$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft File: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json) Hash identifier: 5KyPaPWwmSPqtId8s+eAn3yHpYyRHaCzFr0TPP2kNKU= Subject key identifier: B3:E0:ED:27:7A:23:3F:B0:E2:03:31:A0:79:A2:F8:2F:F0:76:3A:DE Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft Manifest number: DB Signing time: Mon 03 Nov 2025 05:40:08 +0000 Manifest this update: Mon 03 Nov 2025 05:40:07 +0000 Manifest next update: Mon 10 Nov 2025 05:40:07 +0000 Files and hashes: 1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: TuztuD+N4gW4Hcv96M2VZBxbxb14upWnHKvr7nI+Pzg=) 2: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: WBiQbxmKfw0D0XJ4l3vBPQQR/fNPllSnLo2npN/9Q8w=) 3: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: /deQI9TcHTHxlvzCNYanJbYW7e/aSJZiDaf6RgvHT6g=) 4: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: VfnSvDUvHKrYhNHc7vXNPSVppqVaI6SmYJprBmoGKlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Validity Not Before: Nov 3 05:40:07 2025 GMT Not After : Nov 10 05:40:07 2025 GMT Subject: CN=69084037-1027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5d:84:3e:74:56:3b:58:e5:81:9e:f2:fe:01: 2a:6d:34:e0:47:90:b5:60:b7:da:ca:bd:6c:b9:66: c9:4a:7f:cf:f0:9f:0b:ad:d9:7c:ca:01:05:1d:e2: f0:ef:1b:70:41:40:57:9f:bb:c9:11:35:0d:47:aa: 04:db:4f:fb:7b:a4:b0:d5:69:d0:a9:52:77:12:55: 55:53:91:81:8a:ed:94:51:ec:e0:c0:4c:0c:64:d3: a4:25:b1:01:1e:7f:25:53:68:8d:69:a4:f0:24:9d: 89:f1:07:be:31:08:0f:82:1b:6d:2a:fa:ad:84:70: 47:86:22:8c:f8:7a:cc:2c:0b:f6:19:0d:af:1b:26: b9:21:ee:01:aa:f2:c3:a9:43:d5:b3:17:e8:80:b9: f5:5e:e6:b9:8e:ca:99:9c:eb:b4:f8:99:17:5e:e1: 64:93:2e:a6:62:97:7d:b0:72:e7:1c:eb:35:0a:3a: e1:95:58:09:6a:08:4a:43:38:0c:62:4f:f2:ab:0f: fe:00:2c:30:77:9a:ee:9e:0e:fc:34:ab:0c:43:25: 95:b1:95:ff:6c:4e:1b:2a:2f:a8:73:2d:e5:58:22: 5e:9d:7c:c9:39:97:b8:d0:68:45:bf:19:0d:c6:f9: aa:2a:3f:88:23:77:97:00:1e:2f:61:6e:3b:f0:67: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E0:ED:27:7A:23:3F:B0:E2:03:31:A0:79:A2:F8:2F:F0:76:3A:DE X509v3 Authority Key Identifier: keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4c:00:91:0c:f4:f6:78:72:80:d8:a2:74:35:65:75:9e:b8: 91:d1:b4:48:12:af:39:4c:c6:9b:78:4a:d0:d0:91:88:a5:c8: 91:32:96:77:71:f9:e4:af:69:37:17:b5:b2:f2:95:7c:44:37: b7:f6:49:01:95:f2:90:94:71:5c:fc:32:10:da:e6:00:50:b0: da:12:42:1c:06:0c:3a:71:9d:01:e6:5e:8a:e6:04:13:a1:3e: ca:a6:09:3a:c7:2e:91:ec:da:a6:44:46:75:08:08:0d:b7:66: e4:04:34:a9:d2:c4:4d:c6:84:0c:74:2c:70:7b:b3:fa:96:2e: 98:d1:10:56:2d:80:9c:6e:a9:4d:64:a3:13:43:55:55:1a:09: 48:40:8f:05:9a:9c:ab:d6:20:a5:ec:26:16:88:93:29:12:17: 16:bc:00:a3:6c:28:a9:91:92:17:82:3b:6b:bd:1c:c5:be:0d: 41:ca:55:ee:82:a0:68:f7:20:ee:73:da:d9:56:55:d9:10:ff: 08:fa:5b:4b:86:50:2c:4d:32:5d:93:c4:ac:ed:a9:52:5e:19: 77:5e:ea:fd:1b:6f:d8:4b:50:8a:42:f0:a5:fa:ea:3c:81:9b: 59:ce:24:24:3e:83:10:00:59:16:05:b2:76:68:e8:6d:7e:19: 32:3a:65:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NTQxMTAvBgNVBAUTKEUxMUE0NzJGODQ5RkEzRDY2M0NBODdDQTY2MzNFQ0U3 RDhEMDA3NjIwHhcNMjUxMTAzMDU0MDA3WhcNMjUxMTEwMDU0MDA3WjAYMRYwFAYD VQQDEw02OTA4NDAzNy0xMDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy12EPnRWO1jlgZ7y/gEqbTTgR5C1YLfayr1suWbJSn/P8J8Lrdl8ygEFHeLw 7xtwQUBXn7vJETUNR6oE20/7e6Sw1WnQqVJ3ElVVU5GBiu2UUezgwEwMZNOkJbEB Hn8lU2iNaaTwJJ2J8Qe+MQgPghttKvqthHBHhiKM+HrMLAv2GQ2vGya5Ie4BqvLD qUPVsxfogLn1Xua5jsqZnOu0+JkXXuFkky6mYpd9sHLnHOs1CjrhlVgJaghKQzgM Yk/yqw/+ACwwd5rung78NKsMQyWVsZX/bE4bKi+ocy3lWCJenXzJOZe40GhFvxkN xvmqKj+II3eXAB4vYW478Gc0VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPg7Sd6 Iz+w4gMxoHmi+C/wdjreMB8GA1UdIwQYMBaAFOEaRy+En6PWY8qHymYz7OfY0Adi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg1NC9BODk2NDY2MDc5 OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85Wmp5b2ZLWmpQczU5alFC MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRScEhMNFNmbzlaanlvZktaalBzNTlqUUIySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg1NC9BODk2NDY2MDc5OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85 Wmp5b2ZLWmpQczU5alFCMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPTACRDPT2eHKA2KJ0NWV1nriR0bRIEq85TMabeErQ0JGIpciRMpZ3 cfnkr2k3F7Wy8pV8RDe39kkBlfKQlHFc/DIQ2uYAULDaEkIcBgw6cZ0B5l6K5gQT oT7Kpgk6xy6R7NqmREZ1CAgNt2bkBDSp0sRNxoQMdCxwe7P6li6Y0RBWLYCcbqlN ZKMTQ1VVGglIQI8Fmpyr1iCl7CYWiJMpEhcWvACjbCipkZIXgjtrvRzFvg1BylXu gqBo9yDuc9rZVlXZEP8I+ltLhlAsTTJdk8Ss7alSXhl3Xur9G2/YS1CKQvCl+uo8 gZtZziQkPoMQAFkWBbJ2aOhtfhkyOmX0 -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:57 2025 by rpki-client