$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft File: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft (raw, json) Hash identifier: W3kwjmmG+Vm+JcOiOIPg7sHaBc8GaFIjPub7dsAS8eQ= Subject key identifier: 3A:39:A8:DD:FA:18:CB:0B:70:A3:03:A9:B8:4E:F4:5D:55:03:83:15 Authority key identifier: 7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53 Certificate issuer: /CN=A914E600/serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft Manifest number: D9 Signing time: Mon 03 Nov 2025 05:39:48 +0000 Manifest this update: Mon 03 Nov 2025 05:39:47 +0000 Manifest next update: Mon 10 Nov 2025 05:39:47 +0000 Files and hashes: 1: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl (hash: uO6uC2Pbp31FCKLwPjJGQyd0Qgpt1aYe6saclgB9YbE=) 2: B47102FE77F211EFBA1E9F7EC4F9AE02.roa (hash: AW0AjmB1MBpf81Bbaj4obKJm9vXagVv8vcAISz8uehk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E600, serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953 Validity Not Before: Nov 3 05:39:47 2025 GMT Not After : Nov 10 05:39:47 2025 GMT Subject: CN=69084023-2916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:65:55:20:e8:ec:ea:ed:1e:b4:fc:f1:60: 00:60:64:45:66:92:bb:1d:d4:35:0b:9a:ab:6e:b2: 69:9f:bb:c8:81:1c:2f:9f:9b:52:88:74:ab:0e:7e: 17:11:87:68:67:ec:b0:e8:44:a9:04:95:e5:28:c6: 54:94:52:f0:f4:47:84:d2:a4:b8:16:31:5f:92:51: 9e:ec:19:5a:f5:d9:0d:12:ca:6c:93:cf:ee:1a:35: dc:be:d7:a4:ab:2c:f2:8d:e1:dd:29:fe:97:7d:c3: ba:8b:0b:c9:af:95:de:87:42:5c:48:ee:a4:dc:14: c9:81:47:f4:67:7f:48:10:23:ba:ca:d8:a1:9f:8d: e9:ae:4d:12:6d:85:6d:69:97:96:0e:81:1b:64:ff: 8c:1b:34:0b:ad:7a:4d:48:c7:18:aa:be:b9:8e:21: 54:29:f6:82:30:5a:18:7d:3f:0f:b7:2d:8e:4f:12: 42:a2:cd:a6:a4:f9:0c:1f:72:e9:1c:b8:57:a0:3e: e7:94:d1:08:d6:37:a0:4a:da:bd:2e:be:7f:0d:b4: e2:f3:2f:64:d6:cc:f3:38:e8:04:6f:87:82:02:08: cd:33:d9:e6:82:80:a7:1f:6b:e0:75:f5:70:97:a0: b2:d1:09:6b:3b:29:f7:bf:03:42:9e:f6:1e:fa:fa: 79:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:39:A8:DD:FA:18:CB:0B:70:A3:03:A9:B8:4E:F4:5D:55:03:83:15 X509v3 Authority Key Identifier: keyid:7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4f:f6:13:54:28:fa:58:9f:b1:76:c5:8b:32:f6:ca:3d:56: 35:06:68:ec:12:67:ef:b4:5b:ac:e8:f3:09:58:58:ae:c0:c3: 6c:58:c4:6f:53:3a:fc:69:8b:1f:5a:3e:82:85:15:a6:4f:b9: 3b:c9:8b:79:50:6f:f9:47:7c:57:07:11:ca:ee:b3:71:d3:28: f8:6a:6c:53:e4:9a:d9:fb:9b:dd:15:9a:eb:cc:9d:10:7d:cd: 0a:b3:6c:f8:4c:09:6e:a3:70:6b:e6:66:13:01:7a:da:63:65: d5:d9:77:fd:c4:b4:c0:02:b5:9e:f9:78:da:8c:07:c8:9f:63: 38:29:89:f4:22:c7:05:84:04:a4:b5:46:7a:fa:1d:2c:e8:ff: 88:ed:8e:b9:4a:ed:3a:bc:c6:04:b0:51:95:41:5e:42:86:a7: ba:cc:10:b8:b6:13:1b:e6:73:01:eb:a7:31:a4:9f:0b:b6:ff: f8:bd:30:0f:87:28:d6:f3:b9:06:a1:82:f2:47:62:88:71:fd: 15:f1:20:0d:5c:2a:e8:45:8a:89:6f:a3:2a:c5:d0:24:fd:59: 98:e9:d4:61:ba:dc:48:71:05:24:2d:d6:eb:2b:01:40:46:43: e3:70:da:98:0e:93:fd:eb:8f:6b:42:b4:0b:3a:a4:25:1f:26: e7:8f:6c:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2MDAxMTAvBgNVBAUTKDdGODI0NUJCRDRENDU5NzIxQjQxRDRGRjJCQkZCNDI1 RkYxMTg5NTMwHhcNMjUxMTAzMDUzOTQ3WhcNMjUxMTEwMDUzOTQ3WjAYMRYwFAYD VQQDEw02OTA4NDAyMy0yOTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyFlVSDo7OrtHrT88WAAYGRFZpK7HdQ1C5qrbrJpn7vIgRwvn5tSiHSrDn4X EYdoZ+yw6ESpBJXlKMZUlFLw9EeE0qS4FjFfklGe7Bla9dkNEspsk8/uGjXcvtek qyzyjeHdKf6XfcO6iwvJr5Xeh0JcSO6k3BTJgUf0Z39IECO6ytihn43prk0SbYVt aZeWDoEbZP+MGzQLrXpNSMcYqr65jiFUKfaCMFoYfT8Pty2OTxJCos2mpPkMH3Lp HLhXoD7nlNEI1jegStq9Lr5/DbTi8y9k1szzOOgEb4eCAgjNM9nmgoCnH2vgdfVw l6Cy0QlrOyn3vwNCnvYe+vp5dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDo5qN36 GMsLcKMDqbhO9F1VA4MVMB8GA1UdIwQYMBaAFH+CRbvU1FlyG0HU/yu/tCX/EYlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTYwMC8yQUE3RDQ1RTc3 RjExMUVGQUMxMTI5NDJDNEY5QUUwMi9mNEpGdTlUVVdYSWJRZFRfSzctMEpmOFJp Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y0SkZ1OVRVV1hJYlFkVF9LNy0wSmY4UmlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTYwMC8yQUE3RDQ1RTc3RjExMUVGQUMxMTI5NDJDNEY5QUUwMi9mNEpGdTlUVVdY SWJRZFRfSzctMEpmOFJpVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9T/YTVCj6WJ+xdsWLMvbKPVY1BmjsEmfvtFus6PMJWFiuwMNsWMRv Uzr8aYsfWj6ChRWmT7k7yYt5UG/5R3xXBxHK7rNx0yj4amxT5JrZ+5vdFZrrzJ0Q fc0Ks2z4TAluo3Br5mYTAXraY2XV2Xf9xLTAArWe+XjajAfIn2M4KYn0IscFhASk tUZ6+h0s6P+I7Y65Su06vMYEsFGVQV5Chqe6zBC4thMb5nMB66cxpJ8Ltv/4vTAP hyjW87kGoYLyR2KIcf0V8SANXCroRYqJb6MqxdAk/VmY6dRhutxIcQUkLdbrKwFA RkPjcNqYDpP9649rQrQLOqQlHybnj2xm -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:13 2025 by rpki-client