$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft File: E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft (raw, json) Hash identifier: HsbppvwcUc8lFSntthq2+OasS/bVJ7Fl4qep+eknWpA= Subject key identifier: 3C:EC:64:42:08:4D:BE:CB:1B:E1:77:E0:BE:54:C3:84:6B:29:93:B5 Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C Certificate issuer: /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Certificate serial: 0580 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft Manifest number: 0577 Signing time: Sun 02 Nov 2025 23:18:05 +0000 Manifest this update: Sun 02 Nov 2025 23:18:04 +0000 Manifest next update: Sun 09 Nov 2025 23:18:04 +0000 Files and hashes: 1: E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl (hash: tEZ9KdfqSqCwuZdoIahzCVIhRKNjhSk2fIFzEazNvWU=) 2: BBECA326B2FC11F0AB9D691CC4F9AE02.roa (hash: zqgS+zlgehzRdHe7d+oyK8Qe/7J3aamdJc6La9J4rtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1408 (0x580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8B5, serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Validity Not Before: Nov 2 23:18:04 2025 GMT Not After : Nov 9 23:18:04 2025 GMT Subject: CN=6907e6ad-fc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:71:ab:14:12:4d:a1:df:1b:59:3f:32:dc: bf:43:13:4d:31:84:31:ee:21:14:76:a9:49:2c:9d: 17:a6:0b:0d:e0:09:84:f1:ed:23:e0:5f:c4:6e:81: b8:36:30:1a:22:19:33:68:92:46:40:04:54:4b:e1: 04:e5:fe:11:c4:1f:a9:b4:43:38:c4:ab:46:d1:13: 80:41:b3:40:6b:22:27:52:7e:aa:9c:d7:3f:67:52: 0d:14:78:ee:27:69:7c:bb:05:90:2c:25:15:29:0d: 80:40:b5:b8:49:66:8c:6a:8b:0b:e0:78:3b:61:41: 3a:50:bf:06:60:64:8a:fc:33:be:35:74:c2:34:08: 3a:4f:b1:9e:e4:a3:33:97:ca:a9:7a:be:a5:8d:bf: ac:31:28:16:ac:7d:a4:72:ce:8d:bd:fe:44:9f:33: 77:a9:2b:2c:83:12:2b:ed:33:c8:d3:b9:17:e0:bd: d2:ff:3e:be:f4:cc:31:f5:f0:cb:a2:85:de:6f:61: c2:be:3a:3c:c6:6a:02:0a:a1:17:77:f1:bf:89:ef: db:45:2d:a3:02:00:7e:03:91:c4:a2:89:40:bf:79: 78:ed:34:48:5c:69:dc:da:40:55:37:36:6f:c2:d5: 11:25:f6:3d:18:e2:08:bf:9b:f7:ce:f8:c8:36:4a: 58:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EC:64:42:08:4D:BE:CB:1B:E1:77:E0:BE:54:C3:84:6B:29:93:B5 X509v3 Authority Key Identifier: keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:d0:b0:e9:28:fc:e3:a6:fb:18:b2:b8:5d:1f:a8:02:bd:67: 90:d8:39:f3:8c:76:65:59:9f:eb:fa:39:49:b1:9f:c0:0a:05: 62:78:ca:8e:c5:fc:45:c4:03:57:5b:ea:eb:a3:d9:12:0c:62: 92:67:fd:e5:81:09:a0:00:4f:d3:a9:19:c5:e0:98:56:f2:5d: ad:23:e7:77:bc:eb:98:bb:70:be:ad:6f:ab:69:47:40:10:e6: 6b:85:30:70:26:e0:12:07:d2:f4:76:b6:90:cb:0e:ee:c4:6d: 60:aa:c7:55:22:f3:bf:50:85:7a:32:c7:ab:a5:e4:9b:1b:e1: 7f:70:7a:2f:37:89:1c:f9:b4:f9:f1:c2:51:28:2e:3d:4a:64: 4b:7d:99:c0:35:6d:a9:0d:08:08:e0:2c:c9:fa:35:2d:d0:d3: ec:b2:cc:c2:b8:74:a0:0e:ba:21:80:10:7f:f3:a3:1c:85:90: f9:29:8f:91:9e:b2:0c:48:5e:99:99:5e:bc:cb:df:b4:d1:14: bb:d9:4f:7a:ff:e3:a9:9f:c9:ed:73:ad:66:ed:5e:69:c1:5b: 97:c6:17:79:a1:97:a9:33:64:4e:72:28:a9:38:d3:e1:1d:c6: d7:8f:34:5a:c4:6a:c0:25:f0:58:3e:87:5a:59:04:f3:31:97: 43:97:09:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4QjUxMTAvBgNVBAUTKDEzOEY5QThDRjIwN0RBMDA4QjQwMUM2REU4RDkxMzEw RkUyNUVBNEMwHhcNMjUxMTAyMjMxODA0WhcNMjUxMTA5MjMxODA0WjAYMRYwFAYD VQQDEw02OTA3ZTZhZC1mYzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl41xqxQSTaHfG1k/Mty/QxNNMYQx7iEUdqlJLJ0XpgsN4AmE8e0j4F/EboG4 NjAaIhkzaJJGQARUS+EE5f4RxB+ptEM4xKtG0ROAQbNAayInUn6qnNc/Z1INFHju J2l8uwWQLCUVKQ2AQLW4SWaMaosL4Hg7YUE6UL8GYGSK/DO+NXTCNAg6T7Ge5KMz l8qper6ljb+sMSgWrH2kcs6Nvf5EnzN3qSssgxIr7TPI07kX4L3S/z6+9Mwx9fDL ooXeb2HCvjo8xmoCCqEXd/G/ie/bRS2jAgB+A5HEoolAv3l47TRIXGnc2kBVNzZv wtURJfY9GOIIv5v3zvjINkpYlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzsZEII Tb7LG+F34L5Uw4RrKZO1MB8GA1UdIwQYMBaAFBOPmozyB9oAi0AcbejZExD+JepM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCNS8yMzlEMkE0MkZG RjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJnQ0xRQnh0Nk5rVEVQNGw2 a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0LWFqUElIMmdDTFFCeHQ2TmtURVA0bDZrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhCNS8yMzlEMkE0MkZGRjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJn Q0xRQnh0Nk5rVEVQNGw2a3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ0LDpKPzjpvsYsrhdH6gCvWeQ2DnzjHZlWZ/r+jlJsZ/ACgVieMqO xfxFxANXW+rro9kSDGKSZ/3lgQmgAE/TqRnF4JhW8l2tI+d3vOuYu3C+rW+raUdA EOZrhTBwJuASB9L0draQyw7uxG1gqsdVIvO/UIV6MserpeSbG+F/cHovN4kc+bT5 8cJRKC49SmRLfZnANW2pDQgI4CzJ+jUt0NPssszCuHSgDrohgBB/86MchZD5KY+R nrIMSF6ZmV68y9+00RS72U96/+Opn8ntc61m7V5pwVuXxhd5oZepM2ROciipONPh HcbXjzRaxGrAJfBYPodaWQTzMZdDlwl0 -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:57 2025 by rpki-client