$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft File: 4suW87BaY-nlR5ZSbszpSjWR5fw.mft (raw, json) Hash identifier: +zRuvrVTi4ez7/mjMS00ASsonJQA1gkuriVa3nWdhwo= Subject key identifier: 3C:E4:18:24:F0:1E:54:F1:FD:AE:34:58:64:34:CD:70:32:40:43:49 Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC Certificate issuer: /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft Manifest number: 55 Signing time: Mon 03 Nov 2025 07:12:04 +0000 Manifest this update: Mon 03 Nov 2025 07:12:04 +0000 Manifest next update: Mon 10 Nov 2025 07:12:04 +0000 Files and hashes: 1: 4suW87BaY-nlR5ZSbszpSjWR5fw.crl (hash: LRBItzX9OiuL2sY0as/My4dlmHN50wQcad/hhZQ1Y4w=) 2: ACCFE0643C9711F08159891EC4F9AE02.roa (hash: wGVIBPNEBcFCJnJRSDz4VWxuIzLpiNR2BJzQPhs1Kok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC Validity Not Before: Nov 3 07:12:04 2025 GMT Not After : Nov 10 07:12:04 2025 GMT Subject: CN=690855c4-7f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:40:2a:f8:e6:b2:f5:a4:58:1a:e9:90:3b:46: 24:29:ed:0f:f9:f8:90:65:1a:8a:2c:7c:f5:4e:38: 39:19:f9:4b:a8:7b:68:b7:d9:f8:8e:8f:6e:e7:46: 86:97:6f:88:93:26:02:62:49:42:e0:92:53:c6:c5: 6a:fe:2e:3d:bc:73:4b:39:78:0f:f6:e8:28:57:65: a9:59:61:cc:58:e1:31:ff:57:60:7b:4f:21:eb:b2: e7:5b:2e:cc:41:53:85:9c:6f:90:b6:bd:e8:9c:6c: da:d8:ed:fb:1e:08:a5:9a:6f:5a:fc:0c:b5:df:f3: bd:ab:0e:f8:d4:eb:80:97:45:28:e1:14:6a:58:0d: 7b:aa:13:02:96:54:0c:55:f1:79:8d:7e:38:5c:d7: 37:d6:bc:71:3c:6b:62:c9:6b:42:73:c7:b9:c8:39: a0:86:3d:06:e8:73:a5:27:cb:b2:a0:15:56:df:50: c8:47:f5:bc:21:60:dc:35:33:8b:00:98:57:4b:d9: 09:cf:b9:84:0c:31:e2:9a:e9:a2:f2:6c:43:e7:5f: df:c5:f8:ac:55:aa:97:0b:ed:1c:f8:b3:85:88:3a: da:a4:51:e2:92:21:75:59:5c:75:30:9a:13:5e:d0: b8:2d:2d:a7:9d:eb:ad:ac:8e:04:38:3a:f9:57:4b: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E4:18:24:F0:1E:54:F1:FD:AE:34:58:64:34:CD:70:32:40:43:49 X509v3 Authority Key Identifier: keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:02:9e:63:26:75:0c:1f:79:10:e2:04:1a:39:a3:e8:7e:28: 84:04:da:d4:76:8a:ba:ff:11:60:0c:39:91:af:6e:fd:ef:c0: 13:58:8c:38:8a:bb:e5:26:14:98:81:c1:dc:91:60:3b:d7:ef: 4d:86:13:66:bc:a3:78:ef:7e:ec:2d:a3:66:e9:0e:5d:20:61: 33:e9:86:11:74:82:9a:2b:1b:d0:2f:5c:ec:79:fe:de:36:ca: af:11:ec:18:93:96:a7:c0:7d:77:f3:d0:1a:5d:19:fe:27:49: 56:3e:a7:92:14:6d:e5:0b:f9:7a:fc:e9:43:75:10:e6:0e:88: 65:cc:4f:44:fa:41:4b:24:1c:a4:83:09:f9:5b:b1:f4:14:04: 5a:4b:d1:41:38:e0:ab:d1:5a:b6:27:05:dd:ef:69:31:2e:2f: 6a:67:2a:0a:a1:29:3a:7b:fe:24:86:58:9c:a6:cb:5c:82:83: 5e:99:74:11:e2:5e:2e:22:15:e6:4b:c4:80:98:72:2f:d6:56: 24:75:bd:26:13:ed:3b:e7:dc:7a:8a:3e:13:94:ad:dc:d6:b9: a7:bc:12:8e:ec:a4:9d:f0:9b:34:f1:39:4c:37:5f:98:46:2e: ee:aa:e3:fd:73:aa:8a:04:7f:df:7d:3c:a3:32:7e:b0:e1:bc: c4:3c:fe:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 N0I3NDExMC8GA1UEBRMoRTJDQjk2RjNCMDVBNjNFOUU1NDc5NjUyNkVDQ0U5NEEz NTkxRTVGQzAeFw0yNTExMDMwNzEyMDRaFw0yNTExMTAwNzEyMDRaMBgxFjAUBgNV BAMTDTY5MDg1NWM0LTdmMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgQCr45rL1pFga6ZA7RiQp7Q/5+JBlGoosfPVOODkZ+Uuoe2i32fiOj27nRoaX b4iTJgJiSULgklPGxWr+Lj28c0s5eA/26ChXZalZYcxY4TH/V2B7TyHrsudbLsxB U4Wcb5C2veicbNrY7fseCKWab1r8DLXf872rDvjU64CXRSjhFGpYDXuqEwKWVAxV 8XmNfjhc1zfWvHE8a2LJa0Jzx7nIOaCGPQboc6Uny7KgFVbfUMhH9bwhYNw1M4sA mFdL2QnPuYQMMeKa6aLybEPnX9/F+KxVqpcL7Rz4s4WIOtqkUeKSIXVZXHUwmhNe 0LgtLaed662sjgQ4OvlXS49xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPOQYJPAe VPH9rjRYZDTNcDJAQ0kwHwYDVR0jBBgwFoAU4suW87BaY+nlR5ZSbszpSjWR5fww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3Qjc0L0FGNjRFNTEwM0JB QTExRjA5NjQyODIxQ0M0RjlBRTAyLzRzdVc4N0JhWS1ubFI1WlNic3pwU2pXUjVm dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNHN1Vzg3QmFZLW5sUjVaU2JzenBTaldSNWZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 Qjc0L0FGNjRFNTEwM0JBQTExRjA5NjQyODIxQ0M0RjlBRTAyLzRzdVc4N0JhWS1u bFI1WlNic3pwU2pXUjVmdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKMCnmMmdQwfeRDiBBo5o+h+KIQE2tR2irr/EWAMOZGvbv3vwBNYjDiK u+UmFJiBwdyRYDvX702GE2a8o3jvfuwto2bpDl0gYTPphhF0gporG9AvXOx5/t42 yq8R7BiTlqfAfXfz0BpdGf4nSVY+p5IUbeUL+Xr86UN1EOYOiGXMT0T6QUskHKSD CflbsfQUBFpL0UE44KvRWrYnBd3vaTEuL2pnKgqhKTp7/iSGWJymy1yCg16ZdBHi Xi4iFeZLxICYci/WViR1vSYT7Tvn3HqKPhOUrdzWuae8Eo7spJ3wmzTxOUw3X5hG Lu6q4/1zqooEf999PKMyfrDhvMQ8/iI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:07 2025 by rpki-client