$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft File: Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft (raw, json) Hash identifier: sK+aOcmPVl48+/jmdjwK9LdcWPbWXZyd0vHPA/qeIkM= Subject key identifier: ED:B7:EA:00:B0:CD:EC:21:42:FD:06:AA:F0:FD:BE:A4:36:B6:CF:C6 Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft Manifest number: 019A Signing time: Wed 05 Nov 2025 03:32:29 +0000 Manifest this update: Wed 05 Nov 2025 03:32:28 +0000 Manifest next update: Wed 12 Nov 2025 03:32:28 +0000 Files and hashes: 1: Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl (hash: EMfxCDTeD02hNvLRy1pq1aInBEO9XKSXwVTHPB74EQM=) 2: 4D7FE224E87B11EEAF04B71AC4F9AE02.roa (hash: LhhhRZ9rRf4tKP+wa+0RqCOvGKNOYKeYqEjxUmyjiLQ=) 3: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (hash: QFhCans14JnqpL9Jwv4rbJ2pg2u9bZu64HPsOXqSkiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121995, serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Validity Not Before: Nov 5 03:32:28 2025 GMT Not After : Nov 12 03:32:28 2025 GMT Subject: CN=690ac54d-7514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f9:ad:2c:a6:83:79:ac:e9:7b:2a:59:d3:3f: 0f:22:a5:b2:d5:7a:f7:74:51:e3:37:05:44:ab:8c: 6b:aa:d9:22:18:e4:d0:83:c3:4c:72:2a:cf:2c:d9: 2b:ff:e8:09:ca:2d:dc:e5:31:ea:82:bc:35:25:6c: 3c:33:4d:20:91:59:ce:3b:1f:27:52:49:b6:e7:e0: 50:c4:bf:97:a5:51:bc:96:6f:56:f1:57:0d:f9:70: 0c:e2:4b:af:a7:cb:61:e7:e8:fc:87:d2:6a:da:ab: 00:3c:9c:8c:5f:85:99:8b:08:02:d1:fa:a3:7f:ed: 6e:bd:9a:8f:f8:c9:df:6f:92:41:cf:06:cc:fd:85: 77:26:1f:08:4f:6a:65:9a:20:76:88:04:83:71:b2: 7a:7f:34:2b:4d:37:47:2c:30:28:93:0e:a8:cc:76: 53:3a:dc:f9:cf:4d:c1:78:76:92:4d:b1:24:71:65: b2:ab:1b:4c:5c:75:f5:50:17:5e:71:ac:34:18:17: 95:01:19:55:04:d7:de:91:65:15:0a:2e:93:e5:a7: fc:88:bf:cc:3c:d3:aa:86:a2:76:79:5a:dd:d8:06: 18:7b:60:f6:45:be:d2:03:c0:44:2a:eb:0b:df:e0: 43:dc:10:3e:58:43:15:3b:79:45:18:af:20:f4:60: 70:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B7:EA:00:B0:CD:EC:21:42:FD:06:AA:F0:FD:BE:A4:36:B6:CF:C6 X509v3 Authority Key Identifier: keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:1d:64:91:8e:74:58:21:36:6d:f4:ba:95:2c:24:25:e0:75: 04:eb:e2:db:06:84:20:c1:de:1c:9a:3c:20:4d:9e:0c:be:9f: f4:f6:09:4b:37:5a:c7:50:a8:0a:55:f2:03:63:92:52:2e:5c: 78:b4:95:d3:9b:ba:52:59:a2:87:f4:e3:4b:98:17:15:a8:35: 06:2c:c9:cb:43:1e:33:56:66:6a:8e:7c:ce:a0:d0:93:86:00: 2b:26:65:06:6b:d7:42:4c:a6:c4:34:db:3c:a6:50:3c:82:1e: 8b:31:ca:d1:a4:a0:f1:ee:86:45:49:cf:59:cf:05:46:75:cc: 3f:a4:ec:5d:35:2a:92:e6:6c:48:1e:58:ab:ac:c3:bd:95:78: 56:0c:c5:93:11:85:b8:4c:84:ae:4d:b3:c0:24:c9:cc:cb:26: 50:e0:46:4c:f0:80:2e:c7:15:60:1b:9f:7a:e9:f1:a6:01:d6: 98:7e:f0:55:ac:33:50:f0:10:b5:55:11:33:a4:15:aa:dd:36: f6:16:33:3c:cd:f9:db:1e:fe:6c:45:51:7c:8b:ff:68:90:d8: 0e:2c:05:60:59:50:c2:73:b9:1a:0f:ae:e1:5c:0d:d5:b9:cb: c6:f6:6a:33:d1:e1:18:cf:9b:c4:bc:b4:56:d3:29:5c:16:4b: 4d:fc:96:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5OTUxMTAvBgNVBAUTKDIyOUUwNjRBQ0Y0MzJGNjREQUE3MDE3QTY2QkU4QjYx QTk2QjE4NUEwHhcNMjUxMTA1MDMzMjI4WhcNMjUxMTEyMDMzMjI4WjAYMRYwFAYD VQQDEw02OTBhYzU0ZC03NTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vmtLKaDeazpeypZ0z8PIqWy1Xr3dFHjNwVEq4xrqtkiGOTQg8NMcirPLNkr /+gJyi3c5THqgrw1JWw8M00gkVnOOx8nUkm25+BQxL+XpVG8lm9W8VcN+XAM4kuv p8th5+j8h9Jq2qsAPJyMX4WZiwgC0fqjf+1uvZqP+Mnfb5JBzwbM/YV3Jh8IT2pl miB2iASDcbJ6fzQrTTdHLDAokw6ozHZTOtz5z03BeHaSTbEkcWWyqxtMXHX1UBde caw0GBeVARlVBNfekWUVCi6T5af8iL/MPNOqhqJ2eVrd2AYYe2D2Rb7SA8BEKusL 3+BD3BA+WEMVO3lFGK8g9GBwtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO236gCw zewhQv0GqvD9vqQ2ts/GMB8GA1UdIwQYMBaAFCKeBkrPQy9k2qcBema+i2Gpaxha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTk5NS85RTM2QkZBNDRD MTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwyVGFwd0Y2WnI2TFlhbHJH Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwNEdTczlETDJUYXB3RjZacjZMWWFsckdGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTk5NS85RTM2QkZBNDRDMTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwy VGFwd0Y2WnI2TFlhbHJHRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGHWSRjnRYITZt9LqVLCQl4HUE6+LbBoQgwd4cmjwgTZ4Mvp/09glL N1rHUKgKVfIDY5JSLlx4tJXTm7pSWaKH9ONLmBcVqDUGLMnLQx4zVmZqjnzOoNCT hgArJmUGa9dCTKbENNs8plA8gh6LMcrRpKDx7oZFSc9ZzwVGdcw/pOxdNSqS5mxI HlirrMO9lXhWDMWTEYW4TISuTbPAJMnMyyZQ4EZM8IAuxxVgG5966fGmAdaYfvBV rDNQ8BC1VREzpBWq3Tb2FjM8zfnbHv5sRVF8i/9okNgOLAVgWVDCc7kaD67hXA3V ucvG9moz0eEYz5vEvLRW0ylcFktN/JYS -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:44 2025 by rpki-client