$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json) Hash identifier: nw9TYAxrlPps5DtQlRSB3RYSHdD/A+TeljMNYPwZUb0= Subject key identifier: 81:EA:28:2D:E7:80:16:B2:36:00:9A:F6:FF:4F:83:C9:52:D3:C5:39 Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Certificate serial: 121F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft Manifest number: 120A Signing time: Tue 04 Nov 2025 17:14:49 +0000 Manifest this update: Tue 04 Nov 2025 17:14:49 +0000 Manifest next update: Tue 11 Nov 2025 17:14:48 +0000 Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: lvhfY1TwKcUBzFj0ls1FlaWoMs8FeM2K97JWvfpS3qA=) 2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: TiqURCOWDtFV1lphAi7QXXgszXNq/kYQUGQ1WC3OpiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4639 (0x121f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Validity Not Before: Nov 4 17:14:49 2025 GMT Not After : Nov 11 17:14:48 2025 GMT Subject: CN=690a3489-dde2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4b:ab:f2:8e:ef:6b:5d:a0:18:14:1e:4c:9b: 2f:1a:c0:c2:49:2a:8b:36:cc:fc:a7:dc:a6:0b:e4: 73:37:f7:50:2e:0b:bd:b0:bb:ca:52:14:97:c2:54: a1:6d:56:8a:aa:79:00:7c:44:2e:db:8b:e6:d8:8e: 71:97:00:b6:fa:68:47:cf:82:cd:86:00:3b:cc:f5: 01:b2:d3:f5:e0:b4:a7:f0:d3:2f:89:44:72:6f:1b: 4e:91:f1:80:6b:5e:c8:01:c6:00:e5:65:10:83:56: 8a:94:77:ad:63:88:2e:0b:f7:a0:c8:d6:0b:ab:b8: cf:10:bf:11:90:bc:3f:6f:ce:a6:fa:66:37:59:75: b5:60:95:cb:b3:e5:63:35:c8:ff:30:0d:c5:3c:47: ee:d4:51:20:10:50:aa:3d:05:a5:c8:5f:aa:6e:77: db:18:ca:ce:c0:ea:ee:e7:cf:c9:d2:79:00:00:ab: 6c:a7:37:20:89:44:e5:0b:19:16:72:cf:ad:4a:f9: 45:d1:45:33:d9:c6:18:44:d2:90:18:52:fe:84:ec: 46:ce:3c:6e:5b:12:3d:84:8f:18:d8:4e:d9:af:21: 0b:76:91:13:3c:db:c1:74:cd:2c:c0:65:9d:42:6f: 54:35:c2:98:39:c0:48:e2:22:1d:ee:95:fd:e4:f3: 42:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EA:28:2D:E7:80:16:B2:36:00:9A:F6:FF:4F:83:C9:52:D3:C5:39 X509v3 Authority Key Identifier: keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f5:c7:af:6f:58:e7:a4:b5:eb:20:75:bc:ad:e2:9e:6b:c2: e0:c3:51:4b:21:de:9a:5a:24:7a:6c:eb:b0:b1:1f:3b:e4:f3: 1d:9f:9e:66:8e:81:eb:cc:da:ab:3e:f3:cd:f4:2d:a8:5b:a0: b6:25:1e:0a:ee:7b:3c:67:9d:07:4b:e7:d3:be:a1:92:87:cd: ba:de:90:02:e7:f7:a3:67:29:de:57:48:bd:f9:d4:8b:20:fc: 40:e4:42:cd:09:1c:8c:07:15:54:52:09:52:d3:62:b9:20:81: 33:1f:a3:67:2f:1a:9b:f3:ff:9f:7d:19:88:fb:41:d9:be:f6: 16:e7:2b:81:2a:6a:fa:d2:a6:e4:c6:95:bf:91:37:a5:52:cc: 76:58:61:d3:85:95:d2:e0:40:87:6e:00:38:46:89:b6:a0:c9: 7c:89:fe:c4:f1:f9:c9:a8:d2:7e:9b:7d:3f:53:18:f2:7d:36: a9:ac:56:7c:eb:c1:a2:81:fb:cb:e5:63:a7:a7:9f:7a:cb:73: f2:8c:fd:d6:fe:67:e4:0a:3e:91:17:61:15:c7:c2:4f:2e:44: 1b:ef:bd:1b:cb:e1:db:3a:1b:bf:41:fc:a7:71:9c:1e:da:59: d2:28:85:cf:b3:be:df:b9:90:af:f5:00:22:a7:62:f5:3a:14: 2a:ff:c7:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKDBCOUIyQkZDMUM2QjJDMDk2Nzc2QUY3NTdEM0FGMTQ1 NDdFNDNFNzIwHhcNMjUxMTA0MTcxNDQ5WhcNMjUxMTExMTcxNDQ4WjAYMRYwFAYD VQQDEw02OTBhMzQ4OS1kZGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0ur8o7va12gGBQeTJsvGsDCSSqLNsz8p9ymC+RzN/dQLgu9sLvKUhSXwlSh bVaKqnkAfEQu24vm2I5xlwC2+mhHz4LNhgA7zPUBstP14LSn8NMviURybxtOkfGA a17IAcYA5WUQg1aKlHetY4guC/egyNYLq7jPEL8RkLw/b86m+mY3WXW1YJXLs+Vj Ncj/MA3FPEfu1FEgEFCqPQWlyF+qbnfbGMrOwOru58/J0nkAAKtspzcgiUTlCxkW cs+tSvlF0UUz2cYYRNKQGFL+hOxGzjxuWxI9hI8Y2E7ZryELdpETPNvBdM0swGWd Qm9UNcKYOcBI4iId7pX95PNCBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHqKC3n gBayNgCa9v9Pg8lS08U5MB8GA1UdIwQYMBaAFAubK/wcaywJZ3avdX068UVH5D5y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9DRUNFOEM5QUY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxBbG5kcTkxZlRyeFJVZmtQ bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M1c3JfQnhyTEFsbmRxOTFmVHJ4UlVma1BuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjY0Ni9DRUNFOEM5QUY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxB bG5kcTkxZlRyeFJVZmtQbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP9cevb1jnpLXrIHW8reKea8Lgw1FLId6aWiR6bOuwsR875PMdn55m joHrzNqrPvPN9C2oW6C2JR4K7ns8Z50HS+fTvqGSh8263pAC5/ejZyneV0i9+dSL IPxA5ELNCRyMBxVUUglS02K5IIEzH6NnLxqb8/+ffRmI+0HZvvYW5yuBKmr60qbk xpW/kTelUsx2WGHThZXS4ECHbgA4Rom2oMl8if7E8fnJqNJ+m30/UxjyfTaprFZ8 68GigfvL5WOnp596y3PyjP3W/mfkCj6RF2EVx8JPLkQb770by+HbOhu/QfyncZwe 2lnSKIXPs77fuZCv9QAip2L1OhQq/8fx -----END CERTIFICATE-----Generated at Wed Nov 5 01:43:05 2025 by rpki-client