$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft File: 4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json) Hash identifier: c2uYa8jPHDk/UOZycfnNRk7e21K5GXhqEKIQ4TfGaYY= Subject key identifier: 9E:EC:32:E9:E3:E3:B5:CA:91:E4:38:70:81:56:37:D9:F9:BC:72:F3 Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Certificate serial: 02B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft Manifest number: 02AC Signing time: Sun 19 Oct 2025 03:43:00 +0000 Manifest this update: Sun 19 Oct 2025 03:42:59 +0000 Manifest next update: Sun 26 Oct 2025 03:42:59 +0000 Files and hashes: 1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: eLGWeC+BmfmIadP2usatCPE3hcH+ecPBrvB2bzT1dtg=) 2: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: qXJ6WIYPz1bw3bsc4PG2hiq2kWx6ipTX7+9TfJ3AB80=) 3: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: xCZ8Pmp/DfujdT07uerGjkQxfEJEaTaMR2ab3oAlRio=) 4: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: p/UGppIjgdU0zgcCE801w9qFglLFdJgIlJ6pMarUbMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Validity Not Before: Oct 19 03:42:59 2025 GMT Not After : Oct 26 03:42:59 2025 GMT Subject: CN=68f45e44-cd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:d3:f0:7a:a0:94:08:f4:4e:75:34:a3:9b: 5f:90:0f:ad:e3:9f:bb:3e:7b:fc:65:a0:98:6c:8b: 05:0c:52:94:26:25:83:d1:55:11:82:17:3c:04:e8: 9d:5d:6a:92:51:c1:81:9e:7b:5b:20:93:c6:2c:b2: fc:4a:dc:34:70:17:af:bc:3e:c3:39:e0:54:88:e9: c8:af:36:0d:3e:ee:73:2e:ed:ff:d4:88:cf:a4:c3: 60:ab:a0:b2:a5:62:61:30:d2:d8:35:9f:a4:c6:7d: f5:fd:ec:b2:fe:6e:4b:1e:23:b8:66:94:4d:27:47: 53:4c:6e:1d:d7:6c:20:99:b6:b7:eb:9a:9f:bd:d5: be:0d:4e:f0:f4:ea:17:86:d1:0c:78:6d:49:56:a2: 35:6e:ca:80:54:82:4f:1e:ce:d7:44:41:60:35:02: b1:54:2a:f1:5e:b4:42:ea:fa:9f:3e:18:28:f6:63: 69:a2:b5:99:3e:3d:34:45:d8:10:ef:7f:93:9e:73: 39:36:63:bf:3c:6d:f0:d5:ec:d4:78:0d:3c:c8:38: d5:56:5e:24:1b:c4:62:ea:f1:a5:fb:3b:b2:23:1f: cd:a2:0d:78:c6:1a:b5:da:31:77:3e:9c:ab:54:56: e6:6c:85:ab:e1:e1:5e:63:6c:54:e2:b2:ed:3a:b9: d7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EC:32:E9:E3:E3:B5:CA:91:E4:38:70:81:56:37:D9:F9:BC:72:F3 X509v3 Authority Key Identifier: keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ea:c0:3d:e7:4f:9d:76:c4:c5:49:41:27:04:9c:09:9b:4f: 9d:2d:6e:e0:3d:5f:af:ae:21:a1:c0:dd:81:61:be:83:3c:d7: d6:86:21:e0:e5:a8:ab:0f:81:aa:33:e8:80:13:ce:20:f2:c6: a8:b8:ee:d9:4d:84:e0:f8:6a:e7:d6:63:25:d9:70:68:cc:d6: dd:60:53:fb:2c:b2:11:53:97:2f:1d:3b:69:50:cb:78:40:c9: 93:6b:2d:54:ef:25:76:41:59:51:24:69:cd:39:99:7d:8e:2a: e0:ae:5f:f1:a8:a8:af:6c:cb:99:58:de:57:8c:3d:dd:ac:27: 75:03:8b:e8:6c:00:7d:01:73:f6:0a:02:21:59:62:65:8f:8d: 5c:b9:30:8e:8d:16:ee:84:3b:59:12:fa:fe:dc:22:bf:b5:b6: cc:56:a8:30:3d:86:a3:7c:67:f8:5f:b2:a3:c9:d6:94:34:de: 24:8e:17:60:04:5e:6e:0b:5f:0a:5e:e5:03:45:c6:27:74:a2: 21:67:b4:c1:a4:1e:a7:14:4a:cf:4b:5f:7d:2c:84:6d:fe:e3: e4:4b:c7:d6:be:37:91:41:6b:52:60:aa:01:68:bd:af:d9:8c: 8e:e0:a1:2d:d0:d6:2e:27:0f:7f:3e:3b:c1:24:61:93:37:b2: db:d0:72:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz Rjg2MDI5QTIwHhcNMjUxMDE5MDM0MjU5WhcNMjUxMDI2MDM0MjU5WjAYMRYwFAYD VQQDEw02OGY0NWU0NC1jZDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiLT8HqglAj0TnU0o5tfkA+t45+7Pnv8ZaCYbIsFDFKUJiWD0VURghc8BOid XWqSUcGBnntbIJPGLLL8Stw0cBevvD7DOeBUiOnIrzYNPu5zLu3/1IjPpMNgq6Cy pWJhMNLYNZ+kxn31/eyy/m5LHiO4ZpRNJ0dTTG4d12wgmba365qfvdW+DU7w9OoX htEMeG1JVqI1bsqAVIJPHs7XREFgNQKxVCrxXrRC6vqfPhgo9mNporWZPj00RdgQ 73+TnnM5NmO/PG3w1ezUeA08yDjVVl4kG8Ri6vGl+zuyIx/Nog14xhq12jF3Ppyr VFbmbIWr4eFeY2xU4rLtOrnXVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7sMunj 47XKkeQ4cIFWN9n5vHLzMB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2 QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc0MC8zNTI4QjBDQzE2QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9H ZE1hVW5zTzRvTGNfaGdLYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS6sA950+ddsTFSUEnBJwJm0+dLW7gPV+vriGhwN2BYb6DPNfWhiHg 5airD4GqM+iAE84g8saouO7ZTYTg+Grn1mMl2XBozNbdYFP7LLIRU5cvHTtpUMt4 QMmTay1U7yV2QVlRJGnNOZl9jirgrl/xqKivbMuZWN5XjD3drCd1A4vobAB9AXP2 CgIhWWJlj41cuTCOjRbuhDtZEvr+3CK/tbbMVqgwPYajfGf4X7KjydaUNN4kjhdg BF5uC18KXuUDRcYndKIhZ7TBpB6nFErPS199LIRt/uPkS8fWvjeRQWtSYKoBaL2v 2YyO4KEt0NYuJw9/PjvBJGGTN7Lb0HIN -----END CERTIFICATE-----Generated at Mon Oct 20 11:07:51 2025 by rpki-client