$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft File: 5nV74dIYmt6NdyyclIZDEL45LXA.mft (raw, json) Hash identifier: pbgRI+jfJKgz2Buurwuh5Uwlz29Z8AKJrLDkM519ItE= Subject key identifier: FD:F0:DB:63:CD:BF:CD:62:37:08:A9:5A:A8:D6:11:38:27:CC:FC:F2 Authority key identifier: E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 Certificate issuer: /CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Certificate serial: 04B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft Manifest number: 04AE Signing time: Sun 02 Nov 2025 23:54:10 +0000 Manifest this update: Sun 02 Nov 2025 23:54:10 +0000 Manifest next update: Sun 09 Nov 2025 23:54:10 +0000 Files and hashes: 1: 5nV74dIYmt6NdyyclIZDEL45LXA.crl (hash: h5x0J+J+a0iFNfq9vgoq7DEkeT+RLGnSKMSUqDJKZB4=) 2: 2B70BBE889E111EEB5E86A0EC4F9AE02.roa (hash: ii2gJPxNc38H3aArS7srunxvBmsm9HkEFksE6I5LOY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1204 (0x4b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F9E, serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Validity Not Before: Nov 2 23:54:10 2025 GMT Not After : Nov 9 23:54:10 2025 GMT Subject: CN=6907ef22-e0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:f0:e9:96:4c:c6:f3:b5:fd:28:29:a8:9b: 02:da:7c:b4:16:b4:3b:6a:60:07:33:cc:ed:15:f4: 68:f3:d8:57:3a:7d:d0:8e:c9:58:4d:45:a7:92:a4: 6d:f7:4c:25:bf:17:9a:84:c0:b0:4e:7c:6f:18:13: e2:f1:50:69:99:ad:65:ce:a5:e6:f3:e8:e2:3a:62: 26:1b:73:65:e8:7d:bc:18:73:4a:ef:8d:4c:45:fc: c1:62:2e:6a:4c:c3:a7:6f:50:fb:43:24:c5:d5:70: d4:b1:f0:6e:8b:30:40:bf:4a:4d:02:27:6d:6e:23: 7a:4f:62:df:58:d5:e9:c1:27:35:af:6b:a0:37:e1: bd:5f:b4:de:6a:b9:0e:f5:67:71:58:4a:0e:11:4f: 05:1e:bf:7d:81:c7:1a:73:dd:42:c2:f5:6a:47:04: 43:aa:34:12:91:f1:68:0f:26:49:81:a3:19:6e:74: 5d:2d:0b:d4:a2:76:8c:7a:b7:b9:59:86:4f:5d:af: c4:f9:9e:32:8e:00:15:e4:91:9c:d6:65:92:2d:bb: a0:b2:6b:85:9a:fe:20:25:bd:53:fd:75:78:ee:20: 3b:9c:1f:67:9a:99:85:a8:72:61:7f:a8:c7:91:b7: 41:13:73:f8:a4:35:0d:b6:8d:94:f5:b3:62:87:e4: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F0:DB:63:CD:BF:CD:62:37:08:A9:5A:A8:D6:11:38:27:CC:FC:F2 X509v3 Authority Key Identifier: keyid:E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:33:25:35:a1:31:dd:f3:73:40:48:17:c2:ef:1d:00:22:1b: c5:7c:63:bc:68:50:47:00:58:87:1f:ac:10:05:66:ec:39:d6: 67:39:e2:00:3c:eb:50:66:64:8e:53:39:d6:45:ea:43:50:1d: 85:74:15:72:ac:99:64:51:3c:bf:10:9b:a5:c3:ee:c4:fa:ab: 56:a2:f3:e7:97:64:0d:ae:a3:8c:ab:e0:dc:fc:7b:b4:c3:07: 7f:14:ce:6b:97:63:1e:6e:0c:27:68:b5:79:47:77:9c:d9:97: fc:3f:39:ff:a7:a0:2f:94:81:dc:49:20:34:cc:97:97:51:77: 0c:6a:d6:e4:ff:ae:65:26:c4:f1:70:38:3a:20:fe:1d:16:e9: a7:3f:25:a6:44:f0:fe:4e:ac:28:ea:08:c2:48:af:96:44:ad: 74:4c:4b:d6:19:13:d8:2e:99:66:fa:66:05:30:b8:03:b4:a3: 95:c4:63:42:27:c5:0e:4c:da:8d:b8:54:61:ab:89:f4:37:46: 1a:91:52:1f:8a:3e:13:76:ca:07:02:2c:75:42:42:6b:fa:b7: e8:50:63:a4:98:77:e1:ca:19:0e:27:f5:ec:58:40:e8:32:8f: 0e:c3:ce:0c:a6:62:36:2b:e7:30:40:75:ce:76:f8:14:08:ab: 72:3e:77:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGOUUxMTAvBgNVBAUTKEU2NzU3QkUxRDIxODlBREU4RDc3MkM5Qzk0ODY0MzEw QkUzOTJENzAwHhcNMjUxMTAyMjM1NDEwWhcNMjUxMTA5MjM1NDEwWjAYMRYwFAYD VQQDEw02OTA3ZWYyMi1lMGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseTw6ZZMxvO1/SgpqJsC2ny0FrQ7amAHM8ztFfRo89hXOn3QjslYTUWnkqRt 90wlvxeahMCwTnxvGBPi8VBpma1lzqXm8+jiOmImG3Nl6H28GHNK741MRfzBYi5q TMOnb1D7QyTF1XDUsfBuizBAv0pNAidtbiN6T2LfWNXpwSc1r2ugN+G9X7TearkO 9WdxWEoOEU8FHr99gccac91CwvVqRwRDqjQSkfFoDyZJgaMZbnRdLQvUonaMere5 WYZPXa/E+Z4yjgAV5JGc1mWSLbugsmuFmv4gJb1T/XV47iA7nB9nmpmFqHJhf6jH kbdBE3P4pDUNto2U9bNih+RQ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3w22PN v81iNwipWqjWETgnzPzyMB8GA1UdIwQYMBaAFOZ1e+HSGJrejXcsnJSGQxC+OS1w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY5RS8wMDZDRTk5QzUw MDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10Nk5keXljbElaREVMNDVM WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuVjc0ZElZbXQ2TmR5eWNsSVpERUw0NUxYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY5RS8wMDZDRTk5QzUwMDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10 Nk5keXljbElaREVMNDVMWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAMyU1oTHd83NASBfC7x0AIhvFfGO8aFBHAFiHH6wQBWbsOdZnOeIA POtQZmSOUznWRepDUB2FdBVyrJlkUTy/EJulw+7E+qtWovPnl2QNrqOMq+Dc/Hu0 wwd/FM5rl2MebgwnaLV5R3ec2Zf8Pzn/p6AvlIHcSSA0zJeXUXcMatbk/65lJsTx cDg6IP4dFumnPyWmRPD+Tqwo6gjCSK+WRK10TEvWGRPYLplm+mYFMLgDtKOVxGNC J8UOTNqNuFRhq4n0N0YakVIfij4TdsoHAix1QkJr+rfoUGOkmHfhyhkOJ/XsWEDo Mo8Ow84MpmI2K+cwQHXOdvgUCKtyPnfc -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:31 2025 by rpki-client