$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft File: 4_FvnXPM7iaTkVokT0S1U6TbPcw.mft (raw, json) Hash identifier: u8Sz+UP1AJi1DJamjCcvUkZ9gIsQGO+E06kAtFL8HNs= Subject key identifier: D4:EA:3F:E2:B9:13:A0:DF:FE:F9:70:AB:7E:5C:0C:F5:ED:6A:F2:80 Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC Certificate issuer: /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft Manifest number: A3 Signing time: Fri 17 Oct 2025 09:39:11 +0000 Manifest this update: Fri 17 Oct 2025 09:39:10 +0000 Manifest next update: Fri 24 Oct 2025 09:39:10 +0000 Files and hashes: 1: 4_FvnXPM7iaTkVokT0S1U6TbPcw.crl (hash: jwC1+gHylGB0UtI0JA1hHMNIAlcKwG863/tpCcfX4T0=) 2: 05E4CBECB12911EF993BC12DC4F9AE02.roa (hash: 6bS2IOUFxNL/dxgXXkv7hlgTjA3VB1/wSeyQ+zl4/9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 09:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Validity Not Before: Oct 17 09:39:10 2025 GMT Not After : Oct 24 09:39:10 2025 GMT Subject: CN=68f20ebe-984f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2b:bf:69:f2:61:cd:75:13:9f:d6:3a:f2:fc: bc:fb:aa:82:3b:b8:d0:dd:66:0e:d0:50:28:05:7e: 3a:eb:38:0a:e7:79:09:9f:fc:ef:7c:68:91:4f:b9: cf:92:12:6d:6c:42:86:d6:c7:e0:84:97:33:85:20: a2:a1:31:0b:bb:9d:8e:e1:5b:53:7f:2b:e7:1e:b6: 65:94:b3:82:73:a4:13:3a:5d:76:a2:cc:cd:37:55: 8f:e1:6b:b7:d5:0f:0f:03:b0:95:5a:43:9c:e4:f7: 61:59:20:5c:b5:fc:b0:67:76:6e:70:c5:71:6b:cc: 2b:46:8a:20:e6:d1:68:05:4b:bf:e7:c1:99:c4:d3: a5:02:9c:61:dd:47:8a:f7:ad:a7:da:33:ca:4b:3d: e1:7a:e0:6f:9b:e7:8d:f0:55:24:01:9a:56:87:04: 3b:8a:6a:cf:67:de:db:b9:c5:c6:be:6e:1f:e8:3b: 38:95:ac:a3:f5:3d:4e:ed:45:36:71:ea:6e:95:6b: b0:45:4a:2b:0c:f5:8a:81:19:53:64:87:3c:9c:79: 8c:fc:00:c4:03:e2:f6:ea:3b:04:a8:a9:4b:b7:9c: 64:67:a1:6e:a2:9d:2f:7b:38:f8:ac:0b:a2:62:ff: fc:90:bc:31:f6:75:0c:32:8b:18:4a:7f:9e:93:77: e1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EA:3F:E2:B9:13:A0:DF:FE:F9:70:AB:7E:5C:0C:F5:ED:6A:F2:80 X509v3 Authority Key Identifier: keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:02:e6:d6:ea:e1:b6:48:40:65:2c:f7:32:e9:cf:d1:1a:e8: 84:d7:e7:d2:8e:75:63:a0:71:14:59:b1:84:fa:28:94:30:d4: d2:5c:cf:06:1a:35:24:83:a3:a1:46:7f:ac:91:8c:ba:3e:37: dc:4b:b3:6a:3b:f5:a4:e3:f2:b0:4d:0f:85:b0:af:5d:55:78: 3e:8d:a4:53:75:87:f9:f1:ae:85:2f:d7:d2:8f:83:d3:66:b7: 16:fe:43:ab:50:e4:d1:d2:93:11:97:a8:74:20:44:1c:4f:dd: 1e:15:f7:52:b8:79:6a:de:21:5e:ad:66:f9:c5:ba:9b:f7:0b: 06:1d:58:f1:f0:42:30:d7:6f:4c:d4:b6:8c:c9:58:9c:97:30: cb:2d:71:c6:2e:ec:80:1d:52:77:c3:82:4d:03:27:46:c4:80: ee:b2:80:4f:17:25:89:bd:37:08:6a:af:c0:78:44:5a:93:db: 20:71:bd:69:7b:c0:77:b8:78:80:0e:e4:eb:a7:cb:12:bd:94: d4:08:7c:7a:dc:f4:b8:8e:92:d2:2a:5e:49:b4:29:7a:0d:71: 7f:f4:ce:51:3d:03:1f:09:26:76:e5:ab:ad:b2:75:87:ae:58: 8b:75:c5:70:ee:16:f3:ec:5b:c1:f4:d2:ac:9f:3a:17:a8:cf: 79:cd:4f:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCMTMxMTAvBgNVBAUTKEUzRjE2RjlENzNDQ0VFMjY5MzkxNUEyNDRGNDRCNTUz QTREQjNEQ0MwHhcNMjUxMDE3MDkzOTEwWhcNMjUxMDI0MDkzOTEwWjAYMRYwFAYD VQQDEw02OGYyMGViZS05ODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiu/afJhzXUTn9Y68vy8+6qCO7jQ3WYO0FAoBX466zgK53kJn/zvfGiRT7nP khJtbEKG1sfghJczhSCioTELu52O4VtTfyvnHrZllLOCc6QTOl12oszNN1WP4Wu3 1Q8PA7CVWkOc5PdhWSBctfywZ3ZucMVxa8wrRoog5tFoBUu/58GZxNOlApxh3UeK 962n2jPKSz3heuBvm+eN8FUkAZpWhwQ7imrPZ97bucXGvm4f6Ds4layj9T1O7UU2 cepulWuwRUorDPWKgRlTZIc8nHmM/ADEA+L26jsEqKlLt5xkZ6Fuop0vezj4rAui Yv/8kLwx9nUMMosYSn+ek3fh/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTqP+K5 E6Df/vlwq35cDPXtavKAMB8GA1UdIwQYMBaAFOPxb51zzO4mk5FaJE9EtVOk2z3M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUIxMy80NjM3RkJGMkIx MjgxMUVGQjc1MEE1MkJDNEY5QUUwMi80X0Z2blhQTTdpYVRrVm9rVDBTMVU2VGJQ Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRfRnZuWFBNN2lhVGtWb2tUMFMxVTZUYlBjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUIxMy80NjM3RkJGMkIxMjgxMUVGQjc1MEE1MkJDNEY5QUUwMi80X0Z2blhQTTdp YVRrVm9rVDBTMVU2VGJQY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/AubW6uG2SEBlLPcy6c/RGuiE1+fSjnVjoHEUWbGE+iiUMNTSXM8G GjUkg6OhRn+skYy6PjfcS7NqO/Wk4/KwTQ+FsK9dVXg+jaRTdYf58a6FL9fSj4PT ZrcW/kOrUOTR0pMRl6h0IEQcT90eFfdSuHlq3iFerWb5xbqb9wsGHVjx8EIw129M 1LaMyViclzDLLXHGLuyAHVJ3w4JNAydGxIDusoBPFyWJvTcIaq/AeERak9sgcb1p e8B3uHiADuTrp8sSvZTUCHx63PS4jpLSKl5JtCl6DXF/9M5RPQMfCSZ25autsnWH rliLdcVw7hbz7FvB9NKsnzoXqM95zU9g -----END CERTIFICATE-----Generated at Sat Oct 18 23:39:01 2025 by rpki-client