$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft File: 4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json) Hash identifier: aA2fwCyjka76h5HZYMYJJlqNS28IvQUZSCZZ/T5QDHQ= Subject key identifier: 56:63:82:5C:83:4A:1C:0C:C9:59:B2:F3:2C:61:12:77:D5:D2:E6:74 Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Certificate serial: 02BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft Manifest number: 02AD Signing time: Thu 23 Oct 2025 02:56:17 +0000 Manifest this update: Thu 23 Oct 2025 02:56:17 +0000 Manifest next update: Thu 30 Oct 2025 02:56:16 +0000 Files and hashes: 1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: voKYvFlFBSnA6/xUkxLJpjSyt0jAsVZVYvSjQ32Ey78=) 2: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: qXJ6WIYPz1bw3bsc4PG2hiq2kWx6ipTX7+9TfJ3AB80=) 3: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: xCZ8Pmp/DfujdT07uerGjkQxfEJEaTaMR2ab3oAlRio=) 4: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: p/UGppIjgdU0zgcCE801w9qFglLFdJgIlJ6pMarUbMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 02:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Validity Not Before: Oct 23 02:56:17 2025 GMT Not After : Oct 30 02:56:16 2025 GMT Subject: CN=68f99951-f2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8d:b4:88:5c:73:71:c7:43:85:80:06:62:34: 8f:65:40:72:f9:30:b8:89:3e:a4:bb:81:b2:d2:70: e3:3d:f6:af:b6:a4:af:73:66:f4:a7:85:1e:7f:b2: ae:98:8b:94:5f:68:b0:66:a5:21:63:c3:75:b7:18: 73:95:0b:f4:95:81:58:b3:19:31:26:fd:eb:9a:7f: 7c:38:18:37:3a:3d:c1:8a:3d:bf:dc:fd:a4:6d:02: 6d:3a:88:39:b5:9c:d5:77:72:4b:e6:e0:eb:c0:2a: 8d:1d:ec:9a:bc:f9:4b:79:d3:5b:b3:ab:7d:f6:29: f7:54:64:9d:94:c9:cd:92:dd:6e:0b:11:e4:b9:3b: 52:28:79:ef:25:39:1b:07:c2:ca:0a:85:c8:f0:ba: ff:6b:fe:e4:46:13:b1:c5:37:ec:fd:d9:72:0f:21: f3:d5:3b:ca:c9:77:b2:15:61:9d:92:79:2d:74:fa: c5:22:7a:8e:05:3e:c0:cb:aa:79:16:85:b0:70:3d: 81:fd:c2:80:60:1d:3f:73:6c:99:e9:7d:f3:57:db: a1:6a:7b:ec:97:0c:99:24:56:1f:d3:96:12:89:2b: 14:70:2e:05:0c:42:77:6e:dc:b3:be:d3:4a:09:31: 1e:f4:e0:d9:fe:1c:f3:c4:1f:11:f7:8b:99:68:f5: 71:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:63:82:5C:83:4A:1C:0C:C9:59:B2:F3:2C:61:12:77:D5:D2:E6:74 X509v3 Authority Key Identifier: keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:2a:43:2e:ff:4d:44:92:2a:92:ca:fb:5e:fe:fa:a0:3b:e6: fc:1b:62:73:9a:91:67:5e:50:9d:2f:7d:e3:03:ba:7c:f8:1a: 15:0e:3e:c0:c2:7d:b8:14:a5:9b:f9:af:51:f9:69:0c:d7:d7: 32:72:b8:e5:e6:57:6b:36:47:69:18:e0:43:f1:d4:c9:20:f6: 31:f4:f1:c9:85:13:74:3e:ec:2c:42:63:6e:b2:eb:13:38:22: 42:74:db:26:95:42:54:18:d6:07:8f:c8:cf:e2:ce:1b:8e:ee: a3:0d:24:f1:8e:77:01:f5:db:d9:1f:a1:23:c1:f5:7a:38:85: 83:7d:3a:61:ac:53:97:bd:63:db:12:1c:c0:6c:32:a8:5e:6c: 52:a8:b5:49:14:db:68:c1:77:ab:e8:79:39:96:e6:c3:22:8b: 80:a7:b8:c4:ad:cb:bb:d3:3d:bd:68:6a:6a:02:49:fc:1e:af: 39:a7:35:3a:10:c4:7f:fc:1d:a7:55:fa:cb:2d:b4:f7:93:27: 18:9f:1f:0d:d5:38:ea:1c:fb:87:e9:70:71:66:1b:90:f4:80: fa:a6:cf:53:47:9d:f8:b9:12:2d:c7:56:3f:6d:6b:f6:c3:e5: fe:78:f0:b4:80:38:db:8a:d3:ad:12:c4:22:17:4c:c6:a9:71: 6f:59:53:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz Rjg2MDI5QTIwHhcNMjUxMDIzMDI1NjE3WhcNMjUxMDMwMDI1NjE2WjAYMRYwFAYD VQQDEw02OGY5OTk1MS1mMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2420iFxzccdDhYAGYjSPZUBy+TC4iT6ku4Gy0nDjPfavtqSvc2b0p4Uef7Ku mIuUX2iwZqUhY8N1txhzlQv0lYFYsxkxJv3rmn98OBg3Oj3Bij2/3P2kbQJtOog5 tZzVd3JL5uDrwCqNHeyavPlLedNbs6t99in3VGSdlMnNkt1uCxHkuTtSKHnvJTkb B8LKCoXI8Lr/a/7kRhOxxTfs/dlyDyHz1TvKyXeyFWGdknktdPrFInqOBT7Ay6p5 FoWwcD2B/cKAYB0/c2yZ6X3zV9uhanvslwyZJFYf05YSiSsUcC4FDEJ3btyzvtNK CTEe9ODZ/hzzxB8R94uZaPVx2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZjglyD ShwMyVmy8yxhEnfV0uZ0MB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2 QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc0MC8zNTI4QjBDQzE2QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9H ZE1hVW5zTzRvTGNfaGdLYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGKkMu/01EkiqSyvte/vqgO+b8G2JzmpFnXlCdL33jA7p8+BoVDj7A wn24FKWb+a9R+WkM19cycrjl5ldrNkdpGOBD8dTJIPYx9PHJhRN0PuwsQmNususT OCJCdNsmlUJUGNYHj8jP4s4bju6jDSTxjncB9dvZH6EjwfV6OIWDfTphrFOXvWPb EhzAbDKoXmxSqLVJFNtowXer6Hk5lubDIouAp7jErcu70z29aGpqAkn8Hq85pzU6 EMR//B2nVfrLLbT3kycYnx8N1TjqHPuH6XBxZhuQ9ID6ps9TR534uRItx1Y/bWv2 w+X+ePC0gDjbitOtEsQiF0zGqXFvWVNa -----END CERTIFICATE-----Generated at Thu Oct 23 11:26:31 2025 by rpki-client