$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json) Hash identifier: L4yIDg85EBpA9JxQS3HRjJkyVoXkrjb62rIsNeWpv/w= Subject key identifier: FE:CB:E9:2C:4C:95:FF:BC:E3:F8:B7:6C:BF:B2:61:7A:27:A9:76:4D Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft Manifest number: 01AD Signing time: Wed 05 Nov 2025 03:17:45 +0000 Manifest this update: Wed 05 Nov 2025 03:17:45 +0000 Manifest next update: Wed 12 Nov 2025 03:17:45 +0000 Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: GxISv6l0V4ja6kx1CtU3DrTm+tUOtno53JrpzKkfyWA=) 2: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: st8PwK196xNld8O2k0lKE8037dLGvSfGuDJRF0i8kvY=) 3: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: imnNT9qYRRIcc5JHDTtnRt4iRKv++5OKcbvGmRUGbZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Validity Not Before: Nov 5 03:17:45 2025 GMT Not After : Nov 12 03:17:45 2025 GMT Subject: CN=690ac1d9-0a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:2b:54:dd:35:c5:42:ef:ad:b9:45:49:8a: d2:fe:81:e8:f5:fe:32:47:1c:6f:b7:37:aa:85:15: cd:fd:e6:11:b7:7b:81:3b:2a:69:65:a9:a1:5e:8c: 01:02:45:c5:1f:72:7e:9b:10:a4:0f:aa:40:4f:de: 40:5c:d4:27:8a:25:ac:c1:e5:30:c2:f1:9e:0a:62: aa:de:03:8a:c7:3b:1b:b8:e9:e1:56:78:de:53:c0: 0b:7c:e9:f1:8b:e6:5e:eb:e4:39:d8:a9:2c:46:b5: 2f:c9:92:88:55:0d:27:dc:49:f1:ce:d0:cd:38:58: 01:e6:1e:21:43:fb:2b:c4:09:d8:28:64:49:1f:12: 29:6b:c9:f0:d6:23:88:2c:02:ab:86:ea:c2:dd:a6: fc:85:cd:d1:0a:bf:ce:55:17:8e:67:de:ce:c1:65: 43:49:70:64:dd:a2:61:f8:b9:1f:8e:c0:a2:fb:59: 99:e1:0a:b6:23:11:8c:08:b9:5a:4e:25:ec:36:7e: bc:5b:f4:ca:7e:44:d2:61:3e:3d:d9:d2:4f:bc:08: 17:de:15:09:ef:b6:a8:4f:94:21:af:bd:57:65:8d: 32:54:dd:4c:8d:52:29:de:d9:aa:40:04:4a:35:0e: b9:5a:09:7c:51:23:ee:a0:e5:5c:ea:64:ad:b0:c6: f8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CB:E9:2C:4C:95:FF:BC:E3:F8:B7:6C:BF:B2:61:7A:27:A9:76:4D X509v3 Authority Key Identifier: keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ad:9f:ea:b2:c2:bd:1d:af:2e:4a:a7:bf:9a:4f:a2:e0:3c: 05:d1:f2:ec:0b:1e:89:c0:07:fa:3c:7f:b9:c0:50:fa:dd:cb: d8:05:be:3a:0e:f2:f4:e4:44:db:f5:da:be:74:cc:27:ee:76: 92:d8:87:43:58:2a:55:c0:72:1e:68:f0:ef:4a:92:9c:ca:96: 89:b4:46:a3:8e:5d:3a:72:6d:12:6d:34:8a:7d:ff:9a:0a:f5: 02:65:f2:3f:23:d0:b5:ad:70:1d:0d:a8:c9:03:90:e6:0d:5f: 9f:4d:ee:7c:f1:0f:36:a0:56:c2:e2:9f:95:b9:c7:05:65:78: 39:85:e6:9e:85:3f:0e:5b:22:e1:a8:0c:d4:d9:4e:ae:df:82: 2f:c1:47:5b:1a:f2:7b:a1:6f:96:b1:05:ee:11:8b:05:26:96: 8f:21:4e:6a:b1:3f:9f:35:e2:24:61:bc:ce:f8:e4:31:bc:d0: 2e:37:c5:05:05:f4:a8:34:11:51:51:3a:e5:a7:a9:d7:42:92: 17:18:3a:af:df:f4:93:99:c4:52:b7:a6:3c:92:34:ee:b7:91: 2b:e2:ca:b6:6e:31:f6:82:9d:30:f1:c9:0c:8e:b1:05:20:c6: 8e:3f:82:01:53:e6:8a:58:7e:a6:85:06:bd:79:60:1c:b4:3f: 87:82:92:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCNjExMTAvBgNVBAUTKEUzRTEwMEY4MDQwMTNBMDVGOTIyRUUxMUNCNEUwQUJF QTZDMjJCOTgwHhcNMjUxMTA1MDMxNzQ1WhcNMjUxMTEyMDMxNzQ1WjAYMRYwFAYD VQQDEw02OTBhYzFkOS0wYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcIrVN01xULvrblFSYrS/oHo9f4yRxxvtzeqhRXN/eYRt3uBOyppZamhXowB AkXFH3J+mxCkD6pAT95AXNQniiWsweUwwvGeCmKq3gOKxzsbuOnhVnjeU8ALfOnx i+Ze6+Q52KksRrUvyZKIVQ0n3EnxztDNOFgB5h4hQ/srxAnYKGRJHxIpa8nw1iOI LAKrhurC3ab8hc3RCr/OVReOZ97OwWVDSXBk3aJh+LkfjsCi+1mZ4Qq2IxGMCLla TiXsNn68W/TKfkTSYT492dJPvAgX3hUJ77aoT5Qhr71XZY0yVN1MjVIp3tmqQARK NQ65Wgl8USPuoOVc6mStsMb4ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7L6SxM lf+84/i3bL+yYXonqXZNMB8GA1UdIwQYMBaAFOPhAPgEAToF+SLuEctOCr6mwiuY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUI2MS83NjE2RDRGQzJB Q0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9nWDVJdTRSeTA0S3ZxYkNL NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtRUEtQVFCT2dYNUl1NFJ5MDRLdnFiQ0s1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUI2MS83NjE2RDRGQzJBQ0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9n WDVJdTRSeTA0S3ZxYkNLNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBurZ/qssK9Ha8uSqe/mk+i4DwF0fLsCx6JwAf6PH+5wFD63cvYBb46 DvL05ETb9dq+dMwn7naS2IdDWCpVwHIeaPDvSpKcypaJtEajjl06cm0SbTSKff+a CvUCZfI/I9C1rXAdDajJA5DmDV+fTe588Q82oFbC4p+VuccFZXg5heaehT8OWyLh qAzU2U6u34IvwUdbGvJ7oW+WsQXuEYsFJpaPIU5qsT+fNeIkYbzO+OQxvNAuN8UF BfSoNBFRUTrlp6nXQpIXGDqv3/STmcRSt6Y8kjTut5Er4sq2bjH2gp0w8ckMjrEF IMaOP4IBU+aKWH6mhQa9eWActD+HgpIo -----END CERTIFICATE-----Generated at Wed Nov 5 16:39:35 2025 by rpki-client