$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft File: m505clsn1CAoE4UWNJL_dfFRE9o.mft (raw, json) Hash identifier: pQgLwAL4o3CFisFTJmcf+KEjkwQpW7V5bACgtk3Rt3U= Subject key identifier: B5:B6:93:50:DE:62:CD:9D:0D:E3:E1:9D:63:55:C4:C4:6E:F3:AF:94 Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA Certificate issuer: /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft Manifest number: 39 Signing time: Mon 03 Nov 2025 07:32:44 +0000 Manifest this update: Mon 03 Nov 2025 07:32:44 +0000 Manifest next update: Mon 10 Nov 2025 07:32:44 +0000 Files and hashes: 1: m505clsn1CAoE4UWNJL_dfFRE9o.crl (hash: IrmDTY50TPmeg9kRZ7iRkG4IgzChSaCkJcLm950OmsA=) 2: D24370A6638211F087594469C4F9AE02.roa (hash: BC9hUQT1LjynnO8EIFYzWbutVI812gfFy3AK+b9ATvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA Validity Not Before: Nov 3 07:32:44 2025 GMT Not After : Nov 10 07:32:44 2025 GMT Subject: CN=69085a9c-c2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:b4:55:f8:c6:13:6e:6d:34:43:e8:cb:24: 99:50:93:ba:bf:0f:70:c9:e2:95:64:b3:a4:90:25: d3:a0:7e:02:a1:0e:e0:09:16:ab:95:7f:90:f7:09: dd:2c:18:6b:49:2d:cb:f6:35:e3:75:f0:c9:06:6c: a6:16:bd:22:8c:44:90:62:b3:88:5e:2e:b5:3e:4b: c3:2f:af:d6:0a:f2:0f:ed:12:39:28:e4:6c:cc:cb: 73:5e:ea:b4:90:f1:79:26:08:88:cb:aa:00:3d:f4: ea:0c:79:22:4b:38:f8:93:cb:a6:70:8b:b8:9f:f3: ce:db:22:37:66:77:0c:91:9c:18:bd:46:e1:b1:e6: 9e:97:d1:e2:9a:02:15:2f:b6:35:e3:2f:91:7f:7d: 3b:c9:9c:4f:23:f9:1a:9e:28:bf:3e:15:79:e8:4a: 4e:a6:b2:21:53:2a:63:c7:9a:36:eb:d4:f1:bc:51: 1d:16:7f:a3:8a:f5:7a:df:da:98:58:92:fc:8f:86: 1b:34:78:44:a7:56:85:2f:06:51:1e:eb:79:70:24: 4b:0d:44:b1:55:5a:23:47:79:d4:b1:4b:2d:ee:e9: 13:b8:6f:02:81:9b:ff:b6:01:68:81:54:c4:c1:ab: 81:e4:7d:6c:7e:54:13:40:6b:78:c8:d8:b3:21:4a: bf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B6:93:50:DE:62:CD:9D:0D:E3:E1:9D:63:55:C4:C4:6E:F3:AF:94 X509v3 Authority Key Identifier: keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:fb:75:4e:87:26:1c:de:52:81:06:2e:31:1a:56:24:93:bf: 6e:90:5f:7a:17:11:7b:72:0b:4a:b6:6d:c4:be:cc:79:64:fa: 02:54:05:13:80:0a:67:19:17:f4:d2:fc:3c:13:00:86:42:0e: 1f:c2:f7:23:03:57:4b:e9:a1:07:30:9e:20:06:6d:97:ad:d8: 5d:79:fa:94:a5:71:53:0f:71:52:c2:29:65:a3:85:fb:16:ac: e0:4f:e3:d2:6b:c5:13:1e:bd:ac:27:e3:11:dd:63:7a:93:da: 1e:9e:88:53:ef:84:9e:e0:ed:01:c3:6e:92:fc:eb:2d:95:c9: ad:59:2f:53:b3:db:20:1d:f3:67:2c:a8:31:29:7b:97:42:ba: c2:38:c6:d8:2b:46:f4:7c:e8:22:a2:41:47:6c:18:0a:30:c6: 53:ab:de:3b:a2:fa:6e:59:f2:84:28:78:1b:fe:a6:14:a7:cc: 35:df:ea:79:d6:09:95:39:27:c0:f9:1c:d8:66:16:4f:2a:2f: 44:3b:4f:db:27:53:27:e6:2c:88:e6:47:27:a0:2b:43:de:9e: 8d:12:4f:82:b9:bd:bd:76:87:4e:04:c8:c9:a5:6a:2c:70:8f: b1:f8:6d:b2:a6:7d:94:0b:28:85:58:3c:4d:77:7c:b3:ae:fc: 51:e1:25:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoOUI5RDM5NzI1QjI3RDQyMDI4MTM4NTE2MzQ5MkZGNzVG MTUxMTNEQTAeFw0yNTExMDMwNzMyNDRaFw0yNTExMTAwNzMyNDRaMBgxFjAUBgNV BAMTDTY5MDg1YTljLWMyYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1IbRV+MYTbm00Q+jLJJlQk7q/D3DJ4pVks6SQJdOgfgKhDuAJFquVf5D3Cd0s GGtJLcv2NeN18MkGbKYWvSKMRJBis4heLrU+S8Mvr9YK8g/tEjko5GzMy3Ne6rSQ 8XkmCIjLqgA99OoMeSJLOPiTy6Zwi7if887bIjdmdwyRnBi9RuGx5p6X0eKaAhUv tjXjL5F/fTvJnE8j+RqeKL8+FXnoSk6msiFTKmPHmjbr1PG8UR0Wf6OK9Xrf2phY kvyPhhs0eESnVoUvBlEe63lwJEsNRLFVWiNHedSxSy3u6RO4bwKBm/+2AWiBVMTB q4HkfWx+VBNAa3jI2LMhSr/tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtbaTUN5i zZ0N4+GdY1XExG7zr5QwHwYDVR0jBBgwFoAUm505clsn1CAoE4UWNJL/dfFRE9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzYyMjZDOTM2NjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNBb0U0VVdOSkxfZGZGUkU5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbTUwNWNsc24xQ0FvRTRVV05KTF9kZkZSRTlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RUYyLzYyMjZDOTM2NjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNB b0U0VVdOSkxfZGZGUkU5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFf7dU6HJhzeUoEGLjEaViSTv26QX3oXEXtyC0q2bcS+zHlk+gJUBROA CmcZF/TS/DwTAIZCDh/C9yMDV0vpoQcwniAGbZet2F15+pSlcVMPcVLCKWWjhfsW rOBP49JrxRMevawn4xHdY3qT2h6eiFPvhJ7g7QHDbpL86y2Vya1ZL1Oz2yAd82cs qDEpe5dCusI4xtgrRvR86CKiQUdsGAowxlOr3jui+m5Z8oQoeBv+phSnzDXf6nnW CZU5J8D5HNhmFk8qL0Q7T9snUyfmLIjmRyegK0Peno0ST4K5vb12h04EyMmlaixw j7H4bbKmfZQLKIVYPE13fLOu/FHhJdk= -----END CERTIFICATE-----Generated at Tue Nov 4 23:27:10 2025 by rpki-client