$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft File: 5nV74dIYmt6NdyyclIZDEL45LXA.mft (raw, json) Hash identifier: u1Sg8b4B/RR3GSmwrD6n3xqM2caWn4VkGfh9g9Naolw= Subject key identifier: EC:F5:27:7E:0E:67:96:76:0F:CB:62:5C:F3:A6:9A:BC:2F:0C:4F:7B Authority key identifier: E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 Certificate issuer: /CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Certificate serial: 04B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft Manifest number: 04AF Signing time: Wed 05 Nov 2025 00:01:15 +0000 Manifest this update: Wed 05 Nov 2025 00:01:14 +0000 Manifest next update: Wed 12 Nov 2025 00:01:14 +0000 Files and hashes: 1: 5nV74dIYmt6NdyyclIZDEL45LXA.crl (hash: PA6do5KH28f4sa1m9AdaxS1rnzxRuLHuhAHdfJnbgQ4=) 2: 2B70BBE889E111EEB5E86A0EC4F9AE02.roa (hash: ii2gJPxNc38H3aArS7srunxvBmsm9HkEFksE6I5LOY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F9E, serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Validity Not Before: Nov 5 00:01:14 2025 GMT Not After : Nov 12 00:01:14 2025 GMT Subject: CN=690a93ca-e11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:02:ed:56:9b:63:ab:c5:c4:3a:54:1e:cd:4c: a2:aa:ee:b3:a7:46:22:3e:7e:2c:13:79:1b:55:d5: d2:5e:5d:14:2e:11:b4:d7:8e:50:47:c8:4b:3b:29: e9:48:03:1f:ac:2b:a3:e2:bc:93:7e:b0:d9:21:5a: 8a:68:fa:38:b5:5f:8c:95:05:a3:7d:27:cd:86:b6: 82:1c:62:db:ad:ba:ce:fa:02:24:47:d0:04:c4:18: 35:96:f3:09:01:04:3e:e7:50:82:4d:aa:fc:dd:93: d9:23:06:e3:41:75:56:22:1d:66:af:62:77:a2:1d: d8:a2:ee:71:72:33:e4:bb:9f:7c:94:ff:22:60:17: b2:ce:8b:2c:b5:ba:c4:e7:99:cc:4e:e7:3a:00:81: 5b:1c:3a:41:12:4a:7c:f2:ec:74:48:83:7f:55:81: 64:0b:79:e5:92:c1:8e:3b:d1:38:4a:21:b0:2b:8b: 44:68:f9:54:32:60:bb:23:ba:e4:86:43:ba:1b:7d: 9c:0f:5e:db:8e:97:bb:af:64:83:19:a5:db:61:38: 26:20:a2:5b:0d:2c:6e:95:37:a5:32:ac:93:fd:c6: 64:48:57:37:8a:1c:7c:a5:66:44:4b:dd:34:09:1f: 27:6d:82:6e:e5:17:09:84:d6:7b:c9:46:d8:ab:1b: 6a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F5:27:7E:0E:67:96:76:0F:CB:62:5C:F3:A6:9A:BC:2F:0C:4F:7B X509v3 Authority Key Identifier: keyid:E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a9:a6:f7:e3:eb:46:c4:cd:2a:47:a8:4f:8c:7d:37:7e:b5: a9:d4:2c:6b:cf:14:ef:da:e1:3e:a1:ea:5c:00:48:a7:05:38: eb:f9:36:dd:92:46:e6:e9:bc:b2:0c:8a:65:de:7a:29:67:b9: 5e:33:9e:d5:d2:57:e9:3d:1a:67:44:a1:57:ed:95:ee:ea:d1: 38:2c:c6:a7:0a:c0:f8:44:84:92:10:de:70:bb:69:9a:06:da: 05:f4:dc:99:17:d2:aa:f8:23:8c:46:e4:ec:9a:1e:cd:23:67: b4:b1:3e:97:25:53:25:5f:60:2a:53:1f:5a:e8:57:d9:71:ab: dc:94:54:ff:f4:15:f3:8e:b4:bf:56:6b:84:47:e3:c6:76:0f: 68:3f:70:27:7e:60:02:e3:99:a1:ac:d7:f1:02:72:c4:d8:02: 3c:68:e1:00:5c:46:f3:bf:68:13:f0:98:59:a5:f5:1e:7a:61: 2f:71:02:52:ea:15:0f:63:a1:93:40:e3:40:3b:c4:67:04:61: 44:c0:bd:f8:10:e4:5d:6b:e9:d8:c7:ed:b7:d9:fd:a0:de:d0: 5f:5d:64:a8:e4:08:45:ec:cd:2a:85:98:75:96:65:e8:00:f4: c0:ff:51:e7:dd:54:5c:99:bf:2b:66:38:b5:42:d9:e8:ff:15: f0:98:ed:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGOUUxMTAvBgNVBAUTKEU2NzU3QkUxRDIxODlBREU4RDc3MkM5Qzk0ODY0MzEw QkUzOTJENzAwHhcNMjUxMTA1MDAwMTE0WhcNMjUxMTEyMDAwMTE0WjAYMRYwFAYD VQQDEw02OTBhOTNjYS1lMTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gLtVptjq8XEOlQezUyiqu6zp0YiPn4sE3kbVdXSXl0ULhG0145QR8hLOynp SAMfrCuj4ryTfrDZIVqKaPo4tV+MlQWjfSfNhraCHGLbrbrO+gIkR9AExBg1lvMJ AQQ+51CCTar83ZPZIwbjQXVWIh1mr2J3oh3You5xcjPku598lP8iYBeyzosstbrE 55nMTuc6AIFbHDpBEkp88ux0SIN/VYFkC3nlksGOO9E4SiGwK4tEaPlUMmC7I7rk hkO6G32cD17bjpe7r2SDGaXbYTgmIKJbDSxulTelMqyT/cZkSFc3ihx8pWZES900 CR8nbYJu5RcJhNZ7yUbYqxtqKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOz1J34O Z5Z2D8tiXPOmmrwvDE97MB8GA1UdIwQYMBaAFOZ1e+HSGJrejXcsnJSGQxC+OS1w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY5RS8wMDZDRTk5QzUw MDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10Nk5keXljbElaREVMNDVM WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuVjc0ZElZbXQ2TmR5eWNsSVpERUw0NUxYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY5RS8wMDZDRTk5QzUwMDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10 Nk5keXljbElaREVMNDVMWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbqab34+tGxM0qR6hPjH03frWp1CxrzxTv2uE+oepcAEinBTjr+Tbd kkbm6byyDIpl3nopZ7leM57V0lfpPRpnRKFX7ZXu6tE4LManCsD4RISSEN5wu2ma BtoF9NyZF9Kq+COMRuTsmh7NI2e0sT6XJVMlX2AqUx9a6FfZcavclFT/9BXzjrS/ VmuER+PGdg9oP3AnfmAC45mhrNfxAnLE2AI8aOEAXEbzv2gT8JhZpfUeemEvcQJS 6hUPY6GTQONAO8RnBGFEwL34EORda+nYx+232f2g3tBfXWSo5AhF7M0qhZh1lmXo APTA/1Hn3VRcmb8rZji1Qtno/xXwmO2v -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:35 2025 by rpki-client