$ rpki-client -vvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft File: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json) Hash identifier: dsyKwhGjtWzElb3y7tGxeh8IyU9wNVG1G/nlYtC7IIA= Subject key identifier: FC:91:15:A0:50:E6:DB:F4:2C:F3:B8:F9:F8:12:58:60:41:04:F8:D4 Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C Certificate issuer: /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C Certificate serial: 07EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft Manifest number: 07E3 Signing time: Sat 18 Oct 2025 22:23:10 +0000 Manifest this update: Sat 18 Oct 2025 22:23:09 +0000 Manifest next update: Sat 25 Oct 2025 22:23:09 +0000 Files and hashes: 1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: idl0NnwTgauPgXbXX45WtNoPZ7IbDT8LGbB2Geboz4M=) 2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: 04Yyac0X4yooHW+vSmS1SL3uVYlQ7JtEGZ1zzlU0iN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2026 (0x7ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C Validity Not Before: Oct 18 22:23:09 2025 GMT Not After : Oct 25 22:23:09 2025 GMT Subject: CN=68f4134d-43ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:76:90:8b:ef:21:22:cb:d7:c2:d3:e8:4b:c6: f3:1b:6e:96:8c:60:45:92:fa:5f:e3:b8:12:e3:7a: f5:29:a9:1c:c8:d2:84:09:e7:f8:d5:4a:9a:54:dc: 55:ca:87:69:a8:25:52:be:b9:a6:30:e3:01:7a:e0: 5f:4d:a4:cd:cd:e0:09:56:59:6c:7f:af:db:96:44: 50:9d:e7:61:7a:ee:41:68:d5:c5:8f:0a:17:c9:7f: a8:fc:fb:67:62:e3:1a:47:ea:92:64:01:6d:43:8d: c7:d6:e6:38:3f:10:d3:85:e6:18:c7:a5:5c:24:29: d1:87:9a:0c:4f:8e:0e:b4:b5:2d:86:21:ca:18:7f: a4:9e:33:43:79:06:61:9a:aa:9d:8d:c7:13:b1:60: a1:37:52:e9:0d:72:1b:37:ba:c9:b9:d6:b3:47:a1: 20:15:f2:17:29:95:11:89:e9:d4:57:fe:10:bf:19: d9:3c:e0:56:ec:28:ba:a6:b3:49:75:74:1d:ad:d9: d1:1e:53:23:18:5c:7c:93:de:cf:c8:da:0f:b2:f8: 0a:83:e8:e3:e0:39:1d:d5:11:4b:51:95:f9:89:fc: 7e:ad:f5:4f:38:23:02:d6:8a:cc:5d:3a:88:a7:95: 58:f3:ab:f4:dc:f0:5f:96:98:cf:bc:fc:1b:09:e0: 19:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:91:15:A0:50:E6:DB:F4:2C:F3:B8:F9:F8:12:58:60:41:04:F8:D4 X509v3 Authority Key Identifier: keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:0f:b1:7a:b8:79:c7:42:98:8c:db:8d:5a:95:8a:65:f2:c9: 89:a6:44:64:2a:c2:db:80:31:60:17:8e:ad:6a:e7:73:16:37: 3c:98:37:97:55:d0:3f:25:87:9c:5e:60:58:bf:5a:f3:7a:00: 47:89:89:a0:00:f1:2e:fc:24:b9:4f:72:ae:f5:13:f0:4a:db: 86:a6:2d:1c:21:64:9b:68:dd:4f:52:37:c0:3d:d7:e3:e4:f7: c7:7c:e1:2b:f1:0e:99:d5:50:20:dd:1f:d5:3d:5c:f2:fc:62: 6d:6d:ec:18:91:cf:2b:c9:b2:61:8b:ea:96:92:45:21:59:af: ec:6c:2b:44:54:f0:83:90:83:1d:25:b3:a8:26:a8:97:5b:43: b1:ab:36:5c:73:5c:0e:93:06:b1:c1:22:5f:94:89:e8:53:c8: 65:95:f5:9b:8b:e8:8c:a5:b3:c8:b5:0f:16:c6:6d:77:af:67: 16:0a:a7:a3:2f:36:96:81:8c:96:89:54:6d:43:8a:d7:1c:b4: 46:74:79:b8:d6:cf:b1:84:0c:b3:a9:29:8a:3e:1c:fa:9a:3f: 2a:12:be:c7:9e:7b:a3:44:2f:03:fc:a0:1b:8c:12:08:ea:fb: 9d:6b:42:a1:17:96:4c:b2:b4:94:2f:dd:7e:48:ca:c0:fe:ce: e0:66:48:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwRDYxMTAvBgNVBAUTKEUyRDgxM0Q2NkNFNTBERDkzOEZDM0E1MzJEQjhFREUy QzVCQTc5NUMwHhcNMjUxMDE4MjIyMzA5WhcNMjUxMDI1MjIyMzA5WjAYMRYwFAYD VQQDEw02OGY0MTM0ZC00M2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3aQi+8hIsvXwtPoS8bzG26WjGBFkvpf47gS43r1KakcyNKECef41UqaVNxV yodpqCVSvrmmMOMBeuBfTaTNzeAJVllsf6/blkRQnedheu5BaNXFjwoXyX+o/Ptn YuMaR+qSZAFtQ43H1uY4PxDTheYYx6VcJCnRh5oMT44OtLUthiHKGH+knjNDeQZh mqqdjccTsWChN1LpDXIbN7rJudazR6EgFfIXKZURienUV/4QvxnZPOBW7Ci6prNJ dXQdrdnRHlMjGFx8k97PyNoPsvgKg+jj4Dkd1RFLUZX5ifx+rfVPOCMC1orMXTqI p5VY86v03PBflpjPvPwbCeAZ9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyRFaBQ 5tv0LPO4+fgSWGBBBPjUMB8GA1UdIwQYMBaAFOLYE9Zs5Q3ZOPw6Uy247eLFunlc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjBENi84OUEwRTdBMjA4 NkExMUVCOURGMzM4NDJDNEY5QUUwMi80dGdUMW16bERkazRfRHBUTGJqdDRzVzZl VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR0Z1QxbXpsRGRrNF9EcFRMYmp0NHNXNmVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjBENi84OUEwRTdBMjA4NkExMUVCOURGMzM4NDJDNEY5QUUwMi80dGdUMW16bERk azRfRHBUTGJqdDRzVzZlVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5D7F6uHnHQpiM241alYpl8smJpkRkKsLbgDFgF46taudzFjc8mDeX VdA/JYecXmBYv1rzegBHiYmgAPEu/CS5T3Ku9RPwStuGpi0cIWSbaN1PUjfAPdfj 5PfHfOEr8Q6Z1VAg3R/VPVzy/GJtbewYkc8rybJhi+qWkkUhWa/sbCtEVPCDkIMd JbOoJqiXW0OxqzZcc1wOkwaxwSJflInoU8hllfWbi+iMpbPItQ8Wxm13r2cWCqej LzaWgYyWiVRtQ4rXHLRGdHm41s+xhAyzqSmKPhz6mj8qEr7HnnujRC8D/KAbjBII 6vuda0KhF5ZMsrSUL91+SMrA/s7gZkht -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:17 2025 by rpki-client