$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: 6nCv+vtaRgAART78a7s6H0/5DIjsOVDbfwbgegNGmzs= Subject key identifier: C1:2B:D3:F2:66:9B:D2:86:DB:F4:F5:BB:DC:99:68:DF:00:B4:A0:CC Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 07F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 07EF Signing time: Sat 18 Oct 2025 22:17:55 +0000 Manifest this update: Sat 18 Oct 2025 22:17:54 +0000 Manifest next update: Sat 25 Oct 2025 22:17:54 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: l+XoD1/syV0JiHI9AOoQa+Ve0exl8k9Y6joa2mxW2kU=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: nebZkphHnCGcHsK4OPuyoN2DWSVg+M+V/082vsrCEns=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: tXMl2RtLfZvDGfhyJ5diezkCwv50p552Np4xQThv520=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2041 (0x7f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Oct 18 22:17:54 2025 GMT Not After : Oct 25 22:17:54 2025 GMT Subject: CN=68f41212-b0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4c:5c:fb:b5:e7:0b:e1:8b:e3:19:d1:d1:53: c0:4e:a9:80:7e:f5:78:9e:f6:0e:29:25:62:fd:01: db:3a:54:c0:39:31:ca:16:66:64:7d:04:50:6f:17: 46:85:f5:d4:da:83:67:d0:6e:d7:b5:95:20:da:d2: d1:6f:a1:20:c5:81:df:b8:ee:74:cb:71:bd:ac:c8: 6f:d1:c4:b5:50:9e:64:98:84:d3:8f:28:be:37:88: f1:23:48:0d:43:46:0a:6e:35:2e:ca:6c:fc:13:48: f2:a2:ca:04:3b:67:97:9b:6c:67:5c:ec:d3:cd:a3: 1e:c0:a9:eb:a0:8d:b6:37:c9:10:6d:af:b9:42:94: 6e:12:4b:57:ec:62:a8:fa:75:69:b4:65:b4:06:56: 45:f3:20:23:81:f6:d2:65:43:6c:10:7b:10:c8:c5: a4:e3:b7:e8:f6:3a:15:85:2c:ec:a7:a5:9f:65:a9: 3d:bf:a5:4a:3f:b3:98:0d:29:c7:bb:cb:01:f5:ad: 58:75:7f:19:6d:70:6c:da:7b:3f:25:37:14:93:4b: ca:6b:88:1c:57:df:90:b0:50:98:e6:ad:a2:70:15: 89:c6:03:2d:ea:04:82:3c:4a:47:85:d2:3f:b1:25: 0d:1e:6b:53:df:96:ce:7f:76:e5:87:7e:4d:c4:22: 7f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2B:D3:F2:66:9B:D2:86:DB:F4:F5:BB:DC:99:68:DF:00:B4:A0:CC X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:26:bf:53:c3:cd:87:7a:61:7a:7f:38:fd:00:e3:96:9f:fa: 0c:39:ef:1b:84:67:a5:64:6d:3d:18:db:64:00:b6:68:2b:c6: 21:a4:b8:29:db:30:49:2e:b2:13:8a:95:c9:6d:f7:21:65:fb: 42:ab:36:44:19:b5:cf:00:11:77:b7:8f:03:8c:a1:97:99:7c: 4e:b2:1d:5c:34:30:28:7d:96:46:41:57:7f:cc:6a:d8:62:35: 65:96:ea:3f:4c:8a:b0:3b:b4:9c:e6:12:1c:06:33:1e:f9:09: f8:f8:21:74:a9:d9:6c:69:46:0f:6e:0e:20:f8:6a:dc:85:2f: e5:32:0f:13:51:a1:81:14:e2:99:a1:2d:05:e5:c7:7f:c8:01: dd:d0:c1:d2:b4:f6:58:fc:dd:af:95:fa:7c:bf:33:5d:11:5d: 34:b3:dd:88:8a:56:f4:ab:67:47:b0:6b:d8:34:23:9c:ca:0d: 96:92:d2:61:13:0d:5a:92:72:b6:35:66:03:bf:67:6c:b9:95: c5:05:8d:7d:ba:42:ba:2a:51:18:97:cf:bc:0a:71:0b:21:2e: e7:80:84:bb:e9:95:05:df:2c:e1:f2:8d:d9:a5:24:58:1d:20: 61:f5:13:fc:1d:8a:5c:b8:73:af:9e:14:1b:04:a4:e8:17:9d: 3f:c1:f4:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjUxMDE4MjIxNzU0WhcNMjUxMDI1MjIxNzU0WjAYMRYwFAYD VQQDEw02OGY0MTIxMi1iMGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Uxc+7XnC+GL4xnR0VPATqmAfvV4nvYOKSVi/QHbOlTAOTHKFmZkfQRQbxdG hfXU2oNn0G7XtZUg2tLRb6EgxYHfuO50y3G9rMhv0cS1UJ5kmITTjyi+N4jxI0gN Q0YKbjUuymz8E0jyosoEO2eXm2xnXOzTzaMewKnroI22N8kQba+5QpRuEktX7GKo +nVptGW0BlZF8yAjgfbSZUNsEHsQyMWk47fo9joVhSzsp6WfZak9v6VKP7OYDSnH u8sB9a1YdX8ZbXBs2ns/JTcUk0vKa4gcV9+QsFCY5q2icBWJxgMt6gSCPEpHhdI/ sSUNHmtT35bOf3blh35NxCJ/PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEr0/Jm m9KG2/T1u9yZaN8AtKDMMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKJr9Tw82HemF6fzj9AOOWn/oMOe8bhGelZG09GNtkALZoK8YhpLgp 2zBJLrITipXJbfchZftCqzZEGbXPABF3t48DjKGXmXxOsh1cNDAofZZGQVd/zGrY YjVlluo/TIqwO7Sc5hIcBjMe+Qn4+CF0qdlsaUYPbg4g+GrchS/lMg8TUaGBFOKZ oS0F5cd/yAHd0MHStPZY/N2vlfp8vzNdEV00s92Iilb0q2dHsGvYNCOcyg2WktJh Ew1aknK2NWYDv2dsuZXFBY19ukK6KlEYl8+8CnELIS7ngIS76ZUF3yzh8o3ZpSRY HSBh9RP8HYpcuHOvnhQbBKToF50/wfQo -----END CERTIFICATE-----Generated at Mon Oct 20 10:41:04 2025 by rpki-client