$ rpki-client -vvf rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft File: p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft (raw, json) Hash identifier: 3yh5utGEqtBnUY3qIWj+nLgt01zoHbKUcTgXvytnIxc= Subject key identifier: 61:D9:0B:68:5A:45:1A:80:0F:A0:88:A6:FE:E3:D3:A2:1B:72:91:E8 Authority key identifier: A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 Certificate issuer: /CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Certificate serial: 0761 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft Manifest number: 075C Signing time: Tue 04 Nov 2025 21:44:59 +0000 Manifest this update: Tue 04 Nov 2025 21:44:59 +0000 Manifest next update: Tue 11 Nov 2025 21:44:59 +0000 Files and hashes: 1: p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl (hash: eTIO7VDdZahfJqwHgtMuqGeA2dK7Tdi8gNNPnckVOBo=) 2: F2A90B8C3ECD11EBADC7D32AC4F9AE02.roa (hash: H0kHP8pBoH+bwHmlcJ0nDAtlDVRXDuWl/zy2MYQJc/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1889 (0x761) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132933, serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Validity Not Before: Nov 4 21:44:59 2025 GMT Not After : Nov 11 21:44:59 2025 GMT Subject: CN=690a73db-153e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:9b:d4:6b:b4:01:42:c3:6d:6d:1a:6a:2f: bb:7f:81:2c:6e:3a:30:d8:eb:c5:ab:14:11:db:d3: 9a:bb:5f:7c:71:4f:6b:c2:33:50:15:d9:e3:37:27: 07:58:a4:90:c2:dd:97:74:c4:54:11:97:dd:04:5f: c1:bd:3f:e6:14:fb:8c:b0:ff:60:4f:b9:a5:9c:12: 38:8b:d7:ab:58:c5:5f:df:f1:31:a4:bf:4e:38:82: 42:10:7e:5e:ae:d6:b1:6e:93:7d:88:84:d3:54:f8: 53:a6:51:88:3e:f6:c3:9c:bf:75:5b:1f:3c:90:95: ef:1f:4d:c5:d1:24:81:83:e0:c5:32:65:d5:14:f0: 78:dd:f1:6a:4f:e8:83:e1:17:75:56:ab:27:d9:19: 53:d7:a0:85:05:2c:1a:eb:81:7e:8c:64:89:97:4e: a4:0f:d6:84:07:52:61:cd:0d:15:80:30:03:4d:82: 00:05:ee:83:c6:82:d5:5d:30:e9:5b:28:eb:77:63: f0:b6:6c:b6:87:91:58:d4:c9:fe:bf:03:c8:79:e5: 66:34:e7:83:b4:f7:e0:65:fd:b4:00:b2:0f:fd:ac: 69:f1:54:ee:50:20:a1:33:db:b5:4c:df:8f:05:27: 74:c6:ee:5f:18:0d:f7:86:9f:82:ab:b2:7e:32:f3: 7b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D9:0B:68:5A:45:1A:80:0F:A0:88:A6:FE:E3:D3:A2:1B:72:91:E8 X509v3 Authority Key Identifier: keyid:A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c5:f9:db:75:b5:d3:74:b1:32:8f:20:30:4f:58:43:fc:ed: 1d:2f:96:d3:df:d1:d8:bd:99:7c:23:0b:ed:d4:78:f1:51:39: f3:7c:fb:94:f5:d6:d6:b2:55:a4:29:8e:f7:1e:ca:44:b0:0d: bf:dd:c3:b9:8b:ec:d6:99:84:55:9d:71:54:37:6d:91:d8:a0: e8:c9:08:e5:a4:b9:0e:b7:db:fb:fd:71:40:cd:f8:99:19:05: 22:72:22:f4:09:72:1e:e8:d6:e6:b1:18:61:ae:75:96:9c:8f: ac:c2:3f:bc:f5:73:b2:0f:ff:c9:7c:b1:c3:a8:7e:9b:87:d4: 38:0a:ec:5f:13:d2:4d:d2:9f:0e:37:38:ff:c8:4d:3f:8d:7d: c6:ec:d0:0c:bc:d5:d0:d5:29:9e:c3:e8:8b:e8:eb:49:c1:c8: 29:bc:9f:b1:14:47:4f:ef:1b:dc:48:4a:88:75:58:34:59:77: 51:72:38:33:0e:84:89:1c:78:1c:b1:eb:80:95:c1:20:3d:05: e7:27:e6:93:f8:c1:cd:f5:87:db:3d:28:ff:5f:7a:dc:38:ac: ac:c3:2c:53:23:32:6f:10:3f:b1:e5:d2:0b:bb:d2:cc:18:85: f9:58:63:3a:23:e3:ff:72:14:7b:ac:4c:b0:e0:65:eb:e7:ba: 0b:bf:40:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI5MzMxMTAvBgNVBAUTKEE3RkUxMjg2NTY4MjJGMjYyMUE0QTBGRjk1NjM0Mjc4 MDc5OEM0RjAwHhcNMjUxMTA0MjE0NDU5WhcNMjUxMTExMjE0NDU5WjAYMRYwFAYD VQQDEw02OTBhNzNkYi0xNTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTub1Gu0AULDbW0aai+7f4Esbjow2OvFqxQR29Oau198cU9rwjNQFdnjNycH WKSQwt2XdMRUEZfdBF/BvT/mFPuMsP9gT7mlnBI4i9erWMVf3/ExpL9OOIJCEH5e rtaxbpN9iITTVPhTplGIPvbDnL91Wx88kJXvH03F0SSBg+DFMmXVFPB43fFqT+iD 4Rd1Vqsn2RlT16CFBSwa64F+jGSJl06kD9aEB1JhzQ0VgDADTYIABe6DxoLVXTDp Wyjrd2Pwtmy2h5FY1Mn+vwPIeeVmNOeDtPfgZf20ALIP/axp8VTuUCChM9u1TN+P BSd0xu5fGA33hp+Cq7J+MvN7FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHZC2ha RRqAD6CIpv7j06IbcpHoMB8GA1UdIwQYMBaAFKf+EoZWgi8mIaSg/5VjQngHmMTw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjkzMy9GOTEyRjY5QTNF QzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5WWhwS0RfbFdOQ2VBZVl4 UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfNFNobGFDTHlZaHBLRF9sV05DZUFlWXhQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjkzMy9GOTEyRjY5QTNFQzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5 WWhwS0RfbFdOQ2VBZVl4UEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXxfnbdbXTdLEyjyAwT1hD/O0dL5bT39HYvZl8Iwvt1HjxUTnzfPuU 9dbWslWkKY73HspEsA2/3cO5i+zWmYRVnXFUN22R2KDoyQjlpLkOt9v7/XFAzfiZ GQUiciL0CXIe6NbmsRhhrnWWnI+swj+89XOyD//JfLHDqH6bh9Q4CuxfE9JN0p8O Nzj/yE0/jX3G7NAMvNXQ1Smew+iL6OtJwcgpvJ+xFEdP7xvcSEqIdVg0WXdRcjgz DoSJHHgcseuAlcEgPQXnJ+aT+MHN9YfbPSj/X3rcOKyswyxTIzJvED+x5dILu9LM GIX5WGM6I+P/chR7rEyw4GXr57oLv0A2 -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:40 2025 by rpki-client