$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft File: 4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json) Hash identifier: /hMnNuVt3HGKVOrHclCYCqm7NeDqtFVEGc5AokftY9A= Subject key identifier: C1:96:A5:B5:10:D1:0F:20:90:EF:85:C8:4B:B5:BE:C3:2C:DA:71:DA Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Certificate serial: 04B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft Manifest number: 04A6 Signing time: Sat 18 Oct 2025 21:49:56 +0000 Manifest this update: Sat 18 Oct 2025 21:49:55 +0000 Manifest next update: Sat 25 Oct 2025 21:49:55 +0000 Files and hashes: 1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: n6PARCKhZnKqFXpN6o98pzzSnGJWhw1tbczQhEGDXPE=) 2: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: lWr4ljnX2/yEjyiQoz0OgG+PVsyj+yPc7sx1n1rIGWY=) 3: B38D932050EF11EC8583962BC4F9AE02.roa (hash: vGjVKyfhGouNwPbyNw8ueo4siItyyWgs22PxyDfp4xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1200 (0x4b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Validity Not Before: Oct 18 21:49:55 2025 GMT Not After : Oct 25 21:49:55 2025 GMT Subject: CN=68f40b84-651a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f4:30:2d:5d:4f:22:fc:9f:5e:2f:b8:0d:c5: 88:65:28:3d:72:2f:6d:73:11:52:a2:75:a3:fa:38: e3:fc:48:df:9c:d3:f5:fa:7f:80:4e:b5:a1:5e:f2: f6:39:4e:bb:cd:6f:05:39:95:9e:b9:9c:e3:b3:c4: 84:6f:c5:84:26:24:60:bb:b1:9f:03:b5:c3:ed:60: ab:6c:df:22:d1:89:88:a6:c5:83:f3:01:8b:94:59: 3b:fc:18:69:e6:6b:e3:ae:97:fb:ee:d8:40:55:89: b3:16:d1:eb:6d:1d:1c:8e:73:e4:ae:cb:cc:5e:c0: 17:e6:aa:02:27:e0:fe:3c:1f:92:69:5f:c2:1f:c0: 6a:f9:c1:38:db:16:ae:81:ef:6f:36:6c:40:3d:04: fa:63:b6:2e:c0:2b:7d:d3:c4:65:61:c4:93:51:0c: 42:a8:be:89:90:6d:d4:a3:15:2f:56:b7:4d:1c:4f: 22:c8:6f:e6:9b:b0:23:3b:b2:67:38:6f:17:fd:b3: 4b:90:7d:c9:39:b3:04:0c:dc:81:b2:2c:00:36:bc: 50:fc:d2:30:66:55:f1:c4:42:6b:3f:a8:c5:c2:41: 4a:11:7a:a0:f8:f3:8c:52:b2:02:0d:52:81:16:49: 08:cc:68:24:50:51:b5:e4:2c:e5:fa:5a:a4:a9:ec: b6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:96:A5:B5:10:D1:0F:20:90:EF:85:C8:4B:B5:BE:C3:2C:DA:71:DA X509v3 Authority Key Identifier: keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:25:81:6c:62:4a:8f:e0:a1:c6:c5:6f:8a:e1:0c:38:d8:ad: 70:eb:2c:86:cf:bb:b4:f2:d3:23:99:84:a1:d4:0d:94:ee:6e: a3:eb:91:ac:47:05:47:7d:e0:dd:f1:d1:76:6a:ce:c2:5e:70: c9:f4:fa:47:07:2d:39:1b:13:01:b7:35:8c:a0:d3:d7:02:bb: 1f:e3:30:1e:3a:44:54:eb:c0:9c:9f:7b:29:14:ad:f1:bb:f2: 9f:be:be:50:9b:2f:ab:9b:cd:ee:b7:ab:ae:5d:08:4e:26:fe: 62:a9:e9:33:46:0e:2d:ef:28:9d:bf:a3:79:49:2c:fc:f5:5d: 75:84:9c:4c:95:13:84:b8:58:9b:6a:b8:c0:f5:50:b6:a0:cd: 0e:bc:e0:88:8d:07:40:d2:de:62:43:3e:8c:2c:15:d9:9a:b6: 6e:32:35:3c:dd:db:4b:5d:40:2e:0a:f8:98:7c:09:66:b8:aa: 8c:50:8c:14:36:9f:a1:d1:88:da:56:8e:57:42:50:4b:85:97: 55:f1:a7:28:90:23:8f:5e:56:33:8a:b6:ad:80:c6:84:fc:5d: ca:b6:6a:19:39:77:c0:f4:54:ed:26:ac:28:04:e3:95:a2:10: 77:73:67:e9:a5:84:cd:12:03:3d:49:8c:80:05:1d:a0:26:fe: 2e:2e:d5:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5 NTNCMzZFNTEwHhcNMjUxMDE4MjE0OTU1WhcNMjUxMDI1MjE0OTU1WjAYMRYwFAYD VQQDEw02OGY0MGI4NC02NTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvQwLV1PIvyfXi+4DcWIZSg9ci9tcxFSonWj+jjj/EjfnNP1+n+ATrWhXvL2 OU67zW8FOZWeuZzjs8SEb8WEJiRgu7GfA7XD7WCrbN8i0YmIpsWD8wGLlFk7/Bhp 5mvjrpf77thAVYmzFtHrbR0cjnPkrsvMXsAX5qoCJ+D+PB+SaV/CH8Bq+cE42xau ge9vNmxAPQT6Y7YuwCt908RlYcSTUQxCqL6JkG3UoxUvVrdNHE8iyG/mm7AjO7Jn OG8X/bNLkH3JObMEDNyBsiwANrxQ/NIwZlXxxEJrP6jFwkFKEXqg+POMUrICDVKB FkkIzGgkUFG15Czl+lqkqey2vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGWpbUQ 0Q8gkO+FyEu1vsMs2nHaMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVCMC9FMzJDODdDQzUwRDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERK OWxXVV9HNkppZnlWT3pibEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUJYFsYkqP4KHGxW+K4Qw42K1w6yyGz7u08tMjmYSh1A2U7m6j65Gs RwVHfeDd8dF2as7CXnDJ9PpHBy05GxMBtzWMoNPXArsf4zAeOkRU68Ccn3spFK3x u/Kfvr5Qmy+rm83ut6uuXQhOJv5iqekzRg4t7yidv6N5SSz89V11hJxMlROEuFib arjA9VC2oM0OvOCIjQdA0t5iQz6MLBXZmrZuMjU83dtLXUAuCviYfAlmuKqMUIwU Np+h0YjaVo5XQlBLhZdV8acokCOPXlYziratgMaE/F3KtmoZOXfA9FTtJqwoBOOV ohB3c2fppYTNEgM9SYyABR2gJv4uLtX7 -----END CERTIFICATE-----Generated at Mon Oct 20 22:10:21 2025 by rpki-client