$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft File: 4YL5k2lSxCadZw2ldS3syGgjTxs.mft (raw, json) Hash identifier: qT0CUcGsAjcFu7lyepmJMKQybgJpx9DOGGAjn/9dxjo= Subject key identifier: 15:98:60:77:48:3C:7B:71:04:DD:43:23:AE:E5:D7:9F:2F:EA:A2:10 Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B Certificate issuer: /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Certificate serial: 221E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft Manifest number: 21FD Signing time: Tue 04 Nov 2025 15:58:59 +0000 Manifest this update: Tue 04 Nov 2025 15:58:58 +0000 Manifest next update: Tue 11 Nov 2025 15:58:58 +0000 Files and hashes: 1: 4YL5k2lSxCadZw2ldS3syGgjTxs.crl (hash: 7uL7Fbv5Qs4LbBtD+RlcgYtWI8MYAZDrkIIYYthoIHw=) 2: B72206B4554B11E791BA5861C4F9AE02.roa (hash: Si+Xx28szHe9Iv7W1YtcZoNp90VlP5RP91wUGl6kx/U=) 3: A8E9DE704B8511E7BF406610C4F9AE02.roa (hash: nu+MmRVMelFZBsdSEFhVpeJliAcHe14e7veTklAJkjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8734 (0x221e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Validity Not Before: Nov 4 15:58:58 2025 GMT Not After : Nov 11 15:58:58 2025 GMT Subject: CN=690a22c3-b81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:63:5b:ae:c7:20:8b:eb:7d:08:ed:b8:03: 85:cd:05:4f:15:92:db:ce:d7:bc:e4:4f:0d:88:76: a4:d1:d6:1d:a7:f2:7e:6a:f8:e7:f9:d0:db:2d:7a: 32:9c:63:29:73:66:9a:b1:38:c7:92:0c:d9:cf:c9: 21:32:2c:31:5a:b0:ee:3b:61:f5:10:ef:10:6c:5d: 9b:ef:d7:1a:90:0c:be:46:94:d5:ef:61:fe:7c:a3: 5a:c8:cb:07:c4:87:9e:d4:d5:88:83:96:f6:fb:cd: c2:30:f9:68:84:58:8a:5b:96:0e:dd:8a:e7:ae:d8: 34:a3:0e:20:47:b8:2f:73:e1:6b:8c:d8:95:05:b6: 86:bc:88:95:16:c3:92:e6:1b:b0:b2:28:52:c0:cd: 7c:26:e2:95:7f:1d:a9:ed:02:bc:ca:69:7e:93:bc: c4:34:11:e9:0a:a6:c2:1c:3d:5d:cf:75:b4:ea:9e: f4:6a:53:98:e8:4d:d3:aa:79:d3:5f:7f:3c:52:6a: ab:b1:66:7d:6b:a2:61:e3:91:b4:5c:e1:0d:5a:fc: 4a:e6:96:1b:96:3c:31:78:0b:9c:81:d1:da:fb:10: e2:91:6e:c3:18:d0:7d:87:e8:75:83:13:85:10:b9: e1:59:ad:fe:32:3b:9c:80:75:c4:52:d9:23:71:fc: a6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:98:60:77:48:3C:7B:71:04:DD:43:23:AE:E5:D7:9F:2F:EA:A2:10 X509v3 Authority Key Identifier: keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:99:eb:84:68:b3:ba:66:0e:eb:60:07:19:6d:4c:d3:6f:7e: 6f:78:8e:fd:cc:db:be:83:16:37:e4:9e:07:e1:32:f6:c1:20: aa:df:95:47:f5:2c:3b:74:1e:2d:b6:45:e1:ce:f5:83:29:05: 45:5f:68:a6:50:72:b0:2f:e7:2b:98:83:1e:ba:88:1b:9a:90: 8e:02:14:5c:2d:3b:e2:a8:f9:84:b6:cd:1a:65:b4:91:37:dd: 73:da:e7:fa:f7:db:f3:2e:75:e7:77:01:82:cb:ae:b5:80:48: 1b:ab:e9:c3:20:37:91:47:3f:16:fb:c6:2a:90:06:f3:cb:d4: ff:57:ce:c5:85:f7:52:73:b8:19:d6:e6:e2:06:2c:21:bb:2e: a7:54:d5:29:0b:55:c5:f4:cb:dc:41:57:62:7d:22:e5:c3:e0: 87:6d:9b:03:2e:59:0c:b0:7c:b9:c0:cc:c6:7c:ca:41:0b:fe: c5:d3:34:b9:59:35:72:d6:f9:aa:69:4b:f6:f7:d2:0c:8d:9f: 4a:2c:88:db:29:d8:bc:dd:f3:11:c4:8e:25:c9:a9:ba:71:c6: 3e:3b:74:74:de:9d:93:c4:a3:a5:f5:c1:84:62:d3:8d:22:c6: f9:0d:a0:8c:7b:ea:e1:d4:1c:fb:45:e5:20:63:71:3a:2d:e2: b0:56:b5:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZGMkIxMTAvBgNVBAUTKEUxODJGOTkzNjk1MkM0MjY5RDY3MERBNTc1MkRFQ0M4 NjgyMzRGMUIwHhcNMjUxMTA0MTU1ODU4WhcNMjUxMTExMTU1ODU4WjAYMRYwFAYD VQQDEw02OTBhMjJjMy1iODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuxjW67HIIvrfQjtuAOFzQVPFZLbzte85E8NiHak0dYdp/J+avjn+dDbLXoy nGMpc2aasTjHkgzZz8khMiwxWrDuO2H1EO8QbF2b79cakAy+RpTV72H+fKNayMsH xIee1NWIg5b2+83CMPlohFiKW5YO3Yrnrtg0ow4gR7gvc+FrjNiVBbaGvIiVFsOS 5huwsihSwM18JuKVfx2p7QK8yml+k7zENBHpCqbCHD1dz3W06p70alOY6E3TqnnT X388UmqrsWZ9a6Jh45G0XOENWvxK5pYbljwxeAucgdHa+xDikW7DGNB9h+h1gxOF ELnhWa3+MjucgHXEUtkjcfym2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWYYHdI PHtxBN1DI67l158v6qIQMB8GA1UdIwQYMBaAFOGC+ZNpUsQmnWcNpXUt7MhoI08b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkYyQi85MEZBREVFQ0Q1 Q0QxMUU1QUE0MjZFNDBDNEY5QUUwMi80WUw1azJsU3hDYWRadzJsZFMzc3lHZ2pU eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTDVrMmxTeENhZFp3MmxkUzNzeUdnalR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkYyQi85MEZBREVFQ0Q1Q0QxMUU1QUE0MjZFNDBDNEY5QUUwMi80WUw1azJsU3hD YWRadzJsZFMzc3lHZ2pUeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFmeuEaLO6Zg7rYAcZbUzTb35veI79zNu+gxY35J4H4TL2wSCq35VH 9Sw7dB4ttkXhzvWDKQVFX2imUHKwL+crmIMeuogbmpCOAhRcLTviqPmEts0aZbSR N91z2uf699vzLnXndwGCy661gEgbq+nDIDeRRz8W+8YqkAbzy9T/V87FhfdSc7gZ 1ubiBiwhuy6nVNUpC1XF9MvcQVdifSLlw+CHbZsDLlkMsHy5wMzGfMpBC/7F0zS5 WTVy1vmqaUv299IMjZ9KLIjbKdi83fMRxI4lyam6ccY+O3R03p2TxKOl9cGEYtON Isb5DaCMe+rh1Bz7ReUgY3E6LeKwVrXn -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:36 2025 by rpki-client