$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft File: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft (raw, json) Hash identifier: mDHw9BtSFkREV6QExrA1Oj9yqqsIdX+rNbCpF6VQaDM= Subject key identifier: 02:57:52:20:93:6D:2D:6B:C1:50:F0:B5:B1:9C:5E:89:70:51:B1:10 Authority key identifier: E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69 Certificate issuer: /CN=A9127B77/serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369 Certificate serial: 34DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft Manifest number: 34DB Signing time: Tue 04 Nov 2025 15:14:29 +0000 Manifest this update: Tue 04 Nov 2025 15:14:28 +0000 Manifest next update: Tue 11 Nov 2025 15:14:28 +0000 Files and hashes: 1: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl (hash: tKw420XZN+L985bj5YvKQFlm9gMetQvw7Hhgfv9+/WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13531 (0x34db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B77, serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369 Validity Not Before: Nov 4 15:14:28 2025 GMT Not After : Nov 11 15:14:28 2025 GMT Subject: CN=690a1854-544a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:60:f6:d2:53:9d:92:e9:0f:88:c1:6c:4d:3d: 10:7e:f7:c2:c4:f5:d6:ab:86:4b:30:e5:96:6f:20: db:72:3a:a2:b0:90:8f:27:ba:3a:20:02:83:c3:2f: d9:1e:96:a7:26:42:96:d7:a2:d6:22:2a:86:eb:c4: 79:31:b5:37:a4:f5:ef:11:88:07:70:03:06:9f:60: ea:0d:f1:6e:4f:60:fd:d2:18:4c:94:6a:34:10:d6: 7a:99:e8:51:92:dc:69:c6:a2:b3:ca:60:ae:33:a0: 02:69:cd:25:33:a6:0a:03:22:f8:c9:61:9f:0f:f3: 5d:f4:bb:a4:8e:b2:0a:93:65:3f:1a:7b:15:48:96: 72:cc:91:04:45:f1:ab:81:e4:03:e9:74:ed:41:33: 80:12:92:fd:86:69:2f:7e:a0:da:b9:ed:ca:45:aa: 31:d8:9f:55:72:92:4e:41:45:64:4d:f4:58:30:5f: 73:42:1b:29:80:a8:ed:b9:5b:f4:e8:b2:3b:52:5a: 6a:cb:fa:0d:f1:d2:e2:b6:9e:7b:f2:7e:c0:8b:62: 97:73:2b:b9:7a:bf:bf:d5:74:eb:7e:0d:bd:c7:66: 14:74:2e:2d:97:9a:55:0a:ff:10:76:36:6c:eb:fd: 28:21:10:99:ce:27:a5:8f:01:db:1e:09:75:b0:dc: ef:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:57:52:20:93:6D:2D:6B:C1:50:F0:B5:B1:9C:5E:89:70:51:B1:10 X509v3 Authority Key Identifier: keyid:E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:16:ce:b3:a8:36:d6:af:4d:77:ed:f1:1a:98:10:50:bf:db: 8d:d9:ad:a8:42:ba:bc:66:0a:1d:8e:c5:68:dd:9d:be:f9:f9: b3:bb:d3:9d:fc:ff:17:89:2a:74:bf:a9:a2:9d:0d:e3:19:c0: ea:1f:50:f7:65:a9:49:65:d7:92:be:a6:53:35:6d:cc:64:73: 98:6e:a6:dd:9a:92:8a:2c:e3:d5:f4:6f:e7:3b:c2:b9:d4:c9: 2b:24:0b:54:25:8e:39:c9:cb:d6:5c:70:d4:14:f4:af:9f:67: d4:4c:bb:8f:fa:b9:93:23:36:9f:37:d5:2b:83:74:ec:e7:0c: 06:62:9c:63:19:55:9d:3d:ed:e2:09:4d:1b:75:81:97:f1:bc: 76:6a:ba:4f:93:b8:3e:d0:5d:0f:77:dd:9e:67:fe:fe:e1:d3: 4a:8b:07:47:ca:c6:48:ec:82:a1:dc:85:be:0a:f8:66:eb:db: 5b:97:46:2b:0e:67:38:1d:12:e4:c3:46:01:7e:e2:b9:26:78: e5:4f:3d:d6:63:61:d0:5e:18:f2:66:db:bf:cd:26:2f:53:ff: de:31:31:4b:5f:1d:07:89:75:2c:d5:c7:da:db:6e:53:df:47: 65:89:4d:10:c9:57:ef:2d:04:e1:8e:4a:96:83:03:1a:4d:8b: f8:44:67:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCNzcxMTAvBgNVBAUTKEU1OTVCQ0I3QkZFM0M4NjcyQTgyODIxQ0M5MzZCQzhF QzM5MjAzNjkwHhcNMjUxMTA0MTUxNDI4WhcNMjUxMTExMTUxNDI4WjAYMRYwFAYD VQQDEw02OTBhMTg1NC01NDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GD20lOdkukPiMFsTT0QfvfCxPXWq4ZLMOWWbyDbcjqisJCPJ7o6IAKDwy/Z HpanJkKW16LWIiqG68R5MbU3pPXvEYgHcAMGn2DqDfFuT2D90hhMlGo0ENZ6mehR ktxpxqKzymCuM6ACac0lM6YKAyL4yWGfD/Nd9LukjrIKk2U/GnsVSJZyzJEERfGr geQD6XTtQTOAEpL9hmkvfqDaue3KRaox2J9VcpJOQUVkTfRYMF9zQhspgKjtuVv0 6LI7Ulpqy/oN8dLitp578n7Ai2KXcyu5er+/1XTrfg29x2YUdC4tl5pVCv8QdjZs 6/0oIRCZzieljwHbHgl1sNzv3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJXUiCT bS1rwVDwtbGcXolwUbEQMB8GA1UdIwQYMBaAFOWVvLe/48hnKoKCHMk2vI7DkgNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0I3Ny81ODk4QTU2QzFE QTYxMUUyOTc4NTk5OUQwOEIwMkNEMi81Wlc4dDdfanlHY3Fnb0ljeVRhOGpzT1NB MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaVzh0N19qeUdjcWdvSWN5VGE4anNPU0Eyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0I3Ny81ODk4QTU2QzFEQTYxMUUyOTc4NTk5OUQwOEIwMkNEMi81Wlc4dDdfanlH Y3Fnb0ljeVRhOGpzT1NBMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHFs6zqDbWr0137fEamBBQv9uN2a2oQrq8ZgodjsVo3Z2++fmzu9Od /P8XiSp0v6minQ3jGcDqH1D3ZalJZdeSvqZTNW3MZHOYbqbdmpKKLOPV9G/nO8K5 1MkrJAtUJY45ycvWXHDUFPSvn2fUTLuP+rmTIzafN9Urg3Ts5wwGYpxjGVWdPe3i CU0bdYGX8bx2arpPk7g+0F0Pd92eZ/7+4dNKiwdHysZI7IKh3IW+Cvhm69tbl0Yr Dmc4HRLkw0YBfuK5JnjlTz3WY2HQXhjyZtu/zSYvU//eMTFLXx0HiXUs1cfa225T 30dliU0QyVfvLQThjkqWgwMaTYv4RGd9 -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:51 2025 by rpki-client