$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft File: 4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json) Hash identifier: C3oblLj8dAoWN8SSrPCJ+j0dgENL2QL6SiGM4Ub6aP4= Subject key identifier: A9:9C:9B:24:FE:04:07:7D:58:66:22:9C:3D:B9:05:6E:43:B0:46:3B Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1 Certificate issuer: /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1 Certificate serial: 06F6 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft Manifest number: 06D2 Signing time: Tue 04 Nov 2025 16:57:44 +0000 Manifest this update: Tue 04 Nov 2025 16:57:44 +0000 Manifest next update: Tue 11 Nov 2025 16:57:44 +0000 Files and hashes: 1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: reI1SEaNKOSicn1MewGtX8Sd/otvl1FxHVLU2+p4wvs=) 2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: qm9tOH02ZhUyhN95rojnAyTLcNLxX4GEOIv6/MzX5Qk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1782 (0x6f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1 Validity Not Before: Nov 4 16:57:44 2025 GMT Not After : Nov 11 16:57:44 2025 GMT Subject: CN=690a3088-ff2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:2d:1b:eb:28:7e:e3:7b:94:74:58:bc:6a: 4e:aa:16:f0:fa:49:66:41:9d:06:ca:06:da:d0:c1: e1:a9:7d:cb:fd:9a:4e:ae:7c:9c:89:ad:ff:15:0f: 33:f7:23:1b:af:e8:68:94:c9:78:6a:3b:2d:e8:29: 6a:5b:a9:35:3f:04:4f:0b:12:ae:9a:fd:44:3c:55: 1e:05:d9:27:22:24:a9:0c:90:23:26:a9:92:2f:d7: ed:37:60:86:d8:88:96:59:1c:ed:ab:21:58:2a:30: 1c:76:30:9f:8f:a4:75:ec:17:8a:13:f5:22:7c:de: 6f:19:2b:c0:a2:df:81:c3:d9:5e:2d:11:3d:48:cd: 06:3a:24:0d:54:bb:2c:f9:35:e7:79:f7:b6:be:9b: 0d:2a:66:2d:32:be:3d:2b:1b:12:48:06:3c:be:81: f5:e4:f4:cb:fc:f5:a8:a6:2e:8c:bf:06:cf:03:64: 60:dc:48:0a:75:d9:ae:da:93:b6:7a:00:94:d2:80: 1f:69:30:ac:3d:5d:25:9f:7a:ad:d1:3c:f2:30:8b: 2e:cb:6b:b6:4f:c6:d7:a9:ac:fd:7d:0e:47:6e:b3: 96:11:de:77:e4:fd:7f:8f:eb:2b:73:44:c4:92:ff: cf:26:6b:02:13:74:a2:70:c7:56:df:33:3c:38:88: 1c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9C:9B:24:FE:04:07:7D:58:66:22:9C:3D:B9:05:6E:43:B0:46:3B X509v3 Authority Key Identifier: keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:20:0b:f6:ff:e0:a3:b8:d3:23:84:3e:a6:a7:da:02:38:a0: 64:88:29:e0:4d:fc:46:ac:61:2a:3a:33:6f:4c:45:8e:be:1a: 2a:0d:89:ca:e0:26:30:82:f1:4c:3b:8b:c6:c9:f6:44:af:e4: db:18:68:3d:59:50:ae:ac:53:07:0b:01:df:59:15:9c:50:b5: ba:b7:43:0c:f1:90:8f:7a:ba:88:46:42:94:2a:1e:4e:2c:bb: 02:df:ac:33:6d:ba:31:8c:b0:c6:e0:8e:51:a8:31:b9:8f:30: e3:91:f2:cd:c6:a7:dc:15:e2:d0:e0:3e:32:08:f6:0a:f5:c9: 8f:df:ec:99:e5:16:56:6b:ff:47:5d:d2:60:7e:93:b8:96:2b: 5e:fe:f5:e6:9e:0a:8f:dc:f4:53:bc:34:89:b7:5d:10:06:e0: 44:8a:61:87:34:eb:0e:4d:1a:21:21:1a:5c:e9:6b:f6:eb:ec: c3:ad:a6:d6:a2:a2:18:f7:1f:46:e5:61:b7:ed:27:f2:a5:ee: 86:76:8a:14:76:db:4b:80:8e:51:8a:01:44:e5:ce:6e:66:f2: a2:de:20:c5:a7:5b:a0:39:49:b2:4a:1d:46:a9:a2:05:07:e9: 3f:3c:0a:14:70:93:a4:01:0b:e4:8c:5b:88:94:41:71:fc:36: 1e:2b:ad:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEUyNDNGM0JFODI1NTY5QkIxNkFDQjM3NEJDOThEQUJF NjkwQjE3QzEwHhcNMjUxMTA0MTY1NzQ0WhcNMjUxMTExMTY1NzQ0WjAYMRYwFAYD VQQDEw02OTBhMzA4OC1mZjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbUtG+sofuN7lHRYvGpOqhbw+klmQZ0Gygba0MHhqX3L/ZpOrnycia3/FQ8z 9yMbr+holMl4ajst6ClqW6k1PwRPCxKumv1EPFUeBdknIiSpDJAjJqmSL9ftN2CG 2IiWWRztqyFYKjAcdjCfj6R17BeKE/UifN5vGSvAot+Bw9leLRE9SM0GOiQNVLss +TXnefe2vpsNKmYtMr49KxsSSAY8voH15PTL/PWopi6MvwbPA2Rg3EgKddmu2pO2 egCU0oAfaTCsPV0ln3qt0TzyMIsuy2u2T8bXqaz9fQ5HbrOWEd535P1/j+src0TE kv/PJmsCE3SicMdW3zM8OIgcVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmcmyT+ BAd9WGYinD25BW5DsEY7MB8GA1UdIwQYMBaAFOJD876CVWm7FqyzdLyY2r5pCxfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CODk3QzU4MkEx OUMxMUVCOTJBMkRGMjlDNEY5QUUwMi80a1B6dm9KVmFic1dyTE4wdkpqYXZta0xG OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzRrUHp2b0pWYWJzV3JMTjB2Smphdm1rTEY4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CODk3QzU4MkExOUMxMUVCOTJBMkRGMjlDNEY5QUUwMi80a1B6dm9KVmFi c1dyTE4wdkpqYXZta0xGOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIIAv2/+CjuNMjhD6mp9oCOKBkiCngTfxGrGEqOjNvTEWOvhoqDYnK 4CYwgvFMO4vGyfZEr+TbGGg9WVCurFMHCwHfWRWcULW6t0MM8ZCPerqIRkKUKh5O LLsC36wzbboxjLDG4I5RqDG5jzDjkfLNxqfcFeLQ4D4yCPYK9cmP3+yZ5RZWa/9H XdJgfpO4lite/vXmngqP3PRTvDSJt10QBuBEimGHNOsOTRohIRpc6Wv26+zDrabW oqIY9x9G5WG37Sfype6GdooUdttLgI5RigFE5c5uZvKi3iDFp1ugOUmySh1GqaIF B+k/PAoUcJOkAQvkjFuIlEFx/DYeK62/ -----END CERTIFICATE-----Generated at Wed Nov 5 19:24:09 2025 by rpki-client