$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft File: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json) Hash identifier: 6+vn3zr0RfKi1OxfLi538UlEynGrGkgdLzN79VkGE0M= Subject key identifier: 4A:11:EC:F1:46:C2:79:4D:7D:ED:0D:F4:66:1B:45:EB:3C:6B:B1:EA Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft Manifest number: D2 Signing time: Sun 19 Oct 2025 08:50:58 +0000 Manifest this update: Sun 19 Oct 2025 08:50:57 +0000 Manifest next update: Sun 26 Oct 2025 08:50:57 +0000 Files and hashes: 1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: eK5gDzl4/6cY6Z+3Uds7hqrcbjhjd1jW67Wr0U2aKho=) 2: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: naM1jWBBF1HgB1gzetomIgtwuH6iwO3twg6Wvbh3nCU=) 3: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: HEoFn428OSrwoj9FY9UBG8roOsE7KCgrYxU/d2SrcQg=) 4: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: LfnrEoRSy98kq5+Het7TGQh6Md9GIYKtrywQQ+4Cqlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Validity Not Before: Oct 19 08:50:57 2025 GMT Not After : Oct 26 08:50:57 2025 GMT Subject: CN=68f4a672-9701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:94:34:19:86:9f:b8:f0:01:a4:ef:8c:80: e0:ac:50:cb:8a:ca:fd:63:7e:4e:a6:64:e7:9e:19: 24:aa:1a:27:b3:f7:5c:01:77:13:1e:5f:16:e8:52: 5c:a2:61:eb:7b:cc:b4:81:2d:3b:97:fa:26:d4:c6: 34:86:56:a7:84:80:10:35:4e:43:d4:12:c4:b3:a4: 62:6a:11:08:6a:d8:eb:14:63:e0:80:41:ad:a4:37: 1f:11:1c:50:b4:9c:cb:45:9a:06:8e:6c:3f:ad:d5: 0c:d9:a6:3d:35:90:4b:1a:75:40:f3:12:78:13:f2: f4:03:a6:b8:70:9c:c6:5a:00:c2:fd:f2:39:cf:d4: 6e:80:d0:f9:3c:61:85:f8:e1:9b:21:d2:f8:ac:1c: c9:03:18:5a:0b:92:8f:5e:fa:f8:5e:f4:12:f5:81: c7:ba:c7:cd:d2:ba:ce:e9:ed:e6:b4:ff:fd:c7:22: 49:46:e0:19:85:dd:50:ff:e1:2f:6b:fa:0d:10:c2: 55:90:a9:c8:00:c3:0e:1d:02:c1:c9:bd:d6:0f:9d: 49:dc:18:aa:81:ea:a1:1e:48:f8:11:db:18:62:f8: 48:79:06:25:4e:bb:bb:7f:e9:db:41:11:bc:9c:f1: 73:6a:58:f9:12:e9:b0:b9:2d:b9:02:67:c1:bb:45: 22:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:11:EC:F1:46:C2:79:4D:7D:ED:0D:F4:66:1B:45:EB:3C:6B:B1:EA X509v3 Authority Key Identifier: keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8d:34:ac:f1:95:71:9d:74:cb:1f:9f:42:14:a1:2c:e0:59: b1:2f:a9:33:01:e3:81:b8:ff:96:2b:6c:f6:c2:c1:0c:17:82: dc:77:82:f9:2f:9f:b0:1e:43:b3:da:84:a6:34:66:4f:34:9f: 59:41:ba:12:3a:b5:b5:1a:78:57:d1:36:bb:8b:97:70:8a:e4: c3:a9:fb:74:c1:9f:d5:ec:cb:52:82:b2:c0:9b:b9:01:33:4b: 88:cf:ff:0a:91:b7:6b:aa:6e:9f:23:3d:04:f7:b4:3b:b9:d8: c0:ea:90:ee:9e:75:d3:66:4f:3c:e3:ad:06:99:43:3e:eb:7e: 0f:5e:8b:e5:78:36:f1:f3:8b:7a:97:c9:87:37:f9:b8:5a:29: 22:80:f1:f5:b0:dc:a7:8a:b2:6d:35:61:87:bb:4d:69:50:b1: 4f:08:78:23:83:50:b5:28:6f:9c:16:14:dd:41:5b:ae:ab:cd: 97:eb:c9:1f:8c:86:e5:3e:29:02:3e:bc:2a:56:d7:c9:eb:6e: c0:d9:36:cc:8e:97:23:a5:18:f8:03:ff:cb:c7:c4:86:9d:5f: fd:23:98:2d:46:0a:ab:19:da:42:3d:2c:bc:70:c6:f8:67:94: b0:21:6a:12:f3:da:e9:1a:ed:2d:a2:1d:9d:aa:d4:b8:9c:68: 63:74:79:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NTQxMTAvBgNVBAUTKEUxMUE0NzJGODQ5RkEzRDY2M0NBODdDQTY2MzNFQ0U3 RDhEMDA3NjIwHhcNMjUxMDE5MDg1MDU3WhcNMjUxMDI2MDg1MDU3WjAYMRYwFAYD VQQDEw02OGY0YTY3Mi05NzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8WUNBmGn7jwAaTvjIDgrFDLisr9Y35OpmTnnhkkqhons/dcAXcTHl8W6FJc omHre8y0gS07l/om1MY0hlanhIAQNU5D1BLEs6RiahEIatjrFGPggEGtpDcfERxQ tJzLRZoGjmw/rdUM2aY9NZBLGnVA8xJ4E/L0A6a4cJzGWgDC/fI5z9RugND5PGGF +OGbIdL4rBzJAxhaC5KPXvr4XvQS9YHHusfN0rrO6e3mtP/9xyJJRuAZhd1Q/+Ev a/oNEMJVkKnIAMMOHQLByb3WD51J3BiqgeqhHkj4EdsYYvhIeQYlTru7f+nbQRG8 nPFzalj5EumwuS25AmfBu0UiLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoR7PFG wnlNfe0N9GYbRes8a7HqMB8GA1UdIwQYMBaAFOEaRy+En6PWY8qHymYz7OfY0Adi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg1NC9BODk2NDY2MDc5 OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85Wmp5b2ZLWmpQczU5alFC MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRScEhMNFNmbzlaanlvZktaalBzNTlqUUIySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg1NC9BODk2NDY2MDc5OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85 Wmp5b2ZLWmpQczU5alFCMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBajTSs8ZVxnXTLH59CFKEs4FmxL6kzAeOBuP+WK2z2wsEMF4Lcd4L5 L5+wHkOz2oSmNGZPNJ9ZQboSOrW1GnhX0Ta7i5dwiuTDqft0wZ/V7MtSgrLAm7kB M0uIz/8Kkbdrqm6fIz0E97Q7udjA6pDunnXTZk88460GmUM+634PXovleDbx84t6 l8mHN/m4WikigPH1sNynirJtNWGHu01pULFPCHgjg1C1KG+cFhTdQVuuq82X68kf jIblPikCPrwqVtfJ627A2TbMjpcjpRj4A//Lx8SGnV/9I5gtRgqrGdpCPSy8cMb4 Z5SwIWoS89rpGu0toh2dqtS4nGhjdHlr -----END CERTIFICATE-----Generated at Mon Oct 20 14:08:00 2025 by rpki-client