$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft File: 4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json) Hash identifier: ZMNE8IHm0UZ+5aPdd8lCZomy03bDrqOaVYEBWH6Etug= Subject key identifier: 5B:32:AE:02:BF:4B:1A:4B:30:B6:C9:A0:93:1D:B1:F9:27:79:F5:79 Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D Certificate issuer: /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft Manifest number: 014A Signing time: Wed 05 Nov 2025 04:26:21 +0000 Manifest this update: Wed 05 Nov 2025 04:26:20 +0000 Manifest next update: Wed 12 Nov 2025 04:26:20 +0000 Files and hashes: 1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: sGrXN1wdwrjqAzXBZuHKchlpyDRcHsy8tsVAokG/V9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D Validity Not Before: Nov 5 04:26:20 2025 GMT Not After : Nov 12 04:26:20 2025 GMT Subject: CN=690ad1ed-ce94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:26:90:b3:b3:1c:5d:04:05:06:dd:e3:f3: e2:89:5d:3a:0a:c9:ba:a3:b1:28:ea:52:56:79:a0: 21:cf:f6:47:f8:d5:40:3f:b2:12:5b:5b:bc:02:d8: 77:01:fb:ba:c6:ca:ea:03:47:bd:04:dc:b0:a3:c5: 99:c7:0f:f5:21:0f:19:16:43:4c:9a:ba:47:67:90: ad:20:7f:b4:60:d3:f0:fd:3b:58:ac:ba:c6:e4:86: 0a:73:50:eb:6a:9a:f9:30:c2:65:ae:a9:53:9d:f4: e8:a6:0b:92:33:1b:6d:c2:84:c1:ed:9f:44:19:b4: 6e:78:ac:a1:9c:9c:68:26:23:c7:54:83:9a:5e:eb: f7:f9:2d:fa:5f:3e:d2:4b:4c:5c:03:dd:24:0e:e9: ed:b3:87:8c:aa:66:7a:3e:93:f3:49:30:5d:7d:22: 5a:9b:da:16:5c:7c:bc:90:fe:df:56:d4:8f:67:43: f8:91:da:3e:54:60:62:34:27:73:2d:ab:62:94:e9: 64:f6:fc:48:38:65:e4:a0:bd:a9:85:3e:39:21:be: af:c1:11:43:7c:09:f2:4d:56:26:77:76:e7:45:94: d7:a2:99:48:42:23:49:1e:11:36:41:6c:3e:7d:8d: 12:79:0f:c3:41:77:52:76:eb:b0:a7:75:e6:44:6d: 03:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:32:AE:02:BF:4B:1A:4B:30:B6:C9:A0:93:1D:B1:F9:27:79:F5:79 X509v3 Authority Key Identifier: keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a9:68:0f:77:9a:b9:f4:2c:30:16:bf:23:6b:fb:6f:f7:e0: 25:2e:e9:b5:f2:11:a6:c1:7f:bd:37:c9:cb:3f:33:98:95:0c: 2d:81:5d:38:64:40:72:3c:89:e5:05:00:18:e9:8f:70:b7:c1: fa:95:1e:05:26:4a:f0:1b:ce:2f:93:fb:59:9c:ef:b9:83:cd: 07:d9:f0:07:77:24:c2:c8:67:c6:cc:8f:ae:3c:4c:85:75:ff: d8:69:26:35:97:ee:de:90:2a:d3:bc:f1:16:19:2e:ec:d0:2a: a6:a8:dc:b9:86:f5:25:ee:72:fc:9c:61:5c:c3:75:35:0a:b7: 59:33:27:77:76:7c:69:77:90:6a:f1:21:89:cc:a2:01:9d:9c: ed:43:1e:fa:ba:b4:87:38:56:64:16:60:9c:55:ce:75:82:0d: f7:93:08:e8:73:d5:6c:71:1d:44:64:3b:bc:da:b5:99:95:05: ef:39:fc:a6:3e:b3:20:8e:45:01:af:dc:6a:70:2f:66:2b:73: 2a:18:cf:91:a3:9e:64:48:2e:9b:63:2c:3e:38:51:eb:1a:f3: 11:b8:f9:dc:d9:9c:84:06:e3:fc:cd:98:79:5f:11:44:49:b3: 52:95:11:8e:10:94:55:70:00:50:25:6d:2f:19:c1:22:74:35: a3:c3:ef:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKEUwMTk0QUE1M0I1ODIxQjlCRDBDNUM3QjgzNTJCQjEz ODE4NTNGOUQwHhcNMjUxMTA1MDQyNjIwWhcNMjUxMTEyMDQyNjIwWjAYMRYwFAYD VQQDEw02OTBhZDFlZC1jZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzMmkLOzHF0EBQbd4/PiiV06Csm6o7Eo6lJWeaAhz/ZH+NVAP7ISW1u8Ath3 Afu6xsrqA0e9BNywo8WZxw/1IQ8ZFkNMmrpHZ5CtIH+0YNPw/TtYrLrG5IYKc1Dr apr5MMJlrqlTnfTopguSMxttwoTB7Z9EGbRueKyhnJxoJiPHVIOaXuv3+S36Xz7S S0xcA90kDunts4eMqmZ6PpPzSTBdfSJam9oWXHy8kP7fVtSPZ0P4kdo+VGBiNCdz LatilOlk9vxIOGXkoL2phT45Ib6vwRFDfAnyTVYmd3bnRZTXoplIQiNJHhE2QWw+ fY0SeQ/DQXdSduuwp3XmRG0DSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsyrgK/ SxpLMLbJoJMdsfknefV5MB8GA1UdIwQYMBaAFOAZSqU7WCG5vQxce4NSuxOBhT+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi82OTU2QUUzRUJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi80QmxLcFR0WUlibTlERng3ZzFLN0U0R0ZQ NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCbEtwVHRZSWJtOURGeDdnMUs3RTRHRlA1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi82OTU2QUUzRUJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi80QmxLcFR0WUli bTlERng3ZzFLN0U0R0ZQNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiqWgPd5q59CwwFr8ja/tv9+AlLum18hGmwX+9N8nLPzOYlQwtgV04 ZEByPInlBQAY6Y9wt8H6lR4FJkrwG84vk/tZnO+5g80H2fAHdyTCyGfGzI+uPEyF df/YaSY1l+7ekCrTvPEWGS7s0CqmqNy5hvUl7nL8nGFcw3U1CrdZMyd3dnxpd5Bq 8SGJzKIBnZztQx76urSHOFZkFmCcVc51gg33kwjoc9VscR1EZDu82rWZlQXvOfym PrMgjkUBr9xqcC9mK3MqGM+Ro55kSC6bYyw+OFHrGvMRuPnc2ZyEBuP8zZh5XxFE SbNSlRGOEJRVcABQJW0vGcEidDWjw+9s -----END CERTIFICATE-----Generated at Wed Nov 5 16:42:31 2025 by rpki-client