$ rpki-client -vvf rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft File: 5nG8sr6VpsiFJxIdiBXovPGKoeI.mft (raw, json) Hash identifier: nquPzfnf8I+f+Q0Bzuqbx+rw38F5GMsPupofUuZqw/8= Subject key identifier: B0:88:79:4C:B7:97:B6:70:AD:F3:7A:04:3C:D4:F9:9F:C5:A1:36:03 Authority key identifier: E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2 Certificate issuer: /CN=A9124926/serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2 Certificate serial: 0A1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft Manifest number: 0A13 Signing time: Tue 04 Nov 2025 19:53:50 +0000 Manifest this update: Tue 04 Nov 2025 19:53:49 +0000 Manifest next update: Tue 11 Nov 2025 19:53:49 +0000 Files and hashes: 1: 5nG8sr6VpsiFJxIdiBXovPGKoeI.crl (hash: U1KS8aRf+mIUTi566wVvtqhZ6GwjzmwaNcFgdHteLZM=) 2: 209BA8B682DF11EAABBC5018C4F9AE02.roa (hash: BPcITeixSaXAriwkv0vsDzYrlqCAlvQdRZ4cRFHy1EA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2588 (0xa1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124926, serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2 Validity Not Before: Nov 4 19:53:49 2025 GMT Not After : Nov 11 19:53:49 2025 GMT Subject: CN=690a59ce-c8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:52:8d:8a:d7:14:19:73:fa:d6:9d:62:10:33: 21:a6:bf:e1:8a:55:c4:39:1f:d1:b2:4a:d7:dd:e1: da:c1:e5:d2:b8:50:50:4f:e5:c6:2b:4b:f4:5f:47: a8:23:67:d3:10:1a:cd:6f:6c:7e:5d:b5:b6:12:91: 79:4b:83:e2:eb:7f:c7:be:9e:0e:7b:2b:6a:43:aa: 73:70:81:79:b7:a3:ef:ec:d4:e6:1d:0a:e4:b0:3b: 0f:1c:97:73:a7:ea:d1:51:bd:e7:e7:32:32:9f:94: f4:60:a8:97:10:33:01:06:c2:e4:ba:ec:88:2b:8b: ef:29:f9:36:aa:6f:ad:41:e8:90:49:b7:25:d8:a6: eb:18:a5:ef:c5:59:a7:ef:a2:90:9d:77:73:8c:be: 8a:c2:bd:8d:54:3e:af:a0:8f:f1:f4:b7:a9:5f:da: ad:e7:22:75:89:38:22:e2:05:23:0b:71:fc:eb:85: 79:44:4a:94:b6:16:f7:42:99:21:de:7d:88:0c:8c: 98:2f:85:34:7a:4d:20:27:d2:84:83:55:11:00:b2: 5c:04:82:cf:9e:fa:02:a3:95:0e:99:f9:bc:3b:1c: ca:c4:2d:ef:6d:f5:26:1c:9a:fc:00:a4:bf:58:db: 4e:03:d3:0c:1d:3b:af:25:67:82:9b:5e:40:ca:77: e5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:88:79:4C:B7:97:B6:70:AD:F3:7A:04:3C:D4:F9:9F:C5:A1:36:03 X509v3 Authority Key Identifier: keyid:E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e5:2c:b3:94:63:c5:26:4a:47:c7:c0:57:61:cf:4b:b6:d2: