$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: xBfaDvK9cnQt8LQzEXRd7W+6XuOwGc7wLGYVLDISisY= Subject key identifier: 3E:7B:1B:C4:48:90:57:06:72:1C:FF:7D:4B:1F:9F:99:45:C0:DB:00 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 0303 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 02D4 Signing time: Sun 19 Oct 2025 03:41:52 +0000 Manifest this update: Sun 19 Oct 2025 03:41:51 +0000 Manifest next update: Sun 26 Oct 2025 03:41:51 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: aN/PMOz39TnyqKqjS++XGb4k+/3945hCARNa03BjD4k=) 2: CC647BDECAC711EF80553A61C4F9AE02.roa (hash: wcGSkIclIE1toilkxNzAK4TRkSG87FAdX9jhsTJGr7o=) 3: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: JFnHafVEFMtRqzbULiHqCAleWGn7lYd8UUBXcTVaExM=) 4: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: opJO4K7YZ/e2DX+s/GDo4FYN3UUPRtbZmQRgFxg+ZXw=) 5: 3632957E441311EE8A03A472C4F9AE02.roa (hash: nC156FtWNisRyJ+sZJC0neQfTsLbF3t6cdGqYP4uj+g=) 6: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: Iqn/bXqznhtCorMWZ+Zjcj+q0RdF1Ri2rDqeHKOqgrA=) 7: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: i8rhzfoYVzIteA50gdYKsP0L/C+up3cTPTY1lRFjLJk=) 8: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: 0yjNoUcfSfQzsQDEWyMesVRiNf3mWHbgqFSp6Aeqe88=) 9: 3D34A750A88111ED80831318C4F9AE02.roa (hash: x8f88T4/0fygwChpTG7CDDG+BVQvHAjTQvhSaAfGmUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 771 (0x303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Oct 19 03:41:51 2025 GMT Not After : Oct 26 03:41:51 2025 GMT Subject: CN=68f45e00-a0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d8:bd:d2:e4:cb:5a:14:2c:bd:d6:96:28:e0: 72:91:3d:49:d6:a6:41:e9:b6:7c:6b:8f:f8:08:2c: 89:59:e6:e9:42:e3:f9:28:2d:bc:aa:d1:47:5b:6f: 59:ff:35:cc:90:4c:c0:ee:c4:e5:3f:95:c2:98:73: 14:6c:72:cb:e3:b3:45:50:78:22:06:1a:d8:3d:a3: 73:45:20:fb:a5:6a:7a:43:9f:e5:9f:5b:37:75:52: 02:d6:fb:3f:8b:9c:95:68:0a:4d:3f:9c:3b:b3:1d: 59:39:0e:4b:2d:30:0e:fa:00:ed:f4:0a:b4:a8:04: 9c:8c:0b:93:ea:c1:6c:c7:aa:3c:12:d4:fd:2b:f8: 61:c4:ba:db:3f:c0:01:da:8d:68:d8:bd:68:d1:21: e1:31:6f:a7:86:74:c5:16:e7:c2:04:52:b3:22:c9: e7:b8:20:ca:92:27:7b:f3:b5:62:45:6d:d3:89:0a: 22:c0:4a:81:ed:43:87:6e:9a:39:f6:34:93:58:23: 4c:94:28:62:ec:06:7d:e6:46:e6:46:68:d7:1b:46: a3:2d:c0:6f:c1:f5:9f:9a:fd:ab:57:bc:58:e7:95: 54:9c:bd:10:d5:f8:d2:43:7e:78:4c:5e:33:73:0f: d1:ea:83:cf:25:ea:99:5f:01:9b:4a:99:0f:56:4e: 00:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7B:1B:C4:48:90:57:06:72:1C:FF:7D:4B:1F:9F:99:45:C0:DB:00 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:bf:82:f0:16:c2:cb:08:4d:4a:fa:a5:7f:7b:89:5a:d5:07: 09:fd:fc:02:dc:c5:44:15:d9:c2:06:88:6d:f0:21:bc:e1:ad: 43:30:be:3f:03:02:0b:ef:f0:95:49:5a:67:af:3a:5a:f4:8e: 3b:df:0a:17:a0:61:87:8d:58:1e:db:cd:85:35:e1:1f:2e:df: 96:31:48:1d:63:09:95:ff:56:28:ea:b7:6c:e8:06:41:cd:a7: b4:4b:7a:f7:93:a1:fb:20:79:f1:5f:47:5e:7e:bd:49:48:63: ba:56:fa:68:44:a2:e5:c0:7f:a2:75:1d:bd:1a:49:f2:2b:fb: 0d:fc:d8:5e:60:a6:f5:ab:9f:a6:5d:fb:cb:f8:72:dd:92:c3: 96:48:e8:34:90:52:c0:21:51:ba:18:98:62:7c:09:e6:ed:ac: fb:25:90:72:d9:b0:9e:48:1d:3d:c9:5b:3b:ec:36:44:f6:1f: 3b:09:b9:a3:a8:89:3e:9e:cc:98:88:a3:bd:2d:4c:84:8a:cf: d4:23:e4:7c:9d:32:c3:b6:45:46:51:21:91:ea:3b:e8:54:6c: 30:53:06:58:30:7e:40:2c:07:ce:cc:1f:9e:33:ba:c1:47:b3: 94:92:58:76:3c:84:35:86:2d:ee:9a:44:5b:a3:e2:dd:76:7c: fc:8a:98:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjUxMDE5MDM0MTUxWhcNMjUxMDI2MDM0MTUxWjAYMRYwFAYD VQQDEw02OGY0NWUwMC1hMGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ti90uTLWhQsvdaWKOBykT1J1qZB6bZ8a4/4CCyJWebpQuP5KC28qtFHW29Z /zXMkEzA7sTlP5XCmHMUbHLL47NFUHgiBhrYPaNzRSD7pWp6Q5/ln1s3dVIC1vs/ i5yVaApNP5w7sx1ZOQ5LLTAO+gDt9Aq0qAScjAuT6sFsx6o8EtT9K/hhxLrbP8AB 2o1o2L1o0SHhMW+nhnTFFufCBFKzIsnnuCDKkid787ViRW3TiQoiwEqB7UOHbpo5 9jSTWCNMlChi7AZ95kbmRmjXG0ajLcBvwfWfmv2rV7xY55VUnL0Q1fjSQ354TF4z cw/R6oPPJeqZXwGbSpkPVk4AfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD57G8RI kFcGchz/fUsfn5lFwNsAMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBv4LwFsLLCE1K+qV/e4la1QcJ/fwC3MVEFdnCBoht8CG84a1DML4/ AwIL7/CVSVpnrzpa9I473woXoGGHjVge282FNeEfLt+WMUgdYwmV/1Yo6rds6AZB zae0S3r3k6H7IHnxX0defr1JSGO6VvpoRKLlwH+idR29GknyK/sN/NheYKb1q5+m XfvL+HLdksOWSOg0kFLAIVG6GJhifAnm7az7JZBy2bCeSB09yVs77DZE9h87Cbmj qIk+nsyYiKO9LUyEis/UI+R8nTLDtkVGUSGR6jvoVGwwUwZYMH5ALAfOzB+eM7rB R7OUklh2PIQ1hi3umkRbo+Lddnz8ipit -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:15 2025 by rpki-client