$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft File: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json) Hash identifier: SNh9KD4EtkXF8A46VlJw8YbOlni2rrrJCGR9aA3otmA= Subject key identifier: 77:F7:C1:75:78:ED:45:A8:8F:BA:B9:B5:5A:66:6C:DE:16:0C:51:4E Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F Certificate issuer: /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Certificate serial: 0DD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft Manifest number: 0DC3 Signing time: Sun 02 Nov 2025 17:54:00 +0000 Manifest this update: Sun 02 Nov 2025 17:53:59 +0000 Manifest next update: Sun 09 Nov 2025 17:53:59 +0000 Files and hashes: 1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: IROdlm+SYCYPQ8bJI/PZOyfCBl+OUFK4BEoWIHpe1Vo=) 2: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: XfxZHGEC6L2I7lf4RHsiD8/699vyTVMdYrB6wZFXmUY=) 3: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: r12gsCo6iUFC5f/jSOBGicDzV0QxP8G0HCiUT+DfDFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3536 (0xdd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Validity Not Before: Nov 2 17:53:59 2025 GMT Not After : Nov 9 17:53:59 2025 GMT Subject: CN=69079ab7-0a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:79:87:5d:27:ea:ac:ee:47:d8:c0:60:82:1e: 66:17:cb:23:1a:b3:a7:f8:21:82:23:8e:5b:65:89: c6:07:7b:96:9b:d5:d3:c8:59:db:fa:97:09:6c:98: b9:15:8f:ba:91:4b:fc:69:46:ca:f7:9b:1b:32:e2: 6d:d7:8a:f7:1b:58:a8:c8:0e:40:9a:ad:28:90:f8: 35:00:9a:ee:90:89:3b:83:2c:44:64:ce:a4:81:f7: 16:11:f8:0e:e5:59:20:01:46:2f:06:79:d3:e3:5f: 03:af:18:6f:8d:60:4c:ad:d8:16:ff:d4:04:a0:16: d7:ec:c8:a7:6c:bd:a1:60:0b:60:3b:95:1d:6b:7c: 80:87:d4:1e:5f:ca:59:01:d4:e8:d1:f8:94:e2:6b: 4e:08:77:a4:5c:5b:c4:c2:d9:6b:07:42:6d:0e:bc: ec:3a:2b:e8:2c:4e:a5:dd:ec:90:62:3b:9b:7e:a0: 7d:25:9f:27:a2:82:63:d4:6a:e0:81:52:07:08:cf: 10:1d:3e:f4:c9:6d:15:4b:e4:b2:b8:ba:de:99:5c: 10:66:1d:c8:de:1d:71:ef:fd:0d:53:0c:ae:fc:89: 28:3b:17:3e:d3:0b:f0:7d:fa:73:0e:65:c2:89:2f: 19:55:9e:c7:77:cc:6c:27:76:88:42:59:cc:1d:7f: d1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F7:C1:75:78:ED:45:A8:8F:BA:B9:B5:5A:66:6C:DE:16:0C:51:4E X509v3 Authority Key Identifier: keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:43:f4:b7:11:77:2b:ac:c0:d4:1e:41:b1:fa:70:ee:2d:3b: ef:e5:55:dd:47:a5:7e:cf:79:d5:f4:95:01:7f:3d:a1:d4:a3: 11:bf:cc:53:39:31:cd:79:63:15:92:e9:fb:2e:80:ce:f0:3b: 2f:c4:82:8c:9c:94:19:fa:a0:d8:b0:ef:da:cf:7b:15:b6:2b: ec:dc:69:49:ef:0c:64:d2:d1:1b:66:5a:7e:e3:9b:d5:17:fc: 9b:5e:ba:f3:ad:c4:eb:c4:3b:ee:3c:68:37:70:d2:3b:58:a3: b1:0b:b4:a6:f0:69:f2:a3:9d:bd:82:c9:44:c3:ff:8e:36:3e: 6d:c8:29:97:45:30:bf:74:a1:aa:9e:a0:c7:80:16:79:ba:ae: c5:71:9f:9b:d4:51:93:24:9a:51:3f:f2:9a:b3:0f:5a:3b:23: 5b:10:b7:86:14:f3:49:a6:03:7c:4d:f7:8b:7a:79:b7:d5:b3: 28:b7:92:95:4a:48:d6:36:db:20:fc:0c:a4:04:fc:69:df:09: a1:ce:2b:b1:69:aa:d1:cf:3b:a5:40:8b:46:38:66:82:ea:49: 40:56:47:ec:fc:59:2c:6b:08:95:89:1b:5d:cd:8e:71:fe:42: 72:70:52:e8:e2:6b:3d:ad:8a:ed:e0:7d:d0:3c:51:01:9b:d9: d6:6d:be:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIzNjExMTAvBgNVBAUTKEUwQjlBMkU5OTM5RDU1OEYxOEJFNjIxNzVDOTVENzY4 RDI0NUQzMUYwHhcNMjUxMTAyMTc1MzU5WhcNMjUxMTA5MTc1MzU5WjAYMRYwFAYD VQQDEw02OTA3OWFiNy0wYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9nmHXSfqrO5H2MBggh5mF8sjGrOn+CGCI45bZYnGB3uWm9XTyFnb+pcJbJi5 FY+6kUv8aUbK95sbMuJt14r3G1ioyA5Amq0okPg1AJrukIk7gyxEZM6kgfcWEfgO 5VkgAUYvBnnT418DrxhvjWBMrdgW/9QEoBbX7MinbL2hYAtgO5Uda3yAh9QeX8pZ AdTo0fiU4mtOCHekXFvEwtlrB0JtDrzsOivoLE6l3eyQYjubfqB9JZ8nooJj1Grg gVIHCM8QHT70yW0VS+SyuLremVwQZh3I3h1x7/0NUwyu/IkoOxc+0wvwffpzDmXC iS8ZVZ7Hd8xsJ3aIQlnMHX/RjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHf3wXV4 7UWoj7q5tVpmbN4WDFFOMB8GA1UdIwQYMBaAFOC5oumTnVWPGL5iF1yV12jSRdMf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjM2MS83QzhEODAwQUNB MzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZOFl2bUlYWEpYWGFOSkYw eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMbWk2Wk9kVlk4WXZtSVhYSlhYYU5KRjB4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjM2MS83QzhEODAwQUNBMzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZ OFl2bUlYWEpYWGFOSkYweDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdQ/S3EXcrrMDUHkGx+nDuLTvv5VXdR6V+z3nV9JUBfz2h1KMRv8xT OTHNeWMVkun7LoDO8DsvxIKMnJQZ+qDYsO/az3sVtivs3GlJ7wxk0tEbZlp+45vV F/ybXrrzrcTrxDvuPGg3cNI7WKOxC7Sm8Gnyo529gslEw/+ONj5tyCmXRTC/dKGq nqDHgBZ5uq7FcZ+b1FGTJJpRP/Kasw9aOyNbELeGFPNJpgN8TfeLenm31bMot5KV SkjWNtsg/AykBPxp3wmhziuxaarRzzulQItGOGaC6klAVkfs/FksawiViRtdzY5x /kJycFLo4ms9rYrt4H3QPFEBm9nWbb53 -----END CERTIFICATE-----Generated at Tue Nov 4 13:20:54 2025 by rpki-client