e9:78:ee:7d:9f:23:ca:41:7d:e7:f1:5b:a8:93:ab:74:27:6e: be:b9:e8:81:b5:06:77:63:a8:5b:b6:67:4c:a4:1a:0a:42:76: 82:04:10:01:71:4a:2b:f0:d1:02:de:f4:0c:e9:23:9f:83:9d: c4:ff:21:77:46:bf:17:87:f9:c4:80:92:4d:cc:0f:34:3b:e5: 8d:5d:12:39:ee:c2:c4:4c:5c:3d:a8:49:22:a0:bd:27:45:dc: eb:4d:21:7d:5b:82:88:f3:eb:0b:c5:b7:15:83:e7:68:68:ac: 20:b3:87:d5:b5:67:c4:dc:76:c0:c6:5a:a7:cc:03:8c:b9:fc: ec:6b:36:89:02:1c:b1:a0:0f:ab:33:5b:68:2f:7c:73:4c:f7: 1e:1f:28:35:2d:6c:80:17:05:48:eb:ca:e1:3b:c1:6d:13:3f: 6d:db:e0:2c:f4:66:51:b7:17:73:b1:3b:58:1b:01:e1:4c:3d: 9a:be:81:51:56:58:8b:86:72:eb:59:65:da:58:b9:ec:87:db: 33:c6:2d:84:3b:a4:83:c3:87:4e:64:8a:19:8c:a6:27:f6:c8: c7:f7:b6:84:e2:9e:eb:50:e6:2a:25:35:06:24:b2:66:24:75: f8:7a:6e:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ5MjYxMTAvBgNVBAUTKEU2NzFCQ0IyQkU5NUE2Qzg4NTI3MTIxRDg4MTVFOEJD RjE4QUExRTIwHhcNMjUxMTA0MTk1MzQ5WhcNMjUxMTExMTk1MzQ5WjAYMRYwFAYD VQQDEw02OTBhNTljZS1jOGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3VKNitcUGXP61p1iEDMhpr/hilXEOR/RskrX3eHaweXSuFBQT+XGK0v0X0eo I2fTEBrNb2x+XbW2EpF5S4Pi63/Hvp4OeytqQ6pzcIF5t6Pv7NTmHQrksDsPHJdz p+rRUb3n5zIyn5T0YKiXEDMBBsLkuuyIK4vvKfk2qm+tQeiQSbcl2KbrGKXvxVmn 76KQnXdzjL6Kwr2NVD6voI/x9LepX9qt5yJ1iTgi4gUjC3H864V5REqUthb3Qpkh 3n2IDIyYL4U0ek0gJ9KEg1URALJcBILPnvoCo5UOmfm8OxzKxC3vbfUmHJr8AKS/ WNtOA9MMHTuvJWeCm15AynfloQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCIeUy3 l7ZwrfN6BDzU+Z/FoTYDMB8GA1UdIwQYMBaAFOZxvLK+labIhScSHYgV6LzxiqHi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDkyNi9CMzg1NzhDNDgy RDkxMUVBQjlGQ0QyODVDNEY5QUUwMi81bkc4c3I2VnBzaUZKeElkaUJYb3ZQR0tv ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuRzhzcjZWcHNpRkp4SWRpQlhvdlBHS29lSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDkyNi9CMzg1NzhDNDgyRDkxMUVBQjlGQ0QyODVDNEY5QUUwMi81bkc4c3I2VnBz aUZKeElkaUJYb3ZQR0tvZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB65SyzlGPFJkpHx8BXYc9LttLpeO59nyPKQX3n8Vuok6t0J26+ueiB tQZ3Y6hbtmdMpBoKQnaCBBABcUor8NEC3vQM6SOfg53E/yF3Rr8Xh/nEgJJNzA80 O+WNXRI57sLETFw9qEkioL0nRdzrTSF9W4KI8+sLxbcVg+doaKwgs4fVtWfE3HbA xlqnzAOMufzsazaJAhyxoA+rM1toL3xzTPceHyg1LWyAFwVI68rhO8FtEz9t2+As 9GZRtxdzsTtYGwHhTD2avoFRVliLhnLrWWXaWLnsh9szxi2EO6SDw4dOZIoZjKYn 9sjH97aE4p7rUOYqJTUGJLJmJHX4em51 -----END CERTIFICATE-----Generated at Wed Nov 5 21:00:47 2025 by rpki-client