$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft File: 5tdlUVTja2lxFXTiB5a2gCxDtxU.mft (raw, json) Hash identifier: alnOuCJGubr73ZyNirP2uIlDUk7glqU+u0JJJSg4TpQ= Subject key identifier: 71:A5:FC:F5:08:10:84:74:14:6A:A4:2F:20:6A:14:E9:1B:1C:55:3D Authority key identifier: E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15 Certificate issuer: /CN=A9118EDB/serialNumber=E6D7655154E36B69711574E20796B6802C43B715 Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft Manifest number: 052B Signing time: Sun 02 Nov 2025 23:30:16 +0000 Manifest this update: Sun 02 Nov 2025 23:30:16 +0000 Manifest next update: Sun 09 Nov 2025 23:30:16 +0000 Files and hashes: 1: 5tdlUVTja2lxFXTiB5a2gCxDtxU.crl (hash: QzHNCjrnkGtjSPAAhRBRRDe4/jjzCkpEQgDklteWbTs=) 2: BA4D01561DE011ECB872BC27C4F9AE02.roa (hash: wf1/Eq3D00+NNmg7EFhhzne2/Whu9vsX8s0Y7UfB8bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118EDB, serialNumber=E6D7655154E36B69711574E20796B6802C43B715 Validity Not Before: Nov 2 23:30:16 2025 GMT Not After : Nov 9 23:30:16 2025 GMT Subject: CN=6907e988-ba25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:c9:c8:47:fc:6e:a7:2a:47:d7:de:32:7e: 76:2a:bb:d7:e9:a5:09:41:61:c7:26:6c:ca:46:e2: 45:ad:c9:4f:05:da:51:53:bb:7d:62:bd:b8:be:e9: 84:bf:74:8a:3d:c6:72:2f:78:75:af:f4:59:42:1a: ad:15:3b:a1:7f:43:9b:55:ac:7f:87:d6:74:be:4a: ee:6a:82:da:21:16:c7:05:6c:cd:23:6f:1b:7e:62: ea:64:8a:97:1d:5a:24:37:2e:7a:0f:3e:4b:b3:6a: b8:d6:44:35:5e:fd:4f:bf:4c:bb:1f:ae:79:e0:76: f6:78:53:45:e8:46:f5:8c:2a:21:39:f3:f1:ec:11: 97:95:2a:9a:f3:da:77:aa:ff:0b:cc:00:f9:33:de: 53:4a:c4:49:6d:11:7e:fc:b8:9f:9d:6a:4d:7e:fa: 1b:02:92:d6:02:28:82:d4:97:1c:0e:b2:25:55:1c: 9a:e1:db:91:ce:6e:8d:26:fc:8f:c5:e8:60:33:ab: 2d:ae:6a:30:69:74:9c:48:8d:29:0c:ee:a5:b8:81: ab:4b:ac:d2:bf:3e:50:c8:26:a0:aa:09:0e:28:f2: 38:e7:7e:1a:87:6a:f6:6a:76:24:5e:0e:bf:74:bd: 08:48:16:33:41:44:08:cb:ef:fb:d7:71:81:be:9c: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A5:FC:F5:08:10:84:74:14:6A:A4:2F:20:6A:14:E9:1B:1C:55:3D X509v3 Authority Key Identifier: keyid:E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fa:54:25:dd:b6:96:ae:e6:b9:89:65:f0:f7:f1:d5:d4:ea: 32:aa:3f:d9:d3:02:52:e0:1b:5f:c3:30:29:3b:21:5c:33:b9: 66:98:db:62:5c:8d:56:45:5c:41:d2:c7:e5:56:3c:4b:f8:f7: 91:81:a3:89:a5:95:fe:41:db:97:6a:0f:c6:17:5d:76:5b:2a: 99:b1:ff:95:9f:a8:c7:43:65:3e:7d:bf:53:b5:8b:d4:a3:91: ad:63:83:3b:d7:7c:df:25:b5:48:3a:f0:0f:c5:f0:61:66:db: 41:bf:a3:fa:7e:11:2a:20:75:0d:d6:1d:4b:4e:ce:2e:a9:56: c4:92:7a:bc:11:40:24:d7:17:45:13:44:e7:67:0c:16:ea:78: c5:4d:68:2c:53:25:f1:17:bd:75:cb:38:e5:8f:dd:8c:22:47: ea:e9:b7:e5:c6:b6:5e:5c:de:2c:a7:d1:32:81:b8:d6:5b:07: df:f0:cb:c8:2f:df:e5:2f:da:da:3c:87:34:cf:92:19:1c:b7: 48:2d:58:d7:bc:4e:34:88:e8:04:f5:11:cf:e4:35:d1:af:69: 85:0c:06:b0:09:2a:0e:5a:56:cd:34:51:79:3a:15:b3:e6:34: 06:f5:4e:d8:6c:f9:0b:ff:fb:03:23:04:e0:d4:16:50:0e:f9: c2:db:6d:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFREIxMTAvBgNVBAUTKEU2RDc2NTUxNTRFMzZCNjk3MTE1NzRFMjA3OTZCNjgw MkM0M0I3MTUwHhcNMjUxMTAyMjMzMDE2WhcNMjUxMTA5MjMzMDE2WjAYMRYwFAYD VQQDEw02OTA3ZTk4OC1iYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVnJyEf8bqcqR9feMn52KrvX6aUJQWHHJmzKRuJFrclPBdpRU7t9Yr24vumE v3SKPcZyL3h1r/RZQhqtFTuhf0ObVax/h9Z0vkruaoLaIRbHBWzNI28bfmLqZIqX HVokNy56Dz5Ls2q41kQ1Xv1Pv0y7H6554Hb2eFNF6Eb1jCohOfPx7BGXlSqa89p3 qv8LzAD5M95TSsRJbRF+/LifnWpNfvobApLWAiiC1JccDrIlVRya4duRzm6NJvyP xehgM6strmowaXScSI0pDO6luIGrS6zSvz5QyCagqgkOKPI4534ah2r2anYkXg6/ dL0ISBYzQUQIy+/713GBvpwlNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGl/PUI EIR0FGqkLyBqFOkbHFU9MB8GA1UdIwQYMBaAFObXZVFU42tpcRV04geWtoAsQ7cV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEVEQi8zMDlCRTZCRTFE REQxMUVDODgzQjQ0MjNDNEY5QUUwMi81dGRsVVZUamEybHhGWFRpQjVhMmdDeER0 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV0ZGxVVlRqYTJseEZYVGlCNWEyZ0N4RHR4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEVEQi8zMDlCRTZCRTFEREQxMUVDODgzQjQ0MjNDNEY5QUUwMi81dGRsVVZUamEy bHhGWFRpQjVhMmdDeER0eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe+lQl3baWrua5iWXw9/HV1Ooyqj/Z0wJS4BtfwzApOyFcM7lmmNti XI1WRVxB0sflVjxL+PeRgaOJpZX+QduXag/GF112WyqZsf+Vn6jHQ2U+fb9TtYvU o5GtY4M713zfJbVIOvAPxfBhZttBv6P6fhEqIHUN1h1LTs4uqVbEknq8EUAk1xdF E0TnZwwW6njFTWgsUyXxF711yzjlj92MIkfq6bflxrZeXN4sp9EygbjWWwff8MvI L9/lL9raPIc0z5IZHLdILVjXvE40iOgE9RHP5DXRr2mFDAawCSoOWlbNNFF5OhWz 5jQG9U7YbPkL//sDIwTg1BZQDvnC222L -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:04 2025 by rpki-client