$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: X+xWxYwbyXyHHbdKiNrQ8VzO8lKyoIziO3wTWWX7wio= Subject key identifier: 71:CF:2D:19:90:B6:E8:7B:F4:27:9C:F1:AD:3B:85:34:3E:39:6D:62 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 0305 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 02D6 Signing time: Sat 25 Oct 2025 04:41:35 +0000 Manifest this update: Sat 25 Oct 2025 04:41:34 +0000 Manifest next update: Sat 01 Nov 2025 04:41:34 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: W6qZbMrlI5OVn9eX0mzxjxk87HuhVTF1Bq4hY/1cOjI=) 2: CC647BDECAC711EF80553A61C4F9AE02.roa (hash: wcGSkIclIE1toilkxNzAK4TRkSG87FAdX9jhsTJGr7o=) 3: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: JFnHafVEFMtRqzbULiHqCAleWGn7lYd8UUBXcTVaExM=) 4: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: opJO4K7YZ/e2DX+s/GDo4FYN3UUPRtbZmQRgFxg+ZXw=) 5: 3632957E441311EE8A03A472C4F9AE02.roa (hash: nC156FtWNisRyJ+sZJC0neQfTsLbF3t6cdGqYP4uj+g=) 6: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: Iqn/bXqznhtCorMWZ+Zjcj+q0RdF1Ri2rDqeHKOqgrA=) 7: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: i8rhzfoYVzIteA50gdYKsP0L/C+up3cTPTY1lRFjLJk=) 8: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: 0yjNoUcfSfQzsQDEWyMesVRiNf3mWHbgqFSp6Aeqe88=) 9: 3D34A750A88111ED80831318C4F9AE02.roa (hash: x8f88T4/0fygwChpTG7CDDG+BVQvHAjTQvhSaAfGmUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 04:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 773 (0x305) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Oct 25 04:41:34 2025 GMT Not After : Nov 1 04:41:34 2025 GMT Subject: CN=68fc54ff-151c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:8b:49:71:fa:09:5e:01:f0:75:60:ea:ea: 4a:50:b7:c8:f2:69:d3:9c:4b:32:a8:e8:9e:b1:6a: 2d:a3:c7:f6:b5:a7:59:30:45:42:49:b1:c5:c6:1e: 04:d9:c0:52:c3:0d:84:54:59:28:33:88:1b:c9:88: 73:f6:1f:75:c6:b3:d8:9b:54:c3:c3:c6:bd:de:57: b6:5b:1c:d8:a1:02:5f:3a:19:2b:01:a5:c5:2a:47: 8e:ba:8f:77:c7:c8:1a:d5:0c:fb:f1:02:15:ac:37: fc:c3:6e:66:a1:0f:3f:02:e1:b8:96:0b:34:af:d6: 2f:08:98:57:13:29:97:de:0d:67:43:1c:ab:88:42: d3:02:04:43:cc:42:5c:91:6d:87:8e:c5:41:03:6a: 18:9a:ed:3f:b1:00:4f:a4:fa:25:d4:ad:1a:f8:b4: f0:32:40:6e:65:b8:b4:2e:3a:3f:ad:f5:9c:ea:0d: ea:36:66:b8:3d:9d:09:f2:90:1c:28:d5:53:27:8d: 08:1e:eb:7a:3b:d5:ce:8b:d7:8a:88:25:3a:e5:cf: 62:2c:21:f2:85:8e:e7:66:df:f8:af:e4:a3:4a:86: 45:4c:22:3d:7b:55:92:c9:c5:fb:c7:27:6c:c8:38: 57:6b:18:41:d5:96:ef:0e:e9:34:a5:1e:ca:2a:d2: 92:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CF:2D:19:90:B6:E8:7B:F4:27:9C:F1:AD:3B:85:34:3E:39:6D:62 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:63:96:43:1c:e5:5c:6d:9e:b8:81:34:cf:aa:f3:84:38:1e: 29:68:6f:c0:48:70:ff:50:65:49:fd:b7:ed:b2:7c:f5:85:06: b7:1a:c5:21:cd:68:3a:52:c8:c2:dd:07:8e:35:68:db:ab:d1: 95:1c:6a:65:d5:de:8b:e4:77:c9:49:92:b0:08:4e:b8:16:77: 19:d4:94:f8:b4:13:88:9a:f0:0c:61:59:9e:da:92:d5:f5:ce: d2:fb:1d:2d:bd:49:c4:bf:27:9f:57:6b:70:71:2c:8e:32:54: f3:62:ce:39:5c:0a:2e:25:1e:fd:3c:cd:55:de:ab:7d:8d:16: cc:78:72:e3:7b:6b:0a:97:10:ee:2a:bb:30:e4:d2:51:4b:9c: 13:f0:e3:f6:2a:a9:73:44:39:52:90:33:17:11:f0:7a:12:9d: 71:f2:42:40:85:79:1a:0a:06:47:74:09:0b:64:db:2f:93:b4: c7:4f:b2:76:22:5b:1b:f3:8e:f6:73:de:a6:6e:6f:2a:6f:fd: a4:e7:0f:f7:52:09:65:63:05:58:e0:f9:29:28:96:36:57:2b: 0d:5f:15:22:2a:3e:f6:9e:09:19:d4:02:03:f6:88:23:63:c9: 84:4c:68:df:68:ef:b9:59:4b:42:c5:72:a6:18:64:91:3d:ad: 3d:e7:5c:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjUxMDI1MDQ0MTM0WhcNMjUxMTAxMDQ0MTM0WjAYMRYwFAYD VQQDEw02OGZjNTRmZi0xNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuimLSXH6CV4B8HVg6upKULfI8mnTnEsyqOiesWoto8f2tadZMEVCSbHFxh4E 2cBSww2EVFkoM4gbyYhz9h91xrPYm1TDw8a93le2WxzYoQJfOhkrAaXFKkeOuo93 x8ga1Qz78QIVrDf8w25moQ8/AuG4lgs0r9YvCJhXEymX3g1nQxyriELTAgRDzEJc kW2HjsVBA2oYmu0/sQBPpPol1K0a+LTwMkBuZbi0Ljo/rfWc6g3qNma4PZ0J8pAc KNVTJ40IHut6O9XOi9eKiCU65c9iLCHyhY7nZt/4r+SjSoZFTCI9e1WSycX7xyds yDhXaxhB1ZbvDuk0pR7KKtKSjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHPLRmQ tuh79Cec8a07hTQ+OW1iMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASY5ZDHOVcbZ64gTTPqvOEOB4paG/ASHD/UGVJ/bftsnz1hQa3GsUh zWg6UsjC3QeONWjbq9GVHGpl1d6L5HfJSZKwCE64FncZ1JT4tBOImvAMYVme2pLV 9c7S+x0tvUnEvyefV2twcSyOMlTzYs45XAouJR79PM1V3qt9jRbMeHLje2sKlxDu Krsw5NJRS5wT8OP2KqlzRDlSkDMXEfB6Ep1x8kJAhXkaCgZHdAkLZNsvk7THT7J2 Ilsb8472c96mbm8qb/2k5w/3UgllYwVY4PkpKJY2VysNXxUiKj72ngkZ1AID9ogj Y8mETGjfaO+5WUtCxXKmGGSRPa0951zW -----END CERTIFICATE-----Generated at Sat Oct 25 08:59:10 2025 by rpki-client