$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft File: 4_FvnXPM7iaTkVokT0S1U6TbPcw.mft (raw, json) Hash identifier: DW4z2YdteT6tWT9RLNmJyC8xBVYMlhYUzBE0nfvTXSo= Subject key identifier: FE:76:C0:7F:40:46:75:F5:25:26:26:8D:3D:07:E8:D8:B4:C7:68:D3 Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC Certificate issuer: /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft Manifest number: AC Signing time: Wed 05 Nov 2025 06:22:07 +0000 Manifest this update: Wed 05 Nov 2025 06:22:06 +0000 Manifest next update: Wed 12 Nov 2025 06:22:06 +0000 Files and hashes: 1: 4_FvnXPM7iaTkVokT0S1U6TbPcw.crl (hash: mPpxFT3919iUUn0SCl/x7ctL621cAMbKfORYcSw3a9U=) 2: 05E4CBECB12911EF993BC12DC4F9AE02.roa (hash: 6bS2IOUFxNL/dxgXXkv7hlgTjA3VB1/wSeyQ+zl4/9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Validity Not Before: Nov 5 06:22:06 2025 GMT Not After : Nov 12 06:22:06 2025 GMT Subject: CN=690aed0e-87e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:89:00:f6:10:ee:a7:b2:eb:e5:b3:c3:9f:b3: c6:47:43:5c:bf:9a:d6:e9:5d:31:61:02:5d:d0:42: 38:16:87:f2:09:42:b6:91:ef:29:b7:b5:18:23:ef: 19:d0:93:51:36:c4:ac:2f:35:e8:7e:4d:7a:10:df: 72:50:24:54:2c:85:a1:34:6d:37:8f:ac:dc:db:d0: 4b:41:31:ad:79:ec:01:07:bc:e4:d7:e6:0e:71:f0: 43:95:80:c9:95:0b:83:46:74:35:7a:f5:41:9b:a6: 09:54:d1:df:c3:f9:67:ce:62:a5:2e:89:6b:ce:f6: f4:eb:df:25:6b:7b:24:c6:39:58:0f:b2:1b:87:94: fd:b3:99:c7:28:95:75:b9:50:36:61:96:c9:5c:e2: 57:20:c4:e6:89:b4:fd:6e:2b:ee:7c:a4:fd:1c:3a: 18:9b:06:fc:be:79:7d:d6:bf:be:d2:c6:04:7f:5b: e5:9a:ad:cb:cf:f8:7a:d0:aa:a5:b9:50:b6:30:0c: 03:36:5b:ee:8f:f6:34:bb:72:cf:be:9e:ce:44:6c: 8e:ad:0d:7d:06:c5:66:5c:55:8a:1a:2c:85:f4:a2: f4:4a:ee:8a:46:c4:d6:f2:12:ac:13:a7:ab:58:dc: bf:25:c9:80:d2:b5:14:44:71:0f:00:3c:72:77:71: f2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:76:C0:7F:40:46:75:F5:25:26:26:8D:3D:07:E8:D8:B4:C7:68:D3 X509v3 Authority Key Identifier: keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:27:8f:f0:0e:46:f6:d4:2b:67:cc:9a:b1:3c:9f:03:71:5f: f0:90:fc:91:de:e7:19:29:36:25:ec:51:f6:7f:fd:1a:bf:a1: df:7f:74:7c:38:45:2d:3e:3a:4e:55:66:3a:9f:9a:99:c2:03: fe:43:76:8d:e2:e7:ed:5c:58:8d:41:60:65:4c:e9:1a:d1:87: 40:70:65:bb:42:f0:cf:3d:df:89:25:9f:51:75:87:6d:77:67: f9:68:29:4a:02:e2:34:e4:22:70:0d:16:d2:f0:53:58:4b:7e: 6b:f5:27:c2:5e:77:c3:f2:e1:0a:38:90:e3:52:61:b2:e6:3b: 79:ce:28:9a:9e:41:c6:8a:3c:5d:01:e9:73:df:e9:6a:cb:91: bc:d0:64:7e:e9:ef:66:e7:c2:76:e9:a4:b0:c5:3a:b3:ee:03: 6e:58:cc:ba:38:7a:99:f0:5f:71:bb:63:c7:c2:c2:65:1d:64: 44:02:ef:ac:b5:84:0d:7d:d2:76:d0:0e:c8:e8:ee:89:e3:97: 55:31:62:d5:bf:d1:85:d5:35:76:24:46:5d:6c:35:65:ac:e0: 9d:80:f4:d3:46:39:70:3f:4b:ff:95:51:87:cd:e8:45:63:0c: 7c:8d:d7:0f:84:42:12:41:1a:56:d3:2e:97:f7:f3:2c:2b:74: f4:dc:93:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCMTMxMTAvBgNVBAUTKEUzRjE2RjlENzNDQ0VFMjY5MzkxNUEyNDRGNDRCNTUz QTREQjNEQ0MwHhcNMjUxMTA1MDYyMjA2WhcNMjUxMTEyMDYyMjA2WjAYMRYwFAYD VQQDEw02OTBhZWQwZS04N2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIkA9hDup7Lr5bPDn7PGR0Ncv5rW6V0xYQJd0EI4FofyCUK2ke8pt7UYI+8Z 0JNRNsSsLzXofk16EN9yUCRULIWhNG03j6zc29BLQTGteewBB7zk1+YOcfBDlYDJ lQuDRnQ1evVBm6YJVNHfw/lnzmKlLolrzvb0698la3skxjlYD7Ibh5T9s5nHKJV1 uVA2YZbJXOJXIMTmibT9bivufKT9HDoYmwb8vnl91r++0sYEf1vlmq3Lz/h60Kql uVC2MAwDNlvuj/Y0u3LPvp7ORGyOrQ19BsVmXFWKGiyF9KL0Su6KRsTW8hKsE6er WNy/JcmA0rUURHEPADxyd3HyawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP52wH9A RnX1JSYmjT0H6Ni0x2jTMB8GA1UdIwQYMBaAFOPxb51zzO4mk5FaJE9EtVOk2z3M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUIxMy80NjM3RkJGMkIx MjgxMUVGQjc1MEE1MkJDNEY5QUUwMi80X0Z2blhQTTdpYVRrVm9rVDBTMVU2VGJQ Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRfRnZuWFBNN2lhVGtWb2tUMFMxVTZUYlBjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUIxMy80NjM3RkJGMkIxMjgxMUVGQjc1MEE1MkJDNEY5QUUwMi80X0Z2blhQTTdp YVRrVm9rVDBTMVU2VGJQY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRJ4/wDkb21CtnzJqxPJ8DcV/wkPyR3ucZKTYl7FH2f/0av6Hff3R8 OEUtPjpOVWY6n5qZwgP+Q3aN4uftXFiNQWBlTOka0YdAcGW7QvDPPd+JJZ9RdYdt d2f5aClKAuI05CJwDRbS8FNYS35r9SfCXnfD8uEKOJDjUmGy5jt5ziiankHGijxd Aelz3+lqy5G80GR+6e9m58J26aSwxTqz7gNuWMy6OHqZ8F9xu2PHwsJlHWREAu+s tYQNfdJ20A7I6O6J45dVMWLVv9GF1TV2JEZdbDVlrOCdgPTTRjlwP0v/lVGHzehF Ywx8jdcPhEISQRpW0y6X9/MsK3T03JNt -----END CERTIFICATE-----Generated at Wed Nov 5 17:08:34 2025 by rpki-client