$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json) Hash identifier: JBLreGLATauqSn5Pr+5Z1zrLasimDP8VxRc1UNHU+6s= Subject key identifier: 2D:57:E0:9D:06:B7:68:CC:6E:A1:D1:0F:C1:75:0F:D6:1E:D4:93:01 Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft Manifest number: 01A5 Signing time: Sun 19 Oct 2025 05:47:18 +0000 Manifest this update: Sun 19 Oct 2025 05:47:17 +0000 Manifest next update: Sun 26 Oct 2025 05:47:17 +0000 Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: yYw6brhDb8JhDJU+/xJ/HiPoNPOiiNBX2n4I8M2iXXY=) 2: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: st8PwK196xNld8O2k0lKE8037dLGvSfGuDJRF0i8kvY=) 3: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: imnNT9qYRRIcc5JHDTtnRt4iRKv++5OKcbvGmRUGbZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Validity Not Before: Oct 19 05:47:17 2025 GMT Not After : Oct 26 05:47:17 2025 GMT Subject: CN=68f47b65-6358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:19:4d:be:58:6a:de:db:96:ff:2f:7c:56: 79:55:83:6c:f0:d0:f9:45:55:b1:02:bf:a2:14:7b: 29:d2:58:b8:e0:3c:de:d8:d3:5e:8d:2b:e9:12:7e: 4d:bc:48:15:e4:40:ed:b4:bb:8b:07:f4:7d:71:65: 67:21:85:54:cd:c5:9f:56:24:e8:04:3f:0a:93:73: 69:2e:fd:bd:e5:62:39:af:0b:ad:93:50:6b:07:bb: 27:f6:14:68:00:57:cc:b7:93:f9:88:46:80:8e:3b: 12:00:f3:de:bd:94:ae:94:a5:1f:09:80:87:b2:ef: a5:ce:5e:62:a1:05:2d:3d:ee:6c:c7:31:0a:73:fe: 73:0a:b8:c4:bb:ce:5a:f4:a0:09:ea:08:a3:b4:f7: 91:cc:40:00:2b:f7:4a:25:5a:cb:e0:bb:fa:bc:a2: c8:3a:d8:7c:c0:55:7a:17:15:a6:40:47:fc:3c:60: 68:d3:49:06:68:36:7e:11:a4:2c:07:3a:64:49:35: af:79:90:57:ae:5c:58:54:57:b3:bb:85:48:89:ff: 74:5a:8a:5b:b6:61:23:b4:e0:3c:cd:37:33:c4:2c: 2b:69:ab:c1:c9:d3:7a:e6:c9:00:d4:51:9f:0a:41: 88:e0:4e:9f:f3:94:d5:58:5b:67:d8:98:67:1d:37: f8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:57:E0:9D:06:B7:68:CC:6E:A1:D1:0F:C1:75:0F:D6:1E:D4:93:01 X509v3 Authority Key Identifier: keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:2e:09:e5:c2:54:df:7b:c0:b7:d2:1b:bd:25:0f:2e:08:03: 2d:c1:af:19:78:89:91:3a:3a:da:ea:05:26:c8:5a:d3:e6:e8: 66:b9:ce:73:55:81:9f:dc:50:54:2b:57:10:61:2f:21:53:92: 80:58:1b:c0:7a:14:f3:16:d5:07:64:e5:49:d8:68:36:2d:7a: 69:ba:1b:6d:01:b9:38:6c:85:82:67:c9:fa:13:48:6c:ad:56: 05:0a:3f:ea:e6:bc:e7:8d:97:3e:bc:81:bc:56:4c:91:45:9b: 14:cf:42:e4:8d:33:d0:c0:49:2f:6c:89:ff:23:95:b8:98:e3: 70:30:21:30:2c:29:99:5e:0b:b8:93:32:fe:ec:1b:9e:28:93: 09:86:31:3c:f1:db:81:7c:2a:a9:70:f6:d2:f2:81:f4:8b:b0: e4:fb:33:b9:e7:e1:1f:99:6a:d8:a3:53:60:93:dd:71:a2:5d: 7c:49:bc:08:45:3b:a0:3a:ef:78:b2:0e:f2:e2:db:e5:5d:3c: 95:25:22:5e:fe:af:f1:88:7a:4a:03:3f:97:d1:27:28:39:a9: 6b:19:bb:c5:0a:c4:c2:54:65:da:4d:dc:e3:14:55:8d:fc:e6: 30:cb:8c:dd:40:34:97:2c:1f:56:33:49:6f:33:32:63:2e:a4: 80:b3:c4:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCNjExMTAvBgNVBAUTKEUzRTEwMEY4MDQwMTNBMDVGOTIyRUUxMUNCNEUwQUJF QTZDMjJCOTgwHhcNMjUxMDE5MDU0NzE3WhcNMjUxMDI2MDU0NzE3WjAYMRYwFAYD VQQDEw02OGY0N2I2NS02MzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0z0ZTb5Yat7blv8vfFZ5VYNs8ND5RVWxAr+iFHsp0li44Dze2NNejSvpEn5N vEgV5EDttLuLB/R9cWVnIYVUzcWfViToBD8Kk3NpLv295WI5rwutk1BrB7sn9hRo AFfMt5P5iEaAjjsSAPPevZSulKUfCYCHsu+lzl5ioQUtPe5sxzEKc/5zCrjEu85a 9KAJ6gijtPeRzEAAK/dKJVrL4Lv6vKLIOth8wFV6FxWmQEf8PGBo00kGaDZ+EaQs BzpkSTWveZBXrlxYVFezu4VIif90WopbtmEjtOA8zTczxCwraavBydN65skA1FGf CkGI4E6f85TVWFtn2JhnHTf4ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1X4J0G t2jMbqHRD8F1D9Ye1JMBMB8GA1UdIwQYMBaAFOPhAPgEAToF+SLuEctOCr6mwiuY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUI2MS83NjE2RDRGQzJB Q0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9nWDVJdTRSeTA0S3ZxYkNL NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtRUEtQVFCT2dYNUl1NFJ5MDRLdnFiQ0s1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUI2MS83NjE2RDRGQzJBQ0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9n WDVJdTRSeTA0S3ZxYkNLNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClLgnlwlTfe8C30hu9JQ8uCAMtwa8ZeImROjra6gUmyFrT5uhmuc5z VYGf3FBUK1cQYS8hU5KAWBvAehTzFtUHZOVJ2Gg2LXppuhttAbk4bIWCZ8n6E0hs rVYFCj/q5rznjZc+vIG8VkyRRZsUz0LkjTPQwEkvbIn/I5W4mONwMCEwLCmZXgu4 kzL+7BueKJMJhjE88duBfCqpcPbS8oH0i7Dk+zO55+EfmWrYo1Ngk91xol18SbwI RTugOu94sg7y4tvlXTyVJSJe/q/xiHpKAz+X0ScoOalrGbvFCsTCVGXaTdzjFFWN /OYwy4zdQDSXLB9WM0lvMzJjLqSAs8QS -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:54 2025 by rpki-client