$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft File: 4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json) Hash identifier: dHekf0FHVtEo4SS0W5PJG7bXACCUhp1SgiOGAIfdL0c= Subject key identifier: 7F:93:3C:53:6B:53:95:FD:F8:F7:8C:58:79:66:AE:EF:84:6D:7A:48 Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 0939 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft Manifest number: 091D Signing time: Sat 18 Oct 2025 21:24:40 +0000 Manifest this update: Sat 18 Oct 2025 21:24:40 +0000 Manifest next update: Sat 25 Oct 2025 21:24:40 +0000 Files and hashes: 1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: 6o9bww8U2Y0rmZ6JDRxE0hxmezm999aeK7PFGkYU8wQ=) 2: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: RO65RMNM2Nj+skVx9D4SwK+SURjH9kvIKLTrXVq1cDk=) 3: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: AMggt9zpwS0BRdqI+ClPrj6WWxTra7y9F4TlC3w0Ums=) 4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: rJeii+ilF+9cVriG2vucr/nhWEU/kidxHLEjPFgUME0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2361 (0x939) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Oct 18 21:24:40 2025 GMT Not After : Oct 25 21:24:40 2025 GMT Subject: CN=68f40598-980a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:85:98:b0:29:d2:70:c3:1b:59:da:26:a0:cb: bb:9c:21:bc:d2:c2:4e:86:74:9c:27:09:67:99:2d: 97:38:81:4d:50:a8:39:9a:20:5f:4c:27:67:48:70: 2a:5b:0a:3b:72:11:cc:45:d6:5f:74:b7:9a:87:9d: bb:0d:76:8e:25:f7:90:c4:f9:fa:64:dd:e6:e5:7b: ad:1b:d9:10:6a:10:25:18:c1:0d:5e:62:1a:1a:19: fe:c9:ed:8c:cf:22:f7:13:fb:43:f9:ca:ec:ab:6e: 51:5d:2b:43:88:88:55:68:50:da:4b:80:bf:ab:5a: f3:ce:a1:18:96:2b:15:7e:88:e1:af:8c:3e:ae:c9: 88:93:d0:ce:38:c6:23:63:40:5d:05:03:fe:09:6d: 87:d6:19:e1:30:20:7a:73:ed:d6:54:59:1c:41:0b: 97:d8:28:eb:d9:a2:c5:a8:79:e2:83:67:fd:08:8b: b5:e3:1e:53:37:ec:ec:dc:6a:f0:bd:65:c5:75:df: 15:ff:a8:6f:a1:32:44:cd:d9:32:e5:4a:ec:41:0f: 7c:65:5d:f0:ce:e9:ca:4e:08:61:d0:c1:b4:7e:a5: ba:db:ec:06:dc:aa:9a:1b:60:15:64:06:06:c6:f8: 80:ae:d4:d5:7f:2a:66:a7:4d:ec:18:44:07:6b:ac: 2f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:93:3C:53:6B:53:95:FD:F8:F7:8C:58:79:66:AE:EF:84:6D:7A:48 X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:09:59:4f:63:e9:07:45:56:a0:aa:e4:ef:05:7b:11:13:a7: ad:ec:38:99:58:29:df:f8:82:38:4d:63:4e:54:99:6b:b3:f3: 5e:84:91:72:a6:74:42:c0:ba:72:5b:da:68:a7:61:a4:f4:1e: 58:05:70:18:58:47:0a:52:9d:e9:35:86:4d:8b:ee:4e:d6:e0: a5:53:5d:15:2a:1b:5a:ab:6a:66:1a:61:5e:bc:52:5b:0a:9e: 1d:f8:6f:f9:06:15:ea:2d:ce:d3:b5:95:e9:a3:75:52:0f:f8: da:aa:8f:b6:51:e8:92:0d:76:6a:56:2d:04:b6:cd:ee:5d:10: 25:98:ea:4c:26:29:9c:bd:75:36:2c:0d:ad:08:b6:2b:ee:1f: d2:85:69:60:de:18:ce:95:59:68:de:2b:f5:6c:00:fd:59:4f: 76:bd:bf:87:e4:cd:a3:54:00:86:78:75:c0:59:28:a7:ff:d4: 76:ac:e6:05:5a:e2:41:0e:01:17:f3:7e:7b:61:0b:d5:a0:ae: cd:e1:ba:45:94:23:fd:33:6f:7a:ed:78:02:28:c7:50:55:51: 95:dc:76:75:b9:cb:e9:b7:58:3f:10:63:78:60:74:89:77:a4: 4a:07:a4:5f:b6:05:5b:7d:8d:be:8f:41:0a:41:03:3a:bd:65: cc:fe:af:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjUxMDE4MjEyNDQwWhcNMjUxMDI1MjEyNDQwWjAYMRYwFAYD VQQDEw02OGY0MDU5OC05ODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA94WYsCnScMMbWdomoMu7nCG80sJOhnScJwlnmS2XOIFNUKg5miBfTCdnSHAq Wwo7chHMRdZfdLeah527DXaOJfeQxPn6ZN3m5XutG9kQahAlGMENXmIaGhn+ye2M zyL3E/tD+crsq25RXStDiIhVaFDaS4C/q1rzzqEYlisVfojhr4w+rsmIk9DOOMYj Y0BdBQP+CW2H1hnhMCB6c+3WVFkcQQuX2Cjr2aLFqHnig2f9CIu14x5TN+zs3Grw vWXFdd8V/6hvoTJEzdky5UrsQQ98ZV3wzunKTghh0MG0fqW62+wG3KqaG2AVZAYG xviArtTVfypmp03sGEQHa6wvmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+TPFNr U5X9+PeMWHlmru+EbXpIMB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTEyRi80QjhCRkZFQ0I0NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhi a25WRjhrU1pLSEt0Q3Z3d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTCVlPY+kHRVagquTvBXsRE6et7DiZWCnf+II4TWNOVJlrs/NehJFy pnRCwLpyW9pop2Gk9B5YBXAYWEcKUp3pNYZNi+5O1uClU10VKhtaq2pmGmFevFJb Cp4d+G/5BhXqLc7TtZXpo3VSD/jaqo+2UeiSDXZqVi0Ets3uXRAlmOpMJimcvXU2 LA2tCLYr7h/ShWlg3hjOlVlo3iv1bAD9WU92vb+H5M2jVACGeHXAWSin/9R2rOYF WuJBDgEX8357YQvVoK7N4bpFlCP9M2967XgCKMdQVVGV3HZ1ucvpt1g/EGN4YHSJ d6RKB6RftgVbfY2+j0EKQQM6vWXM/q/u -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:25 2025 by rpki-client