$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft File: 4xZnlgSAzwfjwi15DeTiAe9wQNs.mft (raw, json) Hash identifier: 8YU47CF4EcLZ5/JVXiK2hfwPXwRgGIWXu2W8v52VDBI= Subject key identifier: 44:DF:21:07:B9:99:7A:90:A3:A9:56:B9:0D:30:F8:4C:03:C3:58:0C Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB Certificate issuer: /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft Manifest number: 01FC Signing time: Sun 19 Oct 2025 04:50:38 +0000 Manifest this update: Sun 19 Oct 2025 04:50:37 +0000 Manifest next update: Sun 26 Oct 2025 04:50:37 +0000 Files and hashes: 1: 4xZnlgSAzwfjwi15DeTiAe9wQNs.crl (hash: XorCP+OxghF8KgEelQo8LyQD2fjUo0uN8GbCFzWMFD8=) 2: 0ADA583C5DB911F0A54D4C6FC4F9AE02.roa (hash: YIHS3PAvaz4V4QmFJCk8b1AkmK5GNgS8/DelBF3BA28=) 3: 0BBC997C5DB911F0A54D4C6FC4F9AE02.roa (hash: g6pquqeh1IhUuquygrP9Vdo65/Zud1vKIjoHKRNQNOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B310, serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Validity Not Before: Oct 19 04:50:37 2025 GMT Not After : Oct 26 04:50:37 2025 GMT Subject: CN=68f46e1e-9cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:57:01:c9:54:c0:00:b9:93:6d:80:63:0d:39: 64:ac:14:2f:eb:59:3a:b9:b1:3a:e1:3b:62:ac:00: 0c:dd:e6:f1:4e:a1:b8:c9:06:fe:a8:1a:e4:2b:4e: 82:f9:12:84:c0:dc:9d:12:0f:a4:bd:5f:da:2f:3e: 67:bc:06:32:fb:4a:c8:72:95:96:a7:b5:73:20:1f: 9f:c2:f0:ee:07:fd:1e:ee:48:03:6f:db:9c:10:0a: dd:f5:0a:f6:f1:48:4d:c6:7c:2e:3f:d9:06:1d:9d: a8:39:b8:68:9a:a1:ba:0e:7f:b1:22:4a:19:d8:4c: 19:1c:10:32:84:ee:1c:5c:9c:c5:bc:a0:02:59:80: 17:99:86:74:06:03:04:55:ad:91:44:e2:20:24:e3: 49:8f:80:0e:87:fb:07:cf:81:15:70:d5:14:97:cd: 17:93:dd:2a:41:d2:50:e2:93:e6:dd:1a:18:a3:ee: 3c:58:0e:be:76:54:27:ba:f3:5c:8e:18:6f:23:48: 40:14:0e:4b:16:03:c5:f9:2c:66:a7:2f:b1:86:50: ee:65:78:d5:08:24:5e:82:a5:16:6e:b2:ad:f6:16: 39:51:f5:a4:3b:94:ff:07:e7:a4:29:97:1e:39:43: f0:32:dd:67:38:5b:fb:e7:71:fe:4b:51:c2:0b:5f: b8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DF:21:07:B9:99:7A:90:A3:A9:56:B9:0D:30:F8:4C:03:C3:58:0C X509v3 Authority Key Identifier: keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:db:d1:62:da:a8:96:8f:cf:06:95:5b:45:8a:29:03:41:b3: 97:70:70:11:ed:7d:a9:58:49:44:6d:d4:80:ab:59:e1:03:ba: bd:d3:95:22:43:f0:4b:10:5b:fc:7a:8f:be:84:f4:de:8c:24: 29:5b:00:1e:76:f5:93:93:33:15:4e:31:3c:67:90:7a:9c:42: b2:57:60:36:06:0f:1a:0d:7a:bb:21:1e:bc:43:35:92:87:c9: bf:17:e0:d6:96:2c:02:66:8c:3b:d3:49:59:e6:b3:9d:ff:61: 5c:a6:42:a6:19:e2:3c:dc:93:be:95:da:7d:10:ef:5f:33:aa: 96:bc:ba:b5:01:e1:37:78:86:24:ba:66:fd:ef:90:ab:36:1a: 0d:b5:c9:9f:f7:5d:ec:08:3a:0b:23:6f:d3:b4:3d:52:b3:3e: 60:78:3d:24:ba:00:c3:f2:aa:25:dc:f9:3e:e1:9b:36:5d:7d: a0:e9:d2:95:f2:07:ec:94:0f:18:f8:7f:31:d9:96:2b:65:b8: d2:dd:14:e1:be:4f:d7:ec:47:ac:84:45:db:2a:77:72:5f:fa: 15:78:a1:f7:f2:65:9b:2a:fb:15:f6:a6:a7:16:c2:2e:dc:c6: ea:e7:e8:36:dc:f3:59:9b:82:89:52:ed:ef:f4:59:c8:45:ff: 9f:f6:00:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIzMTAxMTAvBgNVBAUTKEUzMTY2Nzk2MDQ4MENGMDdFM0MyMkQ3OTBERTRFMjAx RUY3MDQwREIwHhcNMjUxMDE5MDQ1MDM3WhcNMjUxMDI2MDQ1MDM3WjAYMRYwFAYD VQQDEw02OGY0NmUxZS05Y2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lcByVTAALmTbYBjDTlkrBQv61k6ubE64TtirAAM3ebxTqG4yQb+qBrkK06C +RKEwNydEg+kvV/aLz5nvAYy+0rIcpWWp7VzIB+fwvDuB/0e7kgDb9ucEArd9Qr2 8UhNxnwuP9kGHZ2oObhomqG6Dn+xIkoZ2EwZHBAyhO4cXJzFvKACWYAXmYZ0BgME Va2RROIgJONJj4AOh/sHz4EVcNUUl80Xk90qQdJQ4pPm3RoYo+48WA6+dlQnuvNc jhhvI0hAFA5LFgPF+Sxmpy+xhlDuZXjVCCRegqUWbrKt9hY5UfWkO5T/B+ekKZce OUPwMt1nOFv753H+S1HCC1+4kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETfIQe5 mXqQo6lWuQ0w+EwDw1gMMB8GA1UdIwQYMBaAFOMWZ5YEgM8H48IteQ3k4gHvcEDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjMxMC8zRUJEMTdDMkFE MTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3Zmp3aTE1RGVUaUFlOXdR TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4Wm5sZ1NBendmandpMTVEZVRpQWU5d1FOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjMxMC8zRUJEMTdDMkFEMTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3 Zmp3aTE1RGVUaUFlOXdRTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA029Fi2qiWj88GlVtFiikDQbOXcHAR7X2pWElEbdSAq1nhA7q905Ui Q/BLEFv8eo++hPTejCQpWwAedvWTkzMVTjE8Z5B6nEKyV2A2Bg8aDXq7IR68QzWS h8m/F+DWliwCZow700lZ5rOd/2FcpkKmGeI83JO+ldp9EO9fM6qWvLq1AeE3eIYk umb975CrNhoNtcmf913sCDoLI2/TtD1Ssz5geD0kugDD8qol3Pk+4Zs2XX2g6dKV 8gfslA8Y+H8x2ZYrZbjS3RThvk/X7EeshEXbKndyX/oVeKH38mWbKvsV9qanFsIu 3Mbq5+g23PNZm4KJUu3v9FnIRf+f9gB/ -----END CERTIFICATE-----Generated at Mon Oct 20 01:50:04 2025 by rpki-client