$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json) Hash identifier: E5Y5tk9qRJVd4bz8pSJg9VGYTAwiUJpoUh2pg1jX4uc= Subject key identifier: 5B:83:67:D9:46:2F:6F:C4:B2:E2:6D:2B:EE:A0:83:61:9B:47:4C:C1 Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Certificate serial: 04D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft Manifest number: 04D1 Signing time: Tue 04 Nov 2025 23:54:04 +0000 Manifest this update: Tue 04 Nov 2025 23:54:03 +0000 Manifest next update: Tue 11 Nov 2025 23:54:03 +0000 Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: Ujc9bA/A935r1wUTK+EplyXQ3r8LBregpTveiTirtyk=) 2: CF272560413111ECB71E086AC4F9AE02.roa (hash: DFm7D2HD21ulEvvyR2LKRVZi0MMQ+cGXUer0vQ5hcd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Validity Not Before: Nov 4 23:54:03 2025 GMT Not After : Nov 11 23:54:03 2025 GMT Subject: CN=690a921c-160f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:a5:29:87:a4:82:32:2c:7e:6e:92:1d:b8: f6:ba:dc:f8:18:91:57:5c:ab:51:0c:99:8a:06:a3: f5:b7:3c:59:00:19:ea:a8:ac:ac:7f:69:af:5d:8d: 49:fb:34:d3:2c:04:26:20:c9:17:79:b8:b6:ad:97: 03:7f:52:d8:fe:55:a9:c1:0b:4c:63:ce:f4:99:c8: d1:6d:97:bf:44:11:2a:5e:95:d9:21:7f:ae:1b:40: 6f:60:1c:b1:14:7c:06:0a:41:ba:f8:94:c7:5a:7d: 1c:33:1e:35:df:0c:fa:2b:3f:57:1c:98:c6:7c:01: 9e:58:b7:a7:88:bd:9a:5c:02:ba:49:13:5b:c9:7f: 95:f6:f5:c6:6c:b2:86:40:96:a8:61:a0:6b:9c:3b: 23:4e:b8:72:11:65:ca:93:0e:43:68:09:f3:99:33: b8:2f:22:a0:16:a9:5c:51:61:00:a9:4b:83:46:9e: 4c:c0:72:21:94:9d:19:97:e0:d7:85:c8:9d:b2:b1: 6a:76:d6:e1:35:d9:6e:b3:02:4b:9d:17:52:5a:ed: b3:b2:f5:c9:84:92:02:7c:e2:25:a6:b8:59:b8:2f: 21:76:6a:5f:24:39:a5:86:7c:08:51:47:05:2a:61: 0c:1f:6e:c1:c4:d8:c8:46:79:03:63:f0:78:7b:f2: 4f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:83:67:D9:46:2F:6F:C4:B2:E2:6D:2B:EE:A0:83:61:9B:47:4C:C1 X509v3 Authority Key Identifier: keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:72:ca:9a:3a:df:b9:60:d3:27:88:19:01:05:c9:a8:af:39: 7b:76:9d:2c:86:64:74:8c:01:7a:87:15:be:ee:4f:63:46:d0: 32:09:34:f5:4f:b1:46:90:85:01:70:f4:ed:07:bc:5c:1c:b4: 2c:63:7c:2b:19:2c:e1:6d:87:88:fe:0b:91:bd:1b:0b:30:57: aa:04:31:62:a2:e0:24:5c:29:68:20:f8:e9:0d:57:39:81:17: bd:18:b2:31:e7:79:de:e6:37:f6:ec:ff:d6:39:38:9e:bc:6d: 2d:ae:75:38:80:4f:cd:28:2f:b6:fd:7b:73:09:7e:ed:bf:77: 92:da:14:49:23:3d:16:e5:7d:a9:fc:1f:f9:12:58:ed:14:c0: c1:23:33:7c:0f:ad:10:17:8a:30:d9:b4:27:16:bd:ba:12:cf: 2d:67:3d:4e:a9:1f:93:47:99:94:b1:74:66:a7:7a:16:ec:f6: cc:f1:eb:4a:db:15:d7:56:41:af:f3:33:01:e9:a5:ef:6b:85: 04:fd:5b:ac:d5:0a:a1:1c:8c:52:67:c7:b3:dc:08:5b:75:69: 33:30:a2:63:67:d0:f4:b3:91:54:10:56:83:b4:0f:f8:a4:63: 96:cc:4f:82:91:b8:bf:58:5d:5d:2f:68:b2:c1:28:da:5c:b8: ad:13:5f:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMjQxMTAvBgNVBAUTKDMxRjM3ODNDN0ExRUQ3ODNGQzFGREE3NDFGNkE3NTI5 RDVBNUU2QTAwHhcNMjUxMTA0MjM1NDAzWhcNMjUxMTExMjM1NDAzWjAYMRYwFAYD VQQDEw02OTBhOTIxYy0xNjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsOlKYekgjIsfm6SHbj2utz4GJFXXKtRDJmKBqP1tzxZABnqqKysf2mvXY1J +zTTLAQmIMkXebi2rZcDf1LY/lWpwQtMY870mcjRbZe/RBEqXpXZIX+uG0BvYByx FHwGCkG6+JTHWn0cMx413wz6Kz9XHJjGfAGeWLeniL2aXAK6SRNbyX+V9vXGbLKG QJaoYaBrnDsjTrhyEWXKkw5DaAnzmTO4LyKgFqlcUWEAqUuDRp5MwHIhlJ0Zl+DX hcidsrFqdtbhNdluswJLnRdSWu2zsvXJhJICfOIlprhZuC8hdmpfJDmlhnwIUUcF KmEMH27BxNjIRnkDY/B4e/JP6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuDZ9lG L2/EsuJtK+6gg2GbR0zBMB8GA1UdIwQYMBaAFDHzeDx6HteD/B/adB9qdSnVpeag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIyNC81RkZDOUVGNjQx MjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0UDhIOXAwSDJwMUtkV2w1 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mTjRQSG9lMTRQOEg5cDBIMnAxS2RXbDVxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIyNC81RkZDOUVGNjQxMjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0 UDhIOXAwSDJwMUtkV2w1cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9csqaOt+5YNMniBkBBcmorzl7dp0shmR0jAF6hxW+7k9jRtAyCTT1 T7FGkIUBcPTtB7xcHLQsY3wrGSzhbYeI/guRvRsLMFeqBDFiouAkXCloIPjpDVc5 gRe9GLIx53ne5jf27P/WOTievG0trnU4gE/NKC+2/XtzCX7tv3eS2hRJIz0W5X2p /B/5EljtFMDBIzN8D60QF4ow2bQnFr26Es8tZz1OqR+TR5mUsXRmp3oW7PbM8etK 2xXXVkGv8zMB6aXva4UE/Vus1QqhHIxSZ8ez3AhbdWkzMKJjZ9D0s5FUEFaDtA/4 pGOWzE+Ckbi/WF1dL2iywSjaXLitE1/z -----END CERTIFICATE-----Generated at Wed Nov 5 10:30:05 2025 by rpki-client