$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json) Hash identifier: SozeMxZ3Pe0HLDjLysol4HNC+n2hT5HaQQTSqQ6Y66c= Subject key identifier: 52:5A:58:D0:61:1C:6D:01:35:15:F4:61:FE:AD:85:C2:A1:50:28:45 Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft Manifest number: 21 Signing time: Wed 05 Nov 2025 07:56:58 +0000 Manifest this update: Wed 05 Nov 2025 07:56:57 +0000 Manifest next update: Wed 12 Nov 2025 07:56:57 +0000 Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: ilEQikLYHUalJqyk8Q5rudzNX7XphEbaOqxZUizpc/g=) 2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: vMZkY4LJvSskuTqDy/+VGXHXuUJS0EC4VIR/FgkiiB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: Nov 5 07:56:57 2025 GMT Not After : Nov 12 07:56:57 2025 GMT Subject: CN=690b0349-0a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:a3:a4:ea:48:ab:f5:44:f5:4f:5b:07:e1: f1:d4:db:83:9c:63:d5:43:2f:82:be:79:a7:68:c5: 21:37:46:e7:7d:9a:bc:76:90:aa:15:6e:81:d5:ef: 96:22:fa:1b:ba:06:0e:a8:1e:27:ac:20:9e:a5:1b: 6f:78:62:8f:c5:ba:d5:a8:b9:01:85:88:aa:fd:dc: 79:58:a6:32:5d:fa:02:db:f6:41:33:c1:cc:9c:e6: 2a:4f:45:a3:7f:ab:37:af:45:cc:30:ea:f3:20:ed: 02:77:59:7f:9a:c2:cd:98:20:cd:ce:fb:20:b6:c7: e7:e7:a0:2e:8d:95:29:3a:ee:2e:41:21:ce:71:64: 5e:7e:3f:83:cf:21:1c:a0:7d:bc:e9:9c:4e:54:b6: 6d:c2:86:d1:a5:ae:f8:77:46:5c:39:52:54:ed:39: 27:62:72:a5:67:fe:9e:18:11:c9:0b:b7:75:a0:0c: b9:96:e5:60:42:4f:01:fa:b1:ec:29:31:33:3d:55: 1e:a3:4c:49:83:a9:15:74:99:40:43:b9:c4:71:ef: f8:7d:e1:1a:cd:65:06:29:f7:3b:3d:69:70:c3:18: eb:09:5a:10:35:21:a6:08:5a:1a:72:be:97:82:92: c5:fc:9b:b1:82:f8:0d:6e:3a:4e:87:51:dd:b9:0e: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5A:58:D0:61:1C:6D:01:35:15:F4:61:FE:AD:85:C2:A1:50:28:45 X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:e2:6f:72:af:7b:0f:1d:c6:4c:da:2d:d0:18:b4:d5:ca:31: 72:c6:03:ec:80:de:5a:9a:77:c7:58:9b:34:9c:45:70:32:29: 39:ca:4a:45:32:61:ad:e0:92:9e:97:96:00:59:33:eb:e6:4a: 5f:96:79:f4:08:5d:dc:62:26:90:8e:18:83:2a:6b:b5:20:7a: c6:6c:a1:24:00:33:83:04:91:aa:24:31:1d:5c:29:85:a2:02: 0a:3f:61:c0:b6:cc:2d:77:6b:98:6b:cf:aa:02:5c:dc:21:0a: 1f:1e:7e:a7:9b:d6:e6:18:75:ea:bc:d9:23:2e:bd:5e:9b:9f: 64:36:8f:bc:f0:b7:4d:16:a3:68:5d:fb:1a:6f:b9:ae:5c:40: 1f:56:0b:4a:b7:27:15:57:ac:56:66:c1:63:2b:62:f3:63:58: ca:72:2f:78:86:54:67:3c:08:78:41:d3:fa:bb:b1:ce:05:34: bd:76:43:60:c1:e8:7b:9b:7f:56:d1:b7:4b:d2:bd:7d:27:98: 8b:6c:ff:0e:a6:ec:c6:2f:85:e6:5f:67:13:f5:e4:fd:76:d6: b0:13:54:0b:78:65:93:f0:a8:aa:3d:b2:d8:e2:4c:64:98:e0: e4:27:f5:a7:f2:c5:96:bf:75:19:3c:d5:45:58:28:d0:b9:10: ea:c5:d0:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFQzExMC8GA1UEBRMoMDgxMkEwOTY2MkYwQjNFMzRGMkI1QTUxQzMzRThFOTI3 MDNFNDM2OTAeFw0yNTExMDUwNzU2NTdaFw0yNTExMTIwNzU2NTdaMBgxFjAUBgNV BAMTDTY5MGIwMzQ5LTBhN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChfaOk6kir9UT1T1sH4fHU24OcY9VDL4K+eadoxSE3Rud9mrx2kKoVboHV75Yi +hu6Bg6oHiesIJ6lG294Yo/FutWouQGFiKr93HlYpjJd+gLb9kEzwcyc5ipPRaN/ qzevRcww6vMg7QJ3WX+aws2YIM3O+yC2x+fnoC6NlSk67i5BIc5xZF5+P4PPIRyg fbzpnE5Utm3ChtGlrvh3Rlw5UlTtOSdicqVn/p4YEckLt3WgDLmW5WBCTwH6sewp MTM9VR6jTEmDqRV0mUBDucRx7/h94RrNZQYp9zs9aXDDGOsJWhA1IaYIWhpyvpeC ksX8m7GC+A1uOk6HUd25DjEzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUlpY0GEc bQE1FfRh/q2FwqFQKEUwHwYDVR0jBBgwFoAUCBKglmLws+NPK1pRwz6OknA+Q2kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0VDLzI1NjM1N0M4ODdE RDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEy ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0JLZ2xtTHdzLU5QSzFwUnd6Nk9rbkEtUTJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0VDLzI1NjM1N0M4ODdERDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1O UEsxcFJ3ejZPa25BLVEyay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAXib3Kvew8dxkzaLdAYtNXKMXLGA+yA3lqad8dYmzScRXAyKTnKSkUy Ya3gkp6XlgBZM+vmSl+WefQIXdxiJpCOGIMqa7UgesZsoSQAM4MEkaokMR1cKYWi Ago/YcC2zC13a5hrz6oCXNwhCh8efqeb1uYYdeq82SMuvV6bn2Q2j7zwt00Wo2hd +xpvua5cQB9WC0q3JxVXrFZmwWMrYvNjWMpyL3iGVGc8CHhB0/q7sc4FNL12Q2DB 6Hubf1bRt0vSvX0nmIts/w6m7MYvheZfZxP15P121rATVAt4ZZPwqKo9stjiTGSY 4OQn9afyxZa/dRk81UVYKNC5EOrF0KA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:24:31 2025 by rpki-client