$ rpki-client -vvf rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft File: B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft (raw, json) Hash identifier: 6voPLPULTNBJo5e79Cl0J6Aa4dnCj+F7IxrJDglkcus= Subject key identifier: 9D:E9:2A:35:41:83:49:0E:C4:A9:E3:A9:D1:5D:9A:DE:E1:62:86:0E Authority key identifier: 07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B Certificate issuer: /CN=A917C5E0/serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft Manifest number: EC Signing time: Wed 05 Nov 2025 05:31:53 +0000 Manifest this update: Wed 05 Nov 2025 05:31:52 +0000 Manifest next update: Wed 12 Nov 2025 05:31:52 +0000 Files and hashes: 1: B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl (hash: It0ZTRP4CBR7QvzbcLtsNEuX2y3DDJ9nTBDDf04dJ7A=) 2: 52AE08D4ABCF11F083B9610FC4F9AE02.roa (hash: NMTDk1bikkd+fwdk2/Llio0zL8hpaBeHBKsi3D4d+4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C5E0, serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B Validity Not Before: Nov 5 05:31:52 2025 GMT Not After : Nov 12 05:31:52 2025 GMT Subject: CN=690ae149-b383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b7:fc:85:3c:1d:bd:a4:07:80:e4:a5:6c:22: 83:7e:8a:bb:5b:8e:6d:49:f4:1a:9f:73:14:e3:77: 50:43:1c:be:0c:d8:23:e6:cc:d9:d3:b5:75:cd:eb: 9f:ec:b7:2e:1f:01:02:35:44:42:17:6f:17:df:54: eb:0b:c4:bb:fe:c1:7f:78:3b:06:0d:3f:fa:d4:a9: 3d:1e:aa:09:f9:24:ad:92:10:62:78:c6:be:43:ba: 17:7b:dc:d0:34:30:48:80:16:9e:06:5b:fe:2b:cf: a5:5a:d1:9f:42:4d:27:23:ef:09:75:42:e5:fa:9c: d1:29:f1:6e:ab:90:67:31:ed:1c:b5:7e:e1:79:e5: 78:a2:e9:9e:a9:c6:f4:4f:0a:b6:c0:f6:a7:b1:71: 11:d1:be:90:d6:d1:62:49:da:93:82:ad:0f:1c:01: f0:c1:da:16:a4:e0:d8:f7:bb:29:75:2a:bc:4c:db: 01:3b:4a:77:8b:64:f5:00:44:77:ff:21:2b:03:6f: 6e:fa:cf:7a:46:71:d9:fc:e2:d3:91:7c:45:a0:c0: ca:0b:63:7f:13:e9:23:ae:46:9a:d8:bd:bd:e0:79: 56:de:30:79:f4:89:b3:fd:16:e0:39:b4:ba:d3:36: ec:67:6f:46:b8:ab:4f:fa:31:28:4e:19:a9:d7:6a: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E9:2A:35:41:83:49:0E:C4:A9:E3:A9:D1:5D:9A:DE:E1:62:86:0E X509v3 Authority Key Identifier: keyid:07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:9d:44:0a:d5:29:d3:f1:6d:73:12:48:ec:b0:64:4a:45:fa: 22:67:95:3d:a2:c8:4c:f0:82:e4:08:a4:31:38:a7:40:bd:1a: 94:7b:fa:e5:27:7e:f4:f9:a0:25:43:ae:1e:fc:47:71:03:1c: c7:02:99:ce:57:a0:62:0e:48:bc:55:b7:8d:7c:ba:ae:1b:43: d3:97:fc:45:83:05:b3:96:66:c1:ac:40:8f:f8:fd:07:17:5e: 07:de:c8:fa:fc:39:50:71:30:8c:f4:f4:47:31:d6:16:e0:47: 5c:df:83:9f:4c:f5:09:c1:0a:b0:1a:bb:5e:c4:16:0c:ee:2a: 62:ee:ec:3a:94:be:85:50:6a:8a:9d:9a:f3:2b:84:95:e6:53: 54:c2:fd:f1:39:cb:7c:eb:1d:86:fa:3c:bf:94:ba:fe:16:27: dc:25:28:e3:b6:ed:43:90:03:f9:1b:4d:84:bf:d7:75:3e:1f: 5a:31:dd:20:a9:98:2c:0f:bc:1e:38:17:7d:10:dd:9d:73:b3: bd:51:ce:0a:b2:aa:dd:df:41:ce:e4:8b:4f:ff:e2:7e:0d:bb: 55:ca:4d:4d:59:74:0b:94:ff:e7:16:28:a7:06:8b:5a:d3:c7: 39:94:a2:42:76:bf:6b:24:b2:77:56:b5:b4:77:5a:7a:60:27: f4:f9:9a:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M1RTAxMTAvBgNVBAUTKDA3OEI0QTgwRDFERkU2QzA1MjUzM0FBREIxOTUzNEFD NTlBMzk1NEIwHhcNMjUxMTA1MDUzMTUyWhcNMjUxMTEyMDUzMTUyWjAYMRYwFAYD VQQDEw02OTBhZTE0OS1iMzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Lf8hTwdvaQHgOSlbCKDfoq7W45tSfQan3MU43dQQxy+DNgj5szZ07V1zeuf 7LcuHwECNURCF28X31TrC8S7/sF/eDsGDT/61Kk9HqoJ+SStkhBieMa+Q7oXe9zQ NDBIgBaeBlv+K8+lWtGfQk0nI+8JdULl+pzRKfFuq5BnMe0ctX7heeV4oumeqcb0 Twq2wPansXER0b6Q1tFiSdqTgq0PHAHwwdoWpODY97spdSq8TNsBO0p3i2T1AER3 /yErA29u+s96RnHZ/OLTkXxFoMDKC2N/E+kjrkaa2L294HlW3jB59Imz/RbgObS6 0zbsZ29GuKtP+jEoThmp12o63wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3pKjVB g0kOxKnjqdFdmt7hYoYOMB8GA1UdIwQYMBaAFAeLSoDR3+bAUlM6rbGVNKxZo5VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzVFMC84NzIwQUIxODVB MTcxMUVGQUEyMkE3MjlDNEY5QUUwMi9CNHRLZ05IZjVzQlNVenF0c1pVMHJGbWps VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I0dEtnTkhmNXNCU1V6cXRzWlUwckZtamxVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzVFMC84NzIwQUIxODVBMTcxMUVGQUEyMkE3MjlDNEY5QUUwMi9CNHRLZ05IZjVz QlNVenF0c1pVMHJGbWpsVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVnUQK1SnT8W1zEkjssGRKRfoiZ5U9oshM8ILkCKQxOKdAvRqUe/rl J370+aAlQ64e/EdxAxzHApnOV6BiDki8VbeNfLquG0PTl/xFgwWzlmbBrECP+P0H F14H3sj6/DlQcTCM9PRHMdYW4Edc34OfTPUJwQqwGrtexBYM7ipi7uw6lL6FUGqK nZrzK4SV5lNUwv3xOct86x2G+jy/lLr+FifcJSjjtu1DkAP5G02Ev9d1Ph9aMd0g qZgsD7weOBd9EN2dc7O9Uc4Ksqrd30HO5ItP/+J+DbtVyk1NWXQLlP/nFiinBota 08c5lKJCdr9rJLJ3VrW0d1p6YCf0+Zo5 -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:48 2025 by rpki-client