$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft File: 4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json) Hash identifier: fLXsnuwR0i94QEQvqyotcF95UzHVQrgaY0oW+xc/nwk= Subject key identifier: C3:3F:8D:6D:A5:34:F0:73:55:FB:A2:0A:0B:B1:62:EE:03:A8:A0:24 Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft Manifest number: 0200 Signing time: Wed 05 Nov 2025 02:28:28 +0000 Manifest this update: Wed 05 Nov 2025 02:28:28 +0000 Manifest next update: Wed 12 Nov 2025 02:28:28 +0000 Files and hashes: 1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: w8Eq6RMchp0vJ8LRILKbRfrtWZiBMNDP3iuHg6SJe7s=) 2: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: V89TVKMG86FWKeqAC80eNKWm9QeM+Xm489cfb+DFW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Validity Not Before: Nov 5 02:28:28 2025 GMT Not After : Nov 12 02:28:28 2025 GMT Subject: CN=690ab64c-0587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fc:b2:3a:12:c9:6e:ce:b1:78:06:50:e3:81: 80:44:a5:d0:77:d6:2a:f1:36:c9:43:05:62:59:65: 8d:2f:c7:b3:c9:0f:51:12:9f:f3:d8:c3:b7:9d:26: 1e:c1:6d:50:6e:1b:87:14:a6:b8:85:77:09:cc:83: fd:bb:68:ac:2a:41:21:26:7d:09:85:ff:f9:8c:d5: 8c:03:fd:ed:7f:24:d1:00:81:97:1c:e9:ec:7f:e4: 71:22:35:63:53:1e:5c:75:26:03:a0:3c:0c:b9:6e: 19:2f:0b:e0:c6:f2:ea:81:4b:af:a5:3e:ba:e2:a1: fe:69:d7:1e:11:de:74:73:3a:69:63:ad:81:64:dd: 7e:c1:e3:b2:96:79:63:8c:46:2d:c3:93:a9:9e:7f: 49:77:bd:ce:90:e7:ed:4d:7c:c5:32:2f:9c:7a:b2: 54:38:4a:05:45:ce:5c:a0:2b:4c:9d:31:d5:83:bd: 0b:e6:a2:64:a1:9a:df:fe:0b:10:70:24:83:5d:e4: cd:d5:57:df:0b:ba:aa:14:68:91:26:c6:c6:47:dc: 6c:69:d2:3d:50:5a:38:11:17:8e:25:cb:74:8d:d8: 5e:21:d1:16:86:4b:47:e9:51:df:28:ea:ef:6e:4d: 28:36:ed:97:52:23:9a:31:47:59:c6:c6:de:70:4a: 54:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3F:8D:6D:A5:34:F0:73:55:FB:A2:0A:0B:B1:62:EE:03:A8:A0:24 X509v3 Authority Key Identifier: keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:e5:aa:57:f4:c7:40:b3:9f:c0:63:c5:f5:80:99:f9:e7:9e: ea:9e:c1:ab:cf:a5:04:59:94:51:d9:57:b6:f7:cf:77:46:a9: 04:3a:9a:e2:9f:4d:17:42:78:cd:2c:f4:e9:67:c1:40:0d:c4: af:b4:b9:94:d7:ea:85:d2:51:78:86:4e:1c:ce:93:29:34:73: 09:5c:18:38:c0:bb:8f:62:74:33:f5:45:42:e5:e0:87:1e:9e: ab:23:89:9d:28:22:18:ee:65:cc:45:bb:89:a2:63:b0:36:ee: 9b:95:11:39:8b:69:91:2f:7c:35:9b:4a:ea:3f:0f:18:b2:3a: 67:b7:e6:f8:ae:9c:2b:a6:70:cd:54:2a:4e:9d:f7:7a:1b:5c: 99:33:ad:40:2a:bf:a5:d7:11:8a:e0:4c:dd:7e:9d:17:54:ab: 36:73:22:d0:a6:2b:a3:3a:6a:47:b4:85:da:cb:bd:e4:27:cf: 6c:a0:9d:f8:78:1e:a5:93:81:89:67:ed:9b:62:4d:3a:31:1c: 8f:30:93:c6:f8:8d:bf:f0:59:95:0d:c4:b9:99:d9:67:b1:6b: ea:63:b2:41:4b:e9:13:84:df:a8:08:49:3a:6d:ab:f7:9c:c7: e3:bb:60:8f:36:11:f9:08:c8:99:48:ab:78:cd:0c:51:9f:8f: ed:60:9e:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0NjkxMTAvBgNVBAUTKEUwRDU0NDVCODBCMTgxN0Y2MkYzQzY0QUE4QzhGNkQ3 RTEzQUUxMDMwHhcNMjUxMTA1MDIyODI4WhcNMjUxMTEyMDIyODI4WjAYMRYwFAYD VQQDEw02OTBhYjY0Yy0wNTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvyyOhLJbs6xeAZQ44GARKXQd9Yq8TbJQwViWWWNL8ezyQ9REp/z2MO3nSYe wW1QbhuHFKa4hXcJzIP9u2isKkEhJn0Jhf/5jNWMA/3tfyTRAIGXHOnsf+RxIjVj Ux5cdSYDoDwMuW4ZLwvgxvLqgUuvpT664qH+adceEd50czppY62BZN1+weOylnlj jEYtw5Opnn9Jd73OkOftTXzFMi+cerJUOEoFRc5coCtMnTHVg70L5qJkoZrf/gsQ cCSDXeTN1VffC7qqFGiRJsbGR9xsadI9UFo4EReOJct0jdheIdEWhktH6VHfKOrv bk0oNu2XUiOaMUdZxsbecEpU0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMM/jW2l NPBzVfuiCguxYu4DqKAkMB8GA1UdIwQYMBaAFODVRFuAsYF/YvPGSqjI9tfhOuED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTQ2OS9FRkE1NjNDOEE1 QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdYOWk4OFpLcU1qMjEtRTY0 UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROVkVXNEN4Z1g5aTg4WktxTWoyMS1FNjRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTQ2OS9FRkE1NjNDOEE1QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdY OWk4OFpLcU1qMjEtRTY0UU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE5apX9MdAs5/AY8X1gJn5557qnsGrz6UEWZRR2Ve29893RqkEOpri n00XQnjNLPTpZ8FADcSvtLmU1+qF0lF4hk4czpMpNHMJXBg4wLuPYnQz9UVC5eCH Hp6rI4mdKCIY7mXMRbuJomOwNu6blRE5i2mRL3w1m0rqPw8Ysjpnt+b4rpwrpnDN VCpOnfd6G1yZM61AKr+l1xGK4Ezdfp0XVKs2cyLQpiujOmpHtIXay73kJ89soJ34 eB6lk4GJZ+2bYk06MRyPMJPG+I2/8FmVDcS5mdlnsWvqY7JBS+kThN+oCEk6bav3 nMfju2CPNhH5CMiZSKt4zQxRn4/tYJ4O -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:01 2025 by rpki-client