$ rpki-client -vvf rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft File: 5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft (raw, json) Hash identifier: gJWc+U3ErP9Frj55W4Xh9WJsxfPz3izogmA49yLr6Cw= Subject key identifier: 1A:E5:D2:C4:25:DA:E6:85:71:78:A6:FC:3B:69:01:44:62:C4:0B:79 Authority key identifier: E7:F8:C2:23:61:A9:EC:B7:61:EB:FB:01:E8:B9:77:C9:07:A4:F1:F4 Certificate issuer: /CN=A913F680/serialNumber=E7F8C22361A9ECB761EBFB01E8B977C907A4F1F4 Certificate serial: 043C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft Manifest number: 0437 Signing time: Wed 05 Nov 2025 00:22:34 +0000 Manifest this update: Wed 05 Nov 2025 00:22:33 +0000 Manifest next update: Wed 12 Nov 2025 00:22:33 +0000 Files and hashes: 1: 5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.crl (hash: PIumzI9TM3fVZCiPrgssLm3zEECPA7eB+QgRYXJrvg0=) 2: 019A77BC7F1811ECA6613535C4F9AE02.roa (hash: MOIfryLm0F7FIHaaibpE6f7YuVyXCkf77p3Hld650jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.crl rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1084 (0x43c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F680, serialNumber=E7F8C22361A9ECB761EBFB01E8B977C907A4F1F4 Validity Not Before: Nov 5 00:22:33 2025 GMT Not After : Nov 12 00:22:33 2025 GMT Subject: CN=690a98c9-0085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:52:3d:66:39:39:d7:09:7a:99:3d:ba:9f: d5:ee:e4:6b:25:01:a9:09:8c:fd:c4:69:81:f6:7e: 45:79:05:76:28:81:88:dd:70:ff:ad:e2:39:cc:10: f2:ff:cf:ff:ac:25:27:1e:c9:42:c2:8d:54:ab:02: 5f:2f:e5:4c:52:8f:9d:66:59:53:84:21:c2:c5:01: 11:1c:4d:14:b8:55:ff:89:ec:2e:95:bb:f9:75:66: 4b:46:f9:73:e2:90:28:47:3e:b0:ec:59:47:9c:9a: af:bf:36:ce:50:df:0a:1e:84:e9:a8:c5:9d:e7:89: 18:54:44:24:e3:1b:04:2d:e9:2a:33:c6:ca:79:14: 39:5a:c8:19:35:9a:66:53:4c:d1:3e:69:bf:23:d0: 79:d4:f8:a0:ac:d6:bb:48:f3:3d:7c:c9:ec:07:82: 24:c4:8f:be:98:c6:64:6a:73:77:da:d1:42:fb:1f: b9:54:d6:88:24:62:a8:0d:78:00:ab:d9:e0:b0:d7: f2:c1:73:e1:d9:ea:c0:ab:ca:ec:34:0c:5d:93:51: 9e:00:8b:ae:ed:5c:69:67:7c:15:2d:ee:71:e1:37: d6:f0:c0:c7:1d:e4:80:e4:59:e7:e2:0c:61:33:88: 96:01:54:84:4f:53:97:4d:91:96:66:2f:b2:26:cd: 08:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E5:D2:C4:25:DA:E6:85:71:78:A6:FC:3B:69:01:44:62:C4:0B:79 X509v3 Authority Key Identifier: keyid:E7:F8:C2:23:61:A9:EC:B7:61:EB:FB:01:E8:B9:77:C9:07:A4:F1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:08:a0:dd:cf:92:b0:46:1b:40:82:af:a5:d2:ba:77:0b:e4: 08:95:0b:42:4e:9d:8a:b9:45:f4:f4:52:6d:e6:c5:fb:4b:bb: 6e:39:7a:70:e2:2e:79:99:f7:dd:41:93:7b:1f:d4:e7:ef:e3: 8a:ad:90:9c:f3:60:30:9b:14:b5:4b:c0:eb:36:4c:25:38:26: fb:82:c8:5f:3c:d9:b8:7e:25:bd:6f:15:6b:b1:10:49:da:73: 81:df:52:29:26:30:d0:0d:ab:89:72:71:73:fa:5d:40:31:74: 06:e8:b8:54:9c:44:09:91:c3:af:f0:be:bf:25:c6:b2:8f:7a: 6d:4e:39:71:bd:a4:d1:96:3e:c6:46:39:60:bd:69:f3:d8:67: 7e:d4:73:33:64:cd:01:d2:07:4c:97:6f:c3:90:67:61:e8:8c: 79:55:76:8f:2f:3c:e5:11:96:c3:12:73:92:49:02:c8:24:a3: c0:a7:f4:6c:8c:f7:88:9c:f7:f6:aa:55:01:57:ab:24:50:25: 88:3d:6b:64:1f:41:9c:b2:b9:88:c1:3b:d3:ec:bc:6c:46:a0: 62:11:26:8c:30:71:bf:40:72:2e:1c:55:06:8b:a5:95:00:79: 2c:cb:2b:8d:28:07:97:63:12:9b:ef:2a:74:64:f2:29:5c:ce: bc:2e:b3:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2ODAxMTAvBgNVBAUTKEU3RjhDMjIzNjFBOUVDQjc2MUVCRkIwMUU4Qjk3N0M5 MDdBNEYxRjQwHhcNMjUxMTA1MDAyMjMzWhcNMjUxMTEyMDAyMjMzWjAYMRYwFAYD VQQDEw02OTBhOThjOS0wMDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFRSPWY5OdcJepk9up/V7uRrJQGpCYz9xGmB9n5FeQV2KIGI3XD/reI5zBDy /8//rCUnHslCwo1UqwJfL+VMUo+dZllThCHCxQERHE0UuFX/iewulbv5dWZLRvlz 4pAoRz6w7FlHnJqvvzbOUN8KHoTpqMWd54kYVEQk4xsELekqM8bKeRQ5WsgZNZpm U0zRPmm/I9B51PigrNa7SPM9fMnsB4IkxI++mMZkanN32tFC+x+5VNaIJGKoDXgA q9ngsNfywXPh2erAq8rsNAxdk1GeAIuu7VxpZ3wVLe5x4TfW8MDHHeSA5Fnn4gxh M4iWAVSET1OXTZGWZi+yJs0IaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBrl0sQl 2uaFcXim/DtpAURixAt5MB8GA1UdIwQYMBaAFOf4wiNhqey3Yev7Aei5d8kHpPH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjY4MC9FMUZCRkEwNjdG MTMxMUVDOTNGQzVDNUZDNEY5QUUwMi81X2pDSTJHcDdMZGg2X3NCNkxsM3lRZWs4 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVfakNJMkdwN0xkaDZfc0I2TGwzeVFlazhmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjY4MC9FMUZCRkEwNjdGMTMxMUVDOTNGQzVDNUZDNEY5QUUwMi81X2pDSTJHcDdM ZGg2X3NCNkxsM3lRZWs4ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsCKDdz5KwRhtAgq+l0rp3C+QIlQtCTp2KuUX09FJt5sX7S7tuOXpw 4i55mffdQZN7H9Tn7+OKrZCc82AwmxS1S8DrNkwlOCb7gshfPNm4fiW9bxVrsRBJ 2nOB31IpJjDQDauJcnFz+l1AMXQG6LhUnEQJkcOv8L6/Jcayj3ptTjlxvaTRlj7G RjlgvWnz2Gd+1HMzZM0B0gdMl2/DkGdh6Ix5VXaPLzzlEZbDEnOSSQLIJKPAp/Rs jPeInPf2qlUBV6skUCWIPWtkH0GcsrmIwTvT7LxsRqBiESaMMHG/QHIuHFUGi6WV AHksyyuNKAeXYxKb7yp0ZPIpXM68LrPh -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:57 2025 by rpki-client