$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json) Hash identifier: 1MW8RZDMWefbw4jTOV2x6/e3vi1/3THCtXbwcAcfoXk= Subject key identifier: 9E:5F:80:4C:CE:C2:3E:64:C0:1A:4E:25:1B:B1:CB:05:43:53:75:E8 Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Certificate serial: 050E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft Manifest number: 0502 Signing time: Tue 04 Nov 2025 23:46:37 +0000 Manifest this update: Tue 04 Nov 2025 23:46:37 +0000 Manifest next update: Tue 11 Nov 2025 23:46:37 +0000 Files and hashes: 1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: bykIa9K3oGBHSxGCCL2OvTiir/qxe05JQkYsMUBd5U8=) 2: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: BHc0YO4uerOV3pChxVjG7O544zd2LrVw+gOJhxCdrB0=) 3: 1295B5943FA611EF94664041C4F9AE02.roa (hash: FuWrvkmDIg3mxhyAWWbi/ukBRQacmBTwsE71FX0nX8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1294 (0x50e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Validity Not Before: Nov 4 23:46:37 2025 GMT Not After : Nov 11 23:46:37 2025 GMT Subject: CN=690a905d-2b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5d:ed:f8:99:0b:6a:65:31:2e:1e:7b:10:08: 22:9b:9d:c0:39:56:6b:3a:78:74:86:9b:9f:0b:07: 6d:12:44:46:7f:06:42:af:ef:00:7c:23:bc:67:3e: d1:1a:2d:2c:80:e9:a0:46:7c:ad:29:78:44:76:b4: d8:4d:6c:4c:8d:cb:64:43:21:cf:3d:21:ae:49:ee: f9:6f:6e:b0:b0:d6:f8:51:9e:3d:78:79:8d:f8:38: cc:03:54:23:58:49:d7:13:66:7a:c1:24:dd:da:92: 81:1e:c0:37:ce:27:43:84:e8:0d:71:db:34:9a:0a: 1e:43:9a:08:df:88:b4:34:61:90:e2:b4:2d:df:21: 1e:51:84:12:63:85:2e:57:1e:bd:a8:22:b7:01:87: d3:b3:f1:e8:e0:17:99:e6:1a:f0:46:19:8a:d1:14: b0:ea:3c:ce:53:9c:d6:3e:3a:7d:39:cf:92:86:fe: d3:98:6c:cc:13:22:b0:96:59:6d:8e:a6:4d:fa:49: 0e:5f:8d:8e:d6:21:10:26:a7:f1:1c:2b:c3:f7:8f: 44:bc:e0:fc:fc:59:ec:35:47:1a:3c:bd:58:8f:31: 5d:d7:37:de:e8:2d:22:54:45:ac:04:42:b9:c5:11: 1a:b1:0c:d0:cc:11:e9:b5:2a:cc:df:5d:be:c2:b0: 29:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5F:80:4C:CE:C2:3E:64:C0:1A:4E:25:1B:B1:CB:05:43:53:75:E8 X509v3 Authority Key Identifier: keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:79:e4:b5:37:76:f9:5f:f3:9b:96:77:d3:81:95:e6:29:39: 59:2d:82:a6:ae:ee:71:44:f3:4c:02:da:40:35:62:b1:cc:bb: b8:f3:51:85:96:56:83:99:ab:d6:a9:e4:db:c3:5e:d2:29:69: af:80:5d:89:03:9f:d4:44:0c:35:c7:9c:03:20:67:26:66:35: fc:64:5e:da:e3:fb:50:6b:92:a7:d9:ea:d0:40:14:cb:11:36: 13:14:bd:ca:65:99:98:1b:2d:95:ee:4d:8a:e2:f7:de:64:2f: a6:2b:d2:63:5a:f9:eb:1a:d9:e0:1b:f4:e1:c6:f6:a2:a3:cf: 26:c9:ca:ef:89:12:2c:20:14:d0:dc:5c:a3:fa:d6:f6:14:cb: 33:c6:38:01:04:46:fc:67:1e:83:4d:bd:a1:e3:84:b0:d4:76: 63:cc:06:df:87:c3:17:fd:15:9b:86:04:d8:df:04:fe:6c:db: d3:50:d9:ab:62:15:76:04:df:1b:8b:1f:23:da:41:9d:7f:8c: fe:f2:15:5f:26:43:04:63:63:51:0c:ae:b0:8b:7c:89:3c:88: 2f:11:91:85:c2:96:6e:68:ce:f7:02:e2:65:89:62:82:99:7c: a8:79:5b:fb:d2:57:87:b3:97:f3:ac:83:50:f2:91:b8:9a:48: 7f:80:6d:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFDQUMxMTAvBgNVBAUTKDkxRTY3OTcyMUVEMUUwOTI3RUJCN0U0NjFDODA1ODBE MjM5MzU5MkEwHhcNMjUxMTA0MjM0NjM3WhcNMjUxMTExMjM0NjM3WjAYMRYwFAYD VQQDEw02OTBhOTA1ZC0yYjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA113t+JkLamUxLh57EAgim53AOVZrOnh0hpufCwdtEkRGfwZCr+8AfCO8Zz7R Gi0sgOmgRnytKXhEdrTYTWxMjctkQyHPPSGuSe75b26wsNb4UZ49eHmN+DjMA1Qj WEnXE2Z6wSTd2pKBHsA3zidDhOgNcds0mgoeQ5oI34i0NGGQ4rQt3yEeUYQSY4Uu Vx69qCK3AYfTs/Ho4BeZ5hrwRhmK0RSw6jzOU5zWPjp9Oc+Shv7TmGzMEyKwlllt jqZN+kkOX42O1iEQJqfxHCvD949EvOD8/FnsNUcaPL1YjzFd1zfe6C0iVEWsBEK5 xREasQzQzBHptSrM312+wrApbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5fgEzO wj5kwBpOJRuxywVDU3XoMB8GA1UdIwQYMBaAFJHmeXIe0eCSfrt+RhyAWA0jk1kq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUNBQy9CM0JEQTU2NDMx RDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRKSi11MzVHSElCWURTT1RX U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWjVjaDdSNEpKLXUzNUdISUJZRFNPVFdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUNBQy9CM0JEQTU2NDMxRDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRK Si11MzVHSElCWURTT1RXU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaeeS1N3b5X/OblnfTgZXmKTlZLYKmru5xRPNMAtpANWKxzLu481GF llaDmavWqeTbw17SKWmvgF2JA5/URAw1x5wDIGcmZjX8ZF7a4/tQa5Kn2erQQBTL ETYTFL3KZZmYGy2V7k2K4vfeZC+mK9JjWvnrGtngG/Thxvaio88mycrviRIsIBTQ 3Fyj+tb2FMszxjgBBEb8Zx6DTb2h44Sw1HZjzAbfh8MX/RWbhgTY3wT+bNvTUNmr YhV2BN8bix8j2kGdf4z+8hVfJkMEY2NRDK6wi3yJPIgvEZGFwpZuaM73AuJliWKC mXyoeVv70leHs5fzrINQ8pG4mkh/gG1N -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:44 2025 by rpki-client