$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json) Hash identifier: lT4pMuz7tnIZoFrkBAUJMdYd2fNPUj3CBPuSclyNAQ4= Subject key identifier: 7F:C6:73:8A:01:54:BE:3B:AE:C3:98:40:BA:60:AC:4C:C7:B4:A0:98 Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Certificate serial: 0EB50C6782937185401F2DFF64E1687D91EE6BEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft Manifest number: 0327 Signing time: Mon 20 Oct 2025 04:27:08 +0000 Manifest this update: Mon 20 Oct 2025 04:22:08 +0000 Manifest next update: Tue 21 Oct 2025 05:46:08 +0000 Files and hashes: 1: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=) 2: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: IuJmEVUfqCPytnG8AEOkj/ZoGEMJgsuh1bHlpcX48s4=) 3: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: h2bSnnI9a+kGlKn3GxEShW8TmFpFzCWMgYRzWIvLc4c=) 4: 4B1987D5160068092602529871C93EA320045A75.crl (hash: AkOJrPFW79dlCQbOQttSaR6m1NUZRg7dhcu7kIoW/Lw=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 05:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b5:0c:67:82:93:71:85:40:1f:2d:ff:64:e1:68:7d:91:ee:6b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75 Validity Not Before: Oct 20 04:22:08 2025 GMT Not After : Oct 21 05:46:08 2025 GMT Subject: CN=7FC6738A0154BE3BAEC39840BA60AC4CC7B4A098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:7f:04:66:20:77:3f:ce:b1:31:db:1b:58: b7:ed:09:d5:ae:ce:ae:05:08:21:37:7f:e7:5d:d9: d1:66:68:fe:b4:72:43:55:54:91:7d:3e:75:c5:96: 81:62:50:f1:27:1f:fa:0e:1a:40:54:6b:53:84:47: a8:7f:d6:85:0f:24:16:b6:3e:0c:81:02:ca:01:57: 6d:d9:56:46:45:fa:12:b0:8e:12:42:3a:e1:20:7d: d7:1c:00:21:9c:12:69:80:c1:ca:d5:27:65:9a:91: 4b:9e:7d:7a:a6:14:c5:d9:d2:fb:f3:91:ed:d2:4d: 05:20:20:fc:95:ee:87:0f:b9:13:b4:d0:11:8c:0d: 28:3f:bd:1c:6c:2d:3f:bf:ca:81:d0:08:c9:bb:b9: 8e:e5:24:a7:18:89:63:74:7a:a9:08:4f:28:20:a6: 7e:a4:86:04:e4:29:f6:5c:21:58:73:40:56:f5:dc: 1c:06:85:cb:37:e7:a7:2b:5a:e9:14:90:6c:46:24: a3:cf:34:e9:2f:f2:aa:cb:13:da:db:c6:98:ef:e9: ac:10:7a:9e:96:e6:26:2f:b3:4a:19:9e:53:d9:0b: 86:e7:b6:06:16:8c:a1:11:8a:22:9a:a9:bb:56:e6: b5:81:64:ca:ec:03:f7:fa:09:02:2c:30:e6:7f:0c: 75:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C6:73:8A:01:54:BE:3B:AE:C3:98:40:BA:60:AC:4C:C7:B4:A0:98 X509v3 Authority Key Identifier: keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:35:e7:be:ad:9f:35:6f:0b:6a:71:23:6c:cc:f8:ac:9e:4a: 28:e6:c4:5d:25:20:34:3f:68:26:b4:d3:50:14:6e:ac:8f:58: 0f:7e:55:e2:73:0d:45:37:28:e6:14:16:97:dc:63:7c:a0:da: f8:01:2c:5f:c2:fa:1f:b4:ed:df:c2:07:7f:5e:c1:52:ef:26: 99:b6:60:38:65:36:23:83:d2:27:d1:2c:d4:ce:9c:03:b8:af: 77:09:67:64:a6:af:05:4e:92:78:a1:d9:3e:09:7c:48:52:97: 70:3a:73:4a:81:7a:5a:e5:73:cf:59:8a:66:7f:84:3d:44:74: f1:8f:5e:5f:69:3e:44:04:b5:f6:14:d9:65:a3:21:ad:b9:60: 1b:f1:66:a3:05:2d:df:39:22:72:57:8d:af:24:13:b0:1d:28: 40:1b:87:ef:aa:e0:0d:e8:df:03:4f:4e:e8:a5:13:3c:f0:5d: d2:b2:a4:87:07:4c:15:b0:7c:28:e1:a0:6e:65:60:d9:ae:c7: ea:a6:c8:a9:0e:a5:c5:05:8b:e3:10:f0:18:75:1b:d5:17:b4: 89:da:66:10:61:d2:9b:23:03:b8:b6:36:1b:3a:d3:71:d6:37: 80:1c:de:fd:15:45:9b:4c:7e:c5:6e:79:6b:4d:4c:39:e3:68: 83:f2:a1:35 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDrUMZ4KTcYVAHy3/ZOFofZHua+swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2 MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI1MTAyMDA0MjIwOFoX DTI1MTAyMTA1NDYwOFowMzExMC8GA1UEAxMoN0ZDNjczOEEwMTU0QkUzQkFFQzM5 ODQwQkE2MEFDNENDN0I0QTA5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALN5fwRmIHc/zrEx2xtYt+0J1a7OrgUIITd/513Z0WZo/rRyQ1VUkX0+dcWW gWJQ8Scf+g4aQFRrU4RHqH/WhQ8kFrY+DIECygFXbdlWRkX6ErCOEkI64SB91xwA IZwSaYDBytUnZZqRS559eqYUxdnS+/OR7dJNBSAg/JXuhw+5E7TQEYwNKD+9HGwt P7/KgdAIybu5juUkpxiJY3R6qQhPKCCmfqSGBOQp9lwhWHNAVvXcHAaFyzfnpyta 6RSQbEYko8806S/yqssT2tvGmO/prBB6npbmJi+zShmeU9kLhue2BhaMoRGKIpqp u1bmtYFkyuwD9/oJAiww5n8MdW0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBR/xnOK AVS+O67DmEC6YKxMx7SgmDAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAkTXnvq2fNW8LanEjbMz4rJ5KKObEXSUgND9oJrTTUBRurI9Y D35V4nMNRTco5hQWl9xjfKDa+AEsX8L6H7Tt38IHf17BUu8mmbZgOGU2I4PSJ9Es 1M6cA7ivdwlnZKavBU6SeKHZPgl8SFKXcDpzSoF6WuVzz1mKZn+EPUR08Y9eX2k+ RAS19hTZZaMhrblgG/FmowUt3zkicleNryQTsB0oQBuH76rgDejfA09O6KUTPPBd 0rKkhwdMFbB8KOGgbmVg2a7H6qbIqQ6lxQWL4xDwGHUb1Re0idpmEGHSmyMDuLY2 GzrTcdY3gBze/RVFm0x+xW55a01MOeNog/KhNQ== -----END CERTIFICATE-----Generated at Mon Oct 20 21:54:05 2025 by rpki-client