$ rpki-client -vvf rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft File: nB5FqAhMMR3VAEShc2BejuPEzJU.mft (raw, json) Hash identifier: r5hwYPdAnbiO8cB/lzX0XsAw2CGFO57p6XFTAphx6YY= Subject key identifier: 1D:B7:0E:AF:78:44:34:47:D4:AC:97:5B:15:C7:A6:46:88:95:32:3F Authority key identifier: 9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 Certificate issuer: /CN=A91491CC/serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft Manifest number: 17 Signing time: Wed 05 Nov 2025 08:04:53 +0000 Manifest this update: Wed 05 Nov 2025 08:04:53 +0000 Manifest next update: Wed 12 Nov 2025 08:04:53 +0000 Files and hashes: 1: nB5FqAhMMR3VAEShc2BejuPEzJU.crl (hash: gtCjeVSzXjye6LS+fPZrgJD65xerCydi04M1QHHVUzI=) 2: 31E9004E9A0F11F0BC057E7DC4F9AE02.roa (hash: lVwKB14i6OpwyRz8FsA7PbQdrXdHjD1P3S/SDqyzydg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91491CC, serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Validity Not Before: Nov 5 08:04:53 2025 GMT Not After : Nov 12 08:04:53 2025 GMT Subject: CN=690b0525-d4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8c:10:19:26:09:e6:59:f8:fa:2d:65:86:56: 43:b9:80:a9:56:c2:02:4d:f6:0d:2b:da:52:62:b8: 56:68:72:b6:e8:98:c3:f8:fd:99:19:72:5d:da:0f: a1:8e:80:ca:41:de:fc:f4:df:ca:8a:22:cf:06:dd: de:50:ad:dd:47:04:79:7b:af:2c:a8:ff:1e:bf:98: 1e:2a:67:58:b7:76:3a:1b:18:d5:b4:6d:b7:39:8e: e2:d5:e5:14:67:fc:90:db:09:af:84:53:e1:5b:db: 8d:ff:a1:91:de:fc:8f:43:5d:0b:8b:f5:d2:06:2e: b5:e7:be:5c:d8:04:90:31:2a:f7:3f:3d:71:d8:58: 01:a2:62:21:61:23:71:25:98:cc:73:f1:98:89:c8: 7b:c9:8a:6f:e4:e5:51:9f:fd:68:57:f6:5d:2f:85: 9a:51:23:4b:67:0d:40:84:24:01:fe:1a:c2:8d:a3: bf:c5:df:1e:18:1e:f6:31:59:94:82:44:3d:92:f2: 8f:74:8f:8a:e2:30:c1:2b:17:00:c5:90:5a:ab:f8: 05:5e:8f:9d:9f:51:41:7c:b5:cb:8a:84:56:65:c6: b9:9d:9f:86:f6:f5:3f:9d:f3:1b:0b:55:da:40:d3: 39:bd:ac:3a:2d:5c:14:b5:7b:58:cc:f0:90:fe:c2: fe:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B7:0E:AF:78:44:34:47:D4:AC:97:5B:15:C7:A6:46:88:95:32:3F X509v3 Authority Key Identifier: keyid:9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:60:52:cc:1a:9c:01:9c:48:c9:d7:22:3c:f1:7e:0d:c0:d4: 85:e8:4a:b5:f0:fb:b0:ee:8c:60:80:86:46:31:b7:73:20:4a: 8c:28:58:f2:c7:c2:1a:a7:60:ae:b1:b8:f8:55:36:fa:d7:a2: b1:bf:ea:03:0f:8e:0a:7d:c8:ff:8c:53:84:ea:5d:65:b5:44: 50:9d:05:b8:1d:20:7c:1d:c3:3b:1e:b5:a5:be:fc:22:32:fc: 55:3c:ef:8f:49:76:d8:b8:b1:a9:e5:12:fb:b0:dc:28:d9:24: 30:66:43:70:a5:95:63:40:8c:5f:4d:34:4d:8d:3d:db:86:46: 24:b1:91:05:03:f1:60:f3:66:36:87:9a:30:81:06:86:b9:bd: 7c:99:63:c1:9c:ab:85:d5:da:05:d7:e2:53:ab:3b:f2:39:00: a6:68:cc:c7:f1:ea:37:c4:69:af:ef:98:ae:87:2f:08:97:f5: 7a:ce:e0:eb:d9:65:23:26:5b:dc:cc:e4:e6:95:10:cf:68:90: 14:7f:e7:82:4e:d0:2f:19:78:77:ca:4c:35:0b:9c:ee:6e:8a: 7f:1c:52:ff:f3:c8:b1:09:d7:d7:16:8c:69:08:d3:44:9e:86: 2c:98:2a:34:95:e5:dc:7f:0e:d7:fe:38:88:f4:dc:61:6d:1c: b8:eb:83:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OTFDQzExMC8GA1UEBRMoOUMxRTQ1QTgwODRDMzExREQ1MDA0NEExNzM2MDVFOEVF M0M0Q0M5NTAeFw0yNTExMDUwODA0NTNaFw0yNTExMTIwODA0NTNaMBgxFjAUBgNV BAMTDTY5MGIwNTI1LWQ0ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8jBAZJgnmWfj6LWWGVkO5gKlWwgJN9g0r2lJiuFZocrbomMP4/ZkZcl3aD6GO gMpB3vz038qKIs8G3d5Qrd1HBHl7ryyo/x6/mB4qZ1i3djobGNW0bbc5juLV5RRn /JDbCa+EU+Fb243/oZHe/I9DXQuL9dIGLrXnvlzYBJAxKvc/PXHYWAGiYiFhI3El mMxz8ZiJyHvJim/k5VGf/WhX9l0vhZpRI0tnDUCEJAH+GsKNo7/F3x4YHvYxWZSC RD2S8o90j4riMMErFwDFkFqr+AVej52fUUF8tcuKhFZlxrmdn4b29T+d8xsLVdpA 0zm9rDotXBS1e1jM8JD+wv7VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHbcOr3hE NEfUrJdbFcemRoiVMj8wHwYDVR0jBBgwFoAUnB5FqAhMMR3VAEShc2BejuPEzJUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5MUNDLzlERjA3RTQ0OUEw RTExRjA4OUM4OEI3Q0M0RjlBRTAyL25CNUZxQWhNTVIzVkFFU2hjMkJlanVQRXpK VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbkI1RnFBaE1NUjNWQUVTaGMyQmVqdVBFekpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 MUNDLzlERjA3RTQ0OUEwRTExRjA4OUM4OEI3Q0M0RjlBRTAyL25CNUZxQWhNTVIz VkFFU2hjMkJlanVQRXpKVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKhgUswanAGcSMnXIjzxfg3A1IXoSrXw+7DujGCAhkYxt3MgSowoWPLH whqnYK6xuPhVNvrXorG/6gMPjgp9yP+MU4TqXWW1RFCdBbgdIHwdwzsetaW+/CIy /FU8749Jdti4sanlEvuw3CjZJDBmQ3CllWNAjF9NNE2NPduGRiSxkQUD8WDzZjaH mjCBBoa5vXyZY8Gcq4XV2gXX4lOrO/I5AKZozMfx6jfEaa/vmK6HLwiX9XrO4OvZ ZSMmW9zM5OaVEM9okBR/54JO0C8ZeHfKTDULnO5uin8cUv/zyLEJ19cWjGkI00Se hiyYKjSV5dx/Dtf+OIj03GFtHLjrg2k= -----END CERTIFICATE-----Generated at Wed Nov 5 09:34:28 2025 by rpki-client