MMnNlZmhRQjNnQ3NqdTIzcUZrTkE5eFVE M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyc2VmaFFCM2dDc2p1MjNxRmtOQTl4VUQzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDM4Qi9BMUFCMkFCQ0JBODkxMUVGOUIzMzg1MTJDNEY5QUUwMi9MMnNlZmhRQjNn Q3NqdTIzcUZrTkE5eFVEM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgAjQMzKU7qsSIOoIfj9w27OcaI2X8zi4f90avTd1Zm5SlGLB8FHlj L4Pwhyicwr9+AxvB0zF8cewj9wwWr8iVZIQg76ZUFKuiGCN1Gt6QLcBLzzYKYBT/ 2Ewce9H69gkO7x9/+inCJ7ecV9ELp6g2UknBhqn+uzLZkS1yYNCwByO4dMeILpWR C/CodZz+z9hYvCgypzbfLwzake31YikbR/Ttk4MfN/MmSrrfS6LEnw7jTJCEDDJE pS3g+MSt/Vp2rt80ZB+VP8K3Fxw7eLFiiuL1oBYA75YgDRCI5OijWiGIiu6zTVeJ 2yiZKYnyBV+V/7tMgUMilGDS4tzpnYIu -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:29 2025 by rpki-client