$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft File: 5nV74dIYmt6NdyyclIZDEL45LXA.mft (raw, json) Hash identifier: YYwFwzvZDQHqzQeq6YuN7m/lyoRaiF14rqYM1Ggh3J4= Subject key identifier: 6E:28:CD:E3:14:18:AF:43:4F:56:C3:A1:10:57:0E:98:D5:68:18:59 Authority key identifier: E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 Certificate issuer: /CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Certificate serial: 04AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft Manifest number: 04A6 Signing time: Sun 19 Oct 2025 01:47:01 +0000 Manifest this update: Sun 19 Oct 2025 01:47:00 +0000 Manifest next update: Sun 26 Oct 2025 01:47:00 +0000 Files and hashes: 1: 5nV74dIYmt6NdyyclIZDEL45LXA.crl (hash: FF33betxJi/kdkESJFGivC3DnovAzzm8R/R+lO8Jwvg=) 2: 2B70BBE889E111EEB5E86A0EC4F9AE02.roa (hash: ii2gJPxNc38H3aArS7srunxvBmsm9HkEFksE6I5LOY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1196 (0x4ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F9E, serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Validity Not Before: Oct 19 01:47:00 2025 GMT Not After : Oct 26 01:47:00 2025 GMT Subject: CN=68f44314-289f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5f:a8:db:40:df:bd:c5:18:14:86:e1:a7:42: b1:d8:8b:4b:f5:f7:93:fd:c8:23:44:bb:6b:ce:f2: 60:1d:e3:df:ea:e2:92:63:62:2f:55:ed:ea:fd:65: ef:73:41:66:03:9d:19:79:5d:a5:30:3d:ed:fe:d0: 55:63:cc:79:02:cf:66:58:a8:f1:11:90:5b:49:fd: e5:40:b2:51:d8:06:1e:82:01:ac:dd:f1:80:47:28: 93:c1:dc:a4:75:06:69:da:79:d7:2c:a2:dc:16:5c: c6:da:be:17:4b:3c:11:3a:d6:fb:df:76:60:15:58: dd:a7:36:ce:84:a0:27:9d:07:91:00:1d:1e:ba:ec: b1:9d:25:11:07:f7:59:e2:54:fd:59:fc:38:92:d9: 92:f7:96:d4:11:11:c9:05:6e:fe:0a:58:50:33:3a: f4:7b:8f:8d:ae:9b:02:d4:06:ac:9a:dd:c1:1f:ac: c6:6e:54:21:46:80:13:bb:19:36:dc:f2:78:98:0e: cb:83:56:37:a2:58:7a:93:7f:d5:d7:43:9c:16:2c: d7:6d:55:6e:5f:43:7f:8b:b4:dd:51:49:c7:e0:dc: 40:d2:81:b8:45:eb:aa:51:e9:aa:ea:9c:53:be:12: 53:3e:f3:5b:06:ac:50:9d:48:09:6a:b3:d3:e8:69: 42:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:28:CD:E3:14:18:AF:43:4F:56:C3:A1:10:57:0E:98:D5:68:18:59 X509v3 Authority Key Identifier: keyid:E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:47:75:8d:f1:c1:66:8a:2b:ea:18:6b:70:c7:a5:24:48:b0: 0c:3d:92:0c:e9:a2:f3:7a:d2:e4:80:02:f0:a4:d2:0c:db:59: 8b:36:d3:b8:c9:55:23:56:3a:b5:b4:68:fc:a8:09:fd:e0:f3: c6:e7:16:ef:ec:2d:17:03:21:fa:6b:89:00:9f:4d:4a:3c:d5: ef:04:63:43:f4:54:a1:fb:70:9b:90:fe:4d:8b:c2:70:69:69: 0e:0a:28:74:f0:93:16:03:b9:c5:ce:e1:f1:73:24:e5:90:49: 00:02:cc:50:af:b1:d5:c5:98:c7:cf:67:89:35:35:70:9c:18: d0:85:77:6f:e6:1c:4a:db:e4:81:f4:35:a8:b1:f0:0c:6c:1a: 34:ca:7f:6f:d8:80:1e:45:f9:95:0a:7d:a1:35:76:48:0f:47: c3:f1:7d:1f:fa:ad:8d:ad:ae:36:10:18:24:66:79:d9:7d:53: ae:03:d1:ab:5b:42:ac:37:ac:bf:c9:0c:e0:f6:a0:8e:99:32: 52:b5:e3:fe:7a:ce:76:43:5b:e7:77:c0:fd:6b:c6:61:75:58: cf:a2:cc:d2:69:17:b9:dc:a9:65:a7:67:0f:14:e8:50:36:ee: ca:45:92:ec:04:c3:a5:44:2b:d3:d3:0c:6c:13:b9:61:8a:cd: f9:01:c7:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGOUUxMTAvBgNVBAUTKEU2NzU3QkUxRDIxODlBREU4RDc3MkM5Qzk0ODY0MzEw QkUzOTJENzAwHhcNMjUxMDE5MDE0NzAwWhcNMjUxMDI2MDE0NzAwWjAYMRYwFAYD VQQDEw02OGY0NDMxNC0yODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApF+o20DfvcUYFIbhp0Kx2ItL9feT/cgjRLtrzvJgHePf6uKSY2IvVe3q/WXv c0FmA50ZeV2lMD3t/tBVY8x5As9mWKjxEZBbSf3lQLJR2AYeggGs3fGARyiTwdyk dQZp2nnXLKLcFlzG2r4XSzwROtb733ZgFVjdpzbOhKAnnQeRAB0euuyxnSURB/dZ 4lT9Wfw4ktmS95bUERHJBW7+ClhQMzr0e4+NrpsC1Aasmt3BH6zGblQhRoATuxk2 3PJ4mA7Lg1Y3olh6k3/V10OcFizXbVVuX0N/i7TdUUnH4NxA0oG4ReuqUemq6pxT vhJTPvNbBqxQnUgJarPT6GlCWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4ozeMU GK9DT1bDoRBXDpjVaBhZMB8GA1UdIwQYMBaAFOZ1e+HSGJrejXcsnJSGQxC+OS1w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY5RS8wMDZDRTk5QzUw MDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10Nk5keXljbElaREVMNDVM WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuVjc0ZElZbXQ2TmR5eWNsSVpERUw0NUxYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY5RS8wMDZDRTk5QzUwMDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10 Nk5keXljbElaREVMNDVMWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgR3WN8cFmiivqGGtwx6UkSLAMPZIM6aLzetLkgALwpNIM21mLNtO4 yVUjVjq1tGj8qAn94PPG5xbv7C0XAyH6a4kAn01KPNXvBGND9FSh+3CbkP5Ni8Jw aWkOCih08JMWA7nFzuHxcyTlkEkAAsxQr7HVxZjHz2eJNTVwnBjQhXdv5hxK2+SB 9DWosfAMbBo0yn9v2IAeRfmVCn2hNXZID0fD8X0f+q2Nra42EBgkZnnZfVOuA9Gr W0KsN6y/yQzg9qCOmTJSteP+es52Q1vnd8D9a8ZhdVjPoszSaRe53Kllp2cPFOhQ Nu7KRZLsBMOlRCvT0wxsE7lhis35AcdF -----END CERTIFICATE-----Generated at Mon Oct 20 13:43:34 2025 by rpki-client