$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json) Hash identifier: v6GEObKHTQHaLcLBcKCW2X8GOSyyoD4OourswdqH9Bg= Subject key identifier: 77:A7:C1:06:A4:4A:2E:C6:03:D6:63:74:CB:09:75:47:0A:E8:36:18 Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 04CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft Manifest number: 04C4 Signing time: Sun 19 Oct 2025 01:40:51 +0000 Manifest this update: Sun 19 Oct 2025 01:40:51 +0000 Manifest next update: Sun 26 Oct 2025 01:40:51 +0000 Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: 6in6PfBDP46zNhvdXCl/KPnISEPciBSfq381LQdKZvE=) 2: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: 7VHkgX/mbThqgLkAc7wHG3m+rvoalBNxxWk0mMeVuao=) 3: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: NIvct8fJn9M1iEY9RRPmR0E04PRAFDynGMtQ70vSFyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1230 (0x4ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Oct 19 01:40:51 2025 GMT Not After : Oct 26 01:40:51 2025 GMT Subject: CN=68f441a3-dc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0d:f9:2e:91:dd:67:f9:86:8a:e6:ff:1d:97: 75:f9:3b:c6:a4:5d:6d:b8:7a:14:2f:7d:f0:ee:ef: 02:02:93:f0:98:22:59:d5:27:c1:70:10:2c:87:6c: 8e:ec:e2:bc:d3:9c:6e:32:3a:06:7b:8a:8e:d2:89: 2d:b8:02:1f:34:82:72:88:d2:b3:20:46:a2:a0:1f: ae:7d:6d:f8:9b:26:ed:08:e4:49:ee:89:56:bf:1e: d3:b2:a3:ab:70:0b:7c:c4:65:9a:42:7e:13:c5:c2: dc:c5:f8:a9:62:1e:e4:05:db:a8:43:11:63:96:de: 4a:25:dd:c7:7c:64:92:7b:1a:14:06:f2:23:cc:a6: 47:ef:f5:60:a9:18:ad:ea:01:9f:ef:3e:38:18:3c: 30:1e:bd:3c:fd:90:60:9d:7b:de:4d:2e:40:bc:42: ac:f4:3e:7d:de:39:8d:d4:96:3d:28:b3:06:5b:ba: a4:b6:80:d6:a0:ce:d0:55:19:4d:f0:8d:19:ac:d6: bf:a4:b3:fb:f6:80:9e:40:55:1c:61:2b:f4:14:9d: 11:55:0e:8c:58:d8:4a:ba:2a:b5:d8:76:05:be:92: 28:6e:15:6a:0a:0a:ca:d3:87:68:79:a9:5f:57:9d: 5b:6c:8d:dd:b9:64:a1:98:41:60:e5:89:58:e5:3c: f6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A7:C1:06:A4:4A:2E:C6:03:D6:63:74:CB:09:75:47:0A:E8:36:18 X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:68:0e:ab:cc:6b:af:47:5a:5a:26:17:6c:b3:04:a2:5a:bb: 02:05:b5:c9:19:89:42:23:52:4e:2a:c3:e0:fc:71:df:74:87: 44:c7:9c:25:3e:35:a9:47:92:78:c9:ee:81:39:7a:5d:25:db: 57:5d:eb:bc:d4:c9:a8:a6:92:d4:cb:47:4a:c3:d6:6b:4b:74: ae:43:ae:3d:fd:14:07:18:8b:bb:27:96:7f:df:5c:ff:3b:1c: 4d:4a:ac:dd:e2:82:b0:79:42:65:90:ae:b7:2b:38:bf:cc:28: c4:3b:01:4e:d6:99:8f:2d:4d:15:eb:65:0a:74:c0:79:db:d2: b5:54:67:ca:a2:4d:ce:5d:54:b6:ac:b4:73:62:a5:ef:56:19: 78:62:27:2c:24:9b:b1:c2:2c:1c:b9:85:28:54:7a:d3:76:a5: 1a:da:8b:6e:3b:ff:ba:e1:ea:60:cd:59:b5:20:0e:a4:39:09: 3c:86:cd:e9:39:aa:4d:9f:9c:f1:1c:5f:7e:8d:bd:6b:4a:17: 53:28:9d:80:5a:f2:78:ca:40:fc:b6:a6:d5:2e:16:91:6e:49: f5:14:70:51:89:95:75:ce:d8:f2:6b:be:ff:e4:d4:d8:be:27: d5:0f:ea:20:27:79:1d:f8:94:9a:0a:7e:eb:99:db:8b:ef:b2: ab:4d:c7:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjUxMDE5MDE0MDUxWhcNMjUxMDI2MDE0MDUxWjAYMRYwFAYD VQQDEw02OGY0NDFhMy1kYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5A35LpHdZ/mGiub/HZd1+TvGpF1tuHoUL33w7u8CApPwmCJZ1SfBcBAsh2yO 7OK805xuMjoGe4qO0oktuAIfNIJyiNKzIEaioB+ufW34mybtCORJ7olWvx7TsqOr cAt8xGWaQn4TxcLcxfipYh7kBduoQxFjlt5KJd3HfGSSexoUBvIjzKZH7/VgqRit 6gGf7z44GDwwHr08/ZBgnXveTS5AvEKs9D593jmN1JY9KLMGW7qktoDWoM7QVRlN 8I0ZrNa/pLP79oCeQFUcYSv0FJ0RVQ6MWNhKuiq12HYFvpIobhVqCgrK04doealf V51bbI3duWShmEFg5YlY5Tz2hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHenwQak Si7GA9ZjdMsJdUcK6DYYMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y aS1hVm5XbURfaldQTzNxU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZaA6rzGuvR1paJhdsswSiWrsCBbXJGYlCI1JOKsPg/HHfdIdEx5wl PjWpR5J4ye6BOXpdJdtXXeu81MmoppLUy0dKw9ZrS3SuQ649/RQHGIu7J5Z/31z/ OxxNSqzd4oKweUJlkK63Kzi/zCjEOwFO1pmPLU0V62UKdMB529K1VGfKok3OXVS2 rLRzYqXvVhl4YicsJJuxwiwcuYUoVHrTdqUa2otuO/+64epgzVm1IA6kOQk8hs3p OapNn5zxHF9+jb1rShdTKJ2AWvJ4ykD8tqbVLhaRbkn1FHBRiZV1ztjya77/5NTY vifVD+ogJ3kd+JSaCn7rmduL77KrTcfD -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:59 2025 by rpki-client