$ rpki-client -vvf rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft File: 4FxkVUXZ74a0UeUhnYMnYPQFyug.mft (raw, json) Hash identifier: p3jo4s738TMdlBV9cAPNx4FoDA6IUQ7C/XtP+dn2QlY= Subject key identifier: E2:B9:1F:03:1F:46:1A:D0:68:7C:FD:DB:ED:AB:E5:54:53:C7:26:AF Authority key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8 Certificate issuer: /CN=A911E09E/serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft Manifest number: 3D Signing time: Mon 03 Nov 2025 07:31:29 +0000 Manifest this update: Mon 03 Nov 2025 07:31:28 +0000 Manifest next update: Mon 10 Nov 2025 07:31:28 +0000 Files and hashes: 1: 4FxkVUXZ74a0UeUhnYMnYPQFyug.crl (hash: vranZM+C7vCfMCfC9c0LEI0QKsLPa9Cc9Z/c7SIJE5E=) 2: E1A91004624811F098E5B95AC4F9AE02.roa (hash: VJHNLTTmYE0OnrSaYRsFhyrLIddh+nJKNb/E2v8OcCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8 Validity Not Before: Nov 3 07:31:28 2025 GMT Not After : Nov 10 07:31:28 2025 GMT Subject: CN=69085a50-f565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:95:2a:bf:4c:35:6a:3e:fc:86:b0:3c:cd:92: 6d:0a:2c:51:44:78:8d:37:e5:1c:d1:dc:5b:53:56: 28:de:19:31:c0:88:99:03:aa:b9:f2:d4:3c:a6:2c: 68:84:cd:e9:d8:ec:13:0d:45:8d:be:9e:68:b3:64: d8:b8:c1:46:b3:6d:59:f2:6c:21:27:0d:74:f6:b8: 71:a7:cc:ab:fe:a3:03:b6:1f:76:c8:ff:d3:2b:f3: df:07:58:c1:48:db:67:8f:51:a2:18:cf:7d:40:c2: 94:8e:fe:41:e1:03:bc:ff:f2:7b:42:d2:a7:32:e3: 04:3f:f3:3c:e7:67:34:83:2c:ae:93:87:cb:f1:e3: ee:b4:ba:3b:7e:c0:79:17:9c:8b:f7:68:19:a3:06: f8:35:5e:4f:57:2f:68:e2:2d:69:83:71:e5:a4:5f: 04:c4:96:e4:db:db:05:51:86:4c:d8:6f:0b:c1:98: 65:ba:c2:bb:13:8e:c1:60:9d:bf:48:89:b0:20:9e: cd:63:1c:c6:30:dc:40:9f:df:7c:de:67:cb:9b:c0: 97:9f:5c:77:58:fa:d8:6f:d2:ea:3d:7d:bb:e9:75: 18:63:02:d7:91:06:9e:5e:b7:36:32:d0:51:9d:ff: c2:3d:85:78:3b:ca:73:40:08:c5:bd:b5:a6:c1:14: 31:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B9:1F:03:1F:46:1A:D0:68:7C:FD:DB:ED:AB:E5:54:53:C7:26:AF X509v3 Authority Key Identifier: keyid:E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:2d:35:9b:81:74:a1:a6:9d:3a:8a:fc:cb:52:82:d8:35:5c: a8:35:32:f3:3a:96:78:ca:40:38:4b:fc:27:07:57:d2:e6:72: c1:95:4d:3f:95:2f:fb:33:2a:31:ff:a2:b3:e8:53:f5:26:cc: 9e:9e:ee:41:b1:d4:c4:7f:6e:12:90:78:25:40:49:df:70:b0: c8:bb:fe:76:d6:6a:08:89:a6:90:fd:98:50:77:1c:5f:e6:ae: 0f:03:54:7d:16:7d:08:ad:e6:f8:01:b0:cc:84:91:93:05:8a: d9:46:57:76:a1:80:e1:85:93:9a:59:4d:32:6b:ce:aa:ba:48: fe:9b:f9:28:aa:b2:76:e8:78:49:bd:78:69:76:7d:f5:8e:be: 9d:1b:38:5f:f7:fe:b6:ad:9c:f4:f1:a5:07:ea:7e:df:24:60: 56:6c:7a:f0:8a:eb:04:30:ba:72:90:68:7d:0b:36:e5:ec:3c: cc:eb:c7:1a:d4:dd:44:2c:34:60:f9:6f:bc:1b:18:12:6a:71: 93:e7:82:fe:0f:12:7c:63:1f:2f:4e:14:02:c3:41:07:a7:80: 85:0f:3e:c9:95:37:34:e6:ec:6c:29:f0:48:39:9b:fc:e9:c9: 41:1d:92:95:29:19:83:7c:0d:61:0b:84:33:1d:60:e9:60:0d: ce:52:88:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTA5RTExMC8GA1UEBRMoRTA1QzY0NTU0NUQ5RUY4NkI0NTFFNTIxOUQ4MzI3NjBG NDA1Q0FFODAeFw0yNTExMDMwNzMxMjhaFw0yNTExMTAwNzMxMjhaMBgxFjAUBgNV BAMTDTY5MDg1YTUwLWY1NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqlSq/TDVqPvyGsDzNkm0KLFFEeI035RzR3FtTVijeGTHAiJkDqrny1DymLGiE zenY7BMNRY2+nmizZNi4wUazbVnybCEnDXT2uHGnzKv+owO2H3bI/9Mr898HWMFI 22ePUaIYz31AwpSO/kHhA7z/8ntC0qcy4wQ/8zznZzSDLK6Th8vx4+60ujt+wHkX nIv3aBmjBvg1Xk9XL2jiLWmDceWkXwTEluTb2wVRhkzYbwvBmGW6wrsTjsFgnb9I ibAgns1jHMYw3ECf33zeZ8ubwJefXHdY+thv0uo9fbvpdRhjAteRBp5etzYy0FGd /8I9hXg7ynNACMW9tabBFDF5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4rkfAx9G GtBofP3b7avlVFPHJq8wHwYDVR0jBBgwFoAU4FxkVUXZ74a0UeUhnYMnYPQFyugw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFMDlFL0Q4QkIwRjM2NjFG QTExRjBCRDRGNjA2RUM0RjlBRTAyLzRGeGtWVVhaNzRhMFVlVWhuWU1uWVBRRnl1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEZ4a1ZVWFo3NGEwVWVVaG5ZTW5ZUFFGeXVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF MDlFL0Q4QkIwRjM2NjFGQTExRjBCRDRGNjA2RUM0RjlBRTAyLzRGeGtWVVhaNzRh MFVlVWhuWU1uWVBRRnl1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHQtNZuBdKGmnTqK/MtSgtg1XKg1MvM6lnjKQDhL/CcHV9LmcsGVTT+V L/szKjH/orPoU/UmzJ6e7kGx1MR/bhKQeCVASd9wsMi7/nbWagiJppD9mFB3HF/m rg8DVH0WfQit5vgBsMyEkZMFitlGV3ahgOGFk5pZTTJrzqq6SP6b+SiqsnboeEm9 eGl2ffWOvp0bOF/3/ratnPTxpQfqft8kYFZsevCK6wQwunKQaH0LNuXsPMzrxxrU 3UQsNGD5b7wbGBJqcZPngv4PEnxjHy9OFALDQQengIUPPsmVNzTm7Gwp8Eg5m/zp yUEdkpUpGYN8DWELhDMdYOlgDc5SiKw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:54:54 2025 by rpki-client