$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft File: M5IbTpqJQaWGu92a-LGIWo8iX6I.mft (raw, json) Hash identifier: gBz9zAU4AgYKAw6yGRdtj4gfcBntDhBaSBsL66TgDCY= Subject key identifier: 35:37:7D:C9:1C:08:34:04:AD:14:D5:2A:A4:24:CB:F0:15:6E:3D:41 Authority key identifier: 33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 Certificate issuer: /CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Certificate serial: 34D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft Manifest number: 34D5 Signing time: Sun 02 Nov 2025 15:01:58 +0000 Manifest this update: Sun 02 Nov 2025 15:01:57 +0000 Manifest next update: Sun 09 Nov 2025 15:01:57 +0000 Files and hashes: 1: M5IbTpqJQaWGu92a-LGIWo8iX6I.crl (hash: ULvrtHCNJr0KLBK+CnRfBQgoruHSZmEVsqTaSaASOms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13525 (0x34d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195A3A, serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Validity Not Before: Nov 2 15:01:57 2025 GMT Not After : Nov 9 15:01:57 2025 GMT Subject: CN=69077265-c950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:bc:20:da:e1:cc:73:47:1c:57:d8:89:1f: 1b:ba:4e:28:02:33:8b:42:0d:7b:51:95:db:3c:92: 98:c8:92:6a:7f:87:9d:08:f2:31:6f:8d:87:65:3e: cb:52:a2:59:74:11:2e:c9:dd:7e:a2:65:b8:a8:71: 14:15:6e:88:05:63:f8:68:63:5c:9f:e2:f5:da:e6: 16:7f:df:f9:37:28:08:12:f5:27:33:36:ae:bc:20: a5:01:31:9f:0e:f5:bd:66:4f:1a:8c:db:d9:3f:5b: 0b:57:ee:96:ee:87:ee:c9:7a:16:79:c9:0a:ff:8d: bb:60:fc:e3:b1:bd:40:b6:50:a1:0e:88:df:6c:d3: 17:26:15:6a:a9:8b:b9:0f:22:88:80:3a:59:42:0c: 15:31:00:3e:5a:67:d8:c9:ee:69:b3:63:a3:56:48: 0f:e4:73:21:97:70:4f:14:fb:ef:38:b4:ef:09:62: 57:e6:4e:31:7b:0b:8a:b5:6e:46:cc:94:27:67:98: e9:d4:f2:c4:fb:e3:86:ee:d8:ee:4b:62:1c:51:e7: 31:1a:d2:7e:54:0e:99:9a:c9:e0:3b:46:82:45:b1: 77:cd:ef:b6:25:1c:24:81:01:8e:97:fb:1c:1c:9f: 9e:20:8e:ee:d5:ce:3d:ce:c4:3a:25:c1:35:89:a6: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:37:7D:C9:1C:08:34:04:AD:14:D5:2A:A4:24:CB:F0:15:6E:3D:41 X509v3 Authority Key Identifier: keyid:33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:98:a4:d1:3e:1d:05:f3:e1:20:45:12:b7:75:3f:57:9d:48: 54:3d:7e:2d:64:38:e0:9d:e9:57:2a:a6:f0:09:3c:61:d2:17: 7b:01:77:4e:22:11:57:12:7d:a6:5f:01:c9:12:e3:ce:15:eb: 6f:71:f1:f7:c5:73:b4:a5:e0:0d:b1:07:d1:6b:b8:c6:9a:92: dd:16:f3:b5:49:54:57:b5:34:41:a7:82:54:ba:5c:cd:af:6b: 1d:47:71:2f:4d:2d:62:63:f1:69:d9:b7:86:36:5b:53:1d:b3: 32:87:7b:3d:28:29:bc:b9:e0:15:8c:03:02:7f:4e:82:00:39: 6d:2f:5d:58:26:cd:b0:f0:12:d4:cd:c2:01:94:d3:e6:31:1a: 4d:3c:6d:ac:18:dc:57:e6:db:cb:4b:55:1d:83:d9:79:33:c8: 20:26:96:ad:10:cd:66:65:1b:8b:35:f2:4e:2e:23:bd:51:42: a1:eb:22:27:32:7d:03:b7:33:8d:06:cc:6c:f6:03:a7:24:e4: 76:f8:f9:84:14:91:5d:82:39:01:8d:bb:21:f2:5e:90:0f:48: b5:be:0d:3a:ec:57:b6:14:e5:8d:92:50:a8:c1:96:44:8c:6d: a3:f4:29:e1:8d:94:09:26:43:9b:29:67:00:08:3f:65:c3:ba: 5d:20:35:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBM0ExMTAvBgNVBAUTKDMzOTIxQjRFOUE4OTQxQTU4NkJCREQ5QUY4QjE4ODVB OEYyMjVGQTIwHhcNMjUxMTAyMTUwMTU3WhcNMjUxMTA5MTUwMTU3WjAYMRYwFAYD VQQDEw02OTA3NzI2NS1jOTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJa8INrhzHNHHFfYiR8buk4oAjOLQg17UZXbPJKYyJJqf4edCPIxb42HZT7L UqJZdBEuyd1+omW4qHEUFW6IBWP4aGNcn+L12uYWf9/5NygIEvUnMzauvCClATGf DvW9Zk8ajNvZP1sLV+6W7ofuyXoWeckK/427YPzjsb1AtlChDojfbNMXJhVqqYu5 DyKIgDpZQgwVMQA+WmfYye5ps2OjVkgP5HMhl3BPFPvvOLTvCWJX5k4xewuKtW5G zJQnZ5jp1PLE++OG7tjuS2IcUecxGtJ+VA6ZmsngO0aCRbF3ze+2JRwkgQGOl/sc HJ+eII7u1c49zsQ6JcE1iaajnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDU3fckc CDQErRTVKqQky/AVbj1BMB8GA1UdIwQYMBaAFDOSG06aiUGlhrvdmvixiFqPIl+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUEzQS8yOThEMjU4ODFE OUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFhV0d1OTJhLUxHSVdvOGlY NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001SWJUcHFKUWFXR3U5MmEtTEdJV284aVg2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUEzQS8yOThEMjU4ODFEOUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFh V0d1OTJhLUxHSVdvOGlYNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8mKTRPh0F8+EgRRK3dT9XnUhUPX4tZDjgnelXKqbwCTxh0hd7AXdO IhFXEn2mXwHJEuPOFetvcfH3xXO0peANsQfRa7jGmpLdFvO1SVRXtTRBp4JUulzN r2sdR3EvTS1iY/Fp2beGNltTHbMyh3s9KCm8ueAVjAMCf06CADltL11YJs2w8BLU zcIBlNPmMRpNPG2sGNxX5tvLS1Udg9l5M8ggJpatEM1mZRuLNfJOLiO9UUKh6yIn Mn0DtzONBsxs9gOnJOR2+PmEFJFdgjkBjbsh8l6QD0i1vg067Fe2FOWNklCowZZE jG2j9CnhjZQJJkObKWcACD9lw7pdIDUy -----END CERTIFICATE-----Generated at Tue Nov 4 08:13:58 2025 by rpki-client