$ rpki-client -vvf rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft File: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft (raw, json) Hash identifier: y+6xHl6yBcWtWIXPUQ05Z+oKQxOFgUpHtAS+i6heu2E= Subject key identifier: B7:C9:57:86:8B:1C:69:9C:88:EC:66:52:E0:3D:47:AD:19:4A:9A:37 Authority key identifier: E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E Certificate issuer: /CN=A9142091/serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft Manifest number: 01FD Signing time: Mon 03 Nov 2025 02:21:54 +0000 Manifest this update: Mon 03 Nov 2025 02:21:53 +0000 Manifest next update: Mon 10 Nov 2025 02:21:53 +0000 Files and hashes: 1: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl (hash: lLxbDTOOcCUTcqRGEqgHp9hRZHadIN7i7CiFEr12H5Y=) 2: A8C0A13EAB5D11ED88A54424C4F9AE02.roa (hash: n8o3xnaflWVbOqkp6JntoRCYSrJ8NdzSSuqGUsQkMzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142091, serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E Validity Not Before: Nov 3 02:21:53 2025 GMT Not After : Nov 10 02:21:53 2025 GMT Subject: CN=690811c2-c6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:52:69:ef:34:85:1a:f3:11:c9:3a:ec:b0:85: 28:1c:e8:d4:40:47:f1:1b:4d:79:1f:89:32:a5:17: a6:55:94:f4:13:a6:28:ab:90:46:94:83:9c:eb:2a: 20:64:8a:f5:61:75:78:fe:3d:50:a1:a4:da:c5:79: c0:be:4a:dc:9f:f6:09:c7:d4:82:b3:47:84:8a:a7: 7e:50:8e:9f:40:8a:16:1f:e8:70:98:de:4b:af:06: c5:6b:d4:54:44:5c:54:e9:33:ab:49:18:7a:83:e0: 05:e6:e9:cb:ea:d8:a2:b3:ed:41:4a:96:16:40:10: 88:76:90:82:be:03:ea:90:30:33:37:c4:2b:32:d8: 51:53:be:05:f9:fb:f1:39:d8:52:68:fd:9e:80:6f: 04:8c:ba:55:77:d6:e4:a5:6e:24:b6:53:dd:44:bc: 03:a2:18:d3:14:4b:b6:a5:02:be:5b:f2:fb:1a:14: 8c:e3:b8:80:7d:a5:d2:bc:6b:43:90:d1:ae:a2:24: 38:92:bb:fa:41:8b:c7:6c:db:71:81:1d:43:78:ae: bb:c7:ea:0a:e9:03:e6:93:98:61:37:be:7f:9b:8a: d4:04:e6:2a:3c:93:5e:26:6f:af:81:95:a9:55:61: 24:0f:48:ee:b6:72:8e:2f:fa:1c:c1:af:a8:68:68: 58:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C9:57:86:8B:1C:69:9C:88:EC:66:52:E0:3D:47:AD:19:4A:9A:37 X509v3 Authority Key Identifier: keyid:E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:c4:fb:a6:3f:50:de:22:3f:0d:a6:57:8a:c8:95:0f:d7:44: 19:ce:b3:51:47:d3:4d:60:16:8e:de:c9:4a:5e:ce:36:a6:45: 2d:01:24:b4:7b:d4:36:41:ba:fe:41:ba:35:a1:a5:e9:1e:9d: af:6d:f1:d5:6e:fa:80:6d:42:23:76:70:47:28:68:42:c2:13: 49:e2:21:50:89:87:58:10:e4:78:6f:f8:75:87:fe:79:aa:75: f8:66:e4:1d:69:a2:0c:6e:d6:eb:a2:3a:1e:6e:71:95:40:e6: 21:7e:2f:6d:79:09:3f:7d:17:96:54:10:05:a8:8a:eb:b9:04: 18:be:07:c3:3f:9d:5c:be:3f:70:6c:b6:8e:b5:f8:23:40:6d: d6:64:0a:f0:1e:35:70:07:c6:12:8e:be:2e:59:61:6d:15:55: 79:f2:9b:4b:f9:7a:93:e6:bf:e8:7a:10:72:0a:5f:8f:d4:8c: 1f:6f:8b:58:d9:41:74:ab:fd:ce:9d:7e:3b:e5:10:2e:bf:ea: c9:6e:12:e6:78:4b:d9:66:32:d1:8f:02:c6:fb:93:60:0a:df: 92:bf:3b:b8:d3:af:42:68:4b:7f:ce:1b:d7:89:f5:32:b6:b2: 4e:72:2b:fd:b0:ae:4e:8e:2f:f4:73:3b:42:0a:b0:61:84:ef: c6:fd:11:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIwOTExMTAvBgNVBAUTKEUwODgxM0JEMTg4Q0RDMkFCRjUwMThERTZGRTM3RjQ0 Mzc0NzIwOEUwHhcNMjUxMTAzMDIyMTUzWhcNMjUxMTEwMDIyMTUzWjAYMRYwFAYD VQQDEw02OTA4MTFjMi1jNmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9lJp7zSFGvMRyTrssIUoHOjUQEfxG015H4kypRemVZT0E6Yoq5BGlIOc6yog ZIr1YXV4/j1QoaTaxXnAvkrcn/YJx9SCs0eEiqd+UI6fQIoWH+hwmN5LrwbFa9RU RFxU6TOrSRh6g+AF5unL6tiis+1BSpYWQBCIdpCCvgPqkDAzN8QrMthRU74F+fvx OdhSaP2egG8EjLpVd9bkpW4ktlPdRLwDohjTFEu2pQK+W/L7GhSM47iAfaXSvGtD kNGuoiQ4krv6QYvHbNtxgR1DeK67x+oK6QPmk5hhN75/m4rUBOYqPJNeJm+vgZWp VWEkD0jutnKOL/ocwa+oaGhYjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfJV4aL HGmciOxmUuA9R60ZSpo3MB8GA1UdIwQYMBaAFOCIE70YjNwqv1AY3m/jf0Q3RyCO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjA5MS9BQkM0RDQ0NEFC NTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTNDcV9VQmplYi1OX1JEZEhJ STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJZ1R2UmlNM0NxX1VCamViLU5fUkRkSElJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjA5MS9BQkM0RDQ0NEFCNTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTND cV9VQmplYi1OX1JEZEhJSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1xPumP1DeIj8NpleKyJUP10QZzrNRR9NNYBaO3slKXs42pkUtASS0 e9Q2Qbr+Qbo1oaXpHp2vbfHVbvqAbUIjdnBHKGhCwhNJ4iFQiYdYEOR4b/h1h/55 qnX4ZuQdaaIMbtbrojoebnGVQOYhfi9teQk/fReWVBAFqIrruQQYvgfDP51cvj9w bLaOtfgjQG3WZArwHjVwB8YSjr4uWWFtFVV58ptL+XqT5r/oehByCl+P1Iwfb4tY 2UF0q/3OnX475RAuv+rJbhLmeEvZZjLRjwLG+5NgCt+Svzu4069CaEt/zhvXifUy trJOciv9sK5Oji/0cztCCrBhhO/G/RHz -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:48 2025 by rpki-client