$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft File: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft (raw, json) Hash identifier: Dd+pULH/4RbX+FNrp1xs+BSmRn1O9umDVXSkzZ+md3Y= Subject key identifier: 00:D5:05:23:E8:08:82:A2:0B:5C:2A:34:EB:AB:19:FA:E5:B5:24:AA Authority key identifier: E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86 Certificate issuer: /CN=A917D4C4/serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286 Certificate serial: 06A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft Manifest number: 06A5 Signing time: Tue 04 Nov 2025 14:51:10 +0000 Manifest this update: Tue 04 Nov 2025 14:51:09 +0000 Manifest next update: Tue 11 Nov 2025 14:51:09 +0000 Files and hashes: 1: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl (hash: 4N3rfHTOmXLuLaLHtOOLasOIiJ2a035weHJ6UfsKS1k=) 2: 6E325DBC0E2F11EDB4659653C4F9AE02.roa (hash: NS8IXL+/osy1aonTB1YcjpMFwDzkEpu3g9yC5lM136w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D4C4, serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286 Validity Not Before: Nov 4 14:51:09 2025 GMT Not After : Nov 11 14:51:09 2025 GMT Subject: CN=690a12dd-5c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:d4:e0:7a:7c:af:77:94:08:49:57:60:8f: d2:e5:1f:cc:e6:db:ca:74:85:b7:7b:db:75:54:ee: f9:ab:f0:be:2e:8f:ae:89:aa:c4:c9:2c:a5:cb:d4: 61:a9:c6:91:f1:0d:7a:a9:85:50:8f:3c:a6:93:78: cf:52:78:ee:14:c7:7c:16:67:38:0f:74:56:71:58: 2a:53:ba:43:7f:f4:5c:96:0e:00:27:53:2e:40:42: a5:48:03:07:73:91:fa:a1:77:75:0c:ca:d2:8e:bc: cf:23:eb:5d:a6:93:d6:aa:d2:43:93:d3:0b:54:68: 79:d8:06:cc:fb:dd:77:df:d3:7a:9d:61:87:95:0a: fa:2f:49:cd:30:1d:4b:68:5f:9e:47:e1:09:89:66: c9:67:cb:bf:2c:d5:d8:ec:f1:64:55:d5:2f:82:28: 62:bb:48:c3:80:f9:69:cd:02:a7:a4:c5:22:a7:0d: 35:37:38:aa:50:fc:2a:ec:57:d8:c5:20:13:bc:7d: 31:a5:13:01:92:e1:d6:21:13:65:9b:72:3b:f0:63: b2:a6:ea:31:53:4f:43:81:4b:3f:95:1a:d0:07:d6: 64:0b:c2:59:da:a2:c9:87:3d:48:95:bb:8a:6a:03: a1:ea:30:77:ca:04:de:bf:af:cd:4c:25:98:51:70: 3c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D5:05:23:E8:08:82:A2:0B:5C:2A:34:EB:AB:19:FA:E5:B5:24:AA X509v3 Authority Key Identifier: keyid:E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:56:cb:1e:94:03:d9:96:1f:2e:02:1d:f2:77:31:a5:e8:86: 56:95:86:81:11:7b:a3:70:65:37:30:66:db:86:54:49:ac:cf: 6e:a9:f7:34:78:e7:79:a4:02:19:1c:71:50:ef:12:b2:48:ea: a4:86:c3:7e:97:7b:40:aa:66:20:01:cc:62:5e:7e:55:e9:3a: ad:2b:e0:ee:9b:55:0d:26:37:76:15:a0:cf:c6:cb:60:91:c4: cc:91:e5:8d:4d:97:1c:8e:40:dd:ce:f2:d3:32:ad:d7:42:7e: 51:5d:d9:a0:11:e0:a5:27:69:54:ad:1e:7a:f1:eb:64:06:75: 73:a3:36:ee:af:05:d5:6c:3e:2a:12:c5:96:3e:3c:b2:04:16: dd:ec:e3:db:a8:46:6a:30:b8:76:fd:60:6c:34:ee:e4:03:bc: 27:73:28:2f:22:1c:13:0d:42:46:9a:10:c4:c4:8a:1c:60:bc: 70:2d:25:57:5b:f8:79:61:95:31:bb:31:9c:2e:04:ab:70:92: be:95:e8:a5:2c:ff:7e:5b:21:e9:3e:cb:a0:a4:5f:05:5b:fd: 6f:f5:e4:7c:45:10:7b:35:71:17:19:41:9f:16:47:c7:e1:59: 7f:c4:fe:46:7e:07:8e:7b:c0:1f:e3:76:e8:5b:e6:53:13:65: 42:60:ca:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0QzQxMTAvBgNVBAUTKEUwQzg5MjhGOTQ1MTUyMEU2NEQxREVENThGMDcxOTZC NTg2MUIyODYwHhcNMjUxMTA0MTQ1MTA5WhcNMjUxMTExMTQ1MTA5WjAYMRYwFAYD VQQDEw02OTBhMTJkZC01YzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSbU4Hp8r3eUCElXYI/S5R/M5tvKdIW3e9t1VO75q/C+Lo+uiarEySyly9Rh qcaR8Q16qYVQjzymk3jPUnjuFMd8Fmc4D3RWcVgqU7pDf/Rclg4AJ1MuQEKlSAMH c5H6oXd1DMrSjrzPI+tdppPWqtJDk9MLVGh52AbM+91339N6nWGHlQr6L0nNMB1L aF+eR+EJiWbJZ8u/LNXY7PFkVdUvgihiu0jDgPlpzQKnpMUipw01NziqUPwq7FfY xSATvH0xpRMBkuHWIRNlm3I78GOypuoxU09DgUs/lRrQB9ZkC8JZ2qLJhz1IlbuK agOh6jB3ygTev6/NTCWYUXA8rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADVBSPo CIKiC1wqNOurGfrltSSqMB8GA1UdIwQYMBaAFODIko+UUVIOZNHe1Y8HGWtYYbKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDRDNC80MzlDRjg3QzhE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi80TWlTajVSUlVnNWswZDdWandjWmExaGhz b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNaVNqNVJSVWc1azBkN1Zqd2NaYTFoaHNvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDRDNC80MzlDRjg3QzhEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi80TWlTajVSUlVn NWswZDdWandjWmExaGhzb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPVsselAPZlh8uAh3ydzGl6IZWlYaBEXujcGU3MGbbhlRJrM9uqfc0 eOd5pAIZHHFQ7xKySOqkhsN+l3tAqmYgAcxiXn5V6TqtK+Dum1UNJjd2FaDPxstg kcTMkeWNTZccjkDdzvLTMq3XQn5RXdmgEeClJ2lUrR568etkBnVzozburwXVbD4q EsWWPjyyBBbd7OPbqEZqMLh2/WBsNO7kA7wncygvIhwTDUJGmhDExIocYLxwLSVX W/h5YZUxuzGcLgSrcJK+leilLP9+WyHpPsugpF8FW/1v9eR8RRB7NXEXGUGfFkfH 4Vl/xP5GfgeOe8Af43boW+ZTE2VCYMpS -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:39 2025 by rpki-client