$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft File: 480mJgfLdDTJiY967Pbnw2o09pM.mft (raw, json) Hash identifier: ZFTUXW3ZbmOk7v4riWtJpEZzoKBseM1QdnoNFbMBQ04= Subject key identifier: EB:EB:40:86:44:B2:14:E3:69:FC:C8:4B:34:8C:36:32:59:01:2E:6F Authority key identifier: E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93 Certificate issuer: /CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693 Certificate serial: 05AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft Manifest number: 05A7 Signing time: Sat 18 Oct 2025 23:57:11 +0000 Manifest this update: Sat 18 Oct 2025 23:57:11 +0000 Manifest next update: Sat 25 Oct 2025 23:57:11 +0000 Files and hashes: 1: 480mJgfLdDTJiY967Pbnw2o09pM.crl (hash: FSWxYgjYHoiun+q2nHTZUAdt2fHC3tykI9gezc1/8PI=) 2: 0F106C42E9BF11EB9287F045C4F9AE02.roa (hash: RvNzl03JDVUp48sMZXLXZA1zzsN0lAMQGmHnXdeMUAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1454 (0x5ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B33, serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693 Validity Not Before: Oct 18 23:57:11 2025 GMT Not After : Oct 25 23:57:11 2025 GMT Subject: CN=68f42957-2362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:de:11:1b:0d:7e:f5:9c:99:79:1f:7f:c8:7d: 4a:92:cb:f4:db:a1:91:b3:a1:c4:d9:f7:39:bf:f0: 4d:fd:ee:6e:a7:f0:ea:8c:68:9a:9e:81:9b:b0:6f: cf:d0:de:59:f2:4f:fe:58:7f:68:3c:d9:4d:51:e7: 39:f4:7b:4d:35:cb:4c:7c:8b:08:9e:e6:9c:e0:55: 90:ad:b9:44:c9:68:37:e1:8b:1a:1a:c9:2f:4d:64: d4:92:86:d7:46:f7:a0:30:34:b1:46:21:50:5c:d3: 02:c8:71:e6:77:53:0c:52:1c:d5:cc:58:54:b3:13: c9:03:c2:b2:31:a9:1a:ce:8c:69:e7:4a:2b:d8:b6: f2:06:b2:6d:c8:90:57:46:77:1d:41:5d:44:36:48: c2:d9:8c:e2:97:d9:fa:1e:3c:a5:53:73:de:99:4a: 2a:42:c1:ff:66:3b:e2:f4:d7:7c:f5:c9:54:bc:75: 14:aa:12:d6:32:15:c2:9b:ae:4b:0c:3c:5a:5a:2e: 51:77:5f:d6:69:57:10:a8:4e:83:ed:df:79:ca:24: 61:64:a1:60:9c:54:2e:7d:39:ba:08:df:20:ab:18: 5f:c9:75:d5:01:78:f9:87:cc:0e:f5:1c:f4:00:09: c6:8a:01:6a:39:ce:e7:2e:dd:15:17:7c:86:e3:44: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EB:40:86:44:B2:14:E3:69:FC:C8:4B:34:8C:36:32:59:01:2E:6F X509v3 Authority Key Identifier: keyid:E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d6:b6:e3:82:c3:7f:6b:e5:15:5f:69:12:34:c4:66:b8:70: 86:ad:fb:e6:0c:f8:7b:c2:fe:b6:d2:c7:7b:aa:2e:8a:f6:08: 4b:f1:dd:1e:6b:79:d3:66:27:28:60:9c:09:a3:ed:52:83:b5: 16:2a:ab:d7:ae:ad:56:26:32:8c:99:91:33:29:39:aa:a6:30: df:38:46:a9:be:ba:55:4e:b2:50:1f:59:e0:b2:63:da:fe:34: 18:fe:88:ac:a1:fe:a3:fe:cc:1d:25:2a:48:8d:7c:32:ab:57: fe:d5:7e:99:dd:3f:49:93:ce:dc:74:23:b8:52:6d:ca:d2:53: d9:48:ce:35:be:b6:f6:b4:0b:30:7b:0c:fd:07:3c:0f:3f:1a: 0a:7b:a2:1d:b4:01:78:df:25:bb:9d:e1:33:cc:1c:f9:45:f3: 80:94:67:f2:de:1b:df:8f:5e:3b:b9:c6:5c:dc:8b:cd:44:f4: b3:e0:fd:c9:32:ca:2a:c6:b9:ad:16:39:17:08:93:a4:e6:43: 5a:db:3b:0c:b9:19:35:29:75:3f:62:ba:37:87:9b:80:59:4e: e1:2c:a6:6d:c6:75:97:52:19:f6:50:86:52:62:52:6e:63:63: 2c:8f:9f:22:d6:3d:e2:ff:6f:70:44:3a:76:ba:39:cf:cb:0b: e4:d6:ee:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCMzMxMTAvBgNVBAUTKEUzQ0QyNjI2MDdDQjc0MzRDOTg5OEY3QUVDRjZFN0Mz NkEzNEY2OTMwHhcNMjUxMDE4MjM1NzExWhcNMjUxMDI1MjM1NzExWjAYMRYwFAYD VQQDEw02OGY0Mjk1Ny0yMzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzd4RGw1+9ZyZeR9/yH1Kksv026GRs6HE2fc5v/BN/e5up/DqjGianoGbsG/P 0N5Z8k/+WH9oPNlNUec59HtNNctMfIsInuac4FWQrblEyWg34YsaGskvTWTUkobX RvegMDSxRiFQXNMCyHHmd1MMUhzVzFhUsxPJA8KyMakazoxp50or2LbyBrJtyJBX RncdQV1ENkjC2Yzil9n6HjylU3PemUoqQsH/Zjvi9Nd89clUvHUUqhLWMhXCm65L DDxaWi5Rd1/WaVcQqE6D7d95yiRhZKFgnFQufTm6CN8gqxhfyXXVAXj5h8wO9Rz0 AAnGigFqOc7nLt0VF3yG40RCmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvrQIZE shTjafzISzSMNjJZAS5vMB8GA1UdIwQYMBaAFOPNJiYHy3Q0yYmPeuz258NqNPaT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0IzMy9CMkFCMzc1OEU5 QkQxMUVCODI1Qzc1MjZDNEY5QUUwMi80ODBtSmdmTGREVEppWTk2N1BibncybzA5 cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ4MG1KZ2ZMZERUSmlZOTY3UGJudzJvMDlwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0IzMy9CMkFCMzc1OEU5QkQxMUVCODI1Qzc1MjZDNEY5QUUwMi80ODBtSmdmTGRE VEppWTk2N1BibncybzA5cE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq1rbjgsN/a+UVX2kSNMRmuHCGrfvmDPh7wv620sd7qi6K9ghL8d0e a3nTZicoYJwJo+1Sg7UWKqvXrq1WJjKMmZEzKTmqpjDfOEapvrpVTrJQH1ngsmPa /jQY/oisof6j/swdJSpIjXwyq1f+1X6Z3T9Jk87cdCO4Um3K0lPZSM41vrb2tAsw ewz9BzwPPxoKe6IdtAF43yW7neEzzBz5RfOAlGfy3hvfj147ucZc3IvNRPSz4P3J MsoqxrmtFjkXCJOk5kNa2zsMuRk1KXU/Yro3h5uAWU7hLKZtxnWXUhn2UIZSYlJu Y2Msj58i1j3i/29wRDp2ujnPywvk1u7K -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:15 2025 by rpki-client