$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft File: G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json) Hash identifier: EmmEVeniSvDBQudRx6fPxxbhrXEkyV3ioefQYFgQ0LY= Subject key identifier: D9:2F:04:FF:67:C4:59:EE:67:15:64:C7:49:0B:2F:67:29:5F:C3:26 Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 Certificate issuer: /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Certificate serial: 0937 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft Manifest number: 0937 Signing time: Tue 04 Nov 2025 20:18:12 +0000 Manifest this update: Tue 04 Nov 2025 20:18:11 +0000 Manifest next update: Tue 11 Nov 2025 20:18:11 +0000 Files and hashes: 1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: vK6wmWXQhjZLVrhFS92EnfQ0/6Lagi9+IDuYDZQ9Irs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2359 (0x937) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Validity Not Before: Nov 4 20:18:11 2025 GMT Not After : Nov 11 20:18:11 2025 GMT Subject: CN=690a5f83-18a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:71:30:6a:bc:c1:d9:9e:30:eb:66:5f:0e: 6e:04:4a:09:5f:97:fd:5d:b5:00:62:f4:7b:9f:b5: 80:ed:5e:b8:20:b3:b0:8e:fb:4c:74:42:4f:77:7c: e9:d8:1b:29:27:67:e2:b9:ae:03:a6:0a:b1:11:41: 93:8c:07:02:29:08:4c:2c:80:0c:e6:66:c4:3d:67: 56:c7:e6:60:19:92:55:3e:34:20:98:80:fa:1d:72: d9:6e:8d:0a:d4:bc:0e:c2:7c:e3:29:dd:a0:d7:d4: 09:86:cb:6d:02:d5:cc:6a:ac:c8:ac:de:1c:f4:c2: ad:da:bb:89:8c:ca:07:70:86:2c:b6:62:e3:58:42: 53:af:11:a4:8f:74:fc:d3:eb:33:75:36:48:70:57: a2:47:7d:a9:1e:05:a1:22:84:c0:33:a3:81:2e:e4: f7:f4:0c:2e:16:96:eb:e1:80:8b:9c:cb:60:14:de: 75:bf:ec:3f:77:1f:b7:a5:8b:8e:85:37:38:1a:37: 23:6f:61:16:b0:e1:84:68:85:8f:ed:aa:62:f5:13: 39:55:fd:77:50:fa:58:67:4e:ef:7b:1a:66:10:b0: 1c:86:d1:9f:d7:bf:6a:97:8c:27:54:a5:79:fc:c1: 60:aa:ee:06:93:dd:c1:fa:70:45:8f:6a:77:02:5a: 90:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2F:04:FF:67:C4:59:EE:67:15:64:C7:49:0B:2F:67:29:5F:C3:26 X509v3 Authority Key Identifier: keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:1b:c7:61:e6:20:a6:f5:a7:06:e3:74:72:a2:50:26:55:b2: c8:2d:e8:0e:73:33:03:a0:5b:bb:13:16:b0:d2:b6:0c:40:07: 29:bb:7c:cd:b3:62:d2:e5:2b:b6:af:35:60:f0:46:ca:fb:3e: ed:d4:09:c9:dc:7d:a4:e3:92:76:7e:f5:c4:1a:be:bc:ce:dc: f4:b1:cc:77:cc:7a:79:5b:6f:ba:df:de:a6:cf:81:0f:71:c2: 60:fc:2d:b9:55:fb:ad:c8:03:46:a6:ac:c2:2e:ea:a7:4a:e0: ee:a0:a0:97:a2:71:3d:01:08:1a:2b:d7:9b:e5:55:cb:26:54: fd:a7:f7:4f:39:fb:af:e4:e3:59:b8:10:be:5a:7b:da:4b:f7: 47:63:35:e9:3e:bb:4f:35:d0:bf:08:b5:ad:6a:b6:bc:c5:9e: 73:b5:ad:3c:ec:57:63:36:32:37:3f:b1:07:fd:eb:82:02:35: 01:18:ae:af:b0:09:d7:c3:75:41:b0:9f:a6:56:6b:91:91:be: 72:6f:6e:a9:37:3f:0c:ee:80:c7:78:3f:0e:7f:ce:d3:8c:36: 8a:da:c8:42:f1:eb:5e:19:e7:8b:21:ac:71:96:04:5f:a4:ef: 4c:32:60:3c:21:98:71:48:2b:6d:2b:54:a1:ab:bd:09:15:d4: 49:8d:30:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNFMTYxMTAvBgNVBAUTKDFCOTAyMjY2MzIyMUQ4Q0U3QUVFQjAzRjNGNTc5OUYw RDU3RUE2MTYwHhcNMjUxMTA0MjAxODExWhcNMjUxMTExMjAxODExWjAYMRYwFAYD VQQDEw02OTBhNWY4My0xOGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvNxMGq8wdmeMOtmXw5uBEoJX5f9XbUAYvR7n7WA7V64ILOwjvtMdEJPd3zp 2BspJ2fiua4DpgqxEUGTjAcCKQhMLIAM5mbEPWdWx+ZgGZJVPjQgmID6HXLZbo0K 1LwOwnzjKd2g19QJhsttAtXMaqzIrN4c9MKt2ruJjMoHcIYstmLjWEJTrxGkj3T8 0+szdTZIcFeiR32pHgWhIoTAM6OBLuT39AwuFpbr4YCLnMtgFN51v+w/dx+3pYuO hTc4Gjcjb2EWsOGEaIWP7api9RM5Vf13UPpYZ07vexpmELAchtGf179ql4wnVKV5 /MFgqu4Gk93B+nBFj2p3AlqQbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkvBP9n xFnuZxVkx0kLL2cpX8MmMB8GA1UdIwQYMBaAFBuQImYyIdjOeu6wPz9XmfDVfqYW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9GNDdCNkNENEFD NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJNNTY3ckFfUDFlWjhOVi1w aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0c1QWlaakloMk01NjdyQV9QMWVaOE5WLXBoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0UxNi9GNDdCNkNENEFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJN NTY3ckFfUDFlWjhOVi1waFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByG8dh5iCm9acG43RyolAmVbLILegOczMDoFu7Exaw0rYMQAcpu3zN s2LS5Su2rzVg8EbK+z7t1AnJ3H2k45J2fvXEGr68ztz0scx3zHp5W2+6396mz4EP ccJg/C25VfutyANGpqzCLuqnSuDuoKCXonE9AQgaK9eb5VXLJlT9p/dPOfuv5ONZ uBC+WnvaS/dHYzXpPrtPNdC/CLWtara8xZ5zta087FdjNjI3P7EH/euCAjUBGK6v sAnXw3VBsJ+mVmuRkb5yb26pNz8M7oDHeD8Of87TjDaK2shC8eteGeeLIaxxlgRf pO9MMmA8IZhxSCttK1Shq70JFdRJjTB+ -----END CERTIFICATE-----Generated at Wed Nov 5 19:26:06 2025 by rpki-client