$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft File: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft (raw, json) Hash identifier: 7jFRc0kBULZjjJLoZBpj8vrouQ/RJmvnuqLjy0hG4nQ= Subject key identifier: 82:56:7F:B2:9C:50:4A:D7:7B:B1:6F:17:8B:87:C3:71:6C:4F:FE:EE Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 Certificate issuer: /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft Manifest number: 0D Signing time: Mon 03 Nov 2025 07:59:46 +0000 Manifest this update: Mon 03 Nov 2025 07:59:46 +0000 Manifest next update: Mon 10 Nov 2025 07:59:46 +0000 Files and hashes: 1: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl (hash: cDXeBHf9NqJMq3iFFx7Hx4n3Tmn5zaEsMUBH439EyHw=) 2: 2DC89280AB5E11F087B3A63DC4F9AE02.roa (hash: qw+b9++3jbgvyWDf4TRTK+L4oMfB+u2I6pJFYXdg4kg=) 3: 2E4F17E2AB5E11F087B3A63DC4F9AE02.roa (hash: 3NnIsPy3TJxVPi78UblbPiBZvd4erKTpjfLkh2fTRX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Validity Not Before: Nov 3 07:59:46 2025 GMT Not After : Nov 10 07:59:46 2025 GMT Subject: CN=690860f2-e7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:41:9f:12:2b:fd:db:95:89:f1:6a:f6:f2:ef: f1:db:18:35:d9:a7:3b:fa:35:39:8f:11:91:a3:60: 49:c9:a8:0e:2a:b4:c7:78:23:51:3c:c6:9c:dd:f3: 3a:93:5c:9d:0e:32:d0:c4:da:e8:d8:35:86:d5:51: 55:b3:d9:82:ee:af:77:18:bf:16:86:87:9b:07:21: 44:60:c0:82:cf:17:c1:13:45:5a:ed:57:f5:76:36: 80:68:b9:14:7b:8e:a9:b7:8a:80:9c:d7:91:f4:72: 63:fb:b6:d1:3d:91:ec:17:9b:e5:50:8c:4d:91:6b: 06:ad:1b:48:7a:9d:53:3c:08:08:06:dd:b7:cf:00: 1b:bf:07:ec:d3:6f:f4:66:5d:8a:10:06:27:72:0d: 4e:1d:1b:53:82:c1:82:45:73:86:9b:f1:06:13:52: 5b:5c:f5:51:c6:93:e1:24:5d:ac:da:1e:9d:07:22: 42:6e:fd:d2:a3:f9:d3:0b:cc:9e:5b:06:53:e7:3d: d6:95:69:eb:fb:ec:ad:f3:ba:06:e8:b0:b7:3a:1e: 4e:e8:8b:76:dd:00:bd:09:24:bd:20:d6:ef:a3:9a: ab:56:da:e3:c0:c4:c2:f7:85:0c:4a:67:0d:a5:a9: 13:3b:b2:84:b5:f0:4c:d1:85:9f:c7:8b:49:6f:cb: 9b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:56:7F:B2:9C:50:4A:D7:7B:B1:6F:17:8B:87:C3:71:6C:4F:FE:EE X509v3 Authority Key Identifier: keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:78:dc:49:df:b6:07:a8:ee:71:ec:17:ef:20:40:93:76:63: 32:f6:aa:5c:8d:a3:18:01:9d:3e:c0:6d:db:a7:5b:17:d1:7f: 0d:5e:a4:34:31:11:dd:14:4e:ee:67:2f:ec:8d:e5:df:5b:ee: b7:d6:69:e6:4b:5f:30:a2:cf:11:9d:e8:00:a7:f1:f7:95:74: 3a:e0:55:71:bf:d2:65:31:f8:34:3f:2b:24:b0:49:6f:62:ca: ea:98:a5:8b:51:96:bd:70:b5:57:24:73:ad:6b:42:94:d2:2a: 00:5c:e5:a3:62:b6:9a:24:b1:5c:1d:2e:f1:e1:a7:51:e0:8f: e9:22:54:ef:b0:62:55:7c:70:77:15:09:d3:6e:8d:d4:d2:91: f1:82:09:6e:ad:3b:88:e0:b9:bd:00:09:a8:12:99:20:8e:1f: 0a:0a:a5:87:eb:a5:77:c0:bd:27:8e:e2:fb:3f:33:6d:30:6c: 82:48:f2:ce:97:36:51:aa:2e:65:8a:8c:ad:73:6d:46:0c:51: 73:b6:13:cd:9b:0e:b3:46:cb:0c:a6:34:70:fb:6f:9f:62:2d: ba:08:ed:a6:08:16:12:34:7b:80:26:9d:4e:08:86:db:7a:c3: e5:75:58:56:6b:e2:df:04:a3:50:db:39:06:16:8c:67:3a:50: e1:e6:cc:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjFDQTExMC8GA1UEBRMoQUY4Q0RDRTZFRDQyNzdFQ0ZCMEZEQTg4MkFENDc0OTJE RTg1OEZCNjAeFw0yNTExMDMwNzU5NDZaFw0yNTExMTAwNzU5NDZaMBgxFjAUBgNV BAMTDTY5MDg2MGYyLWU3Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7QZ8SK/3blYnxavby7/HbGDXZpzv6NTmPEZGjYEnJqA4qtMd4I1E8xpzd8zqT XJ0OMtDE2ujYNYbVUVWz2YLur3cYvxaGh5sHIURgwILPF8ETRVrtV/V2NoBouRR7 jqm3ioCc15H0cmP7ttE9kewXm+VQjE2RawatG0h6nVM8CAgG3bfPABu/B+zTb/Rm XYoQBidyDU4dG1OCwYJFc4ab8QYTUltc9VHGk+EkXazaHp0HIkJu/dKj+dMLzJ5b BlPnPdaVaev77K3zugbosLc6Hk7oi3bdAL0JJL0g1u+jmqtW2uPAxML3hQxKZw2l qRM7soS18EzRhZ/Hi0lvy5tDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUglZ/spxQ Std7sW8Xi4fDcWxP/u4wHwYDVR0jBBgwFoAUr4zc5u1Cd+z7D9qIKtR0kt6Fj7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMUNBLzJERjVCQjgwQUIz MDExRjA4RkMwQzk0OEM0RjlBRTAyL3I0emM1dTFDZC16N0Q5cUlLdFIwa3Q2Rmo3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjR6YzV1MUNkLXo3RDlxSUt0UjBrdDZGajdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MUNBLzJERjVCQjgwQUIzMDExRjA4RkMwQzk0OEM0RjlBRTAyL3I0emM1dTFDZC16 N0Q5cUlLdFIwa3Q2Rmo3WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABV43Enftgeo7nHsF+8gQJN2YzL2qlyNoxgBnT7AbdunWxfRfw1epDQx Ed0UTu5nL+yN5d9b7rfWaeZLXzCizxGd6ACn8feVdDrgVXG/0mUx+DQ/KySwSW9i yuqYpYtRlr1wtVckc61rQpTSKgBc5aNitpoksVwdLvHhp1Hgj+kiVO+wYlV8cHcV CdNujdTSkfGCCW6tO4jgub0ACagSmSCOHwoKpYfrpXfAvSeO4vs/M20wbIJI8s6X NlGqLmWKjK1zbUYMUXO2E82bDrNGywymNHD7b59iLboI7aYIFhI0e4AmnU4Ihtt6 w+V1WFZr4t8Eo1DbOQYWjGc6UOHmzGA= -----END CERTIFICATE-----Generated at Wed Nov 5 02:37:33 2025 by rpki-client