$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: Fsw5BjEWQsyAdip9AZgKOipLK0CEDFHulwSIUXQVW38= Subject key identifier: 9F:50:7B:2F:8A:E5:0C:D7:1C:1B:D3:6D:8E:D8:FE:74:79:02:8A:9A Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0CF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0CD8 Signing time: Sat 18 Oct 2025 18:52:50 +0000 Manifest this update: Sat 18 Oct 2025 18:52:50 +0000 Manifest next update: Sat 25 Oct 2025 18:52:50 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: ITq39LCETtMqwndtI5CSUAun6yfjwrtuyL8zD/D7aao=) 2: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: MNOygbTot5myB8zLL0b0K9rlqzZgH3f6swb91fFZk2k=) 3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: tjqskq9N3o/egf3xRNWQ42djlqYwKoTyXRLEqPg8Ljw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3314 (0xcf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Oct 18 18:52:50 2025 GMT Not After : Oct 25 18:52:50 2025 GMT Subject: CN=68f3e202-9cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:42:f4:08:25:7d:01:ee:7f:65:43:8e:7c: 02:d6:4e:d6:93:4d:ad:20:c4:99:50:89:0d:66:19: 38:f3:d6:a2:6b:70:66:13:3b:95:15:f3:1b:5d:f0: e3:03:74:82:c9:fa:a3:34:42:47:56:39:70:a7:50: c4:5a:7e:ae:e3:92:75:4f:42:0e:bd:da:0b:a0:a2: 8b:10:17:f8:8f:29:1d:91:c4:b8:4e:d5:01:7f:97: b7:c3:63:1b:44:ed:27:94:29:4c:10:27:d5:b5:fe: 6a:1d:d8:37:d2:b4:ca:ac:b6:d5:7f:9f:50:41:a2: da:f3:ff:dd:3a:e7:29:57:dc:0f:e9:f8:63:79:9c: 04:7a:77:88:bd:b6:41:db:e9:40:7a:3c:1a:ef:29: e3:57:6d:5f:8c:c1:f9:a4:58:67:6a:4c:24:65:91: 3a:25:f3:b9:bf:90:47:5d:85:31:fc:76:d2:26:23: c7:0e:e8:54:6d:a3:e7:a3:1f:83:29:89:cb:70:9e: 00:d1:78:21:14:64:35:2e:6d:52:77:32:fc:da:de: 7f:8b:14:72:22:f7:30:a5:80:99:d3:89:3b:e5:21: 43:21:71:7a:8c:e6:9f:12:50:bd:39:a0:40:52:71: 94:0f:eb:58:24:58:0c:7e:d5:5c:27:13:1f:3d:78: 36:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:50:7B:2F:8A:E5:0C:D7:1C:1B:D3:6D:8E:D8:FE:74:79:02:8A:9A X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:f1:db:ca:d0:93:3d:70:68:08:84:06:0e:6a:e6:8b:bb:11: 88:57:dd:95:b5:71:78:c4:cf:f3:db:70:22:93:22:2a:37:4f: 1a:87:e6:39:24:ee:a0:0e:fa:89:1b:82:77:5c:d4:7a:30:cd: 99:ff:07:cd:ae:d0:b6:a6:d8:db:21:90:ad:1c:e0:8d:7b:f1: 9f:e5:8d:af:bc:ce:71:d2:5b:55:26:65:ee:a4:da:94:18:fe: 40:bb:70:eb:90:c2:e3:f0:d8:83:64:fc:c7:89:8e:c4:ab:5e: e7:f6:fc:98:1d:ce:4c:22:ec:df:ab:3c:38:81:5e:78:b1:bc: 11:34:6a:8b:55:ca:44:45:40:e8:9c:a7:38:bd:cf:01:22:7b: 11:03:e8:29:71:90:a9:00:f8:a9:ff:50:48:93:42:05:1f:3a: 2b:2b:42:93:5b:f6:2b:16:a5:14:cb:9f:ee:74:9c:15:64:1a: e8:65:d3:c8:f0:f9:e4:32:31:66:db:f7:7e:ce:3e:64:3e:f6: bb:91:c9:fc:8c:ac:ca:9a:48:34:e6:76:e0:5e:b0:0f:5d:a0: c6:c8:6f:b9:42:2f:a1:22:bc:ff:ef:f6:09:55:d1:35:ef:7b: ee:89:c7:ee:40:41:98:d5:3c:fb:5d:aa:e6:86:35:85:d3:e7: 95:d9:8f:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjUxMDE4MTg1MjUwWhcNMjUxMDI1MTg1MjUwWjAYMRYwFAYD VQQDEw02OGYzZTIwMi05Y2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYBC9AglfQHuf2VDjnwC1k7Wk02tIMSZUIkNZhk489aia3BmEzuVFfMbXfDj A3SCyfqjNEJHVjlwp1DEWn6u45J1T0IOvdoLoKKLEBf4jykdkcS4TtUBf5e3w2Mb RO0nlClMECfVtf5qHdg30rTKrLbVf59QQaLa8//dOucpV9wP6fhjeZwEeneIvbZB 2+lAejwa7ynjV21fjMH5pFhnakwkZZE6JfO5v5BHXYUx/HbSJiPHDuhUbaPnox+D KYnLcJ4A0XghFGQ1Lm1SdzL82t5/ixRyIvcwpYCZ04k75SFDIXF6jOafElC9OaBA UnGUD+tYJFgMftVcJxMfPXg2bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9Qey+K 5QzXHBvTbY7Y/nR5AoqaMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB08dvK0JM9cGgIhAYOauaLuxGIV92VtXF4xM/z23AikyIqN08ah+Y5 JO6gDvqJG4J3XNR6MM2Z/wfNrtC2ptjbIZCtHOCNe/Gf5Y2vvM5x0ltVJmXupNqU GP5Au3DrkMLj8NiDZPzHiY7Eq17n9vyYHc5MIuzfqzw4gV54sbwRNGqLVcpERUDo nKc4vc8BInsRA+gpcZCpAPip/1BIk0IFHzorK0KTW/YrFqUUy5/udJwVZBroZdPI 8PnkMjFm2/d+zj5kPva7kcn8jKzKmkg05nbgXrAPXaDGyG+5Qi+hIrz/7/YJVdE1 73vuicfuQEGY1Tz7XarmhjWF0+eV2Y/o -----END CERTIFICATE-----Generated at Mon Oct 20 14:59:48 2025 by rpki-client