$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft File: T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json) Hash identifier: 2uhyKzLSUf8XG2CvDjWCX9SyhbTlyciEW60LXxjA8lU= Subject key identifier: D2:9A:2B:F6:97:B3:EF:F5:7F:DD:E1:4E:0D:AB:C3:94:29:48:A9:D9 Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Certificate serial: 03C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft Manifest number: 03C3 Signing time: Mon 03 Nov 2025 00:36:34 +0000 Manifest this update: Mon 03 Nov 2025 00:36:34 +0000 Manifest next update: Mon 10 Nov 2025 00:36:34 +0000 Files and hashes: 1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: EC+gIM29uj6UtzN7gJ061CcON3LLX3fx8PNmo869Yp4=) 2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: rWvQOGaQUF4KDCbeAOUg2IDrYzmM2mMdECYdn3UKK/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Validity Not Before: Nov 3 00:36:34 2025 GMT Not After : Nov 10 00:36:34 2025 GMT Subject: CN=6907f912-448b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:0b:2d:c6:9f:b5:35:7c:be:b5:77:c6:37: 78:0b:bd:64:45:15:00:61:95:84:5f:1d:35:19:ad: 2f:c7:7c:0b:86:6a:06:c1:68:a0:bb:93:e4:48:16: 59:7a:71:d2:50:da:f1:38:d6:1a:ff:e7:b4:2f:37: 4b:0c:6a:c1:a8:c9:93:8e:ba:8c:21:a4:ed:cc:57: 10:f4:58:60:d5:27:f3:f7:ec:e1:3d:9b:a4:64:34: 9b:81:7a:b2:b3:18:b0:d9:81:e3:13:e8:0f:41:f9: e1:a8:4f:22:d2:5d:8f:1e:6d:85:b4:0b:f0:6b:e9: 30:b0:5a:ff:77:c0:5d:85:c5:75:fb:43:7c:d7:19: cc:c1:db:e7:57:9d:36:aa:11:92:13:fb:28:0c:02: 72:46:2b:98:24:36:72:47:c5:ad:5b:b3:cd:59:ec: 68:85:b1:c7:9e:70:ce:38:8b:78:c7:ef:c3:33:8b: f6:44:83:66:03:4c:47:bc:17:4a:7a:bf:0a:a1:c5: 86:aa:5e:6a:b7:b6:21:25:14:1d:21:c0:87:9d:b8: 2e:10:73:c8:a2:c7:a8:62:f5:f8:90:02:7a:b7:a4: 11:9f:99:3a:f7:a4:5d:72:8b:92:12:8f:8c:0e:8a: ef:e7:a0:60:28:fc:b2:d4:fa:53:4f:04:23:9c:46: 43:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9A:2B:F6:97:B3:EF:F5:7F:DD:E1:4E:0D:AB:C3:94:29:48:A9:D9 X509v3 Authority Key Identifier: keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:78:4a:12:89:85:a5:76:57:09:2a:6e:8c:7c:d5:9f:64:06: 94:c9:fc:81:fb:fa:f9:78:a9:ea:91:70:66:1b:3c:88:13:d5: 46:86:17:ba:d9:52:a4:40:cc:01:27:eb:9b:76:bc:1c:2b:af: fe:83:2c:61:dd:f8:e1:2d:a1:6a:5c:cb:d3:05:48:70:26:a6: b7:ca:47:94:39:44:90:0b:89:6b:6a:55:cd:bf:6c:80:84:a0: 49:ab:a4:46:12:3a:7c:d5:13:aa:42:42:98:50:fd:56:1a:54: ce:3c:4c:bf:7d:36:46:9d:01:93:c6:10:75:af:39:60:a6:ad: c1:5b:da:ef:ba:84:ef:df:33:f7:b8:31:07:a2:f0:db:52:bd: cf:d2:63:74:5a:a0:d2:a3:57:ea:44:94:68:00:0c:4d:95:86: be:6c:d0:b7:9a:db:c4:98:b9:1e:c9:c9:7a:e0:7f:4d:bc:2d: 56:75:78:a7:83:c1:a6:cf:4e:26:ec:d5:39:6b:b5:4c:9d:1d: 41:0e:b5:14:08:5f:ed:83:ee:f1:0f:97:6f:ed:20:fa:7a:ea: 05:b8:ea:fb:6e:89:5e:b7:fc:b4:b7:95:f6:41:c8:05:3a:08: c5:f5:92:9d:3b:71:f3:b3:46:5c:67:59:5b:25:29:18:4d:1c: 96:88:40:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG NTczOEY5MEEwHhcNMjUxMTAzMDAzNjM0WhcNMjUxMTEwMDAzNjM0WjAYMRYwFAYD VQQDEw02OTA3ZjkxMi00NDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLkLLcaftTV8vrV3xjd4C71kRRUAYZWEXx01Ga0vx3wLhmoGwWigu5PkSBZZ enHSUNrxONYa/+e0LzdLDGrBqMmTjrqMIaTtzFcQ9Fhg1Sfz9+zhPZukZDSbgXqy sxiw2YHjE+gPQfnhqE8i0l2PHm2FtAvwa+kwsFr/d8BdhcV1+0N81xnMwdvnV502 qhGSE/soDAJyRiuYJDZyR8WtW7PNWexohbHHnnDOOIt4x+/DM4v2RINmA0xHvBdK er8KocWGql5qt7YhJRQdIcCHnbguEHPIoseoYvX4kAJ6t6QRn5k696RdcouSEo+M Dorv56BgKPyy1PpTTwQjnEZDSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKaK/aX s+/1f93hTg2rw5QpSKnZMB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM3Qy82QUU3NjE1MkFCMzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pO VmwwejhDclRodWIxYzQtUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGeEoSiYWldlcJKm6MfNWfZAaUyfyB+/r5eKnqkXBmGzyIE9VGhhe6 2VKkQMwBJ+ubdrwcK6/+gyxh3fjhLaFqXMvTBUhwJqa3ykeUOUSQC4lralXNv2yA hKBJq6RGEjp81ROqQkKYUP1WGlTOPEy/fTZGnQGTxhB1rzlgpq3BW9rvuoTv3zP3 uDEHovDbUr3P0mN0WqDSo1fqRJRoAAxNlYa+bNC3mtvEmLkeycl64H9NvC1WdXin g8Gmz04m7NU5a7VMnR1BDrUUCF/tg+7xD5dv7SD6euoFuOr7bolet/y0t5X2QcgF OgjF9ZKdO3Hzs0ZcZ1lbJSkYTRyWiED0 -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:53 2025 by rpki-client