$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft File: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json) Hash identifier: 60rjX0xfTjnoshgMPzWRSTSJ5YXBdskmfcVbXpWqXB4= Subject key identifier: 5F:78:AF:88:96:8D:C7:ED:7A:2E:2D:15:73:F2:FC:0A:58:9A:29:E4 Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft Manifest number: 022E Signing time: Wed 05 Nov 2025 02:12:29 +0000 Manifest this update: Wed 05 Nov 2025 02:12:28 +0000 Manifest next update: Wed 12 Nov 2025 02:12:28 +0000 Files and hashes: 1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: +cdJqY9CveK8AiGckk/hed6iPafjDe1bcgSscxuuU8E=) 2: 13BC244C61A311F0A6E3910CC4F9AE02.roa (hash: PZ/Rcq3UjWrVkjq/myGAfI/HR3kWEFWwoh0XtDhdPhA=) 3: E8F2B1C224E911F0B5C26715C4F9AE02.roa (hash: G8jsJ+mpJjx+P09daIjyz9j+xHd4TGz4K0la+7J5BHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Validity Not Before: Nov 5 02:12:28 2025 GMT Not After : Nov 12 02:12:28 2025 GMT Subject: CN=690ab28d-fc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:42:f6:76:ba:35:dc:e5:4c:ea:ef:d6:f0:ec: 4f:ce:4d:c8:f5:23:cb:5e:ff:41:4a:ec:f2:1a:d5: fe:54:69:32:07:88:1f:0d:0a:76:66:d1:42:4f:d4: 34:85:f1:01:16:88:11:fb:5d:b5:a0:35:3b:70:e1: 71:ff:60:d3:9f:4d:ca:4c:6f:ef:d8:e1:4e:51:67: ed:75:6e:24:13:01:22:e7:0f:d0:6a:aa:92:6d:b0: 7d:53:db:98:34:12:1d:f5:0e:40:be:5b:e5:01:05: ba:8f:a5:0a:35:56:e1:44:57:cc:78:23:68:63:ef: 26:1c:4e:d1:73:69:92:bc:94:d7:df:e1:7a:1f:29: 1a:28:5c:a4:83:91:3a:3d:70:f8:7f:95:da:45:22: e8:56:6a:e3:48:60:a5:bf:00:95:52:50:90:4c:03: 1f:41:3f:fa:04:1e:ec:4e:c9:e7:dd:eb:94:55:74: 2c:0f:b3:c2:26:ed:32:6a:7d:db:5d:b3:32:f1:e4: 8b:31:a4:e2:fe:4e:84:92:09:28:b0:cd:48:bf:89: 7c:b4:3c:25:32:5c:9d:13:36:c8:9a:1c:83:de:a3: 51:7e:b9:6f:38:7e:79:4a:9b:92:6a:fb:59:4e:9d: b2:5f:89:00:7c:8b:7f:a7:45:c2:e6:75:37:08:28: e0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:78:AF:88:96:8D:C7:ED:7A:2E:2D:15:73:F2:FC:0A:58:9A:29:E4 X509v3 Authority Key Identifier: keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:97:96:56:2a:b5:0b:d6:70:4e:b9:c6:36:95:9b:96:8c:2d: 26:57:d0:45:ee:37:5f:c7:35:e5:5a:40:2f:f6:11:b8:a0:ab: 14:16:ac:1f:8f:6c:2d:35:ee:47:06:12:43:50:f5:06:ce:95: f1:b5:15:f3:0c:f8:72:24:76:3c:52:54:9d:ad:28:bb:da:42: 8f:f2:e3:f2:ae:84:42:a2:97:1c:64:4b:3f:68:70:e7:a7:61: a6:79:c1:55:51:46:66:8d:3e:d9:80:2b:ad:1a:44:d6:f9:dc: 5c:56:20:8f:6f:0c:8c:b6:bd:f5:7a:a9:9b:c8:72:9a:24:8e: 4e:8b:fa:07:92:7b:7c:5a:f2:3c:31:a7:f6:18:ae:07:12:ea: 80:9b:e5:d0:cb:53:9e:ce:3e:c5:a5:ea:a7:44:27:6b:fa:30: 1d:1a:8e:3a:cf:54:87:24:f8:1a:3e:40:88:db:9a:30:61:06: b5:14:19:93:68:f9:fe:22:f9:27:07:2c:3c:73:9c:8f:8c:5e: 30:9c:c9:95:e3:6c:95:3d:90:03:72:27:eb:a7:9f:fd:69:c5: 5c:19:56:51:c9:d3:3b:39:68:42:95:bc:7d:be:a0:c2:97:e5: 9f:47:8f:44:2f:18:99:15:79:c8:58:10:ab:27:82:b1:ce:14: 27:8d:ec:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEREYxMTAvBgNVBAUTKEUzRTFDQ0NGODNENTJDQjhBM0M5ODdBODExRTFGODA3 RjMzOTNFN0YwHhcNMjUxMTA1MDIxMjI4WhcNMjUxMTEyMDIxMjI4WjAYMRYwFAYD VQQDEw02OTBhYjI4ZC1mYzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kL2dro13OVM6u/W8OxPzk3I9SPLXv9BSuzyGtX+VGkyB4gfDQp2ZtFCT9Q0 hfEBFogR+121oDU7cOFx/2DTn03KTG/v2OFOUWftdW4kEwEi5w/QaqqSbbB9U9uY NBId9Q5AvlvlAQW6j6UKNVbhRFfMeCNoY+8mHE7Rc2mSvJTX3+F6HykaKFykg5E6 PXD4f5XaRSLoVmrjSGClvwCVUlCQTAMfQT/6BB7sTsnn3euUVXQsD7PCJu0yan3b XbMy8eSLMaTi/k6EkgkosM1Iv4l8tDwlMlydEzbImhyD3qNRfrlvOH55SpuSavtZ Tp2yX4kAfIt/p0XC5nU3CCjg5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF94r4iW jcftei4tFXPy/ApYminkMB8GA1UdIwQYMBaAFOPhzM+D1Sy4o8mHqBHh+AfzOT5/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRERi9BMjEyNzY4Qzc2 MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxMaWp5WWVvRWVINEJfTTVQ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtSE16NFBWTExpanlZZW9FZUg0Ql9NNVBuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRERi9BMjEyNzY4Qzc2MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxM aWp5WWVvRWVINEJfTTVQbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfl5ZWKrUL1nBOucY2lZuWjC0mV9BF7jdfxzXlWkAv9hG4oKsUFqwf j2wtNe5HBhJDUPUGzpXxtRXzDPhyJHY8UlSdrSi72kKP8uPyroRCopccZEs/aHDn p2GmecFVUUZmjT7ZgCutGkTW+dxcViCPbwyMtr31eqmbyHKaJI5Oi/oHknt8WvI8 Maf2GK4HEuqAm+XQy1Oezj7FpeqnRCdr+jAdGo46z1SHJPgaPkCI25owYQa1FBmT aPn+IvknByw8c5yPjF4wnMmV42yVPZADcifrp5/9acVcGVZRydM7OWhClbx9vqDC l+WfR49ELxiZFXnIWBCrJ4KxzhQnjezq -----END CERTIFICATE-----Generated at Wed Nov 5 05:22:44 2025 by rpki-client