$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: BsnMAYv/t2cIYQlsZvweyaUn4icRYo0Ktze2o420om8= Subject key identifier: B1:38:EB:02:01:0F:63:43:E4:B5:24:C4:38:82:7B:11:2C:23:72:C4 Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0CFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0CE0 Signing time: Sun 02 Nov 2025 18:09:38 +0000 Manifest this update: Sun 02 Nov 2025 18:09:37 +0000 Manifest next update: Sun 09 Nov 2025 18:09:37 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: GodTsX401vbn0g0PCyc9CxdBzqy7bwoIL5AZgHwzxFQ=) 2: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: MNOygbTot5myB8zLL0b0K9rlqzZgH3f6swb91fFZk2k=) 3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: tjqskq9N3o/egf3xRNWQ42djlqYwKoTyXRLEqPg8Ljw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3322 (0xcfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Nov 2 18:09:37 2025 GMT Not After : Nov 9 18:09:37 2025 GMT Subject: CN=69079e62-2730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d1:ae:17:d3:0d:a8:9b:f9:61:a5:f9:2d:7a: 34:a0:81:52:18:3f:1b:90:47:08:28:82:10:21:4f: 6a:4c:82:0e:1c:22:1e:d7:1b:ad:c6:aa:33:2c:4e: a4:1b:78:13:d5:0e:08:03:0b:0a:bc:bc:47:a5:e6: 78:43:94:e2:5e:78:f0:f6:b3:06:95:be:c1:2d:92: 56:91:a4:54:80:9c:f1:2e:5a:eb:fc:71:20:e2:35: 87:41:a8:f0:d7:b8:36:df:62:c5:3f:f9:99:2c:ec: 2f:db:a3:75:91:d9:6d:31:05:9a:1d:15:0d:3d:d9: e9:05:cc:56:c2:60:92:82:be:a9:1c:22:b1:57:32: 2a:d4:db:78:36:15:07:3f:37:94:53:3c:e9:48:32: b2:ea:2d:f0:cf:9f:9c:3d:8e:0a:29:c7:23:88:3d: 25:be:e8:f0:6a:db:74:32:cd:b3:d9:ae:b8:fd:85: d9:16:b7:d7:e0:a8:65:e9:64:aa:48:89:fb:e4:76: 86:21:f4:19:b9:84:69:23:5e:4c:6d:53:d4:c9:04: ab:87:ff:8f:f0:a3:c0:5f:6d:16:87:52:2e:72:1d: bb:cf:63:1e:a1:e8:b6:67:a2:b1:8b:e1:5f:04:08: 46:d1:01:d9:11:6a:1d:4e:35:c5:24:49:1a:a2:d9: 29:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:38:EB:02:01:0F:63:43:E4:B5:24:C4:38:82:7B:11:2C:23:72:C4 X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:75:04:83:16:77:93:a6:3e:cb:2d:62:8b:b0:ad:86:f8:30: ff:0b:9e:86:63:24:83:21:42:ce:d4:30:9e:cf:22:6e:d3:0e: 6f:e6:8a:47:ab:c1:15:2f:1c:1f:88:45:17:0c:7d:de:6a:03: ac:ed:3b:8a:6c:7f:6d:c6:53:93:e9:0e:cb:88:c3:73:4d:27: cd:b8:a9:53:80:be:53:3a:f7:ca:d4:0a:c3:ce:d5:7b:e2:7b: 2e:d4:c0:b8:ce:eb:d3:3f:cd:80:eb:ed:2b:5a:6b:1f:e8:ff: 60:cc:f3:2f:f3:03:de:a0:fd:df:e2:75:77:c4:b7:e7:be:14: d4:2e:32:ca:a7:c3:99:0e:c6:5b:4c:a8:01:5b:ac:47:20:2a: ee:4c:df:f8:c1:cc:98:65:27:97:3b:6a:92:f0:fd:4e:fe:c5: 0e:de:d0:f2:92:c6:a4:83:c1:93:9e:72:a2:b3:25:78:59:87: ad:ed:59:a0:a7:1c:7a:ea:04:b6:df:d3:f9:2a:47:78:8b:15: c2:c6:9b:06:fb:2a:97:46:38:b7:a8:54:3b:2d:c2:6c:b9:d0: 04:6f:e3:57:16:d5:42:f9:32:9b:23:8e:10:7c:15:0e:74:33: c9:b9:c2:8f:0c:4b:41:4d:46:61:cb:18:e4:b3:6e:e0:6f:53: d2:6c:77:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjUxMTAyMTgwOTM3WhcNMjUxMTA5MTgwOTM3WjAYMRYwFAYD VQQDEw02OTA3OWU2Mi0yNzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8dGuF9MNqJv5YaX5LXo0oIFSGD8bkEcIKIIQIU9qTIIOHCIe1xutxqozLE6k G3gT1Q4IAwsKvLxHpeZ4Q5TiXnjw9rMGlb7BLZJWkaRUgJzxLlrr/HEg4jWHQajw 17g232LFP/mZLOwv26N1kdltMQWaHRUNPdnpBcxWwmCSgr6pHCKxVzIq1Nt4NhUH PzeUUzzpSDKy6i3wz5+cPY4KKccjiD0lvujwatt0Ms2z2a64/YXZFrfX4Khl6WSq SIn75HaGIfQZuYRpI15MbVPUyQSrh/+P8KPAX20Wh1Iuch27z2Meoei2Z6Kxi+Ff BAhG0QHZEWodTjXFJEkaotkpVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLE46wIB D2ND5LUkxDiCexEsI3LEMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMdQSDFneTpj7LLWKLsK2G+DD/C56GYySDIULO1DCezyJu0w5v5opH q8EVLxwfiEUXDH3eagOs7TuKbH9txlOT6Q7LiMNzTSfNuKlTgL5TOvfK1ArDztV7 4nsu1MC4zuvTP82A6+0rWmsf6P9gzPMv8wPeoP3f4nV3xLfnvhTULjLKp8OZDsZb TKgBW6xHICruTN/4wcyYZSeXO2qS8P1O/sUO3tDyksakg8GTnnKisyV4WYet7Vmg pxx66gS239P5Kkd4ixXCxpsG+yqXRji3qFQ7LcJsudAEb+NXFtVC+TKbI44QfBUO dDPJucKPDEtBTUZhyxjks27gb1PSbHf4 -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:12 2025 by rpki-client