$ rpki-client -vvf rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft File: 4FxkVUXZ74a0UeUhnYMnYPQFyug.mft (raw, json) Hash identifier: pberd8ftfBDxcgRv/yD1IYQTbt3fkPqP9mANaM3SzfA= Subject key identifier: A1:3F:D3:76:03:E6:20:98:07:EF:84:43:45:C5:35:04:A5:0F:FD:89 Authority key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8 Certificate issuer: /CN=A911E09E/serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft Manifest number: 36 Signing time: Sun 19 Oct 2025 11:07:18 +0000 Manifest this update: Sun 19 Oct 2025 11:07:18 +0000 Manifest next update: Sun 26 Oct 2025 11:07:17 +0000 Files and hashes: 1: 4FxkVUXZ74a0UeUhnYMnYPQFyug.crl (hash: Tq0HW12A/CTggUjuoxP2urXo+V6Boy5nYZuJI6RrNYI=) 2: E1A91004624811F098E5B95AC4F9AE02.roa (hash: VJHNLTTmYE0OnrSaYRsFhyrLIddh+nJKNb/E2v8OcCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8 Validity Not Before: Oct 19 11:07:18 2025 GMT Not After : Oct 26 11:07:17 2025 GMT Subject: CN=68f4c666-c9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:66:4c:b0:42:dc:73:8f:6c:0f:75:c3:23: fa:ab:6b:a8:7b:01:8d:e5:85:ef:a6:cd:e7:20:92: a8:e8:07:95:87:1c:f4:00:c2:d1:b3:8b:81:0d:2f: 3f:6b:8d:ef:19:e7:a2:2f:c2:c1:2c:9f:d3:0b:d8: 6f:32:51:80:40:2f:7d:e9:3d:0b:98:bd:f2:c1:22: 08:68:df:9c:e0:36:1c:5e:b0:38:1f:77:aa:e8:6e: e7:d6:dc:3f:d3:d8:2e:e2:26:51:9c:46:cf:75:99: 1f:73:84:03:d8:d8:43:e5:fa:cd:eb:f3:86:52:40: 73:bf:4f:7f:39:5d:0f:3f:e2:7b:eb:a2:4a:88:c0: 33:99:d4:89:75:3b:64:be:ea:2e:cb:77:9b:8e:4c: 8d:99:25:a1:f2:80:72:54:1b:1f:b4:d4:fd:ae:b5: 7d:8b:7c:48:9f:e7:42:1a:04:41:2b:ec:8e:1e:c6: ba:08:0c:52:86:a1:8b:08:12:98:37:e5:ee:24:2b: 23:d5:f6:44:93:cf:fa:c0:03:6a:5b:37:bf:b5:c5: 2c:02:35:4d:69:a1:de:42:39:1d:fb:54:4a:60:07: d8:06:65:7b:f9:dd:54:09:2d:da:88:64:98:74:38: 33:37:74:99:2d:4f:db:bc:79:d7:44:a4:86:ee:9a: 47:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3F:D3:76:03:E6:20:98:07:EF:84:43:45:C5:35:04:A5:0F:FD:89 X509v3 Authority Key Identifier: keyid:E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d5:b8:46:98:b3:57:a9:fc:11:f8:c4:55:e5:3e:3b:4c:47: 83:9d:e3:5a:d5:a6:54:59:ae:84:30:c5:49:a1:97:e4:01:20: 6b:9c:2f:cd:b4:95:ff:05:e1:9c:4c:ed:03:56:0d:2c:e3:33: f2:c4:29:f9:54:6d:69:01:8a:1b:c8:c0:64:ab:62:a3:82:6c: 24:00:31:aa:35:a2:e7:e9:a2:da:df:1e:1a:ff:1c:5f:fc:c9: a1:7f:3d:2d:f9:f8:4a:cb:0a:87:82:99:bf:06:c0:fa:96:26: cc:a7:ef:05:ba:ee:90:58:de:37:12:c8:e9:37:ca:21:d8:34: 9d:e5:4b:cf:2a:ac:46:52:6a:29:3f:8c:10:e8:f1:32:b9:9f: d2:36:7f:62:f3:b4:be:3d:78:de:26:d8:8a:dc:e7:5c:76:5c: 9e:a7:63:ee:5c:3a:91:4b:85:88:e1:78:c9:b3:23:94:15:cf: fc:71:a2:1a:78:8e:04:f1:e4:92:e0:d0:4e:be:67:b1:49:93: 3b:26:e1:cd:22:86:d9:19:05:50:4f:e1:a1:71:79:1c:88:86: bd:88:2b:01:ab:30:e9:13:8c:73:12:c6:33:02:5a:cc:2d:dc: 76:1d:db:04:f7:e5:13:1c:e1:5d:f0:23:f6:9a:9d:d1:cd:eb: ef:cf:3c:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTA5RTExMC8GA1UEBRMoRTA1QzY0NTU0NUQ5RUY4NkI0NTFFNTIxOUQ4MzI3NjBG NDA1Q0FFODAeFw0yNTEwMTkxMTA3MThaFw0yNTEwMjYxMTA3MTdaMBgxFjAUBgNV BAMTDTY4ZjRjNjY2LWM5ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAmGZMsELcc49sD3XDI/qra6h7AY3lhe+mzecgkqjoB5WHHPQAwtGzi4ENLz9r je8Z56IvwsEsn9ML2G8yUYBAL33pPQuYvfLBIgho35zgNhxesDgfd6robufW3D/T 2C7iJlGcRs91mR9zhAPY2EPl+s3r84ZSQHO/T385XQ8/4nvrokqIwDOZ1Il1O2S+ 6i7Ld5uOTI2ZJaHygHJUGx+01P2utX2LfEif50IaBEEr7I4exroIDFKGoYsIEpg3 5e4kKyPV9kSTz/rAA2pbN7+1xSwCNU1pod5COR37VEpgB9gGZXv53VQJLdqIZJh0 ODM3dJktT9u8eddEpIbumkcDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoT/TdgPm IJgH74RDRcU1BKUP/YkwHwYDVR0jBBgwFoAU4FxkVUXZ74a0UeUhnYMnYPQFyugw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFMDlFL0Q4QkIwRjM2NjFG QTExRjBCRDRGNjA2RUM0RjlBRTAyLzRGeGtWVVhaNzRhMFVlVWhuWU1uWVBRRnl1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEZ4a1ZVWFo3NGEwVWVVaG5ZTW5ZUFFGeXVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF MDlFL0Q4QkIwRjM2NjFGQTExRjBCRDRGNjA2RUM0RjlBRTAyLzRGeGtWVVhaNzRh MFVlVWhuWU1uWVBRRnl1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABXVuEaYs1ep/BH4xFXlPjtMR4Od41rVplRZroQwxUmhl+QBIGucL820 lf8F4ZxM7QNWDSzjM/LEKflUbWkBihvIwGSrYqOCbCQAMao1oufpotrfHhr/HF/8 yaF/PS35+ErLCoeCmb8GwPqWJsyn7wW67pBY3jcSyOk3yiHYNJ3lS88qrEZSaik/ jBDo8TK5n9I2f2LztL49eN4m2Irc51x2XJ6nY+5cOpFLhYjheMmzI5QVz/xxohp4 jgTx5JLg0E6+Z7FJkzsm4c0ihtkZBVBP4aFxeRyIhr2IKwGrMOkTjHMSxjMCWswt 3HYd2wT35RMc4V3wI/aandHN6+/PPBE= -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:01 2025 by rpki-client