$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json) Hash identifier: mg65hCVSgPXq3zkR8eMkPb5uDqGOi4hLCWSHlyYHlNY= Subject key identifier: 86:96:66:64:AB:40:DA:38:C7:DE:F5:6A:C6:BD:5F:D8:4F:D3:B2:7E Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87 Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft Manifest number: D5 Signing time: Wed 05 Nov 2025 05:49:30 +0000 Manifest this update: Wed 05 Nov 2025 05:49:30 +0000 Manifest next update: Wed 12 Nov 2025 05:49:30 +0000 Files and hashes: 1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: 8zkq85p+QjyNkvN2bJmF7OdLGKU6deUIALe7jokaCCA=) 2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: e8wZoAxd5aA3CtPGlNCm2H8RgaO0sg67bbRxbVIcezE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087 Validity Not Before: Nov 5 05:49:30 2025 GMT Not After : Nov 12 05:49:30 2025 GMT Subject: CN=690ae56a-b62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5f:90:2f:0a:15:65:6f:62:72:ce:2f:70:5c: c7:13:58:29:72:ae:8c:92:b9:f0:40:1e:5b:94:1b: b7:da:fb:e6:a3:42:df:16:9c:c0:9f:ac:10:d6:32: 2f:41:7d:70:48:3a:1d:a7:15:f7:30:5d:31:36:b4: 53:a0:cb:87:ec:3f:9a:64:1b:fa:5f:ec:8d:3a:c5: ac:9e:a7:d1:33:73:bf:8b:cf:fd:ab:00:06:fa:19: 41:51:c9:4a:ea:d4:96:0d:07:2e:43:3d:fc:28:07: eb:69:07:c9:0d:9a:da:aa:21:7c:67:d0:ca:0c:02: b1:40:be:cd:da:5c:df:ac:52:91:f6:09:47:df:ec: a9:1c:6b:f2:8e:8f:6a:70:36:49:cc:be:fd:e5:df: 31:a8:58:fa:2a:17:a4:16:80:c6:1b:93:82:04:29: 65:a1:a9:16:8d:06:fa:1f:98:8c:b0:ca:0d:1d:5c: d0:8c:8e:20:56:05:79:1e:ce:59:7c:c6:85:38:16: 27:57:a7:91:c8:8f:60:32:57:3b:93:f7:7b:c2:f9: c0:de:76:eb:78:e2:24:20:ff:f4:29:3b:d7:3f:6b: 00:ae:f5:97:95:5f:b7:c9:ab:96:b9:98:7c:ac:20: ee:7b:d9:e9:46:53:d6:57:4b:72:ff:c5:45:38:f5: be:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:96:66:64:AB:40:DA:38:C7:DE:F5:6A:C6:BD:5F:D8:4F:D3:B2:7E X509v3 Authority Key Identifier: keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:2d:1a:d0:92:0b:fa:c0:43:45:68:ee:16:f0:f0:7a:a7:6d: 80:1a:b4:99:9c:36:48:41:12:a9:9f:89:87:7e:dd:d3:44:9a: 24:2c:23:9f:18:4c:f7:03:c4:ee:9e:cd:eb:2d:46:58:ac:d0: d8:89:a6:38:45:2c:40:2b:5c:85:0d:c1:1f:8a:97:9e:63:2e: 0d:3a:d3:0a:4b:a7:01:be:b9:c8:33:fd:b5:f8:3a:10:3c:54: 24:18:a4:4f:06:fa:66:39:cc:4a:93:fc:3d:53:76:d4:7d:ed: 62:ad:c3:1b:f9:20:55:01:cf:3b:a7:48:9a:2b:be:a5:0a:9b: 27:47:ca:8c:4b:02:31:7a:f0:6a:e8:36:5a:5d:14:fe:59:e4: 0f:13:68:58:0f:56:28:b8:e3:db:69:0b:7b:fa:0d:f6:0a:07: dc:6e:1d:a6:93:56:78:15:e1:85:77:bb:1e:69:9a:e4:b1:de: 4c:4d:a0:06:bc:5a:2c:a4:66:86:61:f1:a7:a0:f6:4c:86:f6: 7e:fe:0f:66:c7:75:5e:22:72:f6:04:db:1a:67:0c:69:ba:2e: ed:ba:c0:fb:a9:7f:6c:0d:16:72:cb:c0:82:70:56:84:f2:97: bd:92:7e:7a:83:40:67:4d:fe:79:26:f0:fc:24:02:87:3d:f2: 85:c1:bf:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2MDAxMTAvBgNVBAUTKEUwQjk0NThGNjk4MjVGRjgyOTM4N0IxMzlFODhGRDNC RDY3NDAwODcwHhcNMjUxMTA1MDU0OTMwWhcNMjUxMTEyMDU0OTMwWjAYMRYwFAYD VQQDEw02OTBhZTU2YS1iNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsV+QLwoVZW9ics4vcFzHE1gpcq6MkrnwQB5blBu32vvmo0LfFpzAn6wQ1jIv QX1wSDodpxX3MF0xNrRToMuH7D+aZBv6X+yNOsWsnqfRM3O/i8/9qwAG+hlBUclK 6tSWDQcuQz38KAfraQfJDZraqiF8Z9DKDAKxQL7N2lzfrFKR9glH3+ypHGvyjo9q cDZJzL795d8xqFj6KhekFoDGG5OCBClloakWjQb6H5iMsMoNHVzQjI4gVgV5Hs5Z fMaFOBYnV6eRyI9gMlc7k/d7wvnA3nbreOIkIP/0KTvXP2sArvWXlV+3yauWuZh8 rCDue9npRlPWV0ty/8VFOPW+EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIaWZmSr QNo4x971asa9X9hP07J+MB8GA1UdIwQYMBaAFOC5RY9pgl/4KTh7E56I/TvWdACH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTYwMC8yMjFCQUVCRTc3 RjExMUVGQUMxMTI5NDJDNEY5QUUwMi80TGxGajJtQ1hfZ3BPSHNUbm9qOU85WjBB SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRMbEZqMm1DWF9ncE9Ic1Rub2o5TzlaMEFJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTYwMC8yMjFCQUVCRTc3RjExMUVGQUMxMTI5NDJDNEY5QUUwMi80TGxGajJtQ1hf Z3BPSHNUbm9qOU85WjBBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZLRrQkgv6wENFaO4W8PB6p22AGrSZnDZIQRKpn4mHft3TRJokLCOf GEz3A8Tuns3rLUZYrNDYiaY4RSxAK1yFDcEfipeeYy4NOtMKS6cBvrnIM/21+DoQ PFQkGKRPBvpmOcxKk/w9U3bUfe1ircMb+SBVAc87p0iaK76lCpsnR8qMSwIxevBq 6DZaXRT+WeQPE2hYD1YouOPbaQt7+g32Cgfcbh2mk1Z4FeGFd7seaZrksd5MTaAG vFospGaGYfGnoPZMhvZ+/g9mx3VeInL2BNsaZwxpui7tusD7qX9sDRZyy8CCcFaE 8pe9kn56g0BnTf55JvD8JAKHPfKFwb/J -----END CERTIFICATE-----Generated at Wed Nov 5 07:29:40 2025 by rpki-client