$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft File: 5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json) Hash identifier: 1SjB0/pyoFXcNFx6CaXuxu08GOTtCQOOM1zxA+dQsA8= Subject key identifier: 42:AC:13:5C:51:33:F1:22:F7:92:29:CF:82:B8:97:57:47:03:91:70 Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 Certificate issuer: /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft Manifest number: 0257 Signing time: Wed 05 Nov 2025 01:50:05 +0000 Manifest this update: Wed 05 Nov 2025 01:50:04 +0000 Manifest next update: Wed 12 Nov 2025 01:50:04 +0000 Files and hashes: 1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: tHdmP7sWo4q75Mv2CA767xyAXq5KmtaVAFLKXt4p/nI=) 2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: rXyXJ/J6rVFIkAmCNmdDPvJdD/VKGdNuveHL3e4vBN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B44, serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Validity Not Before: Nov 5 01:50:04 2025 GMT Not After : Nov 12 01:50:04 2025 GMT Subject: CN=690aad4d-fca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c6:62:13:b2:9d:37:27:a6:3a:18:32:e0:be: ee:04:c5:ce:a4:85:96:4e:89:2b:29:d7:b1:86:c0: ce:d1:88:4f:81:3c:91:dd:18:32:ce:18:c7:0d:63: 55:20:c3:ed:9f:33:6e:f5:38:4a:39:2c:4d:3a:3d: 2d:12:b9:d0:de:c1:3f:bc:c2:e0:ac:f1:7f:df:6a: 6a:f3:16:32:c2:92:ba:45:df:a7:41:e7:ae:ee:e5: cf:83:16:f9:8c:0b:fc:76:d1:ad:08:73:83:05:26: 49:b8:97:4b:89:eb:3b:d9:40:b0:c9:da:ab:89:b7: 3d:4d:bc:77:d4:8a:cb:db:46:b9:2b:9c:20:37:c6: 31:37:6c:6f:1d:5a:dd:aa:50:6d:c3:4e:7e:50:e3: 65:e0:de:6f:24:93:ec:db:75:bf:4d:80:50:32:fb: 44:18:44:fd:17:75:16:05:ea:f7:f9:87:22:09:4e: c0:e9:1e:81:05:da:97:e1:f5:d4:75:90:79:aa:77: 62:0e:d4:5c:de:4a:eb:4f:0c:d0:68:6e:e4:dc:2f: 04:74:e2:b3:d4:48:84:8b:50:d7:d1:46:cb:69:fb: c6:77:c8:be:01:85:12:bf:d2:5a:82:83:0d:2c:45: 37:a8:54:17:34:f8:e9:6d:e2:75:d6:da:88:45:1d: ba:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AC:13:5C:51:33:F1:22:F7:92:29:CF:82:B8:97:57:47:03:91:70 X509v3 Authority Key Identifier: keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:e5:02:f3:d2:83:1d:cc:f8:80:cd:ea:67:be:39:c4:ed:fb: 3f:56:d5:d4:f8:00:cc:89:98:bc:32:da:c9:05:78:b6:06:04: 20:36:a5:7d:3a:e5:24:41:81:33:48:0b:b3:b0:8b:2c:ad:18: f7:d3:f8:66:c1:db:51:16:b4:15:e6:24:cb:c8:0d:09:ee:44: f9:17:6a:7e:10:aa:77:f7:c7:56:42:a7:82:a2:51:75:0b:be: b5:55:7a:28:4a:88:63:dd:4c:a1:71:d7:a5:44:f0:07:de:21: 09:92:49:23:99:dd:ef:b4:b9:08:d1:af:a5:09:58:9a:c9:ba: 52:fc:25:4e:47:a7:05:3e:8d:8d:26:12:96:3a:5b:17:70:9b: 0d:b8:b2:f5:77:6c:e5:c2:5c:85:40:12:20:33:a4:de:36:63: 88:6a:62:e3:57:8d:70:c5:f2:4d:c3:13:7e:42:f0:ce:75:31: 48:d2:65:14:40:58:e8:a3:33:b2:e7:bf:54:81:c3:59:5c:e6: 41:03:3d:79:74:76:97:11:03:a0:8e:50:ce:f3:49:b2:05:23: ca:79:d1:6e:90:90:77:cf:53:39:74:23:cf:a4:0f:02:78:22: c8:7e:87:49:ad:8f:9f:3f:c3:80:52:b4:7a:d2:54:17:7b:4d: 42:79:43:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDQxMTAvBgNVBAUTKEU0NkUxODlEQzhFOTEwQTFBQkJFMkUzNjRERDA4MTc3 NUNFNDg0NjAwHhcNMjUxMTA1MDE1MDA0WhcNMjUxMTEyMDE1MDA0WjAYMRYwFAYD VQQDEw02OTBhYWQ0ZC1mY2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMZiE7KdNyemOhgy4L7uBMXOpIWWTokrKdexhsDO0YhPgTyR3RgyzhjHDWNV IMPtnzNu9ThKOSxNOj0tErnQ3sE/vMLgrPF/32pq8xYywpK6Rd+nQeeu7uXPgxb5 jAv8dtGtCHODBSZJuJdLies72UCwydqribc9Tbx31IrL20a5K5wgN8YxN2xvHVrd qlBtw05+UONl4N5vJJPs23W/TYBQMvtEGET9F3UWBer3+YciCU7A6R6BBdqX4fXU dZB5qndiDtRc3krrTwzQaG7k3C8EdOKz1EiEi1DX0UbLafvGd8i+AYUSv9JagoMN LEU3qFQXNPjpbeJ11tqIRR268QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKsE1xR M/Ei95Ipz4K4l1dHA5FwMB8GA1UdIwQYMBaAFORuGJ3I6RChq74uNk3QgXdc5IRg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0NC9BRDBENjFGODNB NkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVLR3J2aTQyVGRDQmQxemto R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNFluY2pwRUtHcnZpNDJUZENCZDF6a2hHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0NC9BRDBENjFGODNBNkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVL R3J2aTQyVGRDQmQxemtoR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj5QLz0oMdzPiAzepnvjnE7fs/VtXU+ADMiZi8MtrJBXi2BgQgNqV9 OuUkQYEzSAuzsIssrRj30/hmwdtRFrQV5iTLyA0J7kT5F2p+EKp398dWQqeColF1 C761VXooSohj3UyhcdelRPAH3iEJkkkjmd3vtLkI0a+lCViaybpS/CVOR6cFPo2N JhKWOlsXcJsNuLL1d2zlwlyFQBIgM6TeNmOIamLjV41wxfJNwxN+QvDOdTFI0mUU QFjoozOy579UgcNZXOZBAz15dHaXEQOgjlDO80myBSPKedFukJB3z1M5dCPPpA8C eCLIfodJrY+fP8OAUrR60lQXe01CeUOA -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:40 2025 by rpki-client