$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft File: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json) Hash identifier: pS+/f/d5ESbZaug8cPNGlE2CBn+ifwU6aDZYJCWmRts= Subject key identifier: 7D:DE:8F:D9:32:31:F5:D1:54:18:83:40:D4:B2:29:1C:5D:0F:57:32 Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft Manifest number: DC Signing time: Wed 05 Nov 2025 05:49:51 +0000 Manifest this update: Wed 05 Nov 2025 05:49:50 +0000 Manifest next update: Wed 12 Nov 2025 05:49:50 +0000 Files and hashes: 1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: Ct5H8W+MjoTBNPEI7QtHHs/8y2xuZA20bI+0wASBYag=) 2: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: WBiQbxmKfw0D0XJ4l3vBPQQR/fNPllSnLo2npN/9Q8w=) 3: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: /deQI9TcHTHxlvzCNYanJbYW7e/aSJZiDaf6RgvHT6g=) 4: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: VfnSvDUvHKrYhNHc7vXNPSVppqVaI6SmYJprBmoGKlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Validity Not Before: Nov 5 05:49:50 2025 GMT Not After : Nov 12 05:49:50 2025 GMT Subject: CN=690ae57f-eab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:41:41:a4:88:dd:fc:10:df:97:4c:8e:41:f5: 00:21:3a:b7:6e:43:3f:8c:ae:83:b0:e5:5d:5c:1a: 0a:36:73:8c:7e:87:c8:b2:89:8a:0d:d1:0f:6b:ec: fb:c2:59:f6:15:b4:ee:d1:1e:26:c6:d9:85:04:f3: e0:d0:a6:e2:01:6f:a1:e8:80:85:81:80:fc:34:e6: 04:0b:1a:c3:97:c5:dc:cc:4f:aa:5b:05:bc:2f:ee: 6d:3c:94:5a:72:9c:5f:47:08:2e:d6:bb:dc:4b:2f: ad:b0:2c:88:62:9e:02:98:35:53:71:29:d9:e7:e9: d0:90:80:bb:9b:c8:dc:06:83:07:e3:1d:a7:8a:e9: a0:90:48:45:8b:d4:20:8b:40:6a:55:b1:96:0b:4e: af:a7:18:c2:05:35:66:76:c7:18:8e:c9:95:2a:55: 8e:f7:c8:d8:8e:cd:8a:d5:ed:d5:12:a6:3b:66:e3: 40:f0:65:84:eb:49:88:02:30:20:0b:09:37:fa:f8: 16:4b:2e:f1:cc:56:7a:b6:94:e8:33:9e:81:88:45: fc:1d:3f:6a:38:64:67:45:ed:98:f9:69:2a:96:ca: 62:eb:17:9d:b3:47:21:9e:ec:ac:4c:89:54:e6:c3: bf:e6:a4:43:6e:93:7b:ce:b4:0a:e0:5d:9f:54:e6: d9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DE:8F:D9:32:31:F5:D1:54:18:83:40:D4:B2:29:1C:5D:0F:57:32 X509v3 Authority Key Identifier: keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:97:a2:42:f1:b1:1f:ef:27:e8:9f:5e:c0:d8:2d:2d:54:da: e4:e6:b8:ec:fe:45:a8:1a:e3:6a:bb:dc:61:28:73:58:70:3f: 99:e7:47:67:cb:97:d1:5e:6b:c1:ff:0a:ed:c7:59:19:3c:7b: a6:70:6a:19:f3:4f:ec:f2:4e:66:66:a5:37:ab:d8:4a:b5:f7: 99:68:5d:4b:a2:4c:03:c3:da:83:42:ec:a3:5d:57:43:f1:8f: 70:a7:7f:cd:d9:d5:7e:96:2e:2f:ab:c3:11:0d:56:1d:7d:8f: ab:5b:63:56:98:9f:b6:95:7a:ea:9c:42:53:67:2a:7a:cb:d8: ac:80:31:34:ff:c3:f2:c3:fa:7d:b9:1f:ed:a4:09:4c:e8:5f: c8:c4:e4:84:2b:a4:2f:1a:77:80:d9:08:50:03:77:e7:2b:64: c4:cb:b1:97:62:02:e3:93:5e:8e:73:95:5b:32:68:32:7a:d7: 84:67:ac:19:c6:69:aa:0c:4f:7d:6d:27:e0:8b:5b:d0:ad:65: ec:6f:b0:0e:e7:e8:86:b4:54:40:a0:ae:39:8a:f0:34:1a:07: 98:f3:72:bf:da:43:72:fb:cb:32:ae:c5:62:2a:ef:a5:20:11: 76:75:67:f9:b8:b5:f9:c5:95:12:a2:ae:33:4d:c5:eb:cd:f7: 96:37:b9:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NTQxMTAvBgNVBAUTKEUxMUE0NzJGODQ5RkEzRDY2M0NBODdDQTY2MzNFQ0U3 RDhEMDA3NjIwHhcNMjUxMTA1MDU0OTUwWhcNMjUxMTEyMDU0OTUwWjAYMRYwFAYD VQQDEw02OTBhZTU3Zi1lYWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30FBpIjd/BDfl0yOQfUAITq3bkM/jK6DsOVdXBoKNnOMfofIsomKDdEPa+z7 wln2FbTu0R4mxtmFBPPg0KbiAW+h6ICFgYD8NOYECxrDl8XczE+qWwW8L+5tPJRa cpxfRwgu1rvcSy+tsCyIYp4CmDVTcSnZ5+nQkIC7m8jcBoMH4x2niumgkEhFi9Qg i0BqVbGWC06vpxjCBTVmdscYjsmVKlWO98jYjs2K1e3VEqY7ZuNA8GWE60mIAjAg Cwk3+vgWSy7xzFZ6tpToM56BiEX8HT9qOGRnRe2Y+Wkqlspi6xeds0chnuysTIlU 5sO/5qRDbpN7zrQK4F2fVObZ3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3ej9ky MfXRVBiDQNSyKRxdD1cyMB8GA1UdIwQYMBaAFOEaRy+En6PWY8qHymYz7OfY0Adi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg1NC9BODk2NDY2MDc5 OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85Wmp5b2ZLWmpQczU5alFC MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRScEhMNFNmbzlaanlvZktaalBzNTlqUUIySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg1NC9BODk2NDY2MDc5OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85 Wmp5b2ZLWmpQczU5alFCMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCll6JC8bEf7yfon17A2C0tVNrk5rjs/kWoGuNqu9xhKHNYcD+Z50dn y5fRXmvB/wrtx1kZPHumcGoZ80/s8k5mZqU3q9hKtfeZaF1LokwDw9qDQuyjXVdD 8Y9wp3/N2dV+li4vq8MRDVYdfY+rW2NWmJ+2lXrqnEJTZyp6y9isgDE0/8Pyw/p9 uR/tpAlM6F/IxOSEK6QvGneA2QhQA3fnK2TEy7GXYgLjk16Oc5VbMmgyeteEZ6wZ xmmqDE99bSfgi1vQrWXsb7AO5+iGtFRAoK45ivA0GgeY83K/2kNy+8syrsViKu+l IBF2dWf5uLX5xZUSoq4zTcXrzfeWN7la -----END CERTIFICATE-----Generated at Wed Nov 5 17:10:38 2025 by rpki-client