$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft File: 4659B01pZ-L0n_njuNebv6KAmpI.mft (raw, json) Hash identifier: kIficniKxUrZdWYGfD0zdUBZYcmdnBHYz3a9eKr9yl0= Subject key identifier: F3:7D:EC:AE:16:0B:1A:1B:14:99:15:99:F9:C2:99:68:3A:04:8E:C9 Authority key identifier: E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92 Certificate issuer: /CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft Manifest number: DF Signing time: Wed 05 Nov 2025 05:42:40 +0000 Manifest this update: Wed 05 Nov 2025 05:42:39 +0000 Manifest next update: Wed 12 Nov 2025 05:42:39 +0000 Files and hashes: 1: 4659B01pZ-L0n_njuNebv6KAmpI.crl (hash: UXVzlIx2BNKjch7gcJk+20FGNrB3OOc9QUopQditCgs=) 2: 0DE9C0F2691E11EF86B94667C4F9AE02.roa (hash: 8GXDB+pZReiVHRhHIXWVIQQroHdHPp2tY80GMG2ZCJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A695, serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92 Validity Not Before: Nov 5 05:42:39 2025 GMT Not After : Nov 12 05:42:39 2025 GMT Subject: CN=690ae3cf-496b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:04:26:51:82:35:1f:c2:54:bd:3d:eb:e9:a6: 96:ff:9e:f7:8b:5d:b7:73:e8:76:06:c6:7e:3d:1b: 17:11:7b:db:05:b7:20:ba:8b:53:96:ad:43:15:30: 41:5a:04:d8:cc:1f:e6:dd:32:64:49:f0:f6:83:5d: 0c:fd:19:f8:47:b6:52:07:8f:59:8f:04:9a:39:e8: 67:ae:0f:7e:8e:d4:8d:29:cb:9b:28:74:b5:36:80: 63:6d:cf:ec:41:da:76:a6:72:ac:44:86:7b:ea:37: 18:74:d3:00:fa:71:a2:6a:c7:35:02:7d:c9:ef:1a: 88:8e:7e:4e:6c:cb:ea:