$ rpki-client -vvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft File: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft (raw, json) Hash identifier: sLm7drw8BxKCQN+zYasLIkYNfx/Jzns0eTTrLZwG8PY= Subject key identifier: 8C:C3:EF:2D:CC:4B:AA:54:3C:6C:C0:C6:B1:D1:2B:17:65:E3:CF:23 Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Certificate serial: 0B12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft Manifest number: 0B04 Signing time: Mon 20 Oct 2025 20:06:36 +0000 Manifest this update: Mon 20 Oct 2025 20:06:35 +0000 Manifest next update: Mon 27 Oct 2025 20:06:35 +0000 Files and hashes: 1: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl (hash: jBtv6CtiSHRf2Rl4csIx6g/6DVZknjfuELrzJKgE8Go=) 2: 378397D8539A11EAAA519470C4F9AE02.roa (hash: h5uNrPFBAo9PVtuy9fkhCKzQMKirI5eC6bYq1yraKFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2834 (0xb12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803B8, serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Validity Not Before: Oct 20 20:06:35 2025 GMT Not After : Oct 27 20:06:35 2025 GMT Subject: CN=68f6964b-3c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:df:75:07:a4:aa:1c:ea:e5:9d:cc:b9:c8: f1:08:69:f0:e7:4e:da:0b:a7:73:46:4a:bb:64:14: 61:77:5a:0a:9a:83:a9:29:8e:82:df:a0:9b:62:9e: 75:b0:fd:bb:38:75:84:e5:7a:e7:8a:03:29:3a:94: b8:74:1c:ee:92:1f:f4:73:17:74:86:8e:39:3a:fb: c7:43:76:8c:c4:46:73:2f:09:88:2a:19:b3:45:50: a1:22:36:8a:99:d2:62:9c:ce:64:6c:3f:33:76:9e: 7b:9b:0a:8e:39:f8:76:ff:5d:ff:ff:f5:9e:e2:9e: 87:7f:d9:f6:26:80:80:5e:6f:65:d6:d7:36:fc:89: 6f:75:15:8a:31:26:92:32:2c:3f:0b:a0:ad:29:44: 4f:7c:fa:1c:7e:7c:0d:92:80:2d:59:fe:0f:b3:83: b9:ae:1d:9d:21:9e:f1:28:03:54:5f:35:92:fa:79: 6c:0f:70:13:79:ef:af:50:c7:bb:32:c8:61:e8:2f: ff:77:3d:4a:f0:48:52:af:6d:de:61:87:28:0e:06: 34:e9:13:31:6c:84:50:a5:9a:d0:e8:6c:41:07:ce: 34:38:fa:d4:46:75:11:52:98:6e:70:01:f1:60:cb: 73:28:64:e1:2b:88:49:60:98:91:fa:21:54:ee:3a: bb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C3:EF:2D:CC:4B:AA:54:3C:6C:C0:C6:B1:D1:2B:17:65:E3:CF:23 X509v3 Authority Key Identifier: keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:83:bc:63:90:bf:43:58:27:d3:e5:b0:ab:56:14:ef:f7:b0: f0:17:54:58:05:63:d7:53:78:28:ef:97:06:56:0f:27:de:8d: 2c:c9:20:b4:17:82:c6:6b:ee:61:d9:c9:52:bf:e3:46:82:e0: d8:15:64:a0:ea:23:dd:f0:2b:57:0a:bf:b0:ab:73:ac:ed:57: 8d:13:8f:e3:8f:f2:e9:f6:be:87:56:b6:18:51:f4:45:20:ff: 7c:cc:30:d9:5d:91:20:53:9a:8f:6d:56:7b:15:32:4b:6a:47: 20:34:68:84:05:43:42:14:a0:04:f5:73:6a:b6:fc:60:24:34: a1:62:d2:8d:8e:71:dc:75:b0:5e:23:ed:82:5b:6b:38:d5:97: 92:b5:b2:47:90:5a:79:d7:6f:47:15:76:29:34:f8:e9:a9:78: 3b:77:3b:49:56:d1:da:98:8d:a6:f5:77:80:b5:42:f6:40:67: 9b:30:bd:2e:58:0d:5b:4e:a8:20:6b:2a:e3:9c:23:19:66:b4: 1b:89:35:66:c8:2b:fd:bf:de:f4:18:22:c0:97:40:0f:f7:8e: e5:0f:f9:d3:22:88:4d:34:db:ca:6b:41:11:4b:6d:0e:30:65: bc:7d:bb:bc:7a:2e:b7:a9:7f:17:de:fa:ae:27:75:2e:05:c5: 77:cc:90:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzQjgxMTAvBgNVBAUTKDdFREUyNzY1MzY1NDE0RUE1QzFEOUU0OUYxNzg4RDA5 NEVBQkZCNzQwHhcNMjUxMDIwMjAwNjM1WhcNMjUxMDI3MjAwNjM1WjAYMRYwFAYD VQQDEw02OGY2OTY0Yi0zYzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk7fdQekqhzq5Z3MucjxCGnw507aC6dzRkq7ZBRhd1oKmoOpKY6C36CbYp51 sP27OHWE5XrnigMpOpS4dBzukh/0cxd0ho45OvvHQ3aMxEZzLwmIKhmzRVChIjaK mdJinM5kbD8zdp57mwqOOfh2/13///We4p6Hf9n2JoCAXm9l1tc2/IlvdRWKMSaS Miw/C6CtKURPfPocfnwNkoAtWf4Ps4O5rh2dIZ7xKANUXzWS+nlsD3ATee+vUMe7 Mshh6C//dz1K8EhSr23eYYcoDgY06RMxbIRQpZrQ6GxBB840OPrURnURUphucAHx YMtzKGThK4hJYJiR+iFU7jq7UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzD7y3M S6pUPGzAxrHRKxdl488jMB8GA1UdIwQYMBaAFH7eJ2U2VBTqXB2eSfF4jQlOq/t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNCOC8zRDZCNTkzNDUz OTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZPcGNIWjVKOFhpTkNVNnIt M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NG5aVFpVRk9wY0haNUo4WGlOQ1U2ci0zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNCOC8zRDZCNTkzNDUzOTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZP cGNIWjVKOFhpTkNVNnItM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEg7xjkL9DWCfT5bCrVhTv97DwF1RYBWPXU3go75cGVg8n3o0sySC0 F4LGa+5h2clSv+NGguDYFWSg6iPd8CtXCr+wq3Os7VeNE4/jj/Lp9r6HVrYYUfRF IP98zDDZXZEgU5qPbVZ7FTJLakcgNGiEBUNCFKAE9XNqtvxgJDShYtKNjnHcdbBe I+2CW2s41ZeStbJHkFp5129HFXYpNPjpqXg7dztJVtHamI2m9XeAtUL2QGebML0u WA1bTqggayrjnCMZZrQbiTVmyCv9v970GCLAl0AP947lD/nTIohNNNvKa0ERS20O MGW8fbu8ei63qX8X3vquJ3UuBcV3zJC+ -----END CERTIFICATE-----Generated at Tue Oct 21 01:04:05 2025 by rpki-client