$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft File: 4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json) Hash identifier: ekBtV2f0p7MPE7gjcb7sGjZih1012PJ3HtHdyk5jRIU= Subject key identifier: 56:B1:0B:EB:85:9D:D4:FB:E9:B6:73:C3:98:FE:A0:87:51:D8:2D:1A Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft Manifest number: 0223 Signing time: Mon 03 Nov 2025 02:06:12 +0000 Manifest this update: Mon 03 Nov 2025 02:06:11 +0000 Manifest next update: Mon 10 Nov 2025 02:06:11 +0000 Files and hashes: 1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: jaagrQF/pGBEJhCVzCNFYsQGH8EiRg/ulEtNbiAY3pI=) 2: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: qDV9QCi5HkxixaBFK8kj0xBTXurODiSoIKzsQFF1+SQ=) 3: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: H4ZiNqnOQ9SeXj19JFNgIsK4CCAguZ6MrEtJQSUxrHY=) 4: 746BB148B2CC11F090B61F0FC4F9AE02.roa (hash: lQ2KqXxx9uSPjCkCGpoqpsDx0acUQkXXBdaMXx4sCpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA Validity Not Before: Nov 3 02:06:11 2025 GMT Not After : Nov 10 02:06:11 2025 GMT Subject: CN=69080e13-03cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7b:4d:59:b5:18:a8:3c:4e:4d:b9:a1:8a:53: 08:f7:b2:d0:11:01:75:34:e0:fc:fc:4f:89:7d:af: b6:a1:d6:ae:3e:38:87:e0:ba:79:68:87:86:9c:3c: 4d:29:ff:3f:1b:53:87:93:f6:0e:56:88:2b:3e:35: 10:82:26:1f:ce:c0:16:ab:71:86:5c:f8:3f:63:10: df:c5:5c:95:2b:8f:14:94:a3:1e:e4:a7:0e:2b:7a: b7:22:52:15:8e:57:47:1f:82:6e:a8:d4:88:56:35: 68:95:5a:10:00:15:45:19:22:62:25:b2:16:ce:0f: 3f:eb:9d:95:0b:5e:68:98:c7:1b:cf:a8:1c:7d:3d: 08:f7:f8:a5:9f:3f:d0:ed:09:c3:8d:a4:67:77:31: 64:56:fb:76:b8:67:92:18:2e:2e:30:1e:fe:68:58: c1:56:18:f0:82:e1:66:a5:15:fa:ce:c5:9c:c5:47: ea:02:76:c7:4b:05:3e:89:f0:30:ab:35:4a:d7:65: f6:44:7b:81:67:a0:41:b7:51:13:fe:db:c3:dc:fd: 91:6d:96:70:70:07:6b:3d:42:35:b1:04:d9:7d:dd: f4:55:ba:07:30:e3:52:b2:de:6f:53:22:23:30:d6: 00:74:e9:cd:d7:16:ae:79:78:6b:eb:a3:b3:cb:c6: 20:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B1:0B:EB:85:9D:D4:FB:E9:B6:73:C3:98:FE:A0:87:51:D8:2D:1A X509v3 Authority Key Identifier: keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:50:85:38:04:6a:97:0f:10:95:a4:32:16:59:64:12:17:41: 10:05:54:42:1d:4c:6b:3f:18:9a:a6:4b:25:53:2d:23:2b:27: 5b:63:f7:24:bb:db:b2:5d:ef:5c:93:ae:10:70:33:a9:91:e1: c6:b0:b8:46:a2:5b:41:e3:14:49:91:ae:b2:39:db:04:08:a6: 4e:58:54:ba:d0:d5:44:c1:07:7d:27:66:87:26:2a:7c:a4:39: f9:54:46:bc:b0:71:d9:87:11:42:42:5a:bf:ec:d8:1c:11:ab: 8c:2a:d8:38:42:39:5b:d0:38:6f:5e:e4:b7:9e:05:22:53:34: 7a:85:7d:11:1e:0c:bc:ab:b5:e9:c5:36:cb:71:f3:4a:1e:7b: 35:6e:a8:ba:63:f1:73:69:4c:ac:b8:a7:e4:19:c4:2a:ee:ac: c8:ff:41:56:e6:da:1a:07:0f:ee:1b:34:de:1a:1d:94:77:ed: 10:95:9d:15:03:37:fb:3d:9b:3d:1d:6a:e3:56:0e:72:c6:45: 2f:a2:cc:4b:fd:95:7d:70:e9:74:5a:97:03:64:9e:9b:5a:06: b3:d0:f3:94:cf:6f:8e:ba:5e:a8:3c:6d:db:63:65:4c:5d:db: 3c:9a:01:dc:c7:7c:a2:f7:1c:54:64:29:31:92:d2:99:76:f9: 75:12:ac:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFOTkxMTAvBgNVBAUTKEUyNTM0RDI2Qzc4Qzk3MDE3OTA5OTY0MzhDMTE0MTA4 MjU0Nzc2QUEwHhcNMjUxMTAzMDIwNjExWhcNMjUxMTEwMDIwNjExWjAYMRYwFAYD VQQDEw02OTA4MGUxMy0wM2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXtNWbUYqDxOTbmhilMI97LQEQF1NOD8/E+Jfa+2odauPjiH4Lp5aIeGnDxN Kf8/G1OHk/YOVogrPjUQgiYfzsAWq3GGXPg/YxDfxVyVK48UlKMe5KcOK3q3IlIV jldHH4JuqNSIVjVolVoQABVFGSJiJbIWzg8/652VC15omMcbz6gcfT0I9/ilnz/Q 7QnDjaRndzFkVvt2uGeSGC4uMB7+aFjBVhjwguFmpRX6zsWcxUfqAnbHSwU+ifAw qzVK12X2RHuBZ6BBt1ET/tvD3P2RbZZwcAdrPUI1sQTZfd30VboHMONSst5vUyIj MNYAdOnN1xaueXhr66Ozy8YgiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaxC+uF ndT76bZzw5j+oIdR2C0aMB8GA1UdIwQYMBaAFOJTTSbHjJcBeQmWQ4wRQQglR3aq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U5OS8wQUNFMTlCMDdB ODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3RjVDWlpEakJGQkNDVkhk cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRsTk5Kc2VNbHdGNUNaWkRqQkZCQ0NWSGRxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0U5OS8wQUNFMTlCMDdBODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3 RjVDWlpEakJGQkNDVkhkcW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrUIU4BGqXDxCVpDIWWWQSF0EQBVRCHUxrPxiapkslUy0jKydbY/ck u9uyXe9ck64QcDOpkeHGsLhGoltB4xRJka6yOdsECKZOWFS60NVEwQd9J2aHJip8 pDn5VEa8sHHZhxFCQlq/7NgcEauMKtg4Qjlb0DhvXuS3ngUiUzR6hX0RHgy8q7Xp xTbLcfNKHns1bqi6Y/FzaUysuKfkGcQq7qzI/0FW5toaBw/uGzTeGh2Ud+0QlZ0V Azf7PZs9HWrjVg5yxkUvosxL/ZV9cOl0WpcDZJ6bWgaz0POUz2+Oul6oPG3bY2VM Xds8mgHcx3yi9xxUZCkxktKZdvl1EqyW -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:00 2025 by rpki-client