$ rpki-client -vvf rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft File: 5EL5lVmsG6h-4TSLL8evCiL_smE.mft (raw, json) Hash identifier: r1NQSRiGc0T1ysMh2fPlzDw7u/1iJYFzEssvll6xivI= Subject key identifier: 51:79:B7:1A:5B:3D:B1:35:4F:78:95:14:FA:76:45:DF:B0:BB:40:8E Authority key identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 Certificate issuer: /CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Certificate serial: 2B3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft Manifest number: 2B2B Signing time: Mon 20 Oct 2025 15:41:40 +0000 Manifest this update: Mon 20 Oct 2025 15:41:40 +0000 Manifest next update: Mon 27 Oct 2025 15:41:40 +0000 Files and hashes: 1: 5EL5lVmsG6h-4TSLL8evCiL_smE.crl (hash: WXAMcK/kiQPAvXsTp7ZLdNDxkIH+S9JPVRJjdOvaYRM=) 2: 5452AC309B4911EB9952394CC4F9AE02.roa (hash: 3EBZNTlM2pSnC9HcQ0kJddDB9AhHcVhBduQrWy64qKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11067 (0x2b3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143336, serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Validity Not Before: Oct 20 15:41:40 2025 GMT Not After : Oct 27 15:41:40 2025 GMT Subject: CN=68f65834-2754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:6d:13:0b:b5:94:dc:ac:2e:41:0a:6d:cf: 33:24:c7:c1:62:f1:3a:fb:48:2a:9a:a2:14:a8:4e: 79:13:38:32:ec:dc:43:7a:da:fc:a5:d4:63:0e:1e: 75:24:28:72:97:9d:ae:5a:44:1b:63:7b:36:f9:c5: 71:ad:a9:a3:31:21:92:96:68:1b:41:fb:e5:3b:8e: 20:43:b8:78:ed:cd:0d:fd:cf:7f:80:34:6d:fd:51: 2c:2c:bf:57:a3:36:7c:63:8d:f2:90:2d:9c:e3:64: 19:94:a9:57:dd:78:b2:24:41:26:22:a8:75:23:03: 57:88:60:95:36:d2:01:11:64:72:4f:04:ef:80:0e: 7c:39:fa:fe:d3:ab:27:b8:f4:fb:4a:61:84:3d:8d: 79:2f:3d:32:95:30:e3:12:3f:92:1a:7c:9d:78:62: 6e:c6:aa:ed:80:71:43:61:46:89:1a:ee:ee:f9:e9: 97:e9:3c:f2:13:48:3b:cf:4e:20:96:dc:c5:6e:9f: 8a:66:3d:fc:e3:3b:18:ba:d2:11:fe:c1:a4:44:f9: 2d:57:69:0a:36:20:e9:a3:96:50:29:78:4d:0f:d5: c8:10:01:0a:2f:45:4e:a4:d8:45:17:de:4b:70:40: 7b:83:86:73:b7:d1:32:40:57:c4:a0:06:70:2f:70: a8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:79:B7:1A:5B:3D:B1:35:4F:78:95:14:FA:76:45:DF:B0:BB:40:8E X509v3 Authority Key Identifier: keyid:E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:05:6e:3b:6b:99:4d:e0:98:b3:53:66:5d:55:b6:67:04:ca: bc:34:8d:14:d2:da:cb:ba:39:bf:f7:75:e5:14:dc:cb:a3:16: 47:40:da:8a:34:76:0b:df:8c:ea:30:83:e9:46:e9:e9:ef:cf: 71:0b:34:37:50:e9:be:0a:1a:cb:df:b3:48:48:50:61:fb:e4: 60:42:9d:1c:ea:2e:aa:15:c0:dd:1b:20:1a:76:6b:e5:60:f4: 0a:56:b3:04:79:ee:11:91:db:f1:13:fe:e6:0c:e5:71:ee:7e: e4:5b:06:6d:02:33:b3:62:17:27:31:7b:cb:ef:8e:81:d4:7a: 31:d4:cd:5f:7c:5a:09:a7:aa:19:c1:98:b2:2a:27:a1:7e:87: 86:ac:15:16:9c:93:9b:26:6e:f3:52:ea:8e:62:8d:67:bf:49: 98:cc:dd:e6:20:0c:4f:6e:90:70:86:14:26:51:61:68:bc:fe: 05:d1:c3:ef:2f:c0:5b:99:41:ec:dc:1e:5b:ba:f0:16:70:3e: c0:11:6a:29:71:72:ad:65:57:44:d4:6d:11:83:8d:26:5f:56: 0f:ec:9c:5a:2c:be:c8:d4:d1:8e:9a:e3:a1:9c:a2:76:8d:4a: 7b:16:da:cd:cb:b4:f5:91:f7:7b:d3:f7:05:6b:d3:4f:89:03: e8:ff:91:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzMzYxMTAvBgNVBAUTKEU0NDJGOTk1NTlBQzFCQTg3RUUxMzQ4QjJGQzdBRjBB MjJGRkIyNjEwHhcNMjUxMDIwMTU0MTQwWhcNMjUxMDI3MTU0MTQwWjAYMRYwFAYD VQQDEw02OGY2NTgzNC0yNzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUFtEwu1lNysLkEKbc8zJMfBYvE6+0gqmqIUqE55Ezgy7NxDetr8pdRjDh51 JChyl52uWkQbY3s2+cVxramjMSGSlmgbQfvlO44gQ7h47c0N/c9/gDRt/VEsLL9X ozZ8Y43ykC2c42QZlKlX3XiyJEEmIqh1IwNXiGCVNtIBEWRyTwTvgA58Ofr+06sn uPT7SmGEPY15Lz0ylTDjEj+SGnydeGJuxqrtgHFDYUaJGu7u+emX6TzyE0g7z04g ltzFbp+KZj384zsYutIR/sGkRPktV2kKNiDpo5ZQKXhND9XIEAEKL0VOpNhFF95L cEB7g4Zzt9EyQFfEoAZwL3CosQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFF5txpb PbE1T3iVFPp2Rd+wu0COMB8GA1UdIwQYMBaAFORC+ZVZrBuofuE0iy/Hrwoi/7Jh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMzNi84RUU3RkMxRTA4 NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2aC00VFNMTDhldkNpTF9z bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFTDVsVm1zRzZoLTRUU0xMOGV2Q2lMX3NtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzMzNi84RUU3RkMxRTA4NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2 aC00VFNMTDhldkNpTF9zbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIBW47a5lN4JizU2ZdVbZnBMq8NI0U0trLujm/93XlFNzLoxZHQNqK NHYL34zqMIPpRunp789xCzQ3UOm+ChrL37NISFBh++RgQp0c6i6qFcDdGyAadmvl YPQKVrMEee4RkdvxE/7mDOVx7n7kWwZtAjOzYhcnMXvL746B1Hox1M1ffFoJp6oZ wZiyKiehfoeGrBUWnJObJm7zUuqOYo1nv0mYzN3mIAxPbpBwhhQmUWFovP4F0cPv L8BbmUHs3B5buvAWcD7AEWopcXKtZVdE1G0Rg40mX1YP7JxaLL7I1NGOmuOhnKJ2 jUp7FtrNy7T1kfd70/cFa9NPiQPo/5HO -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:07 2025 by rpki-client