$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft File: Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json) Hash identifier: vhrHJDF8Z2VRVNyLPQMyrdN+MWgUkY4RNjng9rExbOw= Subject key identifier: AC:4F:8A:01:D5:DE:DE:42:F1:D1:CC:AD:BA:0A:BF:77:D4:C8:B2:63 Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft Manifest number: 01D1 Signing time: Mon 03 Nov 2025 02:55:35 +0000 Manifest this update: Mon 03 Nov 2025 02:55:35 +0000 Manifest next update: Mon 10 Nov 2025 02:55:35 +0000 Files and hashes: 1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: ktKi/+RQYbKrKHK4V6IeKstYPk18vXqknwQuz2O5ruw=) 2: 8A795CC866E711F0985D0751C4F9AE02.roa (hash: g1KuNxkFHwwpiwP+Lzl39JbGpSxNeMuhi4yzpFrKJZU=) 3: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: aXPGPliFMNRdmipqY0pnCkYXCLYjrZXxds+RZFMmzeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Validity Not Before: Nov 3 02:55:35 2025 GMT Not After : Nov 10 02:55:35 2025 GMT Subject: CN=690819a7-09a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:68:1a:be:2d:c8:ed:1e:c6:72:0f:90:2a:46: 8f:19:5a:a5:55:a1:1c:98:80:8c:c6:3c:af:2f:26: fa:f3:a7:f3:9b:bd:ca:6c:2e:ae:69:ad:dd:33:16: 3a:af:79:9d:a8:27:54:22:23:78:89:6d:47:b0:5f: ff:ce:3d:fa:a1:cb:d8:e9:60:94:6d:e4:9f:5f:84: 8e:ca:dc:70:7f:db:51:5b:5d:ea:7d:31:d8:56:60: d4:d4:91:09:d8:14:48:fb:d9:4f:64:60:dc:27:78: 88:52:db:4b:7f:2a:57:b6:1c:a9:cc:db:ee:36:85: a4:a0:32:1d:ef:f5:32:e5:38:19:9b:87:d0:d1:96: 1a:15:4d:fe:c8:f8:1c:16:4f:cb:77:72:22:3c:f8: e1:19:f5:0c:ec:81:ee:a9:f6:47:56:d2:ce:c7:f6: 0d:d6:62:6d:d8:df:ff:fa:37:60:74:22:ff:c1:5b: b0:05:4a:1f:1e:17:61:76:75:c8:71:bf:3e:ae:35: 86:69:4c:4d:69:1f:32:d3:06:40:05:c7:96:11:cc: 64:66:06:32:ad:93:3f:cf:f1:1d:06:ae:b2:75:a6: 4e:b0:10:91:17:b9:ec:89:12:a9:38:af:5b:9d:e3: 77:23:1b:e9:d8:42:fc:ca:9f:75:91:04:8e:03:7f: a9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4F:8A:01:D5:DE:DE:42:F1:D1:CC:AD:BA:0A:BF:77:D4:C8:B2:63 X509v3 Authority Key Identifier: keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:1c:93:de:7e:2c:14:bf:8c:cd:b6:e3:5e:87:c5:50:ec:e9: 0c:c8:f4:74:36:60:de:86:a3:18:15:2b:4f:df:b5:f3:13:22: f1:af:c7:20:7c:3b:14:b0:ba:28:bb:51:4a:f4:d9:f9:28:20: 87:03:11:f9:7a:07:90:cd:47:10:81:58:b1:b9:e0:31:e3:1d: 00:b5:d5:d6:f8:83:bb:ee:18:44:e0:ca:90:82:ef:aa:6c:6b: 08:57:38:3e:ed:10:06:8e:b4:38:c4:75:87:e4:f1:22:24:06: 9f:a0:4d:4f:18:6f:7a:4f:ac:56:44:e9:7f:8b:d0:22:0e:37: 8d:03:b1:69:18:36:ea:57:2b:d8:65:40:63:4b:33:2c:e6:45: e9:a1:ac:2a:10:4d:bf:0c:67:3c:9d:df:1d:c2:fd:35:34:2c: 7a:75:d9:b3:d5:aa:67:42:f2:a8:4f:cb:c3:65:c5:d3:b7:be: a6:30:21:d8:c9:f7:c8:37:91:82:52:70:6b:50:c3:42:e2:ec: da:44:5e:68:f1:4b:1d:dc:89:a6:c1:30:d1:32:8b:1c:11:15: 61:5d:c3:cd:94:9b:39:98:08:30:9a:67:7c:4b:18:c8:20:6b: bc:de:f5:fd:60:45:a6:f3:61:84:75:ad:c4:eb:4c:88:d7:f3: bb:e0:b6:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0MxMTAvBgNVBAUTKDRERUUwODM2RkEwRjdFRTkyQzJFNkE2QzE5ODAxNkRF OENGOEJGMTYwHhcNMjUxMTAzMDI1NTM1WhcNMjUxMTEwMDI1NTM1WjAYMRYwFAYD VQQDEw02OTA4MTlhNy0wOWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Wgavi3I7R7Gcg+QKkaPGVqlVaEcmICMxjyvLyb686fzm73KbC6uaa3dMxY6 r3mdqCdUIiN4iW1HsF//zj36ocvY6WCUbeSfX4SOytxwf9tRW13qfTHYVmDU1JEJ 2BRI+9lPZGDcJ3iIUttLfypXthypzNvuNoWkoDId7/Uy5TgZm4fQ0ZYaFU3+yPgc Fk/Ld3IiPPjhGfUM7IHuqfZHVtLOx/YN1mJt2N//+jdgdCL/wVuwBUofHhdhdnXI cb8+rjWGaUxNaR8y0wZABceWEcxkZgYyrZM/z/EdBq6ydaZOsBCRF7nsiRKpOK9b neN3Ixvp2EL8yp91kQSOA3+p4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxPigHV 3t5C8dHMrboKv3fUyLJjMB8GA1UdIwQYMBaAFE3uCDb6D37pLC5qbBmAFt6M+L8W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQy8xMjcxNTdGMjA1 NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1a3NMbXBzR1lBVzNvejR2 eFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RlNElOdm9QZnVrc0xtcHNHWUFXM296NHZ4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzQy8xMjcxNTdGMjA1NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1 a3NMbXBzR1lBVzNvejR2eFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPHJPefiwUv4zNtuNeh8VQ7OkMyPR0NmDehqMYFStP37XzEyLxr8cg fDsUsLoou1FK9Nn5KCCHAxH5egeQzUcQgVixueAx4x0AtdXW+IO77hhE4MqQgu+q bGsIVzg+7RAGjrQ4xHWH5PEiJAafoE1PGG96T6xWROl/i9AiDjeNA7FpGDbqVyvY ZUBjSzMs5kXpoawqEE2/DGc8nd8dwv01NCx6ddmz1apnQvKoT8vDZcXTt76mMCHY yffIN5GCUnBrUMNC4uzaRF5o8Usd3ImmwTDRMoscERVhXcPNlJs5mAgwmmd8SxjI IGu83vX9YEWm82GEda3E60yI1/O74LYc -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:30 2025 by rpki-client