$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft File: R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json) Hash identifier: /pzvHySchl2YyCYWAHZPO6X5d+Oo5OxhxR9VJsU2Fxk= Subject key identifier: A0:2D:8A:F3:A9:D9:3A:94:EF:B6:D0:B7:C5:F1:88:D2:E2:01:42:BF Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Certificate serial: 02C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft Manifest number: 02BC Signing time: Thu 23 Oct 2025 02:51:47 +0000 Manifest this update: Thu 23 Oct 2025 02:51:46 +0000 Manifest next update: Thu 30 Oct 2025 02:51:46 +0000 Files and hashes: 1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: 1cbLGzXeIphJdwzfh3yywJSewUQ36JVtvaRZ61b2NW4=) 2: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: GG/AMsbpEzm/NFjGRgk+JWg1MGNbtO4+De0JwZLDbdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 02:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Validity Not Before: Oct 23 02:51:46 2025 GMT Not After : Oct 30 02:51:46 2025 GMT Subject: CN=68f99843-a260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:55:89:68:ad:e9:65:06:f3:fb:b3:f3:8f:be: 6d:f1:53:9d:ba:81:fb:15:c4:f6:89:e5:af:a9:3c: 8a:83:0f:37:fc:7e:2d:c5:46:b4:40:64:bb:bf:e4: 48:59:68:37:ac:6c:cd:e4:a7:93:d3:29:c6:2d:a3: 6e:a6:13:c9:92:de:f2:27:69:10:04:7b:58:d3:4b: c8:59:60:96:11:28:06:2f:f9:66:32:6e:d3:06:7e: 86:fa:0c:45:1b:86:38:d2:3e:2a:c4:09:57:69:24: ae:d4:36:51:a3:6b:1f:e7:58:b0:76:53:63:26:fb: 7b:b6:31:2a:78:8e:31:71:54:94:85:bb:9b:ff:ba: d8:93:ec:d0:bc:9c:25:31:48:2e:86:e0:08:b6:3a: 76:59:05:7c:15:0c:9e:c5:5a:9c:ef:7b:b5:d8:72: 47:88:4a:39:5b:93:8b:92:d2:2d:84:43:0f:0a:55: 65:65:47:a1:00:93:1c:c0:e4:b8:10:dd:dc:3a:85: de:b2:2e:e4:c2:03:5a:a9:90:7c:61:00:d5:8c:05: 6f:ee:69:e9:48:a6:fe:10:32:f2:ce:40:6c:3c:3d: ca:4f:19:0e:50:1c:f2:29:ad:d3:ed:97:96:e5:e6: 39:b9:74:1b:7a:87:f9:e5:bb:cc:ea:3b:f4:34:ed: 1c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2D:8A:F3:A9:D9:3A:94:EF:B6:D0:B7:C5:F1:88:D2:E2:01:42:BF X509v3 Authority Key Identifier: keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:bf:b0:61:5c:a0:86:e4:50:70:45:2f:4e:1a:32:70:11:13: 05:b3:34:d2:4c:e3:62:9a:57:21:d2:2b:5f:0b:76:b1:66:d4: ed:fa:76:e0:e7:7b:05:f5:92:15:c2:b7:c4:95:85:67:54:a5: 18:29:c3:bb:0f:dc:65:d3:61:81:f9:34:2f:1b:63:4a:4b:78: e1:e5:e3:de:88:1d:93:d6:44:fa:67:70:e8:94:07:fa:83:c5: 92:f6:27:72:2b:77:26:37:d9:09:c1:90:c7:dc:29:fb:4d:67: 44:ad:b3:b4:c5:06:d9:96:c3:27:bd:d7:72:61:88:5e:a9:89: 1f:c4:a2:e8:0c:22:92:a1:27:77:61:d4:7d:91:c5:5c:03:ab: cf:3f:26:1f:a8:26:b6:19:03:97:81:d3:d4:1e:f3:7f:58:b0: bf:ef:83:b9:10:3f:db:77:27:2d:96:07:3b:2a:cd:10:95:c5: 3d:fc:3b:15:51:dd:b8:c5:7c:76:b0:65:75:00:e3:2e:76:47: ea:65:72:0e:eb:ad:9a:26:84:ce:7b:a7:a7:ae:09:b8:8f:80: f9:34:13:77:f6:6b:fa:70:b2:8e:10:34:14:4a:fb:1b:ca:9a: 8b:1a:db:fb:43:85:f8:05:87:ac:ba:28:15:ca:d8:98:3f:33: 32:c7:11:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThEQzYxMTAvBgNVBAUTKDQ3ODZEQkNDQjVDQzI5NkIxREFCMTc1RTgzQ0M0ODEx QTYzNjE3QzcwHhcNMjUxMDIzMDI1MTQ2WhcNMjUxMDMwMDI1MTQ2WjAYMRYwFAYD VQQDEw02OGY5OTg0My1hMjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VWJaK3pZQbz+7Pzj75t8VOduoH7FcT2ieWvqTyKgw83/H4txUa0QGS7v+RI WWg3rGzN5KeT0ynGLaNuphPJkt7yJ2kQBHtY00vIWWCWESgGL/lmMm7TBn6G+gxF G4Y40j4qxAlXaSSu1DZRo2sf51iwdlNjJvt7tjEqeI4xcVSUhbub/7rYk+zQvJwl MUguhuAItjp2WQV8FQyexVqc73u12HJHiEo5W5OLktIthEMPClVlZUehAJMcwOS4 EN3cOoXesi7kwgNaqZB8YQDVjAVv7mnpSKb+EDLyzkBsPD3KTxkOUBzyKa3T7ZeW 5eY5uXQbeof55bvM6jv0NO0cPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAtivOp 2TqU77bQt8XxiNLiAUK/MB8GA1UdIwQYMBaAFEeG28y1zClrHasXXoPMSBGmNhfH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OERDNi80QTAxMjI3QzBG RjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtXc2RxeGRlZzh4SUVhWTJG OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0YmJ6TFhNS1dzZHF4ZGVnOHhJRWFZMkY4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OERDNi80QTAxMjI3QzBGRjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtX c2RxeGRlZzh4SUVhWTJGOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0v7BhXKCG5FBwRS9OGjJwERMFszTSTONimlch0itfC3axZtTt+nbg 53sF9ZIVwrfElYVnVKUYKcO7D9xl02GB+TQvG2NKS3jh5ePeiB2T1kT6Z3DolAf6 g8WS9idyK3cmN9kJwZDH3Cn7TWdErbO0xQbZlsMnvddyYYheqYkfxKLoDCKSoSd3 YdR9kcVcA6vPPyYfqCa2GQOXgdPUHvN/WLC/74O5ED/bdyctlgc7Ks0QlcU9/DsV Ud24xXx2sGV1AOMudkfqZXIO662aJoTOe6enrgm4j4D5NBN39mv6cLKOEDQUSvsb ypqLGtv7Q4X4BYesuigVytiYPzMyxxGp -----END CERTIFICATE-----Generated at Fri Oct 24 18:59:39 2025 by rpki-client