$ rpki-client -vvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft File: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft (raw, json) Hash identifier: k9qVsTPcoXATNZdTdzpz5B2oCDawzUbl/yyuPWcl1fY= Subject key identifier: 1D:E5:A3:D4:99:B5:83:C7:48:92:20:EF:7C:C4:CC:50:5A:6C:47:B4 Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 Certificate issuer: /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Certificate serial: 34DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft Manifest number: 34D9 Signing time: Tue 04 Nov 2025 14:56:18 +0000 Manifest this update: Tue 04 Nov 2025 14:56:18 +0000 Manifest next update: Tue 11 Nov 2025 14:56:18 +0000 Files and hashes: 1: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl (hash: ypy1/e+CV4TLLl+C6i3bRuunctBTvyzCwL1OtJZa8tA=) 2: A5C01D6ED15511EA904EF30BC4F9AE02.roa (hash: tieWSzu8lKOoBqQ293X6Mhk+ox3CzZ2+KgEe+KsaI+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13535 (0x34df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Validity Not Before: Nov 4 14:56:18 2025 GMT Not After : Nov 11 14:56:18 2025 GMT Subject: CN=690a1412-32af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:eb:b6:51:56:f5:3f:26:64:0d:51:19:03: 61:2d:02:41:30:68:00:23:86:26:0f:a2:19:6f:29: d7:1c:22:d8:ae:8a:58:73:41:bd:20:0d:c0:57:17: 84:83:23:c0:d3:4c:a5:64:fc:c4:08:95:57:36:6b: 1a:37:d1:20:ba:01:3c:fa:b1:cb:e2:37:36:dd:c9: 26:b9:16:60:93:1a:3b:d9:86:ba:e8:14:ab:3c:21: d7:ac:35:b7:23:88:69:25:c6:ab:b8:68:f5:16:a1: 1a:6f:c7:cb:ce:4b:25:7b:70:01:dd:45:f8:81:a5: bb:89:f8:15:e3:1a:3d:d1:cc:e7:0b:b9:43:22:f2: 4f:85:b1:c1:83:ed:0a:54:08:4c:cc:a0:90:09:41: 08:aa:45:e1:a3:5d:a5:e5:fc:24:32:8b:ce:8d:d8: b9:97:95:f3:ca:50:e8:12:ac:0b:0a:79:76:1b:5a: 55:70:09:27:16:b7:51:04:46:e0:3c:a2:74:4d:83: 32:e8:bb:85:fd:3e:28:e3:29:89:a5:5d:24:ba:d5: 9a:b7:d8:b7:92:a9:e2:10:4b:b9:4c:e6:e3:bc:56: 38:ea:67:7e:48:c8:14:ef:e1:0d:e7:2d:f5:b9:03: c6:5c:69:df:8e:64:3e:1f:9f:0d:2a:54:68:96:f3: a8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E5:A3:D4:99:B5:83:C7:48:92:20:EF:7C:C4:CC:50:5A:6C:47:B4 X509v3 Authority Key Identifier: keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:49:f6:0d:45:08:54:ad:9b:4a:aa:c3:b2:f5:17:d6:d8:6e: 46:49:2a:94:b7:e9:65:d3:99:cf:26:70:bd:b5:c5:34:b5:c4: 5f:4b:d3:d7:eb:61:81:03:aa:53:e2:e2:eb:ee:db:11:5a:c5: a6:cf:35:ac:df:56:3d:65:4b:17:1b:57:d3:66:f9:86:9e:f1: b6:e7:50:e6:ac:1a:50:c8:a9:dd:1f:4d:00:e8:7a:4a:e5:0e: 96:ec:31:79:1b:c4:2e:d0:4c:dd:57:f3:a1:56:7f:3c:5c:d7: 22:62:78:14:c4:80:1b:0c:07:0e:dd:29:8c:27:03:35:13:a2: cc:0a:90:c4:4d:c2:1d:a1:8c:e3:88:78:6f:d2:ec:25:15:bd: 3e:ce:6f:2b:23:87:e2:0b:b1:a0:d9:04:4a:22:77:23:0a:f5: 5e:86:57:8f:68:e6:49:07:3c:e5:5d:6b:73:ae:c1:d2:de:4e: 78:51:9b:4d:1a:45:4c:43:47:a7:c5:76:52:7b:87:43:16:a5: 4f:41:38:ed:5e:7f:92:67:b6:9a:41:c9:8f:9c:14:1c:42:d3: b1:06:ed:1c:bf:97:0f:53:d9:86:24:f9:8c:92:03:9c:0c:91: 9b:57:cc:f6:36:1d:4b:2d:86:63:94:14:ca:4c:1f:e8:75:8e: c1:5f:be:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0N0ExMTAvBgNVBAUTKEU1MkQ3RjdGQkFBQzFGNzVBRkZBNzYyRURCM0YyODE2 MEJDRkJEMjUwHhcNMjUxMTA0MTQ1NjE4WhcNMjUxMTExMTQ1NjE4WjAYMRYwFAYD VQQDEw02OTBhMTQxMi0zMmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqALrtlFW9T8mZA1RGQNhLQJBMGgAI4YmD6IZbynXHCLYropYc0G9IA3AVxeE gyPA00ylZPzECJVXNmsaN9EgugE8+rHL4jc23ckmuRZgkxo72Ya66BSrPCHXrDW3 I4hpJcaruGj1FqEab8fLzksle3AB3UX4gaW7ifgV4xo90cznC7lDIvJPhbHBg+0K VAhMzKCQCUEIqkXho12l5fwkMovOjdi5l5XzylDoEqwLCnl2G1pVcAknFrdRBEbg PKJ0TYMy6LuF/T4o4ymJpV0kutWat9i3kqniEEu5TObjvFY46md+SMgU7+EN5y31 uQPGXGnfjmQ+H58NKlRolvOoYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3lo9SZ tYPHSJIg73zEzFBabEe0MB8GA1UdIwQYMBaAFOUtf3+6rB91r/p2Lts/KBYLz70l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ3QS80QUYyMjFEQTFE OTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gzV3Ytbll1Mno4b0ZndlB2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVTMV9mN3FzSDNXdi1uWXUyejhvRmd2UHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ3QS80QUYyMjFEQTFEOTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gz V3Ytbll1Mno4b0ZndlB2U1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzSfYNRQhUrZtKqsOy9RfW2G5GSSqUt+ll05nPJnC9tcU0tcRfS9PX 62GBA6pT4uLr7tsRWsWmzzWs31Y9ZUsXG1fTZvmGnvG251DmrBpQyKndH00A6HpK 5Q6W7DF5G8Qu0EzdV/OhVn88XNciYngUxIAbDAcO3SmMJwM1E6LMCpDETcIdoYzj iHhv0uwlFb0+zm8rI4fiC7Gg2QRKIncjCvVehlePaOZJBzzlXWtzrsHS3k54UZtN GkVMQ0enxXZSe4dDFqVPQTjtXn+SZ7aaQcmPnBQcQtOxBu0cv5cPU9mGJPmMkgOc DJGbV8z2Nh1LLYZjlBTKTB/odY7BX779 -----END CERTIFICATE-----Generated at Wed Nov 5 09:52:40 2025 by rpki-client