$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json) Hash identifier: 0j3qoqGg8dhn70JB/Wcifwa1T6enrLLZbIMKNDRo5HY= Subject key identifier: B1:01:5F:36:55:C6:69:F6:C2:D8:E3:AC:E2:80:CD:26:9E:07:3E:47 Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87 Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft Manifest number: CE Signing time: Thu 23 Oct 2025 07:44:32 +0000 Manifest this update: Thu 23 Oct 2025 07:44:32 +0000 Manifest next update: Thu 30 Oct 2025 07:44:32 +0000 Files and hashes: 1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: YNPzFvK2CeWnJBIQCnR/PAPbUewRe6EYnuWXZNYV1FE=) 2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: e8wZoAxd5aA3CtPGlNCm2H8RgaO0sg67bbRxbVIcezE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 07:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087 Validity Not Before: Oct 23 07:44:32 2025 GMT Not After : Oct 30 07:44:32 2025 GMT Subject: CN=68f9dce0-f934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:60:73:41:1f:58:09:9b:10:ce:0f:30:c4:8e: e4:9f:58:5b:18:ef:e5:3e:10:b7:6e:92:8c:14:63: 96:3c:ac:08:24:c7:61:c4:61:3b:f5:e9:7e:51:3a: 7e:77:05:e6:a9:32:3c:d1:21:4b:c5:a1:b8:c7:f2: 27:34:03:c3:91:37:e8:a4:aa:c5:d9:36:34:7c:a6: 97:b9:09:a3:ac:f9:8e:68:01:0b:de:17:36:9f:c5: aa:a9:7a:13:59:47:8f:bf:3c:37:c1:6f:36:1f:65: 5d:e6:ff:b0:a1:d7:9f:30:cc:f2:ca:4a:a2:d8:22: da:79:4c:b0:a4:78:48:92:49:df:a5:81:ea:43:25: 3e:ce:59:ff:61:bc:65:89:6c:b4:c8:55:69:07:f9: 79:81:cd:ec:0c:28:c0:44:7a:be:c1:77:f9:83:08: fa:95:61:4a:2b:85:96:57:b5:98:c3:00:93:0b:27: 3a:2e:87:46:58:40:75:c0:47:0a:59:8d:7e:ee:ed: 2e:3e:57:bd:ba:11:1f:1e:0f:29:4d:1f:46:22:10: 47:da:be:5b:85:f1:d5:92:58:a4:c8:79:15:f8:12: cd:b2:0b:f0:22:07:14:39:85:b9:c3:ed:ee:ae:96: 2e:de:05:19:cb:1f:1d:93:79:c0:3f:ae:2b:1c:3c: aa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:01:5F:36:55:C6:69:F6:C2:D8:E3:AC:E2:80:CD:26:9E:07:3E:47 X509v3 Authority Key Identifier: keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:23:77:c0:35:ff:66:47:47:28:b4:49:63:92:47:17:dc:8d: 81:7d:d7:cb:e0:ee:7c:37:ee:bd:93:b9:cb:fd:ca:fb:0c:64: ab:e8:10:41:7c:8a:d6:42:f6:fc:9a:d0:9a:d1:7b:01:12:c9: af:b1:30:79:4b:d7:cf:28:74:5c:ed:0b:92:7a:43:ba:fe:7f: 1d:2c:61:fb:35:7f:e9:1a:21:42:33:bb:4d:86:8b:9f:08:1f: 9e:dc:42:f5:49:76:fb:2a:eb:1a:0c:3c:ea:fa:f5:2e:01:12: bd:97:a9:ff:44:e6:63:69:43:c9:92:5f:83:94:60:ab:d9:c4: e9:60:95:4e:53:5d:a1:6e:eb:2d:7e:f7:73:45:01:4a:ae:ca: 20:be:72:b7:1d:8f:76:4d:13:54:c9:9d:eb:51:ba:27:c4:75: b9:92:5d:bd:93:ec:6d:5d:5c:f6:cb:cc:c5:da:7e:ab:39:dd: 13:49:13:1c:1e:9d:36:1d:b7:f4:14:4c:e2:f6:c7:ad:c0:ec: a0:b9:05:51:0c:af:c5:ca:e3:8d:51:8f:8b:c6:a1:9b:dc:20: aa:d1:7d:35:71:98:f6:7f:33:03:39:74:be:2e:5f:86:46:2c: 1c:25:13:a6:c4:1b:d6:79:03:f4:d2:6e:72:d5:3c:bd:89:b7: c6:37:53:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2MDAxMTAvBgNVBAUTKEUwQjk0NThGNjk4MjVGRjgyOTM4N0IxMzlFODhGRDNC RDY3NDAwODcwHhcNMjUxMDIzMDc0NDMyWhcNMjUxMDMwMDc0NDMyWjAYMRYwFAYD VQQDEw02OGY5ZGNlMC1mOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2BzQR9YCZsQzg8wxI7kn1hbGO/lPhC3bpKMFGOWPKwIJMdhxGE79el+UTp+ dwXmqTI80SFLxaG4x/InNAPDkTfopKrF2TY0fKaXuQmjrPmOaAEL3hc2n8WqqXoT WUePvzw3wW82H2Vd5v+wodefMMzyykqi2CLaeUywpHhIkknfpYHqQyU+zln/Ybxl iWy0yFVpB/l5gc3sDCjARHq+wXf5gwj6lWFKK4WWV7WYwwCTCyc6LodGWEB1wEcK WY1+7u0uPle9uhEfHg8pTR9GIhBH2r5bhfHVklikyHkV+BLNsgvwIgcUOYW5w+3u rpYu3gUZyx8dk3nAP64rHDyqmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEBXzZV xmn2wtjjrOKAzSaeBz5HMB8GA1UdIwQYMBaAFOC5RY9pgl/4KTh7E56I/TvWdACH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTYwMC8yMjFCQUVCRTc3 RjExMUVGQUMxMTI5NDJDNEY5QUUwMi80TGxGajJtQ1hfZ3BPSHNUbm9qOU85WjBB SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRMbEZqMm1DWF9ncE9Ic1Rub2o5TzlaMEFJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTYwMC8yMjFCQUVCRTc3RjExMUVGQUMxMTI5NDJDNEY5QUUwMi80TGxGajJtQ1hf Z3BPSHNUbm9qOU85WjBBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9I3fANf9mR0cotEljkkcX3I2BfdfL4O58N+69k7nL/cr7DGSr6BBB fIrWQvb8mtCa0XsBEsmvsTB5S9fPKHRc7QuSekO6/n8dLGH7NX/pGiFCM7tNhouf CB+e3EL1SXb7KusaDDzq+vUuARK9l6n/ROZjaUPJkl+DlGCr2cTpYJVOU12hbust fvdzRQFKrsogvnK3HY92TRNUyZ3rUbonxHW5kl29k+xtXVz2y8zF2n6rOd0TSRMc Hp02Hbf0FEzi9setwOyguQVRDK/FyuONUY+LxqGb3CCq0X01cZj2fzMDOXS+Ll+G RiwcJROmxBvWeQP00m5y1Ty9ibfGN1Oe -----END CERTIFICATE-----Generated at Fri Oct 24 21:42:13 2025 by rpki-client