$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft File: v4hgssA3e7Xv7b461A8c8YnyrLI.mft (raw, json) Hash identifier: 1ujmj9WHJLwH0Xr27AP/OBwyfq/920K9LO7wSm+fMF4= Subject key identifier: F5:62:61:04:1C:80:9E:5D:96:C5:B7:FE:E4:64:E1:EF:C2:C9:23:FD Authority key identifier: BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2 Certificate issuer: /CN=A9157B74/serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft Manifest number: 51 Signing time: Sun 19 Oct 2025 10:42:21 +0000 Manifest this update: Sun 19 Oct 2025 10:42:20 +0000 Manifest next update: Sun 26 Oct 2025 10:42:20 +0000 Files and hashes: 1: v4hgssA3e7Xv7b461A8c8YnyrLI.crl (hash: PWwdGEgSiB/2BDFpPXMutsbg0f37i0eda8KZPDyhbo0=) 2: 074A7A1436C511F0A4E5C52BC4F9AE02.roa (hash: fSlcIZdpNT8EGzQOFMuevlDD2po6QEISgofqICdF3UI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B74, serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2 Validity Not Before: Oct 19 10:42:20 2025 GMT Not After : Oct 26 10:42:20 2025 GMT Subject: CN=68f4c08c-3ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:97:53:09:47:66:96:bd:19:1b:a5:62:62:5f: 66:60:20:b0:99:02:2f:da:d1:ff:96:ce:a5:b0:bf: 91:6b:7d:6b:8c:b9:7c:0a:2e:6c:0e:93:c9:bc:2b: 31:18:24:9b:5d:c0:42:9e:a4:d5:76:41:c5:ab:74: f0:9f:e6:cc:f8:7f:d5:f2:f9:32:25:cf:1b:e5:2e: 05:8c:ba:a7:68:2c:a6:78:18:91:2c:69:eb:77:30: dc:fb:1f:0f:0a:e8:99:f6:98:0d:f3:69:84:71:47: 98:43:69:d1:bc:ed:e9:1f:5c:c9:a5:65:a8:5f:4a: bb:2e:0c:2c:64:10:15:07:7d:32:48:15:d7:57:e6: b8:57:f6:88:7e:b7:b8:b5:38:7e:fd:0b:00:e5:a0: e2:47:a4:59:ec:b1:87:9d:cb:78:a8:c6:fa:b3:0e: b3:a2:72:05:35:46:18:ca:b2:59:f3:e5:58:69:58: ed:64:23:10:8c:d9:0f:f5:4d:88:dc:bc:39:d1:93: 01:2d:4a:d1:62:37:71:82:a1:f3:ae:05:a6:2d:bb: 0f:e1:fc:cf:02:26:0c:c5:ef:c0:74:50:39:56:a8: 57:13:3e:de:95:d6:79:65:86:2c:c2:ac:cd:86:11: de:e7:d2:ad:9d:a9:63:2c:39:ab:9e:b6:fb:f9:dc: a0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:62:61:04:1C:80:9E:5D:96:C5:B7:FE:E4:64:E1:EF:C2:C9:23:FD X509v3 Authority Key Identifier: keyid:BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a2:e1:28:4c:8a:ef:c0:06:5b:78:8e:ca:b3:4b:5c:33:f4: bf:21:b7:2a:6d:7e:e0:70:8b:62:cc:31:e9:1e:b7:56:70:15: d8:8e:e1:38:e8:92:de:f8:df:e5:49:55:55:63:d7:aa:95:2b: 51:8b:b4:41:38:43:00:4e:19:ba:5b:a3:d8:ed:e2:56:99:a5: 1a:a2:de:49:17:dc:e1:3c:2a:aa:59:12:0e:50:28:9f:4f:a8: 83:74:8c:70:0e:39:48:0f:e8:e0:22:4e:11:55:ed:09:87:98: fd:95:84:c2:65:03:9a:75:fe:60:e8:5b:dd:ee:81:f1:1c:f2: f4:19:1e:69:2b:14:56:ca:45:8d:42:ca:cf:b7:59:dc:aa:cd: 12:f9:db:b7:92:bc:5a:81:7d:da:d4:07:94:3c:c7:a8:ea:11: 72:8f:70:47:31:6a:9c:8d:e4:ed:c3:b5:f4:c5:d7:ad:82:38: 30:1a:d2:cb:40:c6:eb:54:8f:ff:b2:54:93:c4:bf:87:82:a5: d6:2e:62:3e:6c:e5:d6:65:ec:f5:bf:a3:3d:ea:07:2c:16:36: 22:81:14:00:e0:aa:3a:cd:b6:33:fc:6f:d2:51:a1:df:1a:d5: c6:8d:af:08:13:18:59:27:c3:30:d2:46:6c:d3:23:a5:4d:4e: 8d:47:7b:58 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 N0I3NDExMC8GA1UEBRMoQkY4ODYwQjJDMDM3N0JCNUVGRURCRTNBRDQwRjFDRjE4 OUYyQUNCMjAeFw0yNTEwMTkxMDQyMjBaFw0yNTEwMjYxMDQyMjBaMBgxFjAUBgNV BAMTDTY4ZjRjMDhjLTNlYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBl1MJR2aWvRkbpWJiX2ZgILCZAi/a0f+WzqWwv5FrfWuMuXwKLmwOk8m8KzEY JJtdwEKepNV2QcWrdPCf5sz4f9Xy+TIlzxvlLgWMuqdoLKZ4GJEsaet3MNz7Hw8K 6Jn2mA3zaYRxR5hDadG87ekfXMmlZahfSrsuDCxkEBUHfTJIFddX5rhX9oh+t7i1 OH79CwDloOJHpFnssYedy3ioxvqzDrOicgU1RhjKslnz5VhpWO1kIxCM2Q/1TYjc vDnRkwEtStFiN3GCofOuBaYtuw/h/M8CJgzF78B0UDlWqFcTPt6V1nllhizCrM2G Ed7n0q2dqWMsOauetvv53KCvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9WJhBByA nl2Wxbf+5GTh78LJI/0wHwYDVR0jBBgwFoAUv4hgssA3e7Xv7b461A8c8YnyrLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3Qjc0L0NFMDA0MjVBMzZC QzExRjA4MUQ1NUYxN0M0RjlBRTAyL3Y0aGdzc0EzZTdYdjdiNDYxQThjOFlueXJM SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdjRoZ3NzQTNlN1h2N2I0NjFBOGM4WW55ckxJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 Qjc0L0NFMDA0MjVBMzZCQzExRjA4MUQ1NUYxN0M0RjlBRTAyL3Y0aGdzc0EzZTdY djdiNDYxQThjOFlueXJMSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC2i4ShMiu/ABlt4jsqzS1wz9L8htyptfuBwi2LMMeket1ZwFdiO4Tjo kt743+VJVVVj16qVK1GLtEE4QwBOGbpbo9jt4laZpRqi3kkX3OE8KqpZEg5QKJ9P qIN0jHAOOUgP6OAiThFV7QmHmP2VhMJlA5p1/mDoW93ugfEc8vQZHmkrFFbKRY1C ys+3WdyqzRL527eSvFqBfdrUB5Q8x6jqEXKPcEcxapyN5O3DtfTF162CODAa0stA xutUj/+yVJPEv4eCpdYuYj5s5dZl7PW/oz3qBywWNiKBFADgqjrNtjP8b9JRod8a 1caNrwgTGFknwzDSRmzTI6VNTo1He1g= -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:40 2025 by rpki-client