$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft File: T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json) Hash identifier: 3RnD7sJp4LgY1WNTv6nnV3owUKx9k+VPdTxGpxMKBKI= Subject key identifier: 91:0F:10:FF:B9:F9:81:EA:1D:40:70:8D:79:28:41:45:1D:55:36:36 Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Certificate serial: 03C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft Manifest number: 03C4 Signing time: Wed 05 Nov 2025 00:44:21 +0000 Manifest this update: Wed 05 Nov 2025 00:44:21 +0000 Manifest next update: Wed 12 Nov 2025 00:44:21 +0000 Files and hashes: 1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: aHha5kZNxN3ujjg8kHA4lvcLZx38JTWnOSZwMsIGhSc=) 2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: rWvQOGaQUF4KDCbeAOUg2IDrYzmM2mMdECYdn3UKK/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 969 (0x3c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Validity Not Before: Nov 5 00:44:21 2025 GMT Not After : Nov 12 00:44:21 2025 GMT Subject: CN=690a9de5-ddc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4a:a9:79:1c:12:85:55:98:e5:41:e7:6d:2b: 56:15:20:17:cf:a8:06:31:02:ff:5c:8a:ab:94:2b: bc:9a:61:b1:ce:cc:30:df:db:ab:30:55:ac:ea:7c: 38:a5:e6:b9:e2:6a:65:f5:f1:84:fe:6a:29:90:aa: 2c:99:c8:2f:28:17:0c:8d:bf:df:84:97:e0:f4:49: 40:c0:71:19:67:02:84:b7:7b:be:d9:f8:37:92:75: da:cd:ed:a0:45:b0:c6:8a:ba:f0:f9:e3:36:69:82: b3:37:55:91:26:f0:48:40:91:5d:55:3a:54:4d:07: f5:26:21:91:3c:57:f2:de:32:5f:28:b3:d3:1a:ec: e0:f6:b0:f5:54:ee:cd:9f:34:33:21:8d:61:f2:99: 34:a5:47:d6:ec:85:d9:6e:a0:37:a9:6e:7d:f8:7e: 55:83:e2:b6:d6:2a:5f:d6:84:18:c7:da:bf:93:18: 06:1c:28:bb:0f:28:25:98:35:75:bb:3f:de:48:a3: a7:26:54:8f:50:de:4e:39:19:c4:e0:17:55:30:cd: 0d:1a:f5:b0:21:27:1c:2c:74:df:a0:5d:ff:6a:48: e9:74:a7:9e:c2:47:44:4e:06:f1:82:f2:17:27:bc: be:fe:b1:1a:d3:86:9a:77:a4:d6:ff:4d:3f:ff:1b: ed:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0F:10:FF:B9:F9:81:EA:1D:40:70:8D:79:28:41:45:1D:55:36:36 X509v3 Authority Key Identifier: keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:84:f5:09:93:51:45:9b:d5:2a:19:ad:b7:9f:29:b8:af:02: 61:e2:8a:2d:21:08:39:6c:bb:f5:aa:08:00:14:86:23:7a:20: 89:f0:3e:7f:50:a2:48:24:5e:78:00:1a:2d:5c:7c:cf:50:5b: 89:d1:76:51:dc:7f:6f:34:a2:79:a5:cf:5e:9f:32:d5:5e:78: 8b:94:32:3d:ee:3d:17:f9:5d:c8:eb:5b:d1:64:29:99:62:10: 4f:9f:6d:9b:a5:08:cb:f2:af:76:73:21:6d:c6:12:e4:54:01: 75:27:c6:a6:65:c5:04:ed:51:ce:4b:65:4b:2e:7e:d1:65:df: 4e:22:3a:3e:89:b4:f9:2e:c9:af:22:cd:aa:43:8a:30:c1:a6: 69:f3:de:5e:37:7f:a6:32:40:00:d3:88:6d:1a:ab:b2:04:db: d9:39:2f:c3:a7:0c:cc:2a:c6:6e:3c:92:03:d8:91:d3:15:6b: 4f:11:2a:4b:c9:fb:4a:b1:ef:87:ab:0e:37:4e:25:08:f0:a1: 39:62:56:d0:c8:19:a8:76:cf:36:ae:d6:9c:70:bd:3b:0c:d2: 85:e2:45:c9:b9:72:35:34:c3:64:9a:6f:c0:f0:09:69:c1:ed: ec:e1:34:4f:88:de:ca:fb:84:95:cd:03:df:f6:27:3e:c7:f0: 51:a9:3e:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG NTczOEY5MEEwHhcNMjUxMTA1MDA0NDIxWhcNMjUxMTEyMDA0NDIxWjAYMRYwFAYD VQQDEw02OTBhOWRlNS1kZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0qpeRwShVWY5UHnbStWFSAXz6gGMQL/XIqrlCu8mmGxzsww39urMFWs6nw4 pea54mpl9fGE/mopkKosmcgvKBcMjb/fhJfg9ElAwHEZZwKEt3u+2fg3knXaze2g RbDGirrw+eM2aYKzN1WRJvBIQJFdVTpUTQf1JiGRPFfy3jJfKLPTGuzg9rD1VO7N nzQzIY1h8pk0pUfW7IXZbqA3qW59+H5Vg+K21ipf1oQYx9q/kxgGHCi7DyglmDV1 uz/eSKOnJlSPUN5OORnE4BdVMM0NGvWwISccLHTfoF3/akjpdKeewkdETgbxgvIX J7y+/rEa04aad6TW/00//xvtdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEPEP+5 +YHqHUBwjXkoQUUdVTY2MB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM3Qy82QUU3NjE1MkFCMzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pO VmwwejhDclRodWIxYzQtUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJhPUJk1FFm9UqGa23nym4rwJh4ootIQg5bLv1qggAFIYjeiCJ8D5/ UKJIJF54ABotXHzPUFuJ0XZR3H9vNKJ5pc9enzLVXniLlDI97j0X+V3I61vRZCmZ YhBPn22bpQjL8q92cyFtxhLkVAF1J8amZcUE7VHOS2VLLn7RZd9OIjo+ibT5Lsmv Is2qQ4owwaZp895eN3+mMkAA04htGquyBNvZOS/DpwzMKsZuPJID2JHTFWtPESpL yftKse+Hqw43TiUI8KE5YlbQyBmods82rtaccL07DNKF4kXJuXI1NMNkmm/A8Alp we3s4TRPiN7K+4SVzQPf9ic+x/BRqT7V -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:19 2025 by rpki-client