$ rpki-client -vvf rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft File: 5EL5lVmsG6h-4TSLL8evCiL_smE.mft (raw, json) Hash identifier: 6QKpRzyt36dmAO7lj6OtzGQBfYQ1bb3lF8BU2q29Ykk= Subject key identifier: B9:78:0C:98:7B:08:C6:02:DE:E2:BC:7E:85:21:9E:B8:2A:C3:50:2F Authority key identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 Certificate issuer: /CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Certificate serial: 2B43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft Manifest number: 2B33 Signing time: Tue 04 Nov 2025 03:09:21 +0000 Manifest this update: Tue 04 Nov 2025 03:09:21 +0000 Manifest next update: Tue 11 Nov 2025 03:09:21 +0000 Files and hashes: 1: 5EL5lVmsG6h-4TSLL8evCiL_smE.crl (hash: TZC1a1lTP0UpSALEmuT5DUGlt3SzuyPKwNtpwUCc2oA=) 2: 5452AC309B4911EB9952394CC4F9AE02.roa (hash: 3EBZNTlM2pSnC9HcQ0kJddDB9AhHcVhBduQrWy64qKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 03:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11075 (0x2b43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143336, serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Validity Not Before: Nov 4 03:09:21 2025 GMT Not After : Nov 11 03:09:21 2025 GMT Subject: CN=69096e61-cc40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:92:90:c9:03:fd:af:fa:bc:aa:09:d8:49:b0: 48:c9:3d:f9:fc:cc:e2:c1:7b:bf:f1:e6:b3:8b:14: d4:92:3d:62:79:69:c5:7f:54:b8:f8:dc:8b:4e:86: 76:52:ef:8f:fa:0e:c4:21:d8:c7:22:e8:07:80:f3: 0e:34:17:39:84:45:03:17:3d:c0:ac:6d:8f:f6:71: 7b:39:5e:00:24:04:a3:e6:53:67:82:a2:bf:37:32: 93:6a:62:c3:50:69:1a:ee:48:1a:ad:ac:26:50:42: 3a:94:e4:95:fb:de:36:ea:6f:e9:9c:3e:f0:52:cf: df:bd:ba:04:f3:76:b7:68:dd:04:27:b0:ed:5c:10: 02:44:ab:a3:fb:15:8c:11:f5:8d:1d:a9:b5:ac:04: 18:db:8e:8a:55:b9:1f:82:a4:e0:f3:33:4c:b2:fd: 3d:98:4f:0f:1d:4f:6b:76:97:68:5f:13:63:9b:5a: 1d:d2:f4:cb:bb:cf:e5:ea:c9:1f:d8:07:4a:a0:2c: 6b:4b:d4:d2:6d:f1:ef:8c:3e:bb:1a:88:71:cb:ea: 47:a4:1a:a5:88:36:90:07:33:64:e7:98:bd:d4:2f: 6a:db:5d:43:4d:bf:c7:64:d7:29:b1:24:2c:9b:ef: 1d:0f:8b:c9:1c:5e:33:9b:06:95:38:c1:8f:56:55: 21:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:78:0C:98:7B:08:C6:02:DE:E2:BC:7E:85:21:9E:B8:2A:C3:50:2F X509v3 Authority Key Identifier: keyid:E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:64:0b:86:dd:39:6b:01:c2:f0:95:fc:05:bd:1c:5a:a2:a4: bb:be:a9:41:0e:4e:b9:41:6d:46:03:f7:b3:1a:db:9b:f0:e5: a9:16:e1:65:af:90:79:74:3f:ec:09:32:fc:83:d9:ba:ac:dc: d3:ca:5c:89:59:45:be:dd:83:fe:bd:ac:45:f5:57:ad:e2:2f: d7:6b:e8:e3:4b:a5:c7:a4:d9:ee:5d:03:69:06:61:ad:68:8f: 64:1c:e9:6f:4e:02:47:20:70:85:73:2a:06:ca:56:2b:b4:38: e0:5c:d4:4d:0c:54:e4:2c:48:36:a5:44:44:54:d8:c1:32:e6: 25:8d:45:5f:84:1e:0f:03:dc:47:29:8a:a2:e8:71:ce:e7:ca: ee:da:67:bd:03:d3:79:50:4f:a9:7c:29:20:f9:de:43:a2:95: 32:4e:82:55:45:20:ca:27:12:1b:8c:09:6e:ec:e6:17:23:e1: b1:fd:27:93:bd:14:0d:ab:a4:d9:d0:89:b0:59:23:1b:4a:3e: 9f:a3:77:d5:c3:6b:08:37:1f:44:85:d9:59:3c:ed:d3:fd:76: 67:84:13:48:47:df:58:e3:ad:cb:08:2b:36:af:08:2b:b8:32: 41:9b:25:32:4a:73:45:49:3e:c1:32:30:09:f3:9f:4f:07:82: 09:e0:1c:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzMzYxMTAvBgNVBAUTKEU0NDJGOTk1NTlBQzFCQTg3RUUxMzQ4QjJGQzdBRjBB MjJGRkIyNjEwHhcNMjUxMTA0MDMwOTIxWhcNMjUxMTExMDMwOTIxWjAYMRYwFAYD VQQDEw02OTA5NmU2MS1jYzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8pKQyQP9r/q8qgnYSbBIyT35/MziwXu/8eazixTUkj1ieWnFf1S4+NyLToZ2 Uu+P+g7EIdjHIugHgPMONBc5hEUDFz3ArG2P9nF7OV4AJASj5lNngqK/NzKTamLD UGka7kgarawmUEI6lOSV+9426m/pnD7wUs/fvboE83a3aN0EJ7DtXBACRKuj+xWM EfWNHam1rAQY246KVbkfgqTg8zNMsv09mE8PHU9rdpdoXxNjm1od0vTLu8/l6skf 2AdKoCxrS9TSbfHvjD67Gohxy+pHpBqliDaQBzNk55i91C9q211DTb/HZNcpsSQs m+8dD4vJHF4zmwaVOMGPVlUhPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLl4DJh7 CMYC3uK8foUhnrgqw1AvMB8GA1UdIwQYMBaAFORC+ZVZrBuofuE0iy/Hrwoi/7Jh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMzNi84RUU3RkMxRTA4 NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2aC00VFNMTDhldkNpTF9z bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFTDVsVm1zRzZoLTRUU0xMOGV2Q2lMX3NtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzMzNi84RUU3RkMxRTA4NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2 aC00VFNMTDhldkNpTF9zbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDZAuG3TlrAcLwlfwFvRxaoqS7vqlBDk65QW1GA/ezGtub8OWpFuFl r5B5dD/sCTL8g9m6rNzTylyJWUW+3YP+vaxF9Vet4i/Xa+jjS6XHpNnuXQNpBmGt aI9kHOlvTgJHIHCFcyoGylYrtDjgXNRNDFTkLEg2pUREVNjBMuYljUVfhB4PA9xH KYqi6HHO58ru2me9A9N5UE+pfCkg+d5DopUyToJVRSDKJxIbjAlu7OYXI+Gx/SeT vRQNq6TZ0ImwWSMbSj6fo3fVw2sINx9EhdlZPO3T/XZnhBNIR99Y463LCCs2rwgr uDJBmyUySnNFST7BMjAJ859PB4IJ4BzC -----END CERTIFICATE-----Generated at Tue Nov 4 12:46:54 2025 by rpki-client