$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json) Hash identifier: JHVHOv7Dx+JeJ7t9RTepuS/Ebypxxud7TdZsI/V0m3g= Subject key identifier: AD:C5:F7:20:E0:58:52:60:91:58:E9:4E:D8:EC:FA:B2:A2:4C:F8:CE Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Certificate serial: 33E6CEE1ABA4C30F91F52442CEBD4B93DB2EFF75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft Manifest number: 033D Signing time: Wed 05 Nov 2025 07:28:06 +0000 Manifest this update: Wed 05 Nov 2025 07:23:06 +0000 Manifest next update: Thu 06 Nov 2025 10:41:06 +0000 Files and hashes: 1: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=) 2: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: h2bSnnI9a+kGlKn3GxEShW8TmFpFzCWMgYRzWIvLc4c=) 3: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=) 4: 4B1987D5160068092602529871C93EA320045A75.crl (hash: SSGLjyeFeNranWO0NZgP2GQsJ8LRFr4s5NAwkofX0GY=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e6:ce:e1:ab:a4:c3:0f:91:f5:24:42:ce:bd:4b:93:db:2e:ff:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75 Validity Not Before: Nov 5 07:23:06 2025 GMT Not After : Nov 6 10:41:06 2025 GMT Subject: CN=ADC5F720E05852609158E94ED8ECFAB2A24CF8CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:e9:03:1d:eb:39:f2:ea:2e:22:61:81:83: 46:61:f3:e4:a4:1e:a3:3b:66:e5:de:97:29:dd:fe: 41:bb:dc:1d:e1:90:d8:fb:4f:43:a2:66:74:87:ff: 72:4c:41:4f:10:19:86:e2:28:b0:a0:2b:20:c2:34: 79:d2:32:bf:52:cf:85:1b:8e:70:4a:58:ed:ca:40: 33:d6:34:76:50:5b:a5:d6:50:57:4c:90:15:d1:9d: ff:d6:54:be:65:bb:25:07:76:f6:64:4e:2f:29:3e: 29:7a:9d:3f:67:a2:f9:10:68:fd:91:07:7c:71:ac: 74:a7:0b:45:be:22:50:b1:57:ab:63:fb:67:9c:6a: 39:ff:76:e9:31:dd:21:ab:6e:10:11:07:56:3c:ae: f2:7b:de:d4:37:13:9c:96:c8:8b:24:ec:eb:06:3e: 11:28:61:d0:fa:06:f7:f6:66:74:a2:92:b7:0f:ea: 10:d7:01:0d:66:d2:80:ee:63:9d:57:df:2c:9a:6e: 17:8b:66:bd:9f:8d:62:c4:24:58:08:f7:d4:82:cb: e4:89:67:90:23:89:e5:c4:23:c2:c8:ee:d9:39:e3: 28:2c:3d:88:b0:37:bd:11:a3:a6:ea:d7:29:ab:95: 30:97:28:b3:c9:8e:3d:1f:7e:35:84:c9:ab:a7:f5: eb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C5:F7:20:E0:58:52:60:91:58:E9:4E:D8:EC:FA:B2:A2:4C:F8:CE X509v3 Authority Key Identifier: keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a4:ab:8e:fe:f6:a7:f3:8b:32:f6:6b:95:f1:a2:87:92:1e: c8:53:a9:fa:65:d6:2d:ae:69:b2:dc:e0:8d:be:ed:b0:a9:7a: 59:39:1c:19:c1:af:99:8f:25:5f:7e:e3:fc:53:8d:16:af:1a: ee:30:64:29:a9:2c:f5:8d:22:0e:71:56:9a:75:9a:1e:ae:a6: 9b:90:bd:4b:73:9a:fa:ae:25:92:11:1d:a4:c4:fd:fb:01:65: 58:cc:81:48:a9:6d:04:29:05:d3:83:fa:65:48:9c:22:2c:ef: 3b:0a:55:52:9a:a3:01:97:57:6d:b8:93:53:a0:4b:48:ec:b0: e1:19:df:69:67:3c:af:f3:17:af:1e:b9:aa:8f:8b:81:f7:fb: 39:e8:61:12:43:a1:85:84:c3:db:d5:53:0b:ff:0c:c9:d8:c4: 8c:09:db:48:06:b3:ed:8d:e1:66:8f:e7:4a:23:ca:22:44:cc: 2f:a1:54:3d:d4:ff:28:60:1d:e6:1e:d4:f5:c7:aa:d3:4f:d4: e6:e2:02:fb:13:14:7b:97:c4:d5:e0:b0:7b:8a:1c:22:b5:be: 0f:7e:8e:e7:1b:cf:21:3f:9f:85:98:d1:ba:65:81:8c:40:92: 21:13:04:40:94:f3:d7:ab:fb:d8:7c:01:a2:f1:d4:83:cf:82: f5:07:c1:9a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUM+bO4aukww+R9SRCzr1Lk9su/3UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2 MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI1MTEwNTA3MjMwNloX DTI1MTEwNjEwNDEwNlowMzExMC8GA1UEAxMoQURDNUY3MjBFMDU4NTI2MDkxNThF OTRFRDhFQ0ZBQjJBMjRDRjhDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMB16QMd6zny6i4iYYGDRmHz5KQeoztm5d6XKd3+QbvcHeGQ2PtPQ6JmdIf/ ckxBTxAZhuIosKArIMI0edIyv1LPhRuOcEpY7cpAM9Y0dlBbpdZQV0yQFdGd/9ZU vmW7JQd29mROLyk+KXqdP2ei+RBo/ZEHfHGsdKcLRb4iULFXq2P7Z5xqOf926THd IatuEBEHVjyu8nve1DcTnJbIiyTs6wY+EShh0PoG9/ZmdKKStw/qENcBDWbSgO5j nVffLJpuF4tmvZ+NYsQkWAj31ILL5IlnkCOJ5cQjwsju2TnjKCw9iLA3vRGjpurX KauVMJcos8mOPR9+NYTJq6f162ECAwEAAaOCAhswggIXMB0GA1UdDgQWBBStxfcg 4FhSYJFY6U7Y7Pqyokz4zjAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAdaSrjv72p/OLMvZrlfGih5IeyFOp+mXWLa5pstzgjb7tsKl6 WTkcGcGvmY8lX37j/FONFq8a7jBkKaks9Y0iDnFWmnWaHq6mm5C9S3Oa+q4lkhEd pMT9+wFlWMyBSKltBCkF04P6ZUicIizvOwpVUpqjAZdXbbiTU6BLSOyw4RnfaWc8 r/MXrx65qo+Lgff7OehhEkOhhYTD29VTC/8MydjEjAnbSAaz7Y3hZo/nSiPKIkTM L6FUPdT/KGAd5h7U9ceq00/U5uIC+xMUe5fE1eCwe4ocIrW+D36O5xvPIT+fhZjR umWBjECSIRMEQJTz16v72HwBovHUg8+C9QfBmg== -----END CERTIFICATE-----Generated at Wed Nov 5 15:44:01 2025 by rpki-client