$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft File: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft (raw, json) Hash identifier: UqdvA074oIBZzT/WQbWWJt2/qeqnVKhTsesCjMdB7Kc= Subject key identifier: B0:6F:BF:90:DD:4D:1E:4B:3C:F3:8F:35:0D:30:45:51:B4:50:93:AD Authority key identifier: 7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53 Certificate issuer: /CN=A914E600/serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft Manifest number: D2 Signing time: Sun 19 Oct 2025 08:50:36 +0000 Manifest this update: Sun 19 Oct 2025 08:50:35 +0000 Manifest next update: Sun 26 Oct 2025 08:50:35 +0000 Files and hashes: 1: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl (hash: N4WOWbmgBUJRhece9DaY3LBXrQbc/t48QjB0N4jiQTA=) 2: B47102FE77F211EFBA1E9F7EC4F9AE02.roa (hash: AW0AjmB1MBpf81Bbaj4obKJm9vXagVv8vcAISz8uehk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E600, serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953 Validity Not Before: Oct 19 08:50:35 2025 GMT Not After : Oct 26 08:50:35 2025 GMT Subject: CN=68f4a65b-3478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1a:22:c7:b6:4e:a3:ae:7c:7d:22:75:12:61: df:fe:13:85:71:d6:4f:86:7e:25:71:6e:e3:15:00: c9:39:fd:c6:a1:5f:5d:7c:88:6a:f0:fc:1c:91:9f: 07:22:4e:41:c1:67:ca:06:4f:94:77:e0:d9:46:69: 6b:63:6f:97:4a:9a:4d:4a:78:e5:a1:2d:ec:a7:df: 53:d0:1b:aa:1c:15:47:ac:6b:0c:92:bc:7c:72:be: bc:7b:e8:81:e0:a7:98:d2:28:9f:e3:d5:12:41:64: 83:7c:6c:d1:ce:7f:b8:2a:49:2e:44:37:5e:64:4d: cc:0d:37:d3:72:d6:36:90:31:d0:f1:76:78:5d:d4: a9:8f:1e:3d:8f:76:79:1f:c4:95:17:6e:60:8a:c8: cf:24:f2:4d:24:9c:24:e0:c9:3a:8b:e7:99:06:38: 2f:d3:79:f0:08:06:5c:97:ae:22:30:61:c8:9b:c6: 37:cf:a5:96:09:cf:ee:ad:2d:a2:73:b8:2b:fc:8e: fb:a3:85:12:f9:b2:71:0c:09:a6:5e:3c:d3:98:08: 2c:5d:73:1d:a2:0f:31:66:80:e7:46:84:2a:d5:14: ae:72:4c:5a:0c:54:a1:cb:6e:01:a3:0e:12:ea:c8: 05:53:8e:3e:bd:22:ad:90:ee:d1:04:9f:a3:cd:c7: 4f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6F:BF:90:DD:4D:1E:4B:3C:F3:8F:35:0D:30:45:51:B4:50:93:AD X509v3 Authority Key Identifier: keyid:7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:41:1a:50:aa:22:41:52:af:16:1c:4e:95:fb:55:69:69:bb: c4:30:24:61:5b:73:c9:9a:aa:f3:75:93:85:5e:27:25:b5:79: c4:f5:8a:47:c0:88:60:c0:48:c5:ec:03:ea:e8:28:fa:25:3e: 09:06:1e:93:92:9e:31:65:06:a6:a7:11:de:ed:79:cd:bd:d6: 39:77:e1:d3:1b:b3:3c:bd:b4:98:b7:e9:6d:d3:f4:b7:ed:bf: d6:35:f2:c0:a3:8d:e4:3d:bf:41:ff:6a:60:17:57:ac:db:22: 4b:6c:2e:78:1a:ff:5c:9b:14:69:07:fd:40:d9:aa:5b:1a:ac: 25:fd:80:fb:cd:37:9c:c1:88:f9:f2:17:09:c5:18:28:bc:b7: c9:ef:ad:11:a6:72:96:84:eb:46:f8:c4:69:4f:94:3f:11:0b: c4:ea:42:29:1e:e8:6b:ce:26:b2:79:ab:11:29:ba:2e:e5:cc: 85:c8:22:38:4a:0e:3b:fc:95:3f:44:2e:87:16:4f:e8:d9:92: 4c:d6:cd:28:4e:ea:8c:7c:dd:96:d5:cf:18:da:0a:71:be:b0: 3e:e5:02:b0:f0:7c:8e:2b:c5:ed:b9:57:c0:80:8d:b3:79:f4: 40:d0:e5:8d:11:d5:9a:6b:4b:13:b9:ae:c6:bb:e3:d5:9e:cf: 23:89:fd:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2MDAxMTAvBgNVBAUTKDdGODI0NUJCRDRENDU5NzIxQjQxRDRGRjJCQkZCNDI1 RkYxMTg5NTMwHhcNMjUxMDE5MDg1MDM1WhcNMjUxMDI2MDg1MDM1WjAYMRYwFAYD VQQDEw02OGY0YTY1Yi0zNDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhoix7ZOo658fSJ1EmHf/hOFcdZPhn4lcW7jFQDJOf3GoV9dfIhq8PwckZ8H Ik5BwWfKBk+Ud+DZRmlrY2+XSppNSnjloS3sp99T0BuqHBVHrGsMkrx8cr68e+iB 4KeY0iif49USQWSDfGzRzn+4KkkuRDdeZE3MDTfTctY2kDHQ8XZ4XdSpjx49j3Z5 H8SVF25gisjPJPJNJJwk4Mk6i+eZBjgv03nwCAZcl64iMGHIm8Y3z6WWCc/urS2i c7gr/I77o4US+bJxDAmmXjzTmAgsXXMdog8xZoDnRoQq1RSuckxaDFShy24Bow4S 6sgFU44+vSKtkO7RBJ+jzcdPawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBvv5Dd TR5LPPOPNQ0wRVG0UJOtMB8GA1UdIwQYMBaAFH+CRbvU1FlyG0HU/yu/tCX/EYlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTYwMC8yQUE3RDQ1RTc3 RjExMUVGQUMxMTI5NDJDNEY5QUUwMi9mNEpGdTlUVVdYSWJRZFRfSzctMEpmOFJp Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y0SkZ1OVRVV1hJYlFkVF9LNy0wSmY4UmlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTYwMC8yQUE3RDQ1RTc3RjExMUVGQUMxMTI5NDJDNEY5QUUwMi9mNEpGdTlUVVdY SWJRZFRfSzctMEpmOFJpVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcQRpQqiJBUq8WHE6V+1VpabvEMCRhW3PJmqrzdZOFXicltXnE9YpH wIhgwEjF7APq6Cj6JT4JBh6Tkp4xZQampxHe7XnNvdY5d+HTG7M8vbSYt+lt0/S3 7b/WNfLAo43kPb9B/2pgF1es2yJLbC54Gv9cmxRpB/1A2apbGqwl/YD7zTecwYj5 8hcJxRgovLfJ760RpnKWhOtG+MRpT5Q/EQvE6kIpHuhrziayeasRKbou5cyFyCI4 Sg47/JU/RC6HFk/o2ZJM1s0oTuqMfN2W1c8Y2gpxvrA+5QKw8HyOK8XtuVfAgI2z efRA0OWNEdWaa0sTua7Gu+PVns8jif1O -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:02 2025 by rpki-client