$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: OJpVUauwHEFQAzfVhstjxdROX4ZFXW0IYDapvJ4FqWY= Subject key identifier: A6:D2:10:7F:6F:4A:9A:0F:22:EE:19:7F:89:06:40:C8:B1:5F:1B:6A Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0CF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0CDC Signing time: Sun 26 Oct 2025 18:32:39 +0000 Manifest this update: Sun 26 Oct 2025 18:32:39 +0000 Manifest next update: Sun 02 Nov 2025 18:32:39 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: glvy/azZoSP+/VSfEX3m1XrCdKmY4l25WqXQhNcm+II=) 2: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: MNOygbTot5myB8zLL0b0K9rlqzZgH3f6swb91fFZk2k=) 3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: tjqskq9N3o/egf3xRNWQ42djlqYwKoTyXRLEqPg8Ljw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 18:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3318 (0xcf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Oct 26 18:32:39 2025 GMT Not After : Nov 2 18:32:39 2025 GMT Subject: CN=68fe6947-4ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5f:92:9a:61:4b:95:a4:01:79:36:86:20:a6: 0b:45:2c:1c:c3:b8:9f:fa:ef:a3:ab:de:54:c5:73: f1:d0:fb:53:fe:ac:d9:84:7a:85:73:74:dc:2c:7c: 6a:ae:9c:49:2c:e5:52:08:a7:bc:58:89:16:6b:d5: be:ae:a0:7c:2f:b2:37:00:51:0b:f4:47:7a:95:85: 2d:f4:57:f8:0f:e0:2e:d0:ce:56:5a:5d:ca:8e:0f: 00:ca:8f:a5:3f:0f:c1:e2:38:ff:c9:35:8e:0f:ab: 62:2b:b2:18:f2:32:e3:3d:11:f8:80:cd:b3:f9:87: 78:f2:cb:44:f2:2e:fa:eb:20:92:38:31:7c:eb:41: 63:c8:e8:34:fb:7f:6e:ef:62:f4:f5:99:80:93:b3: eb:8b:c9:5a:88:cc:3b:c2:78:42:70:46:87:4c:c7: 35:9e:c5:54:84:7d:73:f8:e9:d9:89:08:7c:dc:01: a1:cc:1c:04:df:a0:1e:69:43:77:0f:62:d5:43:83: 36:71:70:34:e6:a6:30:ba:ae:83:35:3a:9b:32:b7: ff:74:74:a6:3b:ec:29:5f:ad:e5:53:a7:ac:ed:24: 84:3d:2d:9e:3f:20:0b:40:c8:2a:0a:6e:0e:79:6a: a8:ff:58:6d:aa:a1:69:98:d8:ff:33:b5:64:c1:da: 4f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D2:10:7F:6F:4A:9A:0F:22:EE:19:7F:89:06:40:C8:B1:5F:1B:6A X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a9:5a:96:b2:a6:ef:a2:d4:89:9b:d6:8e:2e:61:ad:b1:1d: 12:89:12:ee:8b:67:60:7e:a2:42:d6:63:69:be:c3:b0:05:a3: d7:bf:58:1a:a2:7c:1a:cb:35:3a:b2:b5:37:a3:04:f4:48:9e: 2f:84:f1:99:3e:23:4c:2a:92:e6:a1:60:4d:ad:19:98:56:60: ff:03:f3:df:b9:02:01:e6:c1:98:6b:60:43:92:96:03:6d:89: 73:8e:fc:b6:58:15:52:d4:e4:2d:a0:47:01:bf:ed:cb:0f:0a: fa:91:cf:6a:c0:3d:07:ee:e2:34:e7:b3:f1:c2:d9:02:4e:08: 53:42:dc:84:10:6b:a3:ec:42:b3:c8:9c:9d:d9:7b:1d:0c:42: c3:ac:d7:ab:96:40:8c:23:a4:f4:07:5e:74:30:4f:c7:a0:56: 82:eb:19:30:c2:bb:83:b6:52:d2:83:aa:58:66:aa:6e:54:dc: e2:15:0d:3a:c3:93:c0:3d:5b:5c:ca:13:22:ce:da:91:2c:bb: 53:5d:1f:51:66:ca:5f:26:83:a3:7b:82:2c:9e:fa:fb:01:05: 1f:4e:e5:d7:6d:51:b6:8c:7c:3e:64:85:4d:93:ec:90:07:e1: 1a:a1:7b:4d:34:13:de:48:b3:69:41:45:d8:9e:99:0a:ce:85: dd:56:3a:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjUxMDI2MTgzMjM5WhcNMjUxMTAyMTgzMjM5WjAYMRYwFAYD VQQDEw02OGZlNjk0Ny00ZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4V+SmmFLlaQBeTaGIKYLRSwcw7if+u+jq95UxXPx0PtT/qzZhHqFc3TcLHxq rpxJLOVSCKe8WIkWa9W+rqB8L7I3AFEL9Ed6lYUt9Ff4D+Au0M5WWl3Kjg8Ayo+l Pw/B4jj/yTWOD6tiK7IY8jLjPRH4gM2z+Yd48stE8i766yCSODF860FjyOg0+39u 72L09ZmAk7Pri8laiMw7wnhCcEaHTMc1nsVUhH1z+OnZiQh83AGhzBwE36AeaUN3 D2LVQ4M2cXA05qYwuq6DNTqbMrf/dHSmO+wpX63lU6es7SSEPS2ePyALQMgqCm4O eWqo/1htqqFpmNj/M7VkwdpPZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbSEH9v SpoPIu4Zf4kGQMixXxtqMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARqVqWsqbvotSJm9aOLmGtsR0SiRLui2dgfqJC1mNpvsOwBaPXv1ga onwayzU6srU3owT0SJ4vhPGZPiNMKpLmoWBNrRmYVmD/A/PfuQIB5sGYa2BDkpYD bYlzjvy2WBVS1OQtoEcBv+3LDwr6kc9qwD0H7uI057PxwtkCTghTQtyEEGuj7EKz yJyd2XsdDELDrNerlkCMI6T0B150ME/HoFaC6xkwwruDtlLSg6pYZqpuVNziFQ06 w5PAPVtcyhMiztqRLLtTXR9RZspfJoOje4Isnvr7AQUfTuXXbVG2jHw+ZIVNk+yQ B+EaoXtNNBPeSLNpQUXYnpkKzoXdVjpM -----END CERTIFICATE-----Generated at Mon Oct 27 15:02:51 2025 by rpki-client