$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft File: 5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json) Hash identifier: JlFQOtwKdVbiP2PH/ysT7gkSULPze4rx5RDdJL7kR4w= Subject key identifier: 8A:AE:4D:FB:6F:63:07:B4:AF:28:8D:E1:64:D2:77:DB:71:28:0C:B9 Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 Certificate issuer: /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft Manifest number: 0256 Signing time: Mon 03 Nov 2025 01:40:49 +0000 Manifest this update: Mon 03 Nov 2025 01:40:48 +0000 Manifest next update: Mon 10 Nov 2025 01:40:48 +0000 Files and hashes: 1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: fHyFi1AFkpQywtcNNGIbWqjQDt/6nhuRfFlHdXf4whI=) 2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: rXyXJ/J6rVFIkAmCNmdDPvJdD/VKGdNuveHL3e4vBN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B44, serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Validity Not Before: Nov 3 01:40:48 2025 GMT Not After : Nov 10 01:40:48 2025 GMT Subject: CN=69080821-ea2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:41:61:17:a0:2a:dc:a2:62:73:f1:9d:7f:ba: 41:9d:0e:d7:bd:aa:02:cb:b6:e1:3b:25:6a:59:c9: 2c:e4:78:8f:51:71:1b:43:fb:93:81:e2:c1:5d:d3: 74:a5:3c:d9:b0:26:0e:1d:e8:a7:2d:95:d8:93:37: f7:92:29:0f:76:17:98:14:36:34:4f:3a:a3:68:4e: 58:13:fc:4b:ec:45:c1:84:40:05:ea:84:8e:8c:fc: ca:a2:dd:83:e1:72:16:28:9d:68:29:a3:c0:6d:e6: a5:96:1b:82:7d:9a:5c:19:95:bf:8a:c8:61:28:d9: d4:a4:c4:fa:17:e5:7a:81:a1:68:d1:16:74:26:69: 03:28:ae:08:ff:41:68:7c:a7:92:ac:44:95:fc:ae: e2:5f:a3:fe:0a:11:42:1d:6f:0c:84:07:5b:51:c4: 37:d9:28:d1:65:35:bc:f9:32:93:48:a9:37:7b:98: 9c:31:37:cc:a1:ae:eb:b7:de:19:c6:3c:67:b6:03: a3:fe:b1:70:35:b0:bb:87:19:6c:1b:6e:51:3f:8e: 31:50:49:4b:15:93:2f:33:6b:a1:9b:72:df:84:e2: 3d:7e:6f:47:a6:6b:2b:37:e9:41:69:ab:2a:30:e2: c1:89:57:8f:55:6f:08:33:b8:e3:ae:0b:36:7a:35: 11:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AE:4D:FB:6F:63:07:B4:AF:28:8D:E1:64:D2:77:DB:71:28:0C:B9 X509v3 Authority Key Identifier: keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:33:50:ef:04:68:47:cc:24:8e:d4:03:63:4a:b5:bb:f4:a9: 2d:c5:ef:e2:3a:49:a7:32:b3:37:95:cb:6e:b1:ae:09:fb:9b: b2:d6:6d:3e:4e:f3:a5:f0:16:e9:66:11:3d:42:31:53:3a:7f: da:ad:be:52:2d:cc:98:6a:f4:c3:ce:9f:26:70:ad:58:8c:ba: 83:fe:09:98:13:94:85:25:d1:39:92:09:bd:11:79:7b:b6:45: 8e:81:a2:c6:e2:81:0f:70:a0:3c:95:22:08:b5:19:5f:d3:c1: d0:26:06:90:a7:c0:86:a8:fc:0e:63:33:a5:e5:63:e5:1b:71: da:b4:8a:47:73:eb:db:30:be:89:7a:4e:c5:0b:fd:35:1f:37: 5b:ed:a3:af:78:b0:21:d3:72:f8:1c:cd:c7:4f:20:0f:4a:94: f1:59:b7:b7:a0:6b:82:0f:67:54:c2:ea:66:66:ff:21:40:84: c1:70:a5:0a:95:e1:4b:33:ba:40:1a:81:4b:1f:7d:41:d0:e2: 43:e7:e4:0b:f2:ea:d5:76:bf:7f:ea:07:10:aa:3c:b3:de:57: 81:6e:08:cc:84:e2:ea:7d:16:10:e5:96:0b:41:53:7b:1e:03: 73:53:b6:42:53:0a:1d:cd:3b:3e:e4:ce:8d:42:00:7c:8a:7d: b6:38:e5:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDQxMTAvBgNVBAUTKEU0NkUxODlEQzhFOTEwQTFBQkJFMkUzNjRERDA4MTc3 NUNFNDg0NjAwHhcNMjUxMTAzMDE0MDQ4WhcNMjUxMTEwMDE0MDQ4WjAYMRYwFAYD VQQDEw02OTA4MDgyMS1lYTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUFhF6Aq3KJic/Gdf7pBnQ7XvaoCy7bhOyVqWcks5HiPUXEbQ/uTgeLBXdN0 pTzZsCYOHeinLZXYkzf3kikPdheYFDY0TzqjaE5YE/xL7EXBhEAF6oSOjPzKot2D 4XIWKJ1oKaPAbeallhuCfZpcGZW/ishhKNnUpMT6F+V6gaFo0RZ0JmkDKK4I/0Fo fKeSrESV/K7iX6P+ChFCHW8MhAdbUcQ32SjRZTW8+TKTSKk3e5icMTfMoa7rt94Z xjxntgOj/rFwNbC7hxlsG25RP44xUElLFZMvM2uhm3LfhOI9fm9HpmsrN+lBaasq MOLBiVePVW8IM7jjrgs2ejURTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIquTftv Ywe0ryiN4WTSd9txKAy5MB8GA1UdIwQYMBaAFORuGJ3I6RChq74uNk3QgXdc5IRg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0NC9BRDBENjFGODNB NkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVLR3J2aTQyVGRDQmQxemto R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNFluY2pwRUtHcnZpNDJUZENCZDF6a2hHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0NC9BRDBENjFGODNBNkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVL R3J2aTQyVGRDQmQxemtoR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7M1DvBGhHzCSO1ANjSrW79Kktxe/iOkmnMrM3lctusa4J+5uy1m0+ TvOl8BbpZhE9QjFTOn/arb5SLcyYavTDzp8mcK1YjLqD/gmYE5SFJdE5kgm9EXl7 tkWOgaLG4oEPcKA8lSIItRlf08HQJgaQp8CGqPwOYzOl5WPlG3HatIpHc+vbML6J ek7FC/01Hzdb7aOveLAh03L4HM3HTyAPSpTxWbe3oGuCD2dUwupmZv8hQITBcKUK leFLM7pAGoFLH31B0OJD5+QL8urVdr9/6gcQqjyz3leBbgjMhOLqfRYQ5ZYLQVN7 HgNzU7ZCUwodzTs+5M6NQgB8in22OOVP -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:33 2025 by rpki-client