$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft File: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft (raw, json) Hash identifier: oKDx3Mz4kgDWu82aakStDWYhNq13RG/e6iFwg2NhoEo= Subject key identifier: 1C:47:69:F4:8A:45:B7:19:89:18:CA:59:B1:5C:8E:3C:1D:80:2F:C5 Authority key identifier: E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0 Certificate issuer: /CN=A917B633/serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft Manifest number: C9 Signing time: Wed 05 Nov 2025 05:56:18 +0000 Manifest this update: Wed 05 Nov 2025 05:56:17 +0000 Manifest next update: Wed 12 Nov 2025 05:56:17 +0000 Files and hashes: 1: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl (hash: 9HV/YtLFTID+7yEHHyG+phB58InZtZ9CDIcOooUZtpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B633, serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0 Validity Not Before: Nov 5 05:56:17 2025 GMT Not After : Nov 12 05:56:17 2025 GMT Subject: CN=690ae702-dcb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:87:c8:e4:32:2a:9d:26:77:55:d4:c2:b4:43: 1d:05:c6:33:db:f9:c3:c5:f0:11:9f:a6:eb:36:9d: 8f:33:f4:62:f9:d9:fc:1c:56:a1:e3:dd:c7:3a:9c: f9:46:c1:4b:6c:3e:4e:be:62:03:4c:ce:3d:b2:ff: a5:f1:83:2f:f9:45:97:0c:2f:93:6b:55:b1:56:74: a0:4f:43:49:99:18:21:b0:57:92:c7:3f:11:b4:f3: 1d:ca:01:1d:d5:39:25:64:6c:4c:0d:05:f8:83:be: a4:2e:6e:11:93:ef:2f:cc:aa:83:47:20:66:49:ca: 49:97:17:ce:84:a5:52:c4:b1:5a:2b:4c:86:87:c8: 7b:f5:b4:c3:ed:d3:d8:af:19:c4:1b:78:67:2c:ef: e4:c0:67:05:ee:42:b7:7d:e5:c3:ab:59:40:92:b8: 1f:7e:80:aa:56:e7:0e:93:0f:a9:bf:16:42:c5:85: 5c:50:5b:b4:12:44:b4:a9:22:8e:92:0b:e4:4d:a5: 0d:be:89:72:e2:99:21:ec:f3:53:b7:1e:e7:c3:a9: 23:39:2f:42:57:40:04:9c:32:8f:7c:b6:86:34:72: 4a:96:6d:f3:17:d5:d6:84:4b:2a:53:7d:de:5a:87: 74:86:7d:00:37:0b:3b:9c:95:5c:20:3c:21:fc:f0: 5c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:47:69:F4:8A:45:B7:19:89:18:CA:59:B1:5C:8E:3C:1D:80:2F:C5 X509v3 Authority Key Identifier: keyid:E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:de:98:64:7b:31:20:d8:84:3c:3e:ce:75:9c:be:e4:0f:eb: 5d:ea:94:b3:6b:37:e5:45:e7:49:6e:3f:c3:50:da:8c:29:5f: 94:50:dd:31:01:0e:96:6d:c8:34:1d:44:18:3f:a9:cb:91:02: f5:98:c6:48:f1:97:9a:e0:ac:54:d2:70:b2:c8:18:74:ff:b5: 30:2d:83:df:94:19:99:0c:f5:75:35:f1:54:0a:48:84:24:8c: 63:d4:55:f7:4b:2f:ff:08:01:30:f0:ff:b5:bb:6c:ca:9f:22: fc:a3:cd:47:28:e4:4f:cc:85:f6:5e:e0:44:a0:11:ec:0f:9a: fb:f7:4e:13:9c:dd:26:6a:e3:09:2f:f8:1a:c7:bf:ad:98:cd: 69:e6:1b:ff:06:5d:01:f6:6c:2e:1f:c3:86:3f:ba:67:54:33: 96:7d:2d:5a:02:b3:87:58:c7:88:35:50:d8:77:13:3e:1e:8e: b8:e7:f6:38:71:70:1f:5f:96:b6:ba:38:0c:94:42:fd:19:1a: 22:74:ee:7b:12:24:fa:ba:e3:80:03:aa:0c:05:27:d9:1c:c9: f3:e4:de:14:0c:0f:69:ff:68:d0:01:d8:04:fe:07:5e:b9:5b: 05:62:86:a0:0c:ff:61:fb:82:45:79:b5:1a:2f:43:97:d5:07: c9:41:41:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2MzMxMTAvBgNVBAUTKEU2MEUyMTQxRDcxREI5RkM4OUZBQkZCNUZEQUQwMzcy REZBMzM3RDAwHhcNMjUxMTA1MDU1NjE3WhcNMjUxMTEyMDU1NjE3WjAYMRYwFAYD VQQDEw02OTBhZTcwMi1kY2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYfI5DIqnSZ3VdTCtEMdBcYz2/nDxfARn6brNp2PM/Ri+dn8HFah493HOpz5 RsFLbD5OvmIDTM49sv+l8YMv+UWXDC+Ta1WxVnSgT0NJmRghsFeSxz8RtPMdygEd 1TklZGxMDQX4g76kLm4Rk+8vzKqDRyBmScpJlxfOhKVSxLFaK0yGh8h79bTD7dPY rxnEG3hnLO/kwGcF7kK3feXDq1lAkrgffoCqVucOkw+pvxZCxYVcUFu0EkS0qSKO kgvkTaUNvoly4pkh7PNTtx7nw6kjOS9CV0AEnDKPfLaGNHJKlm3zF9XWhEsqU33e Wod0hn0ANws7nJVcIDwh/PBcawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxHafSK RbcZiRjKWbFcjjwdgC/FMB8GA1UdIwQYMBaAFOYOIUHXHbn8ifq/tf2tA3LfozfQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjYzMy9EOTE2NUVCQTg2 RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi81ZzRoUWRjZHVmeUotci0xX2EwRGN0LWpO OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVnNGhRZGNkdWZ5Si1yLTFfYTBEY3Qtak45QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjYzMy9EOTE2NUVCQTg2RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi81ZzRoUWRjZHVm eUotci0xX2EwRGN0LWpOOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA83phkezEg2IQ8Ps51nL7kD+td6pSzazflRedJbj/DUNqMKV+UUN0x AQ6Wbcg0HUQYP6nLkQL1mMZI8Zea4KxU0nCyyBh0/7UwLYPflBmZDPV1NfFUCkiE JIxj1FX3Sy//CAEw8P+1u2zKnyL8o81HKORPzIX2XuBEoBHsD5r7904TnN0mauMJ L/gax7+tmM1p5hv/Bl0B9mwuH8OGP7pnVDOWfS1aArOHWMeINVDYdxM+Ho645/Y4 cXAfX5a2ujgMlEL9GRoidO57EiT6uuOAA6oMBSfZHMnz5N4UDA9p/2jQAdgE/gde uVsFYoagDP9h+4JFebUaL0OX1QfJQUEW -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:14 2025 by rpki-client