$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json) Hash identifier: ZIW5YDEa1hDfs8L7Qx6OOM6s0MM2hdm0c8yyXhGgC1I= Subject key identifier: 32:D3:05:30:33:E1:62:57:EE:6A:36:B0:AC:38:FD:3F:7B:EA:37:46 Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 07E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft Manifest number: 07BF Signing time: Tue 04 Nov 2025 21:31:05 +0000 Manifest this update: Tue 04 Nov 2025 21:31:04 +0000 Manifest next update: Tue 11 Nov 2025 21:31:04 +0000 Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: X8ls97jr17s2/cYEYoaCn9fBKSVfbQuARbdT4EYxQw4=) 2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: hFRxkLpFxynkLA+bgk7ZWKTxrIef2z810IITJ3Z3KSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2017 (0x7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Nov 4 21:31:04 2025 GMT Not After : Nov 11 21:31:04 2025 GMT Subject: CN=690a7098-449c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f7:dd:cb:dd:37:f1:d4:ec:96:49:01:2a:2a: f7:3b:04:b2:19:1d:a5:a0:4f:1e:34:42:c8:08:72: c9:2f:41:21:20:a3:49:1b:bc:30:c7:0b:52:0f:5f: 92:ad:44:6f:5b:a9:fb:ed:c0:b1:1b:02:3e:14:03: fd:2c:e9:88:be:4d:32:ea:f1:5b:da:57:8a:ce:df: 06:cb:1f:6a:91:0e:d0:29:be:2a:36:b4:26:78:ca: a2:7e:59:76:d4:58:86:9f:3e:a1:5d:ba:5c:f3:36: de:51:9c:2c:48:62:47:d3:64:26:ee:ed:b7:ca:ca: 0e:42:8e:77:44:e5:7a:59:42:87:03:3b:74:92:f4: 60:6d:2b:33:89:b4:ef:94:a5:dd:e4:3e:4b:4e:d1: 2d:87:da:f1:00:ab:c2:11:4c:f4:16:3e:09:ef:41: 17:f4:e6:f0:aa:6a:eb:08:d5:1d:6c:35:92:f7:a0: e1:72:f6:63:c8:fd:b1:47:4f:06:18:ee:69:ae:6a: 35:9f:93:e9:45:b7:9f:b4:7f:95:86:7e:63:72:ff: 01:e0:e5:e8:f2:0b:06:86:07:bd:2f:ce:f9:0c:73: a2:5e:f3:41:7c:6b:5a:58:7a:2e:cb:05:81:79:63: 13:33:25:d4:bd:af:e3:08:fc:20:e6:1f:f0:8b:6b: b4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D3:05:30:33:E1:62:57:EE:6A:36:B0:AC:38:FD:3F:7B:EA:37:46 X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:ac:d7:a1:29:79:d2:c0:cf:90:5f:01:53:0e:a2:cd:2f:a8: 3e:d5:f1:ef:78:59:14:b8:4d:50:76:8b:6a:6f:f2:d5:80:0d: 87:1a:0b:d5:b7:3a:43:63:10:c0:ad:0a:1b:f4:28:3e:29:fe: f0:2d:b8:62:f8:02:14:14:ac:b0:2a:a3:45:64:e5:b4:e0:d5: 3c:fe:c9:43:6c:7c:35:d1:71:1e:80:ab:7d:01:b9:47:a8:9a: 7c:1a:d7:b7:c9:0f:19:40:ea:89:b7:96:53:aa:7f:bb:d0:f2: 20:5b:1f:b7:73:06:39:08:6e:4a:67:d9:97:26:c9:8d:a5:4d: f1:9d:42:89:60:7b:3d:4d:82:5a:64:0f:6b:43:ed:fe:16:bb: 9e:e9:c8:8b:f9:39:51:77:52:55:b7:da:35:50:47:7e:e1:6b: e2:60:0d:31:01:24:98:e6:9e:0a:6a:29:7f:bd:83:ad:39:2c: df:d0:54:b7:fa:6b:80:71:f3:26:1e:69:ac:7e:38:82:74:8d: 2f:a6:7a:5f:ea:e8:37:5a:0e:3b:1f:f7:0c:c6:2d:17:1d:94: 2d:ec:e5:2d:11:20:f5:07:13:ea:c6:e2:82:76:01:6b:d9:74: b2:20:6d:93:c2:3c:84:a1:2e:92:b9:13:d7:9b:7a:53:21:aa: 75:3a:5f:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjUxMTA0MjEzMTA0WhcNMjUxMTExMjEzMTA0WjAYMRYwFAYD VQQDEw02OTBhNzA5OC00NDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvffdy9038dTslkkBKir3OwSyGR2loE8eNELICHLJL0EhIKNJG7wwxwtSD1+S rURvW6n77cCxGwI+FAP9LOmIvk0y6vFb2leKzt8Gyx9qkQ7QKb4qNrQmeMqifll2 1FiGnz6hXbpc8zbeUZwsSGJH02Qm7u23ysoOQo53ROV6WUKHAzt0kvRgbSszibTv lKXd5D5LTtEth9rxAKvCEUz0Fj4J70EX9ObwqmrrCNUdbDWS96DhcvZjyP2xR08G GO5prmo1n5PpRbeftH+Vhn5jcv8B4OXo8gsGhge9L875DHOiXvNBfGtaWHouywWB eWMTMyXUva/jCPwg5h/wi2u0oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLTBTAz 4WJX7mo2sKw4/T976jdGMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTAyNy8yNTA1Q0VEQzI1NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1Vu YlBUcGpUZG10akRYNF9nWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7rNehKXnSwM+QXwFTDqLNL6g+1fHveFkUuE1Qdotqb/LVgA2HGgvV tzpDYxDArQob9Cg+Kf7wLbhi+AIUFKywKqNFZOW04NU8/slDbHw10XEegKt9AblH qJp8Gte3yQ8ZQOqJt5ZTqn+70PIgWx+3cwY5CG5KZ9mXJsmNpU3xnUKJYHs9TYJa ZA9rQ+3+Frue6ciL+TlRd1JVt9o1UEd+4WviYA0xASSY5p4Kail/vYOtOSzf0FS3 +muAcfMmHmmsfjiCdI0vpnpf6ug3Wg47H/cMxi0XHZQt7OUtESD1BxPqxuKCdgFr 2XSyIG2TwjyEoS6SuRPXm3pTIap1Ol/m -----END CERTIFICATE-----Generated at Wed Nov 5 03:31:10 2025 by rpki-client