$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft File: R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json) Hash identifier: kFQI3LSmv3oUONn5xZS4C7pc8xGKDhU0cvAFVSQYCpg= Subject key identifier: BE:BA:3D:28:54:1F:DA:3E:D4:8C:D7:32:33:9C:0E:5C:27:08:A7:12 Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft Manifest number: 02C3 Signing time: Wed 05 Nov 2025 01:30:51 +0000 Manifest this update: Wed 05 Nov 2025 01:30:51 +0000 Manifest next update: Wed 12 Nov 2025 01:30:51 +0000 Files and hashes: 1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: Nmpian56Ihg6jELM/efjD8lm3W+xixbTEA22+GqpYsY=) 2: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: GG/AMsbpEzm/NFjGRgk+JWg1MGNbtO4+De0JwZLDbdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Validity Not Before: Nov 5 01:30:51 2025 GMT Not After : Nov 12 01:30:51 2025 GMT Subject: CN=690aa8cb-5f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fe:b1:6a:88:ea:ac:a0:3d:05:48:fb:1b:59: df:2e:92:60:43:bb:8b:81:9a:fa:51:f7:ad:fe:6a: 7e:5b:85:35:07:64:64:43:27:be:05:21:af:59:cb: e6:e8:ad:9e:43:27:fc:3b:f6:9b:66:f6:3c:ac:19: e7:f9:99:15:fc:b5:20:5d:62:b8:ec:5d:07:26:fa: 54:cc:b6:ff:35:13:25:29:91:f7:13:e8:e4:53:c8: 25:54:3f:05:e0:1a:77:fd:8a:42:a5:3d:74:c2:fd: a8:87:1d:2b:87:8c:8b:77:96:e2:17:c3:fe:ca:d5: 52:c7:6a:1c:1b:f5:be:1d:c5:e5:93:71:48:55:56: 44:51:ad:7d:8c:96:88:11:e6:8f:e1:ce:48:95:4a: 77:92:0b:5d:a2:43:f6:11:76:34:cb:d7:f0:d2:ea: a8:d4:1d:9b:0b:26:19:c5:00:39:88:54:2c:ba:d2: c0:3c:9e:c4:0d:da:15:91:5f:79:4a:2a:85:fd:1f: 93:a5:11:21:a4:34:24:52:7f:80:83:c8:8c:8f:7d: 7c:d6:f5:dc:7d:a5:4a:b0:2d:d8:a5:7f:cd:36:d5: 8b:a2:56:f1:e1:5e:dd:9a:dd:27:47:68:0d:2b:c5: 08:0a:0c:1e:65:49:be:1b:9c:e5:bf:d0:63:98:73: 59:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BA:3D:28:54:1F:DA:3E:D4:8C:D7:32:33:9C:0E:5C:27:08:A7:12 X509v3 Authority Key Identifier: keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:c5:78:ed:6a:22:df:85:f9:52:c2:d1:4a:27:55:5f:83:c0: 74:16:e8:05:39:58:b4:47:41:d0:f2:70:3e:3b:a5:54:04:93: d9:92:f2:87:22:00:68:ae:b0:20:c4:c4:78:41:25:81:bf:0e: bf:b3:a0:fd:e0:20:c8:53:d3:85:b2:c4:7c:96:53:29:ab:7b: 8e:21:ec:37:94:b0:98:65:59:3e:13:37:65:78:15:76:1a:4f: 59:78:16:70:5b:29:fb:78:4c:a2:07:53:df:a4:b5:3c:c6:4f: f9:89:08:b1:4a:1f:ef:06:ab:e3:07:41:17:eb:42:24:bf:7c: f0:55:a9:63:c5:17:07:ba:53:8a:f4:87:33:45:cd:62:9b:48: de:94:96:ee:01:13:e0:25:37:3c:32:df:a0:a9:20:fc:d0:e6: c7:df:fa:12:16:bf:f1:62:b6:db:54:af:5e:a6:3a:d9:fa:3f: 11:fd:a5:1c:29:d6:77:1d:fa:c1:44:60:3a:f6:4a:cf:20:40: a0:1b:13:9b:e5:b9:21:26:f1:df:b6:7f:ee:18:b2:03:b8:c3: 5a:1f:16:80:86:fc:ab:7f:26:11:3c:ed:7b:ce:4f:e3:ff:3c: 55:67:cc:a8:77:9d:c3:e2:23:59:fa:42:ed:11:3c:e4:ec:b3: 48:07:96:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThEQzYxMTAvBgNVBAUTKDQ3ODZEQkNDQjVDQzI5NkIxREFCMTc1RTgzQ0M0ODEx QTYzNjE3QzcwHhcNMjUxMTA1MDEzMDUxWhcNMjUxMTEyMDEzMDUxWjAYMRYwFAYD VQQDEw02OTBhYThjYi01ZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7v6xaojqrKA9BUj7G1nfLpJgQ7uLgZr6Ufet/mp+W4U1B2RkQye+BSGvWcvm 6K2eQyf8O/abZvY8rBnn+ZkV/LUgXWK47F0HJvpUzLb/NRMlKZH3E+jkU8glVD8F 4Bp3/YpCpT10wv2ohx0rh4yLd5biF8P+ytVSx2ocG/W+HcXlk3FIVVZEUa19jJaI EeaP4c5IlUp3kgtdokP2EXY0y9fw0uqo1B2bCyYZxQA5iFQsutLAPJ7EDdoVkV95 SiqF/R+TpREhpDQkUn+Ag8iMj3181vXcfaVKsC3YpX/NNtWLolbx4V7dmt0nR2gN K8UICgweZUm+G5zlv9BjmHNZzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL66PShU H9o+1IzXMjOcDlwnCKcSMB8GA1UdIwQYMBaAFEeG28y1zClrHasXXoPMSBGmNhfH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OERDNi80QTAxMjI3QzBG RjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtXc2RxeGRlZzh4SUVhWTJG OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0YmJ6TFhNS1dzZHF4ZGVnOHhJRWFZMkY4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OERDNi80QTAxMjI3QzBGRjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtX c2RxeGRlZzh4SUVhWTJGOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJxXjtaiLfhflSwtFKJ1Vfg8B0FugFOVi0R0HQ8nA+O6VUBJPZkvKH IgBorrAgxMR4QSWBvw6/s6D94CDIU9OFssR8llMpq3uOIew3lLCYZVk+EzdleBV2 Gk9ZeBZwWyn7eEyiB1PfpLU8xk/5iQixSh/vBqvjB0EX60Ikv3zwValjxRcHulOK 9IczRc1im0jelJbuARPgJTc8Mt+gqSD80ObH3/oSFr/xYrbbVK9epjrZ+j8R/aUc KdZ3HfrBRGA69krPIECgGxOb5bkhJvHftn/uGLIDuMNaHxaAhvyrfyYRPO17zk/j /zxVZ8yod53D4iNZ+kLtETzk7LNIB5Zh -----END CERTIFICATE-----Generated at Wed Nov 5 02:31:01 2025 by rpki-client