$ rpki-client -vvf rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft File: p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft (raw, json) Hash identifier: E0LQLYKPB7DWnaMZO5gZdRkG0aMsCeeK8M6Ceofc9ac= Subject key identifier: 49:8B:C2:FF:B3:EA:7B:E3:CD:76:92:21:E0:43:87:33:0A:B8:04:5F Authority key identifier: A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 Certificate issuer: /CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Certificate serial: 0759 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft Manifest number: 0754 Signing time: Sat 18 Oct 2025 23:03:31 +0000 Manifest this update: Sat 18 Oct 2025 23:03:30 +0000 Manifest next update: Sat 25 Oct 2025 23:03:30 +0000 Files and hashes: 1: p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl (hash: 4sG8gE7bLAHmQ1hqB3Hqcn+3hA/8aLv/h3i65IwjlR8=) 2: F2A90B8C3ECD11EBADC7D32AC4F9AE02.roa (hash: H0kHP8pBoH+bwHmlcJ0nDAtlDVRXDuWl/zy2MYQJc/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132933, serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Validity Not Before: Oct 18 23:03:30 2025 GMT Not After : Oct 25 23:03:30 2025 GMT Subject: CN=68f41cc3-ad67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4d:f9:f4:8e:23:ff:25:f7:ac:4b:27:6c:bd: fd:34:f1:e3:52:29:a9:53:27:b3:29:0a:76:0f:c8: a7:4c:b4:18:83:85:c3:9b:73:3f:11:02:1f:a6:c2: 54:1d:4b:6d:0a:5d:56:e1:1d:05:ed:39:68:90:51: 55:72:e7:6c:2f:e6:3d:be:b5:b4:f0:e3:5c:79:7b: ae:20:b4:e5:f5:f3:81:8c:ce:00:bf:9b:a8:36:15: 70:2b:95:0d:3a:c1:c4:c8:8f:dc:a5:e2:05:e2:cb: 4d:87:1f:e3:9a:b8:1b:ff:25:e1:6b:79:13:4f:3d: 94:44:2f:87:c2:13:9a:09:a9:e6:a1:80:ee:f4:e3: 0b:10:26:bf:66:2b:84:c8:9a:39:36:9c:20:ed:0d: 9a:d8:e2:6f:e5:cd:e0:c3:43:f3:12:92:ee:ef:1f: bb:7d:4d:08:13:43:97:b5:e0:0a:7d:23:98:cf:b7: 56:1f:47:06:20:b4:d3:ee:4b:23:c6:e3:86:f2:24: 98:ac:94:07:ff:be:82:31:38:df:97:99:a9:58:e4: 42:97:7f:20:44:85:5e:63:d8:c3:b6:ff:04:a4:fd: 80:84:45:dc:1b:cd:7f:53:63:20:30:2d:05:16:6c: 8c:a8:95:43:48:c8:3c:67:11:3d:88:42:ea:32:77: 84:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8B:C2:FF:B3:EA:7B:E3:CD:76:92:21:E0:43:87:33:0A:B8:04:5F X509v3 Authority Key Identifier: keyid:A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:3b:20:d2:67:73:84:5a:30:20:f1:68:31:22:38:3c:40:2a: bf:67:6b:04:78:49:8e:22:47:e9:eb:f8:54:47:78:c2:e5:f4: 2e:ce:7f:95:cf:94:11:60:55:d9:6a:2b:1f:c3:2f:63:30:79: cb:ed:36:5a:78:b4:ea:e5:1e:4e:61:2d:bc:f1:87:ef:66:39: 63:8b:5c:5e:bd:7f:24:89:79:fe:e4:79:00:ae:f4:9f:f7:63: a7:dd:d0:ac:cf:2d:dd:21:f9:4a:94:9d:5a:d1:f6:bc:ee:75: be:3e:90:33:2b:11:79:67:ef:99:f4:2f:aa:d0:5f:b7:80:89: ae:47:4b:2f:47:17:99:0d:9b:25:5e:ba:7e:df:c5:65:50:e3: eb:b8:4e:b3:4a:26:39:4a:69:d8:36:78:7d:8f:6b:80:65:67: 79:34:b3:d9:51:00:9b:f1:2f:e8:97:8a:33:dc:18:28:c1:20: 62:8e:c9:fe:c3:f2:fd:ff:f5:59:92:d9:d0:a6:63:08:48:e7: 37:3b:36:6e:86:4b:4c:d1:6f:d1:1b:3e:ae:c4:cf:d6:05:95: 32:d1:f9:47:da:22:9f:30:ab:21:0b:90:84:d1:03:64:a4:30: 3e:36:02:97:79:57:a1:74:7a:97:69:5c:e1:ab:04:3a:d9:1e: 96:cc:fc:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI5MzMxMTAvBgNVBAUTKEE3RkUxMjg2NTY4MjJGMjYyMUE0QTBGRjk1NjM0Mjc4 MDc5OEM0RjAwHhcNMjUxMDE4MjMwMzMwWhcNMjUxMDI1MjMwMzMwWjAYMRYwFAYD VQQDEw02OGY0MWNjMy1hZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0359I4j/yX3rEsnbL39NPHjUimpUyezKQp2D8inTLQYg4XDm3M/EQIfpsJU HUttCl1W4R0F7TlokFFVcudsL+Y9vrW08ONceXuuILTl9fOBjM4Av5uoNhVwK5UN OsHEyI/cpeIF4stNhx/jmrgb/yXha3kTTz2URC+HwhOaCanmoYDu9OMLECa/ZiuE yJo5Npwg7Q2a2OJv5c3gw0PzEpLu7x+7fU0IE0OXteAKfSOYz7dWH0cGILTT7ksj xuOG8iSYrJQH/76CMTjfl5mpWORCl38gRIVeY9jDtv8EpP2AhEXcG81/U2MgMC0F FmyMqJVDSMg8ZxE9iELqMneEiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmLwv+z 6nvjzXaSIeBDhzMKuARfMB8GA1UdIwQYMBaAFKf+EoZWgi8mIaSg/5VjQngHmMTw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjkzMy9GOTEyRjY5QTNF QzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5WWhwS0RfbFdOQ2VBZVl4 UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfNFNobGFDTHlZaHBLRF9sV05DZUFlWXhQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjkzMy9GOTEyRjY5QTNFQzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5 WWhwS0RfbFdOQ2VBZVl4UEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEOyDSZ3OEWjAg8WgxIjg8QCq/Z2sEeEmOIkfp6/hUR3jC5fQuzn+V z5QRYFXZaisfwy9jMHnL7TZaeLTq5R5OYS288YfvZjlji1xevX8kiXn+5HkArvSf 92On3dCszy3dIflKlJ1a0fa87nW+PpAzKxF5Z++Z9C+q0F+3gImuR0svRxeZDZsl Xrp+38VlUOPruE6zSiY5SmnYNnh9j2uAZWd5NLPZUQCb8S/ol4oz3BgowSBijsn+ w/L9//VZktnQpmMISOc3OzZuhktM0W/RGz6uxM/WBZUy0flH2iKfMKshC5CE0QNk pDA+NgKXeVehdHqXaVzhqwQ62R6WzPy5 -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:23 2025 by rpki-client