$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json) Hash identifier: UtJB14qfcjRjt7UchcPmYij+SnTfLI1klXIhrz8q1XA= Subject key identifier: 6A:35:D8:A2:94:B1:DC:54:1A:A9:1C:87:7B:88:6D:7D:96:BF:AB:E7 Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft Manifest number: 02C3 Signing time: Wed 05 Nov 2025 01:36:27 +0000 Manifest this update: Wed 05 Nov 2025 01:36:26 +0000 Manifest next update: Wed 12 Nov 2025 01:36:26 +0000 Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: 5Beix3vJfl7FQShq2k7WyWYDlJ0PrmcRwu6j4cO4J14=) 2: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: YJknqh8T+qXW11AGQpkWixPSeb/oim2jtPvDZDC0Y5M=) 3: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: 0d7okG44VFnG4nuLf3zjFz92ZcS33/9Y18izFVAiNWk=) 4: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: pOsL4nJKiT9Wc01cD2wPZO+WlYtBX9ZtStyQuOwRJu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Validity Not Before: Nov 5 01:36:26 2025 GMT Not After : Nov 12 01:36:26 2025 GMT Subject: CN=690aaa1b-11bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:2b:17:91:36:46:d4:72:07:59:3a:06:5b: ea:e9:ea:60:24:ed:5f:a4:c3:3d:20:00:d3:00:f1: 0f:98:97:c3:a4:7e:70:6a:25:a3:8d:31:52:2e:9c: 5f:81:8c:52:d5:c7:b9:a7:f5:b3:03:f1:49:96:71: e1:68:57:41:a8:d3:9a:87:1a:85:4b:64:73:31:58: a2:d6:36:14:42:e0:45:2d:69:93:92:ff:58:c2:f8: 63:92:c5:09:8f:91:90:62:31:c3:98:5a:80:55:1f: 17:93:5c:7b:99:08:7d:02:b7:f3:dd:18:60:a8:c6: 19:fd:65:80:5d:df:f7:a8:90:c9:42:a0:09:49:ab: 19:d0:69:2d:91:8c:cb:77:f8:ae:ed:25:d1:39:0a: 12:b0:61:51:26:8e:c6:89:15:8f:b7:86:93:a6:64: 0b:ac:4d:a5:37:5b:ea:cf:c2:e5:d1:04:ec:ec:d6: 37:1e:a1:db:85:3e:b1:4e:85:b1:49:a5:0f:06:a5: cb:b5:4e:73:e8:82:26:06:2e:65:16:e1:cc:80:40: 05:1e:88:b3:e5:60:e2:df:db:ca:68:46:0e:0d:52: b7:2d:73:50:9a:77:31:89:ef:96:16:87:6a:53:a0: b8:fc:90:a6:27:cd:00:21:da:81:7f:44:5d:a8:bb: 16:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:35:D8:A2:94:B1:DC:54:1A:A9:1C:87:7B:88:6D:7D:96:BF:AB:E7 X509v3 Authority Key Identifier: keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:49:03:46:9b:4d:fa:61:c8:48:b0:38:55:2d:28:72:89:69: bf:a6:2f:c5:ee:0f:f3:57:34:6a:b8:9b:86:30:09:a7:9d:80: 8c:a5:c8:b2:8a:61:f3:d4:9d:c1:2b:fd:b7:ec:fe:54:7e:f0: 45:12:6b:6a:42:cf:e5:f9:72:4d:96:03:1b:f3:a5:3a:90:1c: a8:40:db:d1:4c:f2:5f:2a:de:01:9d:14:ca:66:92:90:7c:3a: e0:2d:39:7b:a6:1a:24:c4:f2:8d:69:96:a0:0f:90:da:8c:fa: 39:97:4c:18:01:42:c7:af:fb:36:31:ca:ed:96:c7:0b:09:fc: 36:c1:0e:36:3a:fc:9b:b1:31:dd:11:02:38:be:00:e0:91:90: fb:52:62:bd:a0:d5:85:09:1b:39:a6:12:04:d7:a1:ac:f9:7b: ad:d0:7c:09:cf:12:67:db:da:c1:18:04:6c:32:f5:c7:9f:12: 98:38:d8:13:f1:d7:31:4d:e6:82:4f:56:11:12:19:f1:be:3d: 26:81:73:9b:63:06:6d:6f:8b:be:f5:48:fd:f2:b7:3a:69:6a: ce:a1:4b:c4:2d:3c:8a:92:d2:c1:18:30:4f:0c:27:e6:40:a6: 25:3f:24:91:98:9a:dd:a2:dd:53:a8:89:b2:5c:0c:07:05:92: b0:57:13:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBQjMxMTAvBgNVBAUTKEU0QTk0Q0ZBOEQyRjlGNUIzOUVGNDYzNTA1OTFDRTMx MkU1MTRGQjMwHhcNMjUxMTA1MDEzNjI2WhcNMjUxMTEyMDEzNjI2WjAYMRYwFAYD VQQDEw02OTBhYWExYi0xMWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7YrF5E2RtRyB1k6Blvq6epgJO1fpMM9IADTAPEPmJfDpH5waiWjjTFSLpxf gYxS1ce5p/WzA/FJlnHhaFdBqNOahxqFS2RzMVii1jYUQuBFLWmTkv9YwvhjksUJ j5GQYjHDmFqAVR8Xk1x7mQh9Arfz3RhgqMYZ/WWAXd/3qJDJQqAJSasZ0GktkYzL d/iu7SXROQoSsGFRJo7GiRWPt4aTpmQLrE2lN1vqz8Ll0QTs7NY3HqHbhT6xToWx SaUPBqXLtU5z6IImBi5lFuHMgEAFHoiz5WDi39vKaEYODVK3LXNQmncxie+WFodq U6C4/JCmJ80AIdqBf0RdqLsWmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGo12KKU sdxUGqkch3uIbX2Wv6vnMB8GA1UdIwQYMBaAFOSpTPqNL59bOe9GNQWRzjEuUU+z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FCMy8wNUVEOTRDRTE5 NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4xczU3MFkxQlpIT01TNVJU N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLbE0tbzB2bjFzNTcwWTFCWkhPTVM1UlQ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0FCMy8wNUVEOTRDRTE5NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4x czU3MFkxQlpIT01TNVJUN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMSQNGm036YchIsDhVLShyiWm/pi/F7g/zVzRquJuGMAmnnYCMpciy imHz1J3BK/237P5UfvBFEmtqQs/l+XJNlgMb86U6kByoQNvRTPJfKt4BnRTKZpKQ fDrgLTl7phokxPKNaZagD5DajPo5l0wYAULHr/s2McrtlscLCfw2wQ42OvybsTHd EQI4vgDgkZD7UmK9oNWFCRs5phIE16Gs+Xut0HwJzxJn29rBGARsMvXHnxKYONgT 8dcxTeaCT1YREhnxvj0mgXObYwZtb4u+9Uj98rc6aWrOoUvELTyKktLBGDBPDCfm QKYlPySRmJrdot1TqImyXAwHBZKwVxM2 -----END CERTIFICATE-----Generated at Wed Nov 5 16:39:43 2025 by rpki-client