$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft File: RbGOIJ7P3aXO14z52YENYR5tQSQ.mft (raw, json) Hash identifier: 3SQvvE4lUTObJZ7JegWvALwTe/C6sYwehPYmn9jZ5Vc= Subject key identifier: CE:D0:C2:34:67:F6:2D:A5:FC:9A:EE:27:83:8C:19:D9:11:47:BC:AA Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 Certificate issuer: /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft Manifest number: 5A Signing time: Mon 03 Nov 2025 07:10:20 +0000 Manifest this update: Mon 03 Nov 2025 07:10:19 +0000 Manifest next update: Mon 10 Nov 2025 07:10:19 +0000 Files and hashes: 1: RbGOIJ7P3aXO14z52YENYR5tQSQ.crl (hash: tHSmjI+jXVlDSUnw63Wpi+SGlsVyvpjZC28+2h/53VY=) 2: C100F8FE385D11F0B165166CC4F9AE02.roa (hash: X4yO+2uZWy3hhNHPg2Botaoo1uuwNwgNw2Z5oY+nYVw=) 3: 0B5EA7DA323B11F0A65FFB36C4F9AE02.roa (hash: Q/Q2sUKmgFU8L5pYFoikcLW7y4sJztj/yUCaAVnv9mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Validity Not Before: Nov 3 07:10:19 2025 GMT Not After : Nov 10 07:10:19 2025 GMT Subject: CN=6908555b-662a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:a5:5c:0f:22:66:b1:0d:0f:2e:83:4d:93: 49:7f:65:7f:d5:7c:d4:8b:ab:9e:75:fa:02:e5:a6: 2f:36:92:a4:8c:57:c5:1f:bc:72:34:2b:6f:93:64: 60:b7:82:9d:23:ad:b7:25:f1:40:0b:95:5b:f7:85: 57:cf:f9:c2:35:16:f8:76:da:fc:51:3d:a0:cc:79: 0a:f3:86:b6:43:27:e7:18:31:e8:d5:bb:f0:3d:56: ba:da:47:ca:e7:28:e3:e0:e6:12:7d:c4:b4:74:60: 43:33:9d:c6:f9:6f:c4:a5:46:ae:14:04:83:9b:5e: dd:e4:09:ed:01:06:c8:24:5a:48:b8:3a:07:fe:9a: 82:68:88:3e:80:21:8a:fa:fe:95:8e:c6:7e:4d:e6: 09:d7:7e:5b:e7:13:43:43:d8:02:4c:04:df:dc:1e: 06:b2:75:a0:ce:d0:94:8d:fb:54:70:8a:37:72:f1: ca:ee:c1:0c:75:03:7e:41:61:61:0e:81:a3:e8:3a: 52:3c:4d:df:95:53:5c:b3:fa:8d:09:d8:09:c8:22: 1f:19:29:39:64:83:88:08:7f:05:76:79:b9:06:eb: fe:3a:33:38:c8:ec:c1:6b:b1:9b:7e:78:6d:ab:3b: dd:90:ed:01:be:3f:19:86:21:39:41:27:ea:28:3b: 3b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D0:C2:34:67:F6:2D:A5:FC:9A:EE:27:83:8C:19:D9:11:47:BC:AA X509v3 Authority Key Identifier: keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9a:05:7b:f1:12:08:3f:ce:a0:4f:1d:fc:bc:10:53:52:7b: 18:09:8a:e4:34:92:b3:09:08:3e:f7:bf:93:08:60:63:5c:b0: 72:24:03:7c:f3:45:39:b3:80:54:00:59:a8:cc:eb:21:28:ea: 05:25:ce:fc:82:e5:d2:b9:a6:a8:a9:17:0e:ae:79:99:2f:d3: 60:60:ed:f0:ba:4c:8a:42:87:98:54:c8:71:c3:f7:49:f1:7a: 5d:06:12:b0:a2:c5:ce:d5:4b:a3:bb:7f:be:56:c5:eb:0e:0f: c4:7d:67:c3:68:e4:f0:c2:16:ac:be:8e:95:cb:6d:80:ef:54: 25:b4:56:b8:70:9f:69:ae:69:b8:ce:dc:3c:17:77:27:4b:1b: 38:b7:59:2b:b0:8b:a0:c8:72:c2:2a:24:51:89:e9:58:36:fb: 62:41:77:81:ac:57:dc:db:46:b5:50:97:f7:25:01:9d:bd:b3: a9:e8:20:b9:f6:9b:63:22:10:18:7d:7c:08:9d:67:ce:1e:42: ea:00:73:d4:68:58:20:08:49:0c:a0:f3:10:84:c7:7e:8d:29: 2e:42:55:a2:93:a6:39:2a:fc:70:dd:ee:5d:fe:b0:26:e2:b3: c3:e7:3c:c9:00:e2:94:73:28:ff:3d:01:a0:08:9d:cd:ad:6a: e2:91:aa:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0JCMDExMC8GA1UEBRMoNDVCMThFMjA5RUNGRERBNUNFRDc4Q0Y5RDk4MTBENjEx RTZENDEyNDAeFw0yNTExMDMwNzEwMTlaFw0yNTExMTAwNzEwMTlaMBgxFjAUBgNV BAMTDTY5MDg1NTViLTY2MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6RKVcDyJmsQ0PLoNNk0l/ZX/VfNSLq551+gLlpi82kqSMV8UfvHI0K2+TZGC3 gp0jrbcl8UALlVv3hVfP+cI1Fvh22vxRPaDMeQrzhrZDJ+cYMejVu/A9VrraR8rn KOPg5hJ9xLR0YEMzncb5b8SlRq4UBIObXt3kCe0BBsgkWki4Ogf+moJoiD6AIYr6 /pWOxn5N5gnXflvnE0ND2AJMBN/cHgaydaDO0JSN+1Rwijdy8cruwQx1A35BYWEO gaPoOlI8Td+VU1yz+o0J2AnIIh8ZKTlkg4gIfwV2ebkG6/46MzjI7MFrsZt+eG2r O92Q7QG+PxmGITlBJ+ooOzu5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUztDCNGf2 LaX8mu4ng4wZ2RFHvKowHwYDVR0jBBgwFoAURbGOIJ7P3aXO14z52YENYR5tQSQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQkIwLzlGRkRBQjc2MzIz QTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FYTzE0ejUyWUVOWVI1dFFT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUmJHT0lKN1AzYVhPMTR6NTJZRU5ZUjV0UVNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QkIwLzlGRkRBQjc2MzIzQTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FY TzE0ejUyWUVOWVI1dFFTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC2aBXvxEgg/zqBPHfy8EFNSexgJiuQ0krMJCD73v5MIYGNcsHIkA3zz RTmzgFQAWajM6yEo6gUlzvyC5dK5pqipFw6ueZkv02Bg7fC6TIpCh5hUyHHD90nx el0GErCixc7VS6O7f75WxesOD8R9Z8No5PDCFqy+jpXLbYDvVCW0Vrhwn2muabjO 3DwXdydLGzi3WSuwi6DIcsIqJFGJ6Vg2+2JBd4GsV9zbRrVQl/clAZ29s6noILn2 m2MiEBh9fAidZ84eQuoAc9RoWCAISQyg8xCEx36NKS5CVaKTpjkq/HDd7l3+sCbi s8PnPMkA4pRzKP89AaAInc2tauKRqoU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:42 2025 by rpki-client