$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft File: 5jLTjFoywhfG7nHVLe-fOMoWbFE.mft (raw, json) Hash identifier: +kj9sZ8DIBmnHHyyOhv+ljIZch+rFG4tPp4R/wqn2Vo= Subject key identifier: DF:47:B1:35:FF:42:AD:7A:EB:62:4D:97:A4:64:DC:5F:E0:E3:0F:82 Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft Manifest number: 022D Signing time: Wed 05 Nov 2025 02:18:33 +0000 Manifest this update: Wed 05 Nov 2025 02:18:33 +0000 Manifest next update: Wed 12 Nov 2025 02:18:33 +0000 Files and hashes: 1: 5jLTjFoywhfG7nHVLe-fOMoWbFE.crl (hash: znozs6B9sPrIqRVAmb6r50j/YzyTh1TI69zM0g2GYfA=) 2: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (hash: jfVElp3g+n0aU5oT234ivZ8E0gCIv4CEX7tbrZ0128M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911486F, serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Validity Not Before: Nov 5 02:18:33 2025 GMT Not After : Nov 12 02:18:33 2025 GMT Subject: CN=690ab3f9-9411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2e:57:a9:c7:16:6e:58:c4:8f:85:47:e8:bc: 62:f7:a8:c3:7f:7e:40:05:57:ab:32:b2:2c:cb:ab: 5a:1c:93:93:25:a9:d6:20:8a:12:61:bc:98:ae:f4: c8:75:52:d6:f5:96:fc:32:95:5f:98:91:70:60:3e: 00:24:1d:ed:af:78:b5:1c:12:ca:15:06:a1:49:a7: c7:63:51:0c:a7:b6:9d:4c:60:b8:53:ff:d8:2a:d0: c2:90:be:98:d8:08:41:8b:2f:ee:d5:87:e7:a8:33: 48:03:60:03:37:ca:fa:a1:60:06:b2:cc:f4:34:3d: 15:bf:47:94:44:6b:35:11:6a:f3:ed:0b:f5:85:80: 26:0b:65:78:75:2e:52:c8:26:ec:0a:94:48:a5:03: 85:d3:ca:03:0a:3c:09:43:0a:44:a1:54:76:28:07: 3d:ad:9a:7f:6d:b4:4e:f7:ac:fc:9f:de:d6:5f:cd: d3:19:82:1a:f1:40:3f:f7:a6:a5:e5:c2:39:87:3b: 6a:35:dd:6d:8a:74:9c:cf:5f:3e:2f:ee:db:39:e9: a4:42:49:8b:e2:d3:a3:ec:e1:db:3d:d4:ec:7d:2f: 65:36:fc:4e:3b:e1:14:1a:b2:ab:9b:ad:b2:8e:17: a5:d6:82:5b:28:1b:17:4e:49:1b:ed:2d:11:ff:a3: 0b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:47:B1:35:FF:42:AD:7A:EB:62:4D:97:A4:64:DC:5F:E0:E3:0F:82 X509v3 Authority Key Identifier: keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d3:fe:f3:02:77:64:e3:3f:2c:7f:c3:47:4a:5b:95:f8:4d: 1a:ca:d4:d4:45:24:ce:8f:0a:8a:53:39:0c:8d:6f:80:2b:81: 45:87:68:05:a7:97:33:35:3a:39:25:80:50:29:2d:87:b2:d8: 6f:43:36:0b:c6:fd:e8:c3:2f:63:24:2c:bf:d5:b5:be:22:7c: 8a:a8:0b:9a:37:a9:16:4c:f8:e6:1b:ef:78:97:6f:e6:ec:fc: e9:cd:80:75:d2:3e:a6:f5:2f:28:8a:e7:e6:dd:91:51:12:f7: e9:09:a3:f9:37:4f:cb:8f:4e:d0:49:ea:48:7b:3d:d5:d1:f9: 15:10:d7:72:17:d4:d9:64:24:55:e9:96:05:fc:a2:17:9d:0d: 2f:cb:3e:a8:84:66:8a:de:5f:e3:e8:43:68:64:04:bb:88:bc: 44:3c:0f:25:f5:75:e2:86:22:4e:4f:b0:09:f9:c5:e2:dc:08: b9:0f:3c:c1:b8:42:45:4a:26:1f:09:8c:0f:2b:59:60:d6:5a: 0d:d2:bd:2c:d3:78:fe:ff:a1:2c:97:03:d9:fa:ed:f1:88:af: ca:86:4a:25:9c:51:8a:6f:61:e9:7e:4a:c9:da:4f:98:6f:9f: cf:1e:fb:80:dd:b6:46:70:4a:36:8c:15:b2:f4:76:92:49:a6: 62:dc:61:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4NkYxMTAvBgNVBAUTKEU2MzJEMzhDNUEzMkMyMTdDNkVFNzFENTJERUY5RjM4 Q0ExNjZDNTEwHhcNMjUxMTA1MDIxODMzWhcNMjUxMTEyMDIxODMzWjAYMRYwFAYD VQQDEw02OTBhYjNmOS05NDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4i5XqccWbljEj4VH6Lxi96jDf35ABVerMrIsy6taHJOTJanWIIoSYbyYrvTI dVLW9Zb8MpVfmJFwYD4AJB3tr3i1HBLKFQahSafHY1EMp7adTGC4U//YKtDCkL6Y 2AhBiy/u1YfnqDNIA2ADN8r6oWAGssz0ND0Vv0eURGs1EWrz7Qv1hYAmC2V4dS5S yCbsCpRIpQOF08oDCjwJQwpEoVR2KAc9rZp/bbRO96z8n97WX83TGYIa8UA/96al 5cI5hztqNd1tinScz18+L+7bOemkQkmL4tOj7OHbPdTsfS9lNvxOO+EUGrKrm62y jhel1oJbKBsXTkkb7S0R/6MLZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9HsTX/ Qq1662JNl6Rk3F/g4w+CMB8GA1UdIwQYMBaAFOYy04xaMsIXxu5x1S3vnzjKFmxR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg2Ri8yMkNGMzQ0ODg2 NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdoZkc3bkhWTGUtZk9Nb1di RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVqTFRqRm95d2hmRzduSFZMZS1mT01vV2JGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDg2Ri8yMkNGMzQ0ODg2NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdo Zkc3bkhWTGUtZk9Nb1diRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn0/7zAndk4z8sf8NHSluV+E0aytTURSTOjwqKUzkMjW+AK4FFh2gF p5czNTo5JYBQKS2HsthvQzYLxv3owy9jJCy/1bW+InyKqAuaN6kWTPjmG+94l2/m 7PzpzYB10j6m9S8oiufm3ZFREvfpCaP5N0/Lj07QSepIez3V0fkVENdyF9TZZCRV 6ZYF/KIXnQ0vyz6ohGaK3l/j6ENoZAS7iLxEPA8l9XXihiJOT7AJ+cXi3Ai5DzzB uEJFSiYfCYwPK1lg1loN0r0s03j+/6EslwPZ+u3xiK/KhkolnFGKb2HpfkrJ2k+Y b5/PHvuA3bZGcEo2jBWy9HaSSaZi3GFv -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:22 2025 by rpki-client