$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft File: 5jLTjFoywhfG7nHVLe-fOMoWbFE.mft (raw, json) Hash identifier: atWhPLoC7DW1c08iAmEuOjfhZKBfpeU4K6BHQQLhtvA= Subject key identifier: 03:BE:F8:3A:86:8F:D3:92:42:57:DB:19:C1:69:A9:14:AE:C0:5B:EB Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft Manifest number: 0224 Signing time: Sun 19 Oct 2025 04:33:48 +0000 Manifest this update: Sun 19 Oct 2025 04:33:48 +0000 Manifest next update: Sun 26 Oct 2025 04:33:48 +0000 Files and hashes: 1: 5jLTjFoywhfG7nHVLe-fOMoWbFE.crl (hash: 1A0lEfO43s+nGRoFmIpWjhItmSHGB8Cp9yb0g9y4kP4=) 2: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (hash: jfVElp3g+n0aU5oT234ivZ8E0gCIv4CEX7tbrZ0128M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911486F, serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Validity Not Before: Oct 19 04:33:48 2025 GMT Not After : Oct 26 04:33:48 2025 GMT Subject: CN=68f46a2c-a770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:64:45:4a:e2:c3:6c:a1:8c:af:bb:fe:0c: f5:2a:3d:eb:8b:7b:cd:a4:b5:ec:77:e1:5d:79:5c: a4:1c:3f:56:d7:1f:6b:af:c8:32:bf:a3:48:94:c2: fd:eb:07:98:91:93:0f:24:93:cb:1b:56:c9:f5:93: 4d:4b:aa:17:eb:ba:8e:f6:53:7d:e4:64:08:e4:98: ae:b3:ad:b7:06:4c:ff:94:57:b0:5f:e4:0b:ea:f4: ae:5e:21:84:38:48:71:06:db:af:b2:9e:0d:48:a9: 57:8c:3b:28:be:cb:af:57:13:20:80:cc:6f:19:76: 0c:d4:71:3a:1b:bb:ce:4c:99:6c:f4:63:f2:fa:78: 3e:4c:61:e3:8d:ce:99:bf:2e:9d:31:fe:89:b0:9c: a1:b7:31:f5:25:90:bd:ec:70:3c:d1:64:2a:aa:06: e8:0e:25:bf:40:d4:d0:b7:56:ce:d1:a4:dd:da:f5: e7:c5:9c:1e:56:53:f6:27:ef:78:ef:61:aa:2d:8a: fe:82:36:88:44:02:a9:34:9f:d2:28:e7:f8:88:7a: 46:29:37:81:34:a0:0e:5d:93:11:35:c2:b8:82:c2: b9:6f:3e:f2:26:53:a2:19:bf:fb:b7:c8:2d:25:24: 43:75:09:fa:55:8a:48:e8:52:cb:16:67:e7:a0:cf: 14:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BE:F8:3A:86:8F:D3:92:42:57:DB:19:C1:69:A9:14:AE:C0:5B:EB X509v3 Authority Key Identifier: keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ed:2d:3a:8f:c5:2e:06:95:cc:c8:71:e1:49:12:2b:51:4b: e9:dd:35:cf:d7:37:89:de:3b:5a:e9:97:ad:f8:7e:db:f6:13: 56:ba:4e:c6:04:e6:3a:f6:c5:62:c4:ad:55:bf:fa:b3:5d:8a: 1c:8c:dc:56:2f:d3:0f:e8:ff:01:29:30:24:1f:e7:ad:80:db: d0:68:40:c7:74:8f:b3:57:55:de:b4:af:cf:c8:6b:ec:64:a5: 62:38:16:b1:b8:57:67:04:b4:49:ee:26:2b:39:d4:d2:08:55: c3:0f:66:26:76:2d:ae:86:f8:5f:d0:34:0b:ed:ff:d5:2c:4d: 0b:4d:37:76:ca:ae:6d:32:ec:0a:ec:13:db:76:3c:11:0b:72: 62:d9:bb:5e:26:52:22:9d:cc:d2:5e:a3:56:f2:eb:6e:45:2a: 64:a3:ad:9c:e3:9a:af:3a:95:97:10:3a:7c:6b:78:0f:4c:69: 5d:e9:02:51:de:97:8a:b6:d6:84:db:32:7f:b2:9a:5f:ac:10: 8b:73:70:d1:21:c3:7c:4b:d3:6a:9c:f9:79:76:8f:38:19:d2: b9:36:fa:0f:bd:08:6f:27:1b:76:f6:7c:68:d2:34:7b:e1:8a: 48:16:d0:7e:47:1a:a9:28:bd:97:58:e6:94:27:71:15:76:49: 4f:8f:2c:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4NkYxMTAvBgNVBAUTKEU2MzJEMzhDNUEzMkMyMTdDNkVFNzFENTJERUY5RjM4 Q0ExNjZDNTEwHhcNMjUxMDE5MDQzMzQ4WhcNMjUxMDI2MDQzMzQ4WjAYMRYwFAYD VQQDEw02OGY0NmEyYy1hNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtflkRUriw2yhjK+7/gz1Kj3ri3vNpLXsd+FdeVykHD9W1x9rr8gyv6NIlML9 6weYkZMPJJPLG1bJ9ZNNS6oX67qO9lN95GQI5Jius623Bkz/lFewX+QL6vSuXiGE OEhxBtuvsp4NSKlXjDsovsuvVxMggMxvGXYM1HE6G7vOTJls9GPy+ng+TGHjjc6Z vy6dMf6JsJyhtzH1JZC97HA80WQqqgboDiW/QNTQt1bO0aTd2vXnxZweVlP2J+94 72GqLYr+gjaIRAKpNJ/SKOf4iHpGKTeBNKAOXZMRNcK4gsK5bz7yJlOiGb/7t8gt JSRDdQn6VYpI6FLLFmfnoM8UywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAO++DqG j9OSQlfbGcFpqRSuwFvrMB8GA1UdIwQYMBaAFOYy04xaMsIXxu5x1S3vnzjKFmxR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg2Ri8yMkNGMzQ0ODg2 NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdoZkc3bkhWTGUtZk9Nb1di RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVqTFRqRm95d2hmRzduSFZMZS1mT01vV2JGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDg2Ri8yMkNGMzQ0ODg2NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdo Zkc3bkhWTGUtZk9Nb1diRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi7S06j8UuBpXMyHHhSRIrUUvp3TXP1zeJ3jta6Zet+H7b9hNWuk7G BOY69sVixK1Vv/qzXYocjNxWL9MP6P8BKTAkH+etgNvQaEDHdI+zV1XetK/PyGvs ZKViOBaxuFdnBLRJ7iYrOdTSCFXDD2Ymdi2uhvhf0DQL7f/VLE0LTTd2yq5tMuwK 7BPbdjwRC3Ji2bteJlIinczSXqNW8utuRSpko62c45qvOpWXEDp8a3gPTGld6QJR 3peKttaE2zJ/sppfrBCLc3DRIcN8S9NqnPl5do84GdK5NvoPvQhvJxt29nxo0jR7 4YpIFtB+RxqpKL2XWOaUJ3EVdklPjyzA -----END CERTIFICATE-----Generated at Tue Oct 21 01:04:05 2025 by rpki-client