$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json) Hash identifier: 63mbrTxVG1rjmv6Sr5f+snZQNT9c0PFZ6isI2qQsEec= Subject key identifier: 16:2E:EE:7F:A0:0A:A3:1E:C9:94:BA:55:C4:65:03:DE:84:0B:FF:BD Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft Manifest number: 01AC Signing time: Mon 03 Nov 2025 03:10:18 +0000 Manifest this update: Mon 03 Nov 2025 03:10:18 +0000 Manifest next update: Mon 10 Nov 2025 03:10:18 +0000 Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: e/+Lg8qYaTBnDPEy+k4ILj2TE03t4BCA51Ds00P9K9I=) 2: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: st8PwK196xNld8O2k0lKE8037dLGvSfGuDJRF0i8kvY=) 3: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: imnNT9qYRRIcc5JHDTtnRt4iRKv++5OKcbvGmRUGbZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Validity Not Before: Nov 3 03:10:18 2025 GMT Not After : Nov 10 03:10:18 2025 GMT Subject: CN=69081d1a-2ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:3a:0d:c0:5f:df:98:ed:08:45:e0:e1:de: 80:6e:6a:f2:89:17:e2:4e:0e:3e:92:b2:05:ed:c0: cd:33:95:ac:c4:d7:ea:96:c5:f7:c5:e2:85:1e:23: ce:9e:c8:2a:d1:77:20:fc:13:71:2c:fc:17:e6:04: 9b:51:3c:0c:d8:92:be:42:46:dd:1f:f8:7f:a6:70: 1b:6b:82:85:95:30:2a:af:19:61:15:b4:61:d3:55: 81:b5:59:d6:88:0a:25:60:fc:01:13:d1:85:fa:38: a6:20:03:00:f4:60:08:d1:45:a3:59:8a:5c:10:2d: 5c:d3:a2:d1:c1:04:04:57:bd:5a:8c:25:f4:7a:04: 4d:0a:ed:5b:e2:56:17:b0:34:87:ed:75:49:ea:11: 70:55:cf:f6:5f:51:28:8f:bf:7e:71:b4:56:7f:02: ad:93:81:96:64:a9:85:0d:f8:20:41:ef:c6:25:af: cd:53:44:7e:6a:91:7e:4a:d1:27:dc:80:49:f6:9a: ad:34:35:55:2a:24:bb:f8:15:c8:18:a8:38:66:61: 40:fb:81:cf:ce:95:61:a7:c3:9f:37:4e:02:9b:d1: e7:19:85:d9:14:8d:4e:d7:dd:c2:e8:60:dd:41:27: 96:94:30:e9:51:0e:51:b2:26:1b:b0:47:22:8d:bc: ac:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2E:EE:7F:A0:0A:A3:1E:C9:94:BA:55:C4:65:03:DE:84:0B:FF:BD X509v3 Authority Key Identifier: keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:76:4b:f4:99:25:0f:cc:6a:c7:ef:47:07:3e:4c:5a:fb:da: 5e:b9:81:bd:4c:49:a7:63:de:61:b4:e9:f6:57:be:1d:ab:2f: a4:ce:9b:b1:20:70:ec:9c:43:26:18:d9:64:f8:dd:fd:3a:37: 31:94:dd:2b:06:80:cc:b7:bd:b9:6a:7b:3c:d0:13:62:66:9a: 5f:5b:78:a2:99:6b:73:d0:31:35:c3:00:b5:21:19:9f:34:df: cb:dc:d8:6a:95:d0:29:b4:36:79:9a:0a:96:44:2f:9a:2c:4f: 57:33:a9:d1:db:3b:89:af:cd:64:95:d5:79:36:99:e1:8b:e2: f0:d2:c7:f1:d8:56:c7:f7:55:e8:40:9b:ac:fd:28:93:03:97: d8:20:bd:23:28:ad:25:bf:c0:6b:9d:8e:92:14:a7:84:36:32: 7e:aa:83:28:09:a5:2b:59:ef:5c:81:33:c8:62:d2:cf:f4:37: 42:b9:85:bf:7d:a5:69:76:8c:17:92:fb:f3:81:d5:6e:d4:c6: 14:8f:3f:7e:c8:9a:e8:0e:a1:b7:61:56:5e:27:08:6f:d6:3e: 31:cf:7c:da:51:01:3f:8b:bc:48:d2:99:f1:6f:cd:7f:5a:74: 28:5f:a2:cd:d5:8b:6f:a5:b5:13:c8:46:92:52:30:bd:b5:49: 58:78:2a:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCNjExMTAvBgNVBAUTKEUzRTEwMEY4MDQwMTNBMDVGOTIyRUUxMUNCNEUwQUJF QTZDMjJCOTgwHhcNMjUxMTAzMDMxMDE4WhcNMjUxMTEwMDMxMDE4WjAYMRYwFAYD VQQDEw02OTA4MWQxYS0yZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvY6DcBf35jtCEXg4d6AbmryiRfiTg4+krIF7cDNM5WsxNfqlsX3xeKFHiPO nsgq0Xcg/BNxLPwX5gSbUTwM2JK+QkbdH/h/pnAba4KFlTAqrxlhFbRh01WBtVnW iAolYPwBE9GF+jimIAMA9GAI0UWjWYpcEC1c06LRwQQEV71ajCX0egRNCu1b4lYX sDSH7XVJ6hFwVc/2X1Eoj79+cbRWfwKtk4GWZKmFDfggQe/GJa/NU0R+apF+StEn 3IBJ9pqtNDVVKiS7+BXIGKg4ZmFA+4HPzpVhp8OfN04Cm9HnGYXZFI1O193C6GDd QSeWlDDpUQ5RsiYbsEcijbysEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYu7n+g CqMeyZS6VcRlA96EC/+9MB8GA1UdIwQYMBaAFOPhAPgEAToF+SLuEctOCr6mwiuY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUI2MS83NjE2RDRGQzJB Q0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9nWDVJdTRSeTA0S3ZxYkNL NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtRUEtQVFCT2dYNUl1NFJ5MDRLdnFiQ0s1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUI2MS83NjE2RDRGQzJBQ0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9n WDVJdTRSeTA0S3ZxYkNLNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/dkv0mSUPzGrH70cHPkxa+9peuYG9TEmnY95htOn2V74dqy+kzpux IHDsnEMmGNlk+N39OjcxlN0rBoDMt725ans80BNiZppfW3iimWtz0DE1wwC1IRmf NN/L3NhqldAptDZ5mgqWRC+aLE9XM6nR2zuJr81kldV5Npnhi+Lw0sfx2FbH91Xo QJus/SiTA5fYIL0jKK0lv8BrnY6SFKeENjJ+qoMoCaUrWe9cgTPIYtLP9DdCuYW/ faVpdowXkvvzgdVu1MYUjz9+yJroDqG3YVZeJwhv1j4xz3zaUQE/i7xI0pnxb81/ WnQoX6LN1YtvpbUTyEaSUjC9tUlYeCoP -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:58 2025 by rpki-client