$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft File: 4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json) Hash identifier: mNS8ei/yDUSx8PqC/kBpa23AtWgah36GOiTkiN7okMU= Subject key identifier: 05:F2:5F:17:7B:5A:E5:3F:33:56:CD:34:B3:5B:94:5C:76:50:34:99 Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Certificate serial: 04B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft Manifest number: 04AE Signing time: Sun 02 Nov 2025 20:37:02 +0000 Manifest this update: Sun 02 Nov 2025 20:37:01 +0000 Manifest next update: Sun 09 Nov 2025 20:37:01 +0000 Files and hashes: 1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: g3LMyufhIq/RMaLIr9cd5ATm3N1EQf7k6Zj69djC4TM=) 2: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: lWr4ljnX2/yEjyiQoz0OgG+PVsyj+yPc7sx1n1rIGWY=) 3: B38D932050EF11EC8583962BC4F9AE02.roa (hash: vGjVKyfhGouNwPbyNw8ueo4siItyyWgs22PxyDfp4xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1208 (0x4b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Validity Not Before: Nov 2 20:37:01 2025 GMT Not After : Nov 9 20:37:01 2025 GMT Subject: CN=6907c0ed-afdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:a9:48:a2:f3:7a:5e:df:85:95:2c:77:7d: 55:3e:58:16:82:f6:88:7b:bc:0e:2b:04:b5:50:67: ec:cd:ad:90:1a:45:30:8f:c4:17:eb:88:f1:d1:25: da:8f:38:66:ca:2a:a5:e5:6e:3c:73:43:a8:9b:97: ea:df:4f:76:f3:fd:50:3f:6b:d9:2e:28:f0:90:89: 5f:c9:19:98:2b:f0:63:8e:34:fe:78:ff:ef:7e:ef: c4:d1:ca:c4:f6:3a:66:10:f9:2f:36:3b:47:c2:ca: 58:e0:e8:31:69:d5:bb:45:a3:e4:46:7e:aa:7c:a0: 6e:e4:b0:23:0b:ce:bd:7f:23:26:ee:9d:b8:76:72: fd:6d:30:12:5a:e8:f5:46:1e:12:27:8d:11:a1:6a: 41:10:59:51:6b:7d:74:bc:04:d0:6f:31:85:3d:7a: 63:fe:53:d5:bd:37:5d:1f:4a:b2:55:2e:e2:03:68: 44:f0:da:de:0e:d5:2f:38:7a:ec:40:34:c8:25:ea: ff:32:cd:6b:b2:d9:1e:8c:e4:d7:90:bc:02:e4:5a: 68:d0:56:60:75:7c:1e:20:5b:19:74:c9:5e:11:3f: 6f:48:55:30:d8:5f:13:c2:46:ab:db:23:7b:3e:79: b7:06:62:62:b6:99:ab:49:0a:4e:a4:d7:9a:32:09: b6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F2:5F:17:7B:5A:E5:3F:33:56:CD:34:B3:5B:94:5C:76:50:34:99 X509v3 Authority Key Identifier: keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:d8:1a:c0:bf:78:c8:91:4f:9c:26:db:41:fc:35:76:bd:80: 9c:ef:8e:73:a2:be:74:26:17:65:48:29:c1:90:09:a8:13:0a: 5f:c8:10:7e:45:b6:a8:0f:fb:54:51:51:e7:60:f9:ab:6b:61: 6a:88:14:be:bd:24:d9:4a:ff:0e:15:29:64:89:d2:68:69:94: 12:1f:0a:86:20:7b:71:0b:ff:f1:78:e5:74:a7:49:83:aa:54: e1:2d:3f:5c:0f:66:e1:5c:a2:d7:c3:13:4a:5d:fc:d5:81:55: ea:a9:b3:25:4a:0c:4f:ff:b4:0f:75:85:66:b5:ee:dd:81:5d: c6:66:74:ee:1f:d5:ca:a8:a3:36:3e:15:70:0e:f1:27:78:30: 98:1f:83:c0:80:d9:93:a8:98:78:ef:91:1c:64:a4:1c:e3:ed: e7:54:20:80:c0:9c:a4:30:23:c9:e4:95:d7:ff:30:77:6c:1c: 06:3b:af:fb:ff:45:c6:79:96:e5:6e:10:be:89:86:5c:4c:dd: 25:a3:b8:6b:13:f8:82:40:ff:e4:24:24:71:f3:52:a2:54:34: b2:39:c6:40:32:c3:51:4d:3e:9b:53:a6:78:c5:1e:fb:a0:09: aa:da:9f:95:db:76:4a:7d:c5:ff:be:dd:2d:64:07:a1:9d:36: bb:39:84:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5 NTNCMzZFNTEwHhcNMjUxMTAyMjAzNzAxWhcNMjUxMTA5MjAzNzAxWjAYMRYwFAYD VQQDEw02OTA3YzBlZC1hZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZOpSKLzel7fhZUsd31VPlgWgvaIe7wOKwS1UGfsza2QGkUwj8QX64jx0SXa jzhmyiql5W48c0Oom5fq30928/1QP2vZLijwkIlfyRmYK/BjjjT+eP/vfu/E0crE 9jpmEPkvNjtHwspY4OgxadW7RaPkRn6qfKBu5LAjC869fyMm7p24dnL9bTASWuj1 Rh4SJ40RoWpBEFlRa310vATQbzGFPXpj/lPVvTddH0qyVS7iA2hE8NreDtUvOHrs QDTIJer/Ms1rstkejOTXkLwC5Fpo0FZgdXweIFsZdMleET9vSFUw2F8Twkar2yN7 Pnm3BmJitpmrSQpOpNeaMgm2jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXyXxd7 WuU/M1bNNLNblFx2UDSZMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVCMC9FMzJDODdDQzUwRDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERK OWxXVV9HNkppZnlWT3pibEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA2BrAv3jIkU+cJttB/DV2vYCc745zor50JhdlSCnBkAmoEwpfyBB+ RbaoD/tUUVHnYPmra2FqiBS+vSTZSv8OFSlkidJoaZQSHwqGIHtxC//xeOV0p0mD qlThLT9cD2bhXKLXwxNKXfzVgVXqqbMlSgxP/7QPdYVmte7dgV3GZnTuH9XKqKM2 PhVwDvEneDCYH4PAgNmTqJh475EcZKQc4+3nVCCAwJykMCPJ5JXX/zB3bBwGO6/7 /0XGeZblbhC+iYZcTN0lo7hrE/iCQP/kJCRx81KiVDSyOcZAMsNRTT6bU6Z4xR77 oAmq2p+V23ZKfcX/vt0tZAehnTa7OYRs -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:11 2025 by rpki-client