$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft File: g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json) Hash identifier: K48zK+hwFlm2BblhwiUfggoGR61TUMEhPPufTSye4d4= Subject key identifier: 71:57:D8:01:D3:00:D2:5B:DD:9E:75:86:76:28:3D:2D:E6:A2:66:54 Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41 Certificate issuer: /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft Manifest number: A5 Signing time: Wed 05 Nov 2025 06:35:33 +0000 Manifest this update: Wed 05 Nov 2025 06:35:33 +0000 Manifest next update: Wed 12 Nov 2025 06:35:33 +0000 Files and hashes: 1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: ALntArEr+j7D8235W0BEe1G5QCsRx9FKCNuQzwTX//g=) 2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: zf4VXC00w+/l84Z7TgltHAME/FckYYEPpSyVri8Ai2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241 Validity Not Before: Nov 5 06:35:33 2025 GMT Not After : Nov 12 06:35:33 2025 GMT Subject: CN=690af035-ce91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:59:66:81:12:6c:8e:2f:cb:7e:6d:89:c8: 17:c0:74:27:e3:7e:81:da:3c:01:90:f5:31:18:fd: 0d:19:73:ac:bd:47:f8:f7:75:ae:1c:b0:2b:74:45: fc:aa:1c:b4:15:20:2b:9a:39:23:5b:b4:32:40:89: 9f:12:ff:e7:2b:22:a1:50:42:ce:89:e2:80:df:21: df:f6:c1:6d:6e:68:43:03:aa:48:bf:13:72:3e:c0: 17:d3:e9:e8:f3:9d:55:53:8b:cf:ec:f6:a0:bf:fe: ef:7d:6b:44:4a:95:09:53:dc:a9:68:66:b0:be:ad: fe:23:03:0b:f5:56:93:e8:77:3f:27:08:5e:df:b8: c4:73:89:f4:7e:93:01:40:02:e4:56:46:0a:6c:63: 8b:8f:7a:70:0b:48:de:d6:90:8e:41:ee:c3:99:2c: 41:b4:fe:46:b4:5d:dd:e8:ba:02:14:c3:7f:4c:bc: 95:8f:36:e4:7a:7f:77:ab:fd:95:f6:b3:9d:00:00: c4:e0:b2:ff:30:ee:e3:85:1d:4a:29:53:03:c4:65: fb:af:d5:e7:cc:49:d4:20:cf:11:5c:d1:ed:27:4e: cc:b3:8f:aa:2c:fc:7d:b2:8f:be:ef:61:56:55:17: 65:4d:cc:d4:4d:a4:8f:e2:f0:30:a2:2c:70:01:4b: 37:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:57:D8:01:D3:00:D2:5B:DD:9E:75:86:76:28:3D:2D:E6:A2:66:54 X509v3 Authority Key Identifier: keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c2:0c:57:dc:79:fe:b9:95:07:4d:fd:27:eb:d0:02:40:ce: f8:13:ef:09:e7:27:a2:76:86:63:74:fb:7d:4f:99:14:9f:a9: 3d:01:e1:1f:8f:fd:bb:5d:5b:61:27:e7:95:4d:49:0c:74:2e: 48:a1:2b:2d:9e:15:51:4b:5c:45:48:e3:13:3d:2e:af:9f:d5: 81:8e:20:83:71:98:10:ec:42:13:c2:4b:a7:10:55:e8:ee:47: f2:d7:42:bc:04:dc:37:b5:63:af:cf:fe:cd:c9:c0:5d:94:96: f0:5b:4b:5e:2f:bd:43:ae:e9:e1:f8:ef:21:91:18:ca:b4:12: 79:e8:17:34:b6:4d:b8:ee:09:a5:be:7a:81:b5:d5:5f:8f:a6: 45:0e:52:fa:ed:62:3f:29:ca:da:2f:71:01:0a:0b:80:45:fc: 58:34:c1:fe:82:89:d6:55:b0:49:0d:64:07:05:25:9d:d3:e2: 61:48:20:08:27:c9:ea:42:8f:b7:c2:3d:75:4f:80:95:a1:05: e8:42:c9:b4:08:bf:23:2b:08:1c:e9:fc:32:6d:e2:96:ee:d2: e5:55:2f:5e:b7:66:95:79:24:25:7e:2d:85:12:05:d8:2a:a6: c3:01:bb:7c:2d:2e:35:25:ef:b8:58:7f:e8:3c:a1:e3:29:fe: 7d:1c:95:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCOUExMTAvBgNVBAUTKDgzOEZCRDBCMzk1RUE5MDcwNkM2QzI4OUFDMjZCMEQ3 MzhBMDQyNDEwHhcNMjUxMTA1MDYzNTMzWhcNMjUxMTEyMDYzNTMzWjAYMRYwFAYD VQQDEw02OTBhZjAzNS1jZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyxZZoESbI4vy35ticgXwHQn436B2jwBkPUxGP0NGXOsvUf493WuHLArdEX8 qhy0FSArmjkjW7QyQImfEv/nKyKhUELOieKA3yHf9sFtbmhDA6pIvxNyPsAX0+no 851VU4vP7Pagv/7vfWtESpUJU9ypaGawvq3+IwML9VaT6Hc/Jwhe37jEc4n0fpMB QALkVkYKbGOLj3pwC0je1pCOQe7DmSxBtP5GtF3d6LoCFMN/TLyVjzbken93q/2V 9rOdAADE4LL/MO7jhR1KKVMDxGX7r9XnzEnUIM8RXNHtJ07Ms4+qLPx9so++72FW VRdlTczUTaSP4vAwoixwAUs34wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFX2AHT ANJb3Z51hnYoPS3momZUMB8GA1UdIwQYMBaAFIOPvQs5XqkHBsbCiawmsNc4oEJB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI5QS80MTM5MEJDQUNG RjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9nNC05Q3psZXFRY0d4c0tKckNhdzF6aWdR a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c0LTlDemxlcVFjR3hzS0pyQ2F3MXppZ1FrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI5QS80MTM5MEJDQUNGRjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9nNC05Q3psZXFR Y0d4c0tKckNhdzF6aWdRa0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOwgxX3Hn+uZUHTf0n69ACQM74E+8J5yeidoZjdPt9T5kUn6k9AeEf j/27XVthJ+eVTUkMdC5IoSstnhVRS1xFSOMTPS6vn9WBjiCDcZgQ7EITwkunEFXo 7kfy10K8BNw3tWOvz/7NycBdlJbwW0teL71Drunh+O8hkRjKtBJ56Bc0tk247gml vnqBtdVfj6ZFDlL67WI/KcraL3EBCguARfxYNMH+gonWVbBJDWQHBSWd0+JhSCAI J8nqQo+3wj11T4CVoQXoQsm0CL8jKwgc6fwybeKW7tLlVS9et2aVeSQlfi2FEgXY KqbDAbt8LS41Je+4WH/oPKHjKf59HJXi -----END CERTIFICATE-----Generated at Wed Nov 5 12:23:46 2025 by rpki-client