$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft File: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft (raw, json) Hash identifier: 7DWO++OpINgeU+OUDZ1sLGJhHDtFGBvYRGmyy5+KjRk= Subject key identifier: 1A:3F:36:60:3D:90:E0:B9:C8:92:31:4F:E4:7B:C1:CB:CD:11:89:BE Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Certificate serial: 0C81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft Manifest number: 0C5E Signing time: Fri 24 Oct 2025 19:12:49 +0000 Manifest this update: Fri 24 Oct 2025 19:12:48 +0000 Manifest next update: Fri 31 Oct 2025 19:12:48 +0000 Files and hashes: 1: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl (hash: AB7iJkPx429xpt5L+YKpuN1kDDeB12oIRA4UYx7xcPE=) 2: 183DE570057A11EC822F230EC4F9AE02.roa (hash: bEfFzY9ERkUCouk5XoaucvDsVkrzcwabTIVAnbK3Eko=) 3: B32668C4D98C11EB905D7281C4F9AE02.roa (hash: +CpW1CaKQXu6MhTzl4JHCslaYOAYJXQr9xAkDiD0lq0=) 4: B688C61E2A7411F09C50DF45C4F9AE02.roa (hash: PvI9nhg15RMbIrPmzo33E5WP1sio6iu2Cas5ym98pTY=) 5: 89EA369C2A7411F09A757F45C4F9AE02.roa (hash: F9UOwIl8TIxEFQqKFxE/ZQxprBW29nR8LDsUajtcNxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 19:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CBF3, serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Validity Not Before: Oct 24 19:12:48 2025 GMT Not After : Oct 31 19:12:48 2025 GMT Subject: CN=68fbcfb0-90e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:54:e0:be:58:e2:51:90:54:3b:95:87:85:d6: fc:37:36:09:9e:14:ad:e9:fe:16:f6:1f:63:ad:52: 46:f3:ec:bb:db:84:55:96:a5:42:77:23:b0:30:30: d3:ad:2c:34:e2:92:9e:74:8d:97:6b:d3:a8:e6:a5: 1b:c3:f8:4c:08:1d:8e:b9:41:6d:d3:be:2a:0b:50: 3f:28:64:c3:8c:c7:3d:f8:6b:b6:6f:2c:3b:c8:db: 5c:5c:7d:9c:91:27:29:8b:01:de:f7:70:e2:9c:36: 85:81:7e:45:fb:cc:1a:26:5c:7c:91:d6:f4:24:bb: 37:18:ee:94:d1:0f:8b:26:15:0f:63:3a:2d:bf:9e: ef:7e:95:d4:36:64:e8:48:b3:6c:12:1a:03:9b:8f: a8:85:e7:95:35:7e:be:cc:33:23:f8:50:43:8e:a8: b7:be:f8:74:aa:bd:5c:ce:7c:5f:ef:b6:70:e1:cb: 25:b3:7a:16:58:89:f3:da:e1:af:65:e0:b1:34:41: f7:2a:75:0b:25:3b:ae:d6:b9:0d:d8:d6:80:a7:69: e5:fe:4b:ff:a3:08:54:14:43:1c:eb:dc:6a:3e:00: 4b:4a:d8:4c:00:42:58:d4:8b:bd:18:ac:7c:42:25: b2:e2:37:04:b9:55:1a:9a:0d:3b:c5:a0:f6:7c:aa: ea:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3F:36:60:3D:90:E0:B9:C8:92:31:4F:E4:7B:C1:CB:CD:11:89:BE X509v3 Authority Key Identifier: keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:4e:42:8a:98:87:98:af:ae:5a:80:58:9f:07:fa:a6:7a:25: da:73:7d:c5:6b:a5:1f:3d:98:53:55:83:ca:dc:9e:96:38:e0: 77:06:9f:ee:86:78:8e:08:7b:5f:86:4e:90:6c:35:cf:8b:43: 57:85:c1:99:45:e4:89:f5:5f:79:e7:9c:23:72:bd:8b:51:a9: 9a:d7:42:94:01:1a:44:be:43:9a:44:00:15:16:f5:3c:88:d7: 08:66:f9:e1:3f:97:ae:e3:20:8b:6b:6b:0e:a3:14:93:6b:46: e8:dd:8a:dc:79:2d:18:8a:12:c7:a1:ef:19:61:80:ed:d2:aa: 32:09:73:6d:f1:2e:30:1e:81:13:c1:31:5e:8a:33:fd:e0:b6: 38:5d:35:74:44:30:06:8e:84:7f:bc:65:a8:d5:36:8e:fe:0c: 20:8f:fa:57:a3:7a:44:6e:3b:97:b9:e7:14:ee:79:08:c7:80: 7f:bf:f4:ea:97:a1:fa:37:d8:70:71:c4:67:ab:a8:3a:18:c2: 4c:6f:e3:15:3f:c8:89:23:22:d2:b4:c3:9d:c2:44:bd:73:e1: 8a:7f:0c:4e:39:2a:f6:45:b5:83:b3:fb:9a:2e:a7:38:7b:4f: 5b:6d:2e:d9:f0:ff:c3:0f:04:8c:93:7e:e4:8f:38:1a:cb:46: cd:68:1b:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQyQzdDQ0M2REQx OTM1MTA3MDcwHhcNMjUxMDI0MTkxMjQ4WhcNMjUxMDMxMTkxMjQ4WjAYMRYwFAYD VQQDEw02OGZiY2ZiMC05MGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VTgvljiUZBUO5WHhdb8NzYJnhSt6f4W9h9jrVJG8+y724RVlqVCdyOwMDDT rSw04pKedI2Xa9Oo5qUbw/hMCB2OuUFt074qC1A/KGTDjMc9+Gu2byw7yNtcXH2c kScpiwHe93DinDaFgX5F+8waJlx8kdb0JLs3GO6U0Q+LJhUPYzotv57vfpXUNmTo SLNsEhoDm4+oheeVNX6+zDMj+FBDjqi3vvh0qr1cznxf77Zw4csls3oWWInz2uGv ZeCxNEH3KnULJTuu1rkN2NaAp2nl/kv/owhUFEMc69xqPgBLSthMAEJY1Iu9GKx8 QiWy4jcEuVUamg07xaD2fKrqBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBo/NmA9 kOC5yJIxT+R7wcvNEYm+MB8GA1UdIwQYMBaAFOJEnjEiIBMeLnbELHzMbdGTUQcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0JGMy8xQkM2RUIyMDEx RTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4NHVkc1FzZk14dDBaTlJC d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrU2VNU0lnRXg0dWRzUXNmTXh0MFpOUkJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0JGMy8xQkM2RUIyMDExRTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4 NHVkc1FzZk14dDBaTlJCd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpTkKKmIeYr65agFifB/qmeiXac33Fa6UfPZhTVYPK3J6WOOB3Bp/u hniOCHtfhk6QbDXPi0NXhcGZReSJ9V9555wjcr2LUama10KUARpEvkOaRAAVFvU8 iNcIZvnhP5eu4yCLa2sOoxSTa0bo3YrceS0YihLHoe8ZYYDt0qoyCXNt8S4wHoET wTFeijP94LY4XTV0RDAGjoR/vGWo1TaO/gwgj/pXo3pEbjuXuecU7nkIx4B/v/Tq l6H6N9hwccRnq6g6GMJMb+MVP8iJIyLStMOdwkS9c+GKfwxOOSr2RbWDs/uaLqc4 e09bbS7Z8P/DDwSMk37kjzgay0bNaBue -----END CERTIFICATE-----Generated at Sat Oct 25 17:35:28 2025 by rpki-client