$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft File: 4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json) Hash identifier: OaTmigoA8z9g2mPBSxJZ2gaXQN3V3MoEyWOhcW1+5KQ= Subject key identifier: 5A:07:55:10:8D:64:BC:3C:38:DD:05:D4:95:1B:64:3A:F5:28:2A:5A Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Certificate serial: 04B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft Manifest number: 04AA Signing time: Sun 26 Oct 2025 21:18:30 +0000 Manifest this update: Sun 26 Oct 2025 21:18:30 +0000 Manifest next update: Sun 02 Nov 2025 21:18:30 +0000 Files and hashes: 1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: Y91gEpZZfRJfoZSVz+rWVC9+3SWL2DhvU4tKk/vpFsA=) 2: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: lWr4ljnX2/yEjyiQoz0OgG+PVsyj+yPc7sx1n1rIGWY=) 3: B38D932050EF11EC8583962BC4F9AE02.roa (hash: vGjVKyfhGouNwPbyNw8ueo4siItyyWgs22PxyDfp4xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1204 (0x4b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Validity Not Before: Oct 26 21:18:30 2025 GMT Not After : Nov 2 21:18:30 2025 GMT Subject: CN=68fe9026-35e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:5f:98:61:72:cb:10:43:90:e5:e5:0c:75: 47:b8:55:5c:5e:85:d6:be:11:ce:0f:0c:8f:51:8e: a9:a4:28:36:fb:01:09:cf:79:fb:2e:5c:e3:13:b2: 61:ba:a6:41:f4:3c:13:b6:70:b3:6f:28:d8:a3:81: 72:0d:91:ed:e8:18:24:37:b4:4b:69:9c:d4:3a:41: 51:e4:21:ae:eb:9d:b2:f8:38:a7:1e:cc:1f:6a:52: 03:12:00:0f:e3:32:7b:96:d6:c5:3f:b1:cc:f5:e4: 42:a5:6f:03:ab:75:49:35:45:a8:1d:2a:59:bc:66: 6b:e3:07:73:f7:b8:31:80:b9:34:ab:e5:5c:c2:d7: c5:67:1e:59:56:66:07:e3:64:13:56:f6:80:d7:a8: ae:bf:bd:4a:01:9d:c2:93:51:23:93:ce:7c:9e:04: 4a:f0:20:dc:7e:fa:09:0e:c7:2c:d8:63:8a:ea:9c: b1:89:ed:7d:a7:03:c5:8a:eb:d2:d8:4c:fe:c7:d6: 70:ba:4b:63:d3:08:2f:f3:98:15:b0:44:d7:fa:bc: 9b:91:12:6c:4f:bc:3a:d1:d2:b5:97:3f:44:8f:22: da:2e:ea:75:92:62:87:56:79:42:b0:9c:49:ad:1f: 01:49:0a:93:f2:54:97:08:16:b2:1d:11:90:e0:b8: f2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:07:55:10:8D:64:BC:3C:38:DD:05:D4:95:1B:64:3A:F5:28:2A:5A X509v3 Authority Key Identifier: keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:1d:82:48:0d:26:21:1d:9d:8d:bd:ad:95:dd:1a:d2:01:83: 0d:a5:d1:19:93:38:c2:5a:7d:6f:52:e2:f5:e2:51:e9:4a:44: cb:eb:2f:c4:e4:e7:ee:67:bf:38:5c:ec:be:dd:61:1f:26:f1: b3:4b:ec:4b:6f:d5:b8:76:26:79:73:dc:58:e0:8d:8d:42:9d: cd:63:32:2d:86:7d:33:e6:dc:db:fa:99:c7:e7:d9:78:a8:0b: 37:94:53:de:06:b5:cd:00:5a:a4:cf:cb:05:9a:84:50:35:1c: b8:6f:0a:95:31:a8:b7:fa:67:bd:82:2e:04:d3:e6:82:1c:c4: 77:4f:a4:7e:6b:17:7e:4e:c4:0d:ee:bc:b5:d9:53:82:c6:64: e0:6b:85:a8:b2:02:04:64:7b:ac:95:ce:f6:67:c4:67:9a:85: 8f:18:8e:c9:53:29:7a:a4:c9:aa:f8:52:6d:db:20:0b:13:8d: 26:e2:16:97:01:72:a3:06:de:8a:8c:e7:44:c7:de:6e:26:92: d6:20:80:3c:97:0c:7c:50:a0:2a:3e:0f:ab:7c:9e:b8:dc:29: 11:86:53:37:3f:2d:87:9d:60:76:6f:12:1a:3d:77:56:6f:42: d9:60:44:4e:ed:f1:da:81:5b:9e:54:c1:b2:ad:79:bb:14:2f: 63:62:bb:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5 NTNCMzZFNTEwHhcNMjUxMDI2MjExODMwWhcNMjUxMTAyMjExODMwWjAYMRYwFAYD VQQDEw02OGZlOTAyNi0zNWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiZfmGFyyxBDkOXlDHVHuFVcXoXWvhHODwyPUY6ppCg2+wEJz3n7LlzjE7Jh uqZB9DwTtnCzbyjYo4FyDZHt6BgkN7RLaZzUOkFR5CGu652y+DinHswfalIDEgAP 4zJ7ltbFP7HM9eRCpW8Dq3VJNUWoHSpZvGZr4wdz97gxgLk0q+VcwtfFZx5ZVmYH 42QTVvaA16iuv71KAZ3Ck1Ejk858ngRK8CDcfvoJDscs2GOK6pyxie19pwPFiuvS 2Ez+x9Zwuktj0wgv85gVsETX+rybkRJsT7w60dK1lz9EjyLaLup1kmKHVnlCsJxJ rR8BSQqT8lSXCBayHRGQ4LjymwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoHVRCN ZLw8ON0F1JUbZDr1KCpaMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVCMC9FMzJDODdDQzUwRDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERK OWxXVV9HNkppZnlWT3pibEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVHYJIDSYhHZ2Nva2V3RrSAYMNpdEZkzjCWn1vUuL14lHpSkTL6y/E 5OfuZ784XOy+3WEfJvGzS+xLb9W4diZ5c9xY4I2NQp3NYzIthn0z5tzb+pnH59l4 qAs3lFPeBrXNAFqkz8sFmoRQNRy4bwqVMai3+me9gi4E0+aCHMR3T6R+axd+TsQN 7ry12VOCxmTga4WosgIEZHuslc72Z8RnmoWPGI7JUyl6pMmq+FJt2yALE40m4haX AXKjBt6KjOdEx95uJpLWIIA8lwx8UKAqPg+rfJ643CkRhlM3Py2HnWB2bxIaPXdW b0LZYERO7fHagVueVMGyrXm7FC9jYrv8 -----END CERTIFICATE-----Generated at Tue Oct 28 12:56:02 2025 by rpki-client