$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft File: 4xZnlgSAzwfjwi15DeTiAe9wQNs.mft (raw, json) Hash identifier: 1QwF06VnAlXrMK0Ujtwkzthgp2oV8YE9BRwTyLmTFrY= Subject key identifier: 9E:8B:8A:45:99:DD:EE:8F:6A:21:99:46:C0:F5:79:19:D3:8C:A6:C1 Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB Certificate issuer: /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft Manifest number: 0203 Signing time: Mon 03 Nov 2025 02:23:03 +0000 Manifest this update: Mon 03 Nov 2025 02:23:02 +0000 Manifest next update: Mon 10 Nov 2025 02:23:02 +0000 Files and hashes: 1: 4xZnlgSAzwfjwi15DeTiAe9wQNs.crl (hash: KSqm9sHb4/rBfg7yBy8LmcyhHnetRPr8yBvXyNG45gc=) 2: 0ADA583C5DB911F0A54D4C6FC4F9AE02.roa (hash: YIHS3PAvaz4V4QmFJCk8b1AkmK5GNgS8/DelBF3BA28=) 3: 0BBC997C5DB911F0A54D4C6FC4F9AE02.roa (hash: g6pquqeh1IhUuquygrP9Vdo65/Zud1vKIjoHKRNQNOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B310, serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Validity Not Before: Nov 3 02:23:02 2025 GMT Not After : Nov 10 02:23:02 2025 GMT Subject: CN=69081206-174d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:c3:ed:93:0e:11:6d:fc:c8:f7:18:4e:79: 9a:4a:43:0f:a4:aa:95:b7:7c:ce:a2:65:63:87:01: 44:d4:43:69:21:31:6f:11:63:95:e4:88:18:e8:29: a9:ea:27:73:71:c7:ac:e7:ef:79:fc:fd:79:e7:94: 4b:47:c1:c4:40:98:51:3f:0b:3e:e8:de:30:50:6f: 9c:a1:5e:06:5a:a0:b8:03:6a:6d:80:39:cb:d8:20: 85:80:88:35:ec:3b:48:fa:d1:3b:0e:0a:06:3b:8e: 13:c5:5f:da:6d:4f:be:0d:e9:13:08:48:11:e8:6f: 04:60:c6:ad:5d:11:af:f2:45:4a:57:e0:38:9e:82: 2a:a0:65:b5:6d:77:13:69:52:a7:3a:75:a3:a5:76: 12:2a:3a:02:f6:27:ea:52:10:3d:0e:a3:f3:9c:ac: 3d:ba:e0:15:9e:4a:d9:f2:e9:64:c9:b7:c3:51:00: 8d:c4:fe:62:71:20:34:25:20:4b:f5:22:83:83:1c: 86:ea:c8:09:41:e1:1f:8c:cf:58:73:08:1c:f2:d1: f9:07:2f:36:6d:eb:0b:0f:e9:b9:c0:65:3a:5b:18: 6b:93:44:e4:2e:3f:33:f3:e4:0e:30:03:1e:94:97: e0:dd:14:68:f2:9f:f1:ec:0d:2a:5f:6f:71:35:38: 77:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8B:8A:45:99:DD:EE:8F:6A:21:99:46:C0:F5:79:19:D3:8C:A6:C1 X509v3 Authority Key Identifier: keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ca:dd:a5:d4:57:6c:c9:3e:1a:ea:43:18:d8:b6:69:c2:dc: 1b:76:35:4f:48:90:2b:fc:6f:db:31:86:6c:87:53:19:a0:de: 38:20:36:5c:59:ae:af:f6:1d:05:62:a0:79:fe:b0:62:aa:99: f3:02:49:20:b4:f4:05:4c:ca:6b:12:83:88:09:18:9d:ba:f9: f4:7c:b4:32:1d:9b:32:e4:79:d0:af:ce:fb:6f:06:bd:7d:16: 1a:4e:35:21:f7:22:33:f6:b0:51:c1:75:3b:eb:80:71:a6:45: ef:5f:ef:aa:d4:e3:dc:c9:b2:a7:d1:01:cd:63:23:0d:e1:93: 62:41:79:b8:a4:0d:ec:c9:1a:f0:b1:96:e7:2b:a7:e2:e0:78: ef:52:f6:34:8f:84:66:8c:10:db:89:15:65:6b:1f:be:a1:a1: e9:c2:f1:fc:cc:ec:eb:f7:62:8c:c9:bc:cd:29:05:ef:d4:e9: c8:84:83:58:90:e5:97:26:c2:36:9e:5e:8e:ff:e3:87:09:b4: 47:31:db:04:1b:ed:59:5e:ea:21:2b:90:05:82:54:0d:b5:95: 15:01:42:b1:ff:27:7c:df:7f:34:a7:c9:e1:84:c0:25:71:2b: d0:76:ae:70:08:67:b2:07:38:6d:a6:ca:26:2e:b2:e2:46:d9: 65:f7:ce:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIzMTAxMTAvBgNVBAUTKEUzMTY2Nzk2MDQ4MENGMDdFM0MyMkQ3OTBERTRFMjAx RUY3MDQwREIwHhcNMjUxMTAzMDIyMzAyWhcNMjUxMTEwMDIyMzAyWjAYMRYwFAYD VQQDEw02OTA4MTIwNi0xNzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXXD7ZMOEW38yPcYTnmaSkMPpKqVt3zOomVjhwFE1ENpITFvEWOV5IgY6Cmp 6idzcces5+95/P1555RLR8HEQJhRPws+6N4wUG+coV4GWqC4A2ptgDnL2CCFgIg1 7DtI+tE7DgoGO44TxV/abU++DekTCEgR6G8EYMatXRGv8kVKV+A4noIqoGW1bXcT aVKnOnWjpXYSKjoC9ifqUhA9DqPznKw9uuAVnkrZ8ulkybfDUQCNxP5icSA0JSBL 9SKDgxyG6sgJQeEfjM9Ycwgc8tH5By82besLD+m5wGU6Wxhrk0TkLj8z8+QOMAMe lJfg3RRo8p/x7A0qX29xNTh3TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6LikWZ 3e6PaiGZRsD1eRnTjKbBMB8GA1UdIwQYMBaAFOMWZ5YEgM8H48IteQ3k4gHvcEDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjMxMC8zRUJEMTdDMkFE MTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3Zmp3aTE1RGVUaUFlOXdR TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4Wm5sZ1NBendmandpMTVEZVRpQWU5d1FOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjMxMC8zRUJEMTdDMkFEMTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3 Zmp3aTE1RGVUaUFlOXdRTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeyt2l1FdsyT4a6kMY2LZpwtwbdjVPSJAr/G/bMYZsh1MZoN44IDZc Wa6v9h0FYqB5/rBiqpnzAkkgtPQFTMprEoOICRiduvn0fLQyHZsy5HnQr877bwa9 fRYaTjUh9yIz9rBRwXU764BxpkXvX++q1OPcybKn0QHNYyMN4ZNiQXm4pA3syRrw sZbnK6fi4HjvUvY0j4RmjBDbiRVlax++oaHpwvH8zOzr92KMybzNKQXv1OnIhINY kOWXJsI2nl6O/+OHCbRHMdsEG+1ZXuohK5AFglQNtZUVAUKx/yd83380p8nhhMAl cSvQdq5wCGeyBzhtpsomLrLiRtll9867 -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:53 2025 by rpki-client