$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft File: b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json) Hash identifier: 23qjSimWM/x+vvO5AIsJmIfLxcdf+uaFDTAElBEJ2sI= Subject key identifier: 02:F5:C5:43:E3:B7:AC:7E:91:5C:03:6C:1B:54:5C:9F:DB:F4:48:BF Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE Certificate issuer: /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Certificate serial: 0B8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft Manifest number: 0B81 Signing time: Sun 02 Nov 2025 19:00:54 +0000 Manifest this update: Sun 02 Nov 2025 19:00:54 +0000 Manifest next update: Sun 09 Nov 2025 19:00:54 +0000 Files and hashes: 1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: wrvlvmxFnL9CL++2SVGoewKQRuBartin86WVyaF0hC4=) 2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: aPhIlaax2BlOuwZfkwHVyHDwMsLRzjqBCMCDNEm2/F8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2955 (0xb8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Validity Not Before: Nov 2 19:00:54 2025 GMT Not After : Nov 9 19:00:54 2025 GMT Subject: CN=6907aa66-32ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:8f:c6:90:af:4c:f4:07:8c:a5:07:38:02: 32:c2:db:5b:4f:7f:01:4e:58:90:05:5f:9d:80:8a: c5:d3:3f:f0:95:e4:4e:a0:ca:31:0a:85:6c:51:1d: 93:94:1e:d5:05:e0:c1:1c:d6:b3:24:02:3b:1a:99: b8:a8:6b:d3:32:c9:3b:2e:9c:47:df:32:00:3c:94: f0:fd:f1:2e:06:f7:4c:b0:c7:a5:a0:6b:3c:45:09: 3c:e0:5c:c7:4a:71:ba:8b:8a:d1:00:a4:ce:72:de: d7:cb:4f:f1:bf:7a:73:0a:09:96:95:cd:53:f2:ce: f6:d9:a1:f6:73:10:8d:b8:4d:95:d2:fb:ab:3f:d9: a0:0a:c8:73:d1:c8:1c:78:17:c3:9d:d2:86:98:ab: ee:23:f0:0b:36:52:b7:26:97:27:45:be:f1:1e:5f: 16:68:25:94:93:11:e9:f1:25:4e:a3:42:ea:60:76: f6:1d:22:3d:f8:49:2a:c1:d8:20:71:97:ba:3b:ce: 0c:c5:e9:f6:4e:81:04:d1:64:ac:2b:81:1e:eb:7c: 61:8c:89:7b:f8:ad:38:57:e4:a0:c4:03:ef:dd:b8: a9:d3:44:df:a9:58:5e:10:38:30:0e:82:3d:e8:f1: 36:a9:a7:f1:41:41:18:3a:14:b8:7f:e2:f9:28:54: 40:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F5:C5:43:E3:B7:AC:7E:91:5C:03:6C:1B:54:5C:9F:DB:F4:48:BF X509v3 Authority Key Identifier: keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:65:1c:25:3f:44:d3:26:e2:3c:ed:d8:02:29:21:6a:4d:c9: 3c:ef:63:a6:68:cc:71:f2:56:ad:93:ab:e7:56:56:20:d6:32: e2:8a:16:75:4b:f8:d4:df:78:59:4b:ec:a8:2e:03:e0:44:7b: 6f:fa:2b:5b:f3:cf:c9:f6:26:14:cd:e1:de:9c:3c:b9:fb:e0: 6b:a8:ae:ff:80:9a:49:7b:a3:9a:57:cb:cb:28:70:6d:1b:9d: ef:4b:d8:76:be:7d:31:27:34:a4:30:d3:4c:9d:4f:dc:e9:13: a3:bc:48:43:19:39:13:80:36:a4:ed:b0:f9:59:2f:3b:5d:95: 5f:3d:aa:31:f9:98:14:f1:4a:c6:68:97:d1:4b:da:a9:92:fb: 76:25:eb:7e:06:1d:c1:8e:04:af:fe:a4:42:67:1f:57:34:f1: 36:f6:c5:15:47:ef:25:61:0a:d1:85:c1:8b:fd:9a:8f:a0:0b: 4f:52:a6:1f:4b:0a:be:e8:d4:54:6a:a3:ae:dd:b7:10:8e:01: 16:5b:54:78:4c:cb:39:44:50:3a:b4:d4:46:92:90:8c:b5:2b: 53:fe:ff:ab:d8:6a:a1:53:bc:e7:cf:db:7a:b7:ca:af:eb:06: d1:a5:4a:af:6b:05:0d:63:71:ea:9d:ae:c2:58:0f:dc:aa:d9: 75:5a:3e:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QzIxMTAvBgNVBAUTKDZGOUFDMDRDRTVBQzcxQTdDMkI3QUZCMUE1NTcyN0Ex MEU1QjA2RUUwHhcNMjUxMTAyMTkwMDU0WhcNMjUxMTA5MTkwMDU0WjAYMRYwFAYD VQQDEw02OTA3YWE2Ni0zMmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGiPxpCvTPQHjKUHOAIywttbT38BTliQBV+dgIrF0z/wleROoMoxCoVsUR2T lB7VBeDBHNazJAI7Gpm4qGvTMsk7LpxH3zIAPJTw/fEuBvdMsMeloGs8RQk84FzH SnG6i4rRAKTOct7Xy0/xv3pzCgmWlc1T8s722aH2cxCNuE2V0vurP9mgCshz0cgc eBfDndKGmKvuI/ALNlK3JpcnRb7xHl8WaCWUkxHp8SVOo0LqYHb2HSI9+Ekqwdgg cZe6O84Mxen2ToEE0WSsK4Ee63xhjIl7+K04V+SgxAPv3bip00TfqVheEDgwDoI9 6PE2qafxQUEYOhS4f+L5KFRAMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAL1xUPj t6x+kVwDbBtUXJ/b9Ei/MB8GA1UdIwQYMBaAFG+awEzlrHGnwrevsaVXJ6EOWwbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlDMi9BQjBERjRGMjNB QTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2NhZkN0Ni14cFZjbm9RNWJC dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I1ckFUT1dzY2FmQ3Q2LXhwVmNub1E1YkJ1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlDMi9BQjBERjRGMjNBQTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2Nh ZkN0Ni14cFZjbm9RNWJCdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgZRwlP0TTJuI87dgCKSFqTck872OmaMxx8latk6vnVlYg1jLiihZ1 S/jU33hZS+yoLgPgRHtv+itb88/J9iYUzeHenDy5++BrqK7/gJpJe6OaV8vLKHBt G53vS9h2vn0xJzSkMNNMnU/c6ROjvEhDGTkTgDak7bD5WS87XZVfPaox+ZgU8UrG aJfRS9qpkvt2Jet+Bh3BjgSv/qRCZx9XNPE29sUVR+8lYQrRhcGL/ZqPoAtPUqYf Swq+6NRUaqOu3bcQjgEWW1R4TMs5RFA6tNRGkpCMtStT/v+r2GqhU7znz9t6t8qv 6wbRpUqvawUNY3Hqna7CWA/cqtl1Wj78 -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:39 2025 by rpki-client