$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json) Hash identifier: o5SBoyw2l855sXlKct+rk0A/HvCx1XsNW58gBSQ7F08= Subject key identifier: B5:18:B8:87:F0:49:AB:F8:01:7A:D8:64:37:85:C9:8E:52:3D:C7:9D Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Certificate serial: 02CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft Manifest number: 02C5 Signing time: Sun 19 Oct 2025 03:34:30 +0000 Manifest this update: Sun 19 Oct 2025 03:34:29 +0000 Manifest next update: Sun 26 Oct 2025 03:34:29 +0000 Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: oczcyJT+6IdMegG2cvwv31jyze6YQ0WkpIcTnWrwfMo=) 2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: F2S0rE1Y9B4FArTQsvdfbYCQLr8rncdJXIVpg1O66R4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 714 (0x2ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Validity Not Before: Oct 19 03:34:29 2025 GMT Not After : Oct 26 03:34:29 2025 GMT Subject: CN=68f45c46-b2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:31:7e:94:5e:15:1f:ea:45:71:8d:0e:66: d0:f5:53:4b:dd:82:03:66:4f:29:b7:e9:72:25:46: 66:6a:d9:79:ca:4a:dc:56:40:00:96:8a:3f:9d:04: 9a:b1:7d:79:23:94:b9:c0:a3:a5:63:71:02:10:bd: 13:43:23:5a:40:bb:09:68:31:5c:d1:03:42:bb:29: f5:92:11:60:ad:6f:89:eb:46:de:cc:ed:57:75:69: 67:10:6e:8b:5b:03:69:11:4f:e6:87:0c:8a:c0:b9: 5c:17:bb:82:d0:91:6f:a5:6f:ab:be:1d:0a:e0:f3: 0b:56:62:8c:9e:ca:ae:6a:31:46:0e:eb:e7:5f:56: ed:ae:f5:0f:c1:f6:e3:55:19:e2:9a:6b:88:0c:66: e2:38:d0:cf:6e:ea:4e:c4:f4:c6:0a:b3:ce:40:b7: 89:a3:f2:02:8d:93:32:02:33:f7:7c:87:f7:06:7b: 7d:c2:04:16:0a:cd:2f:0f:d0:a7:1e:d2:6d:3c:2e: 48:42:1a:cd:28:d9:4c:05:ce:3d:6b:db:0e:a4:52: 99:97:36:04:4f:42:23:25:de:25:ef:f0:7e:67:e3: 97:31:ae:12:2d:15:5a:49:04:8e:91:74:57:47:18: 21:72:a2:fc:92:f7:f9:b9:4c:a6:d8:78:c4:a8:ad: 09:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:18:B8:87:F0:49:AB:F8:01:7A:D8:64:37:85:C9:8E:52:3D:C7:9D X509v3 Authority Key Identifier: keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:d4:dc:2a:e7:18:cc:37:ac:b8:15:e7:2a:3b:de:2b:45:1a: ed:d4:02:c9:fd:20:8b:54:ad:81:5b:c5:2d:64:0b:80:2f:b3: c9:56:a1:66:55:58:bf:cc:61:ef:3f:df:cb:1d:9a:30:a2:c6: b0:c4:c5:80:09:e1:fe:e0:80:ae:4d:5c:6d:33:97:4f:08:9e: b2:d8:be:2d:88:de:e2:ab:16:1d:51:9d:c1:01:b9:fd:18:9a: 40:0a:97:df:37:47:5c:7b:bb:c5:a4:50:be:35:95:e0:16:75: 22:49:a9:6f:11:00:b8:27:6f:27:11:cb:44:37:3a:95:55:c3: 52:46:d1:25:3e:02:a5:dd:c8:a8:50:61:5c:88:77:83:a4:82: 49:79:2c:d5:3a:e4:cf:d5:d9:3e:b9:ee:f2:72:53:17:ac:4c: 5d:37:31:aa:89:68:b7:dd:44:88:06:4f:bc:85:7d:d9:3e:4d: 63:b9:e0:17:cc:27:57:6e:f1:7e:78:73:67:75:83:9c:31:8f: 2b:be:a3:92:b3:45:57:a9:e1:53:75:55:d0:55:5d:35:49:77: 59:69:5c:1b:44:07:10:62:0c:05:23:63:db:f8:42:a0:c8:78: 8a:82:cf:a2:35:69:be:f5:00:cd:b1:61:90:cc:cd:8f:3d:29: 28:61:bf:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKEUxREIyRkM4MjVFQzNCQkJFNzI4NTdBNzNFQzA4NkEw ODIxRTIwRkQwHhcNMjUxMDE5MDMzNDI5WhcNMjUxMDI2MDMzNDI5WjAYMRYwFAYD VQQDEw02OGY0NWM0Ni1iMmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBwxfpReFR/qRXGNDmbQ9VNL3YIDZk8pt+lyJUZmatl5ykrcVkAAloo/nQSa sX15I5S5wKOlY3ECEL0TQyNaQLsJaDFc0QNCuyn1khFgrW+J60bezO1XdWlnEG6L WwNpEU/mhwyKwLlcF7uC0JFvpW+rvh0K4PMLVmKMnsquajFGDuvnX1btrvUPwfbj VRnimmuIDGbiONDPbupOxPTGCrPOQLeJo/ICjZMyAjP3fIf3Bnt9wgQWCs0vD9Cn HtJtPC5IQhrNKNlMBc49a9sOpFKZlzYET0IjJd4l7/B+Z+OXMa4SLRVaSQSOkXRX RxghcqL8kvf5uUym2HjEqK0JewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUYuIfw Sav4AXrYZDeFyY5SPcedMB8GA1UdIwQYMBaAFOHbL8gl7Du75yhXpz7AhqCCHiD9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS8zN0UzOTBBMDBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083dm5LRmVuUHNDR29JSWVJ UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRkc3Z5Q1hzTzd2bktGZW5Qc0NHb0lJZUlQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS8zN0UzOTBBMDBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083 dm5LRmVuUHNDR29JSWVJUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh1Nwq5xjMN6y4FecqO94rRRrt1ALJ/SCLVK2BW8UtZAuAL7PJVqFm VVi/zGHvP9/LHZowosawxMWACeH+4ICuTVxtM5dPCJ6y2L4tiN7iqxYdUZ3BAbn9 GJpACpffN0dce7vFpFC+NZXgFnUiSalvEQC4J28nEctENzqVVcNSRtElPgKl3cio UGFciHeDpIJJeSzVOuTP1dk+ue7yclMXrExdNzGqiWi33USIBk+8hX3ZPk1jueAX zCdXbvF+eHNndYOcMY8rvqOSs0VXqeFTdVXQVV01SXdZaVwbRAcQYgwFI2Pb+EKg yHiKgs+iNWm+9QDNsWGQzM2PPSkoYb85 -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:01 2025 by rpki-client