$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: eNy4Dca8mLeSOSpFH2gESZr+Y2QVJ99wD4oIUwO0ZIo= Subject key identifier: D3:54:90:61:38:3A:D8:A6:10:71:0E:B9:2E:74:B7:DD:9B:49:2C:B1 Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 0800 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 07F6 Signing time: Sun 02 Nov 2025 20:59:52 +0000 Manifest this update: Sun 02 Nov 2025 20:59:51 +0000 Manifest next update: Sun 09 Nov 2025 20:59:51 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: uaMSzH7RUePz5m6kKD3W1AnJIk5nUHqwj42JngMtzfQ=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: nebZkphHnCGcHsK4OPuyoN2DWSVg+M+V/082vsrCEns=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: tXMl2RtLfZvDGfhyJ5diezkCwv50p552Np4xQThv520=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2048 (0x800) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Nov 2 20:59:51 2025 GMT Not After : Nov 9 20:59:51 2025 GMT Subject: CN=6907c647-d322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:92:43:96:fb:85:2c:04:93:b1:56:13:f9: ff:c9:55:eb:48:0f:28:c6:8a:63:de:d5:a1:02:f6: 54:e1:8e:a5:5b:5d:b7:c6:9d:3b:18:d2:7e:5c:d7: c8:14:40:85:b0:86:35:3e:fe:ec:42:c5:1f:b8:46: aa:a5:09:87:ae:3c:5a:e2:da:09:41:55:71:14:73: b6:3f:8a:4d:6a:3d:08:f3:b0:f8:e3:e0:7b:87:3d: 0f:8c:e2:f5:95:eb:94:05:2f:b8:20:40:05:0f:6e: 4e:b7:be:d3:76:dd:fa:28:65:cd:7f:7a:ce:9d:55: 14:08:da:06:e9:58:65:18:3f:0a:62:5c:b1:be:01: d0:4c:7a:42:fe:dc:ad:81:c5:56:9a:96:c8:14:db: ac:f1:dd:f2:3e:f5:5b:2a:a9:42:42:b9:ea:db:0e: 54:c7:c0:39:92:94:3a:95:d7:35:72:ba:d2:97:73: 79:11:6a:d9:aa:e3:76:4a:4f:68:6d:3e:32:4a:d5: a4:2e:1a:9b:7b:6e:7b:60:66:08:62:1c:fc:c5:80: e6:2a:da:1e:4b:b4:23:62:cb:81:65:42:61:bc:f1: c2:4b:e9:a2:2e:85:b0:82:09:92:b9:18:af:56:22: 49:cd:f0:74:d6:31:38:65:33:67:49:4d:61:57:b3: 7a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:54:90:61:38:3A:D8:A6:10:71:0E:B9:2E:74:B7:DD:9B:49:2C:B1 X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:04:26:6b:b7:0d:12:4e:4e:cf:74:31:00:b7:02:83:60:5d: 7b:0f:6a:3c:16:0d:47:8f:93:30:0f:24:53:48:68:5c:c5:c1: 57:7f:d2:77:7c:fd:2e:9f:e6:10:fc:07:0b:16:cb:97:17:2b: c7:a2:ee:ea:4d:89:33:cb:bb:fb:ae:05:7c:8b:a9:11:55:dc: d4:7a:e0:ef:26:41:83:8f:7c:ad:f2:11:ba:e7:1b:30:f0:6d: 33:14:c7:bc:ef:7e:18:98:c0:64:02:28:91:48:42:7b:38:a2: 06:1a:56:19:93:d8:16:4e:f0:a9:ae:42:a3:52:9c:ac:c6:2e: 0e:20:5b:02:08:bf:a7:5b:91:94:19:4a:75:22:d4:14:3f:b3: 89:b4:79:f4:d2:1f:a3:f0:8e:a5:0b:e8:6d:72:a7:db:da:0d: a3:f2:38:ec:53:64:a9:0f:de:45:cd:6c:54:a5:01:ff:ac:ef: aa:d6:32:4c:7d:ef:72:37:58:e2:f2:9d:7c:6a:47:f7:fb:12: 7b:27:24:65:86:b6:3e:fd:5d:89:76:cc:30:fa:db:2c:20:68: 85:fd:af:43:67:55:fd:62:57:89:7d:84:61:12:53:d6:dc:ae: 04:8a:88:92:9d:57:9d:9d:74:d0:0e:b7:d0:b7:c1:32:92:62: 9c:0d:60:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjUxMTAyMjA1OTUxWhcNMjUxMTA5MjA1OTUxWjAYMRYwFAYD VQQDEw02OTA3YzY0Ny1kMzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4OSQ5b7hSwEk7FWE/n/yVXrSA8oxopj3tWhAvZU4Y6lW123xp07GNJ+XNfI FECFsIY1Pv7sQsUfuEaqpQmHrjxa4toJQVVxFHO2P4pNaj0I87D44+B7hz0PjOL1 leuUBS+4IEAFD25Ot77Tdt36KGXNf3rOnVUUCNoG6VhlGD8KYlyxvgHQTHpC/tyt gcVWmpbIFNus8d3yPvVbKqlCQrnq2w5Ux8A5kpQ6ldc1crrSl3N5EWrZquN2Sk9o bT4yStWkLhqbe257YGYIYhz8xYDmKtoeS7QjYsuBZUJhvPHCS+miLoWwggmSuRiv ViJJzfB01jE4ZTNnSU1hV7N6UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNUkGE4 OtimEHEOuS50t92bSSyxMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQBCZrtw0STk7PdDEAtwKDYF17D2o8Fg1Hj5MwDyRTSGhcxcFXf9J3 fP0un+YQ/AcLFsuXFyvHou7qTYkzy7v7rgV8i6kRVdzUeuDvJkGDj3yt8hG65xsw 8G0zFMe8734YmMBkAiiRSEJ7OKIGGlYZk9gWTvCprkKjUpysxi4OIFsCCL+nW5GU GUp1ItQUP7OJtHn00h+j8I6lC+htcqfb2g2j8jjsU2SpD95FzWxUpQH/rO+q1jJM fe9yN1ji8p18akf3+xJ7JyRlhrY+/V2Jdsww+tssIGiF/a9DZ1X9YleJfYRhElPW 3K4EioiSnVednXTQDrfQt8EykmKcDWDp -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:05 2025 by rpki-client