$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft File: 5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json) Hash identifier: LmOrsI0jWpurfcNAQQSUETr2K3YrTrHjBwb4dYbXwhI= Subject key identifier: FB:BB:94:12:22:94:4E:78:5A:9A:CD:D3:CA:07:BB:E3:3E:2F:74:5F Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 Certificate issuer: /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft Manifest number: 024F Signing time: Sun 19 Oct 2025 04:00:09 +0000 Manifest this update: Sun 19 Oct 2025 04:00:08 +0000 Manifest next update: Sun 26 Oct 2025 04:00:08 +0000 Files and hashes: 1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: YneNtxZpga38wdxzOPI/nNeCoFYGAiji2FZElwpCPik=) 2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: rXyXJ/J6rVFIkAmCNmdDPvJdD/VKGdNuveHL3e4vBN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B44, serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Validity Not Before: Oct 19 04:00:08 2025 GMT Not After : Oct 26 04:00:08 2025 GMT Subject: CN=68f46248-e5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ee:35:43:0b:ee:0d:9a:05:e2:39:5f:85:47: c3:79:c3:6c:64:3f:5e:83:78:18:54:7e:ef:18:e2: 36:c2:ec:d6:10:63:38:f3:bf:f9:c3:94:a1:75:7f: d7:b3:44:69:f8:8f:6b:1c:f1:20:c3:ab:eb:23:a4: b8:d0:c6:7e:5f:1a:1b:8a:fc:72:9f:ea:83:5e:7e: 5a:3d:d1:cf:50:9a:55:6b:68:b6:70:07:6d:09:0b: 66:e5:3b:06:d9:14:f8:c1:61:aa:1a:c1:e8:d3:da: e6:79:38:03:c5:2f:48:90:ed:dc:a6:84:f6:a7:65: a6:6e:dd:ae:02:00:86:4e:05:aa:13:83:e3:d3:c3: 99:b5:bc:1d:15:8b:e9:f3:8c:79:8f:87:aa:b3:0a: f4:53:7a:56:a9:27:c6:46:46:e2:b3:0c:e9:37:52: 8e:57:c0:13:9c:ce:33:6e:6f:9f:59:d6:af:83:35: ac:88:8a:c6:ec:7c:3c:10:a2:ba:ba:57:80:09:6f: 98:7c:4c:6f:8f:71:eb:6f:af:e4:4f:70:15:52:78: 2a:6b:7d:74:41:b4:c7:2d:35:f3:a9:27:7b:4f:78: 64:c5:49:c6:e7:eb:ef:76:40:d7:75:9a:4a:7c:0f: a7:3b:eb:09:48:7c:37:e6:f2:91:a3:13:47:c9:db: 3c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BB:94:12:22:94:4E:78:5A:9A:CD:D3:CA:07:BB:E3:3E:2F:74:5F X509v3 Authority Key Identifier: keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a2:9f:89:62:3a:53:fd:67:95:18:d1:9f:f4:17:af:93:dc: 86:4a:92:2b:eb:33:59:3d:ee:86:1a:60:5a:06:ff:24:b4:b1: fe:af:a8:24:c7:3d:50:e8:df:89:56:5b:83:56:1b:e4:57:3f: e0:2b:75:98:e8:34:e7:b8:ac:85:be:58:89:98:40:ce:b8:d8: ae:54:a4:01:7b:37:14:57:91:1f:66:75:f4:57:9c:2f:47:ed: 4b:7f:87:92:1e:29:83:97:12:50:dd:4b:06:47:66:5d:d4:a6: 43:52:4d:0a:12:90:06:77:d0:dc:f1:de:6b:93:fd:ca:e7:ff: a3:e3:93:26:d0:30:b3:2e:80:08:6e:e3:5f:e1:64:4a:64:ea: 85:0e:e2:2a:84:d5:88:fd:8a:a1:39:eb:6a:0c:f9:3d:0b:eb: 9b:09:0f:9c:3d:39:b5:e9:25:df:3a:c6:14:dc:58:e4:a8:7f: 73:51:6a:c0:12:30:6d:47:b1:be:a5:5b:93:4f:1e:07:4e:e5: 72:45:19:bc:dd:63:c7:27:68:3d:1c:bc:42:a3:6f:6f:d6:db: 7e:e2:33:46:57:00:fd:3b:13:2a:5b:0c:2d:ef:17:10:7f:e6: 96:57:58:1d:4d:58:9f:e6:21:a2:df:ba:a2:d3:8f:e5:e5:88: ad:74:71:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDQxMTAvBgNVBAUTKEU0NkUxODlEQzhFOTEwQTFBQkJFMkUzNjRERDA4MTc3 NUNFNDg0NjAwHhcNMjUxMDE5MDQwMDA4WhcNMjUxMDI2MDQwMDA4WjAYMRYwFAYD VQQDEw02OGY0NjI0OC1lNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+41QwvuDZoF4jlfhUfDecNsZD9eg3gYVH7vGOI2wuzWEGM487/5w5ShdX/X s0Rp+I9rHPEgw6vrI6S40MZ+Xxobivxyn+qDXn5aPdHPUJpVa2i2cAdtCQtm5TsG 2RT4wWGqGsHo09rmeTgDxS9IkO3cpoT2p2Wmbt2uAgCGTgWqE4Pj08OZtbwdFYvp 84x5j4eqswr0U3pWqSfGRkbiswzpN1KOV8ATnM4zbm+fWdavgzWsiIrG7Hw8EKK6 uleACW+YfExvj3Hrb6/kT3AVUngqa310QbTHLTXzqSd7T3hkxUnG5+vvdkDXdZpK fA+nO+sJSHw35vKRoxNHyds83QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPu7lBIi lE54WprN08oHu+M+L3RfMB8GA1UdIwQYMBaAFORuGJ3I6RChq74uNk3QgXdc5IRg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0NC9BRDBENjFGODNB NkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVLR3J2aTQyVGRDQmQxemto R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNFluY2pwRUtHcnZpNDJUZENCZDF6a2hHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0NC9BRDBENjFGODNBNkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVL R3J2aTQyVGRDQmQxemtoR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWop+JYjpT/WeVGNGf9Bevk9yGSpIr6zNZPe6GGmBaBv8ktLH+r6gk xz1Q6N+JVluDVhvkVz/gK3WY6DTnuKyFvliJmEDOuNiuVKQBezcUV5EfZnX0V5wv R+1Lf4eSHimDlxJQ3UsGR2Zd1KZDUk0KEpAGd9Dc8d5rk/3K5/+j45Mm0DCzLoAI buNf4WRKZOqFDuIqhNWI/YqhOetqDPk9C+ubCQ+cPTm16SXfOsYU3FjkqH9zUWrA EjBtR7G+pVuTTx4HTuVyRRm83WPHJ2g9HLxCo29v1tt+4jNGVwD9OxMqWwwt7xcQ f+aWV1gdTVif5iGi37qi04/l5YitdHG3 -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:40 2025 by rpki-client