$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft File: 4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json) Hash identifier: I5NSTV/GPJBt3bZox3DOiR9ysCGV+ZP4KxSNcqK72V0= Subject key identifier: 5D:C2:3D:5B:39:AB:47:6E:57:FD:DA:36:82:78:0C:E1:1A:7D:50:93 Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23 Certificate issuer: /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223 Certificate serial: 3605 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft Manifest number: 357F Signing time: Wed 22 Oct 2025 14:32:12 +0000 Manifest this update: Wed 22 Oct 2025 14:32:11 +0000 Manifest next update: Wed 29 Oct 2025 14:32:11 +0000 Files and hashes: 1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: poVoZaQh9WQXkCc1zf6qoKUVyFRUpDFtU4x4T6VeWV0=) 2: 524236EE6B5711F09CFE4572C4F9AE02.roa (hash: OFHGfo0QwzXyiL7GOwEa2vVlpzbgLwoHGG7P2JsxqIY=) 3: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: GQiRmYNBeSXKrpj5tl9WCP7+ZUXAlVJOpyyBRx0JAi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 14:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13829 (0x3605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223 Validity Not Before: Oct 22 14:32:11 2025 GMT Not After : Oct 29 14:32:11 2025 GMT Subject: CN=68f8eaec-f857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:89:cc:76:45:72:c5:ef:1f:62:74:91:d1:98: b5:74:c5:10:9d:1f:db:79:aa:e4:23:2f:bf:f2:e6: 62:00:2e:fe:f2:02:16:66:f9:32:9c:57:e0:a6:a6: 50:ca:fe:3b:42:db:20:77:1c:27:d5:90:1f:15:d6: 93:43:c0:12:11:be:a3:b3:96:68:ff:14:cd:f4:99: c9:e8:f5:cc:13:25:f2:c2:b3:ee:32:aa:e8:06:0a: a8:7c:47:4e:48:eb:67:07:64:26:9c:c6:17:ef:50: 1b:49:07:39:2d:2b:09:1a:2f:bc:62:c9:32:ca:5d: a5:cd:86:29:4a:d9:62:19:22:bc:44:e2:36:a0:ea: 8f:9b:dd:c3:b8:fb:b6:35:ee:ac:a9:7a:87:56:b5: 6e:16:47:c3:51:0d:35:cf:d2:aa:a3:ee:5d:a1:16: 0f:06:42:ce:13:2b:f0:17:7f:39:0a:eb:83:d9:44: 4f:51:7c:f5:b6:74:53:84:20:b7:70:9e:db:54:c8: 06:8d:4e:4c:ed:6f:45:c6:9b:c0:c6:0f:45:a6:b7: d1:cb:c1:78:11:90:8c:62:13:07:48:f2:bd:f1:e6: 4a:e2:8f:c1:80:f1:7d:1b:6e:78:7d:23:e4:05:3b: c1:29:66:b1:be:6d:fc:d2:6f:53:ec:2b:c5:5e:a4: 45:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C2:3D:5B:39:AB:47:6E:57:FD:DA:36:82:78:0C:E1:1A:7D:50:93 X509v3 Authority Key Identifier: keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d1:8d:55:38:4b:8a:1b:11:0e:cb:be:88:c6:a0:bc:65:e6: 8c:e0:ad:78:8c:50:58:31:b4:80:96:cf:b8:26:6b:fa:26:fe: af:c0:cf:94:1b:94:75:78:5b:e1:e5:f8:0f:27:1a:55:16:63: 65:0d:d4:43:63:f6:b4:e4:be:ea:bd:53:06:b0:01:c0:7c:53: c0:aa:12:e7:98:80:1a:02:d3:15:97:dd:d3:03:6a:fd:3d:4e: 82:e4:c8:27:eb:09:91:06:c4:c0:59:c1:fc:c4:9e:9b:8d:c6: 82:c1:83:2a:e8:88:cf:07:4d:2a:f9:85:c9:e4:13:3c:41:64: 45:a4:e5:f6:fe:dc:33:12:42:0e:87:07:37:a4:7a:74:0d:27: f6:40:f5:7a:90:13:07:05:e4:0f:9f:47:a3:1e:9d:d0:e4:0f: e5:e4:83:2c:48:43:a8:6b:a2:8f:03:ac:5d:6c:05:c9:c2:0e: 5d:4a:28:c1:4f:37:72:2f:25:cb:38:7c:92:31:e7:76:3e:bb: 8a:de:fb:02:b0:70:be:96:50:4a:34:0b:c3:ac:6a:ca:c9:ae: 44:52:96:1c:9b:40:23:c9:07:cf:13:cf:40:e2:7d:e8:5a:3d: bf:5e:e0:50:ad:22:3b:45:f5:5a:09:ea:c4:00:04:3e:54:6c: 9e:fb:82:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzMDAxMTAvBgNVBAUTKEUxNTY0RkRBNUNFRDVDQUU2OTQxNTMwOTdFRDE5NDI1 NTEyMDkyMjMwHhcNMjUxMDIyMTQzMjExWhcNMjUxMDI5MTQzMjExWjAYMRYwFAYD VQQDEw02OGY4ZWFlYy1mODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYnMdkVyxe8fYnSR0Zi1dMUQnR/bearkIy+/8uZiAC7+8gIWZvkynFfgpqZQ yv47Qtsgdxwn1ZAfFdaTQ8ASEb6js5Zo/xTN9JnJ6PXMEyXywrPuMqroBgqofEdO SOtnB2QmnMYX71AbSQc5LSsJGi+8Yskyyl2lzYYpStliGSK8ROI2oOqPm93DuPu2 Ne6sqXqHVrVuFkfDUQ01z9Kqo+5doRYPBkLOEyvwF385CuuD2URPUXz1tnRThCC3 cJ7bVMgGjU5M7W9FxpvAxg9FprfRy8F4EZCMYhMHSPK98eZK4o/BgPF9G254fSPk BTvBKWaxvm380m9T7CvFXqRFiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3CPVs5 q0duV/3aNoJ4DOEafVCTMB8GA1UdIwQYMBaAFOFWT9pc7VyuaUFTCX7RlCVRIJIj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTMwMC9DRDIwMzdFMjFE ODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhLNXBRVk1KZnRHVUpWRWdr aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWWlAybHp0WEs1cFFWTUpmdEdVSlZFZ2tpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTMwMC9DRDIwMzdFMjFEODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhL NXBRVk1KZnRHVUpWRWdraU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe0Y1VOEuKGxEOy76IxqC8ZeaM4K14jFBYMbSAls+4Jmv6Jv6vwM+U G5R1eFvh5fgPJxpVFmNlDdRDY/a05L7qvVMGsAHAfFPAqhLnmIAaAtMVl93TA2r9 PU6C5Mgn6wmRBsTAWcH8xJ6bjcaCwYMq6IjPB00q+YXJ5BM8QWRFpOX2/twzEkIO hwc3pHp0DSf2QPV6kBMHBeQPn0ejHp3Q5A/l5IMsSEOoa6KPA6xdbAXJwg5dSijB TzdyLyXLOHySMed2PruK3vsCsHC+llBKNAvDrGrKya5EUpYcm0AjyQfPE89A4n3o Wj2/XuBQrSI7RfVaCerEAAQ+VGye+4JO -----END CERTIFICATE-----Generated at Wed Oct 22 18:35:25 2025 by rpki-client