$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft File: l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json) Hash identifier: CITgRVO5tNpumnUUgzBuAsMzvChHQfZzAUxFk2SmM/8= Subject key identifier: 1A:5A:F6:AB:D6:97:8C:70:7E:DA:40:B8:FF:8C:D0:FC:CC:F7:EE:D3 Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B Certificate serial: 0CC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft Manifest number: 0CC0 Signing time: Sun 02 Nov 2025 18:10:15 +0000 Manifest this update: Sun 02 Nov 2025 18:10:15 +0000 Manifest next update: Sun 09 Nov 2025 18:10:15 +0000 Files and hashes: 1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: Iy+BjoUxlaDfbsketPRLb1EoQcGviRMIhOaknP6RVAs=) 2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: ivTBLc1IHemjBh5C9Wu0pV5fBOGymo+VSgfkbB+w5w8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3271 (0xcc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B Validity Not Before: Nov 2 18:10:15 2025 GMT Not After : Nov 9 18:10:15 2025 GMT Subject: CN=69079e87-ddb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:c9:3f:0c:2b:4f:04:5d:5b:44:17:80:e4: 16:8b:13:55:72:66:6e:72:f9:ba:1c:44:b9:85:39: 4f:02:89:83:b9:c3:98:ff:60:74:ae:b1:1c:a3:2b: ed:75:c0:95:8e:0e:12:fb:0f:ea:04:07:8b:27:c4: 9f:a9:23:ba:46:42:45:96:71:59:d8:96:c6:6d:91: 9b:8e:a2:62:8d:83:c2:cd:c2:7b:28:3c:23:44:98: cd:f4:18:a6:80:92:16:bd:5e:5b:7c:a3:bc:e4:71: 5c:43:13:87:78:33:42:c9:4e:5b:19:c7:7d:aa:d6: 0b:0f:85:93:19:fe:b1:d8:4c:d3:15:7b:f4:b7:7c: 9f:00:32:60:b6:b2:e9:00:7b:d6:dc:f0:d6:11:42: e9:22:b8:31:68:be:f9:90:63:b2:25:38:47:b2:1f: ae:5d:64:26:c2:91:db:8b:68:0f:c2:77:18:6f:3e: a0:d8:24:14:4d:5d:0a:94:bc:db:83:fd:f6:e9:d0: 75:60:08:0f:55:2c:0f:af:7d:56:70:6a:1c:c1:93: 13:e1:85:6f:2d:da:ee:0c:a5:b1:fb:56:e2:16:fa: 4c:48:64:bf:af:21:8d:84:ed:f4:1e:be:e6:4e:69: 2c:55:d4:0e:db:be:04:c2:7a:c6:58:46:39:ab:e1: 0f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5A:F6:AB:D6:97:8C:70:7E:DA:40:B8:FF:8C:D0:FC:CC:F7:EE:D3 X509v3 Authority Key Identifier: keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:41:2f:46:e5:94:68:0c:a5:c2:35:0f:5c:f0:43:72:56:30: 52:5f:a7:5f:96:b3:55:64:1d:12:fe:8b:3c:9e:7d:d4:ba:b6: 24:22:39:87:e9:06:1f:55:4e:78:cd:8d:40:e4:9f:b7:6d:2b: a0:9a:d7:e3:80:35:5d:bb:57:b4:67:81:42:30:c1:f3:46:35: 82:89:15:62:e7:a2:78:6f:96:7d:33:b0:dc:be:eb:49:e3:64: 87:c1:5d:6f:fd:26:90:3f:05:87:59:08:8c:4f:c3:c1:a8:cd: 94:26:35:90:0c:96:b4:2d:a4:66:34:97:dc:76:4f:31:2f:93: 46:58:e6:2c:e0:45:20:23:1a:d2:43:a6:15:83:ab:9f:8c:31: b9:84:8c:8e:98:5b:bc:57:19:ff:b9:43:b9:dd:ac:24:22:7d: 28:cf:10:e3:48:f8:ca:fb:b4:22:b5:78:0f:7b:53:56:19:0d: b7:a8:26:f4:31:5c:45:51:f1:98:00:59:f5:fc:62:8c:9d:e3: 8e:91:be:bb:1d:ba:30:70:f1:14:63:8f:68:7d:7c:cf:a1:a2: 5a:ce:8c:bf:d3:14:5c:7b:96:97:39:ae:c1:8f:1c:88:b8:09: b7:bf:89:20:0d:e6:04:f7:a7:a3:83:86:92:fd:00:e9:c1:d5: cb:a8:8a:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0RTYxMTAvBgNVBAUTKDk3RjlCOTA2Mjg0NzY1MzA4RUMyNjg4NTVENTYzREFC OTE4NjMwNUIwHhcNMjUxMTAyMTgxMDE1WhcNMjUxMTA5MTgxMDE1WjAYMRYwFAYD VQQDEw02OTA3OWU4Ny1kZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/nJPwwrTwRdW0QXgOQWixNVcmZucvm6HES5hTlPAomDucOY/2B0rrEcoyvt dcCVjg4S+w/qBAeLJ8SfqSO6RkJFlnFZ2JbGbZGbjqJijYPCzcJ7KDwjRJjN9Bim gJIWvV5bfKO85HFcQxOHeDNCyU5bGcd9qtYLD4WTGf6x2EzTFXv0t3yfADJgtrLp AHvW3PDWEULpIrgxaL75kGOyJThHsh+uXWQmwpHbi2gPwncYbz6g2CQUTV0KlLzb g/326dB1YAgPVSwPr31WcGocwZMT4YVvLdruDKWx+1biFvpMSGS/ryGNhO30Hr7m TmksVdQO274EwnrGWEY5q+EPEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpa9qvW l4xwftpAuP+M0PzM9+7TMB8GA1UdIwQYMBaAFJf5uQYoR2UwjsJohV1WPauRhjBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRFNi8yQjNCMkZDRUZD NkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpUQ093bWlGWFZZOXE1R0dN RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfbTVCaWhIWlRDT3dtaUZYVlk5cTVHR01Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRFNi8yQjNCMkZDRUZDNkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpU Q093bWlGWFZZOXE1R0dNRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKQS9G5ZRoDKXCNQ9c8ENyVjBSX6dflrNVZB0S/os8nn3UurYkIjmH 6QYfVU54zY1A5J+3bSugmtfjgDVdu1e0Z4FCMMHzRjWCiRVi56J4b5Z9M7DcvutJ 42SHwV1v/SaQPwWHWQiMT8PBqM2UJjWQDJa0LaRmNJfcdk8xL5NGWOYs4EUgIxrS Q6YVg6ufjDG5hIyOmFu8Vxn/uUO53awkIn0ozxDjSPjK+7QitXgPe1NWGQ23qCb0 MVxFUfGYAFn1/GKMneOOkb67HbowcPEUY49ofXzPoaJazoy/0xRce5aXOa7BjxyI uAm3v4kgDeYE96ejg4aS/QDpwdXLqIpA -----END CERTIFICATE-----Generated at Tue Nov 4 12:38:58 2025 by rpki-client