$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft File: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json) Hash identifier: XAjKwn4uL8DGR73wrQ/8HYPVVqM5T462rGfjEY8RhyM= Subject key identifier: 01:92:6D:EE:DD:C0:55:F1:05:96:D7:E5:08:36:B1:1E:BF:E0:52:1F Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 Certificate issuer: /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Certificate serial: 079C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft Manifest number: 0792 Signing time: Sat 18 Oct 2025 22:47:41 +0000 Manifest this update: Sat 18 Oct 2025 22:47:41 +0000 Manifest next update: Sat 25 Oct 2025 22:47:41 +0000 Files and hashes: 1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: 0QQZE+337y7w4+RO//2B1e1+EP+VRlcHs/nSbJWYgDE=) 2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: fXQXf8N5tytPfV8xyqN1Zu7dGcPNJVrKRy7cMq29VZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1948 (0x79c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Validity Not Before: Oct 18 22:47:41 2025 GMT Not After : Oct 25 22:47:41 2025 GMT Subject: CN=68f4190d-4c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9e:bb:38:77:fa:2c:7f:a3:95:2f:3d:8f:62: 8d:b3:08:06:91:e7:89:f8:63:77:0f:d0:56:07:eb: 0a:59:3f:fe:d5:63:6d:fe:84:d2:76:df:f6:31:df: d6:e0:53:6b:bc:01:7d:66:67:e8:82:da:92:7a:ba: fe:e4:9c:18:e6:5e:47:f7:4f:a5:e6:36:c3:f0:9d: f8:9c:ba:c8:2c:b9:00:75:68:66:ab:e6:da:25:e0: 6d:6a:6e:d5:1d:c1:ab:3a:04:e3:46:96:87:ab:df: 2b:df:bb:fd:ca:6b:57:d1:07:55:06:db:50:fe:63: 64:40:9f:73:8c:6a:10:05:0a:c1:e0:95:f3:43:06: 92:86:d8:a8:35:11:d4:8c:c7:25:61:13:ba:db:5e: 6c:d0:fb:69:39:10:cd:7e:84:6b:79:ce:dd:8a:4b: 01:9c:b1:2b:97:71:a8:ab:99:17:f3:d1:01:e0:a6: 3c:f8:e7:03:68:94:d9:52:46:c7:af:26:16:bc:04: 34:16:40:8d:0e:a4:7e:99:4a:f3:b8:78:74:16:5e: b4:9c:f1:72:d2:9c:e3:68:40:ae:c0:fe:fb:f7:4e: 0e:cd:e9:a2:3a:8a:db:51:35:8d:42:d4:72:2b:8e: 78:87:6f:94:23:ac:c2:01:f8:07:3e:30:43:08:d8: 0e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:92:6D:EE:DD:C0:55:F1:05:96:D7:E5:08:36:B1:1E:BF:E0:52:1F X509v3 Authority Key Identifier: keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:8b:fd:3b:e6:09:42:b1:55:0d:aa:1a:c3:33:25:1b:83:d9: 0e:14:66:7a:7f:a7:61:37:d3:98:73:f3:2e:fb:8f:8e:a6:9d: 17:04:48:9e:9f:93:0f:d5:b0:01:41:e3:3c:a1:9f:e3:e7:1b: 14:a4:85:36:69:14:d8:54:8a:1d:81:f1:0b:db:0a:75:e1:f2: d1:05:e9:5b:ea:e0:d9:7d:5c:a5:5b:50:0b:90:71:05:00:82: 7a:25:39:b4:91:cf:ff:ca:6e:62:3a:c4:f4:58:6b:7b:50:24: 2e:4e:c4:c1:ff:eb:9c:cf:e8:c8:3d:28:ae:6d:82:c8:a9:e8: ab:97:fe:61:43:0a:df:9f:d2:ad:36:b8:2a:51:1e:dc:f3:50: ba:da:53:4c:69:16:29:2e:5d:f7:43:1e:4e:aa:27:d5:2c:a9: 71:9a:4b:21:dd:b3:d1:bb:1a:85:dc:f9:d1:4e:cb:d1:16:3a: 2b:41:98:4f:0d:03:9a:e3:71:0e:9a:da:8c:24:96:54:94:d0: aa:8d:7d:60:8f:1d:72:30:03:e2:8c:20:4c:01:28:18:0b:aa: 27:dc:36:6d:a0:48:e1:40:9a:fa:09:61:ad:f7:c2:b1:a0:98: 4d:70:74:ba:b9:d4:07:fe:d8:93:03:4d:1b:53:39:33:02:5c: 9f:17:14:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkyMjAxMTAvBgNVBAUTKEUyQ0ZDNDJCNkEwODE1MEFFRkVGRTcxODlCRTVBRjJC RTU2OEY4QzEwHhcNMjUxMDE4MjI0NzQxWhcNMjUxMDI1MjI0NzQxWjAYMRYwFAYD VQQDEw02OGY0MTkwZC00YzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnp67OHf6LH+jlS89j2KNswgGkeeJ+GN3D9BWB+sKWT/+1WNt/oTSdt/2Md/W 4FNrvAF9ZmfogtqSerr+5JwY5l5H90+l5jbD8J34nLrILLkAdWhmq+baJeBtam7V HcGrOgTjRpaHq98r37v9ymtX0QdVBttQ/mNkQJ9zjGoQBQrB4JXzQwaShtioNRHU jMclYRO6215s0PtpORDNfoRrec7diksBnLErl3Goq5kX89EB4KY8+OcDaJTZUkbH ryYWvAQ0FkCNDqR+mUrzuHh0Fl60nPFy0pzjaECuwP77904OzemiOorbUTWNQtRy K454h2+UI6zCAfgHPjBDCNgORwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGSbe7d wFXxBZbX5Qg2sR6/4FIfMB8GA1UdIwQYMBaAFOLPxCtqCBUK7+/nGJvlryvlaPjB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTIyMC8xNUNEMUMyMjI4 QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZRcnY3LWNZbS1XdkstVm8t TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRzX0VLMm9JRlFydjctY1ltLVd2Sy1Wby1NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTIyMC8xNUNEMUMyMjI4QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZR cnY3LWNZbS1XdkstVm8tTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhi/075glCsVUNqhrDMyUbg9kOFGZ6f6dhN9OYc/Mu+4+Opp0XBEie n5MP1bABQeM8oZ/j5xsUpIU2aRTYVIodgfEL2wp14fLRBelb6uDZfVylW1ALkHEF AIJ6JTm0kc//ym5iOsT0WGt7UCQuTsTB/+ucz+jIPSiubYLIqeirl/5hQwrfn9Kt NrgqUR7c81C62lNMaRYpLl33Qx5OqifVLKlxmksh3bPRuxqF3PnRTsvRFjorQZhP DQOa43EOmtqMJJZUlNCqjX1gjx1yMAPijCBMASgYC6on3DZtoEjhQJr6CWGt98Kx oJhNcHS6udQH/tiTA00bUzkzAlyfFxSU -----END CERTIFICATE-----Generated at Mon Oct 20 11:36:58 2025 by rpki-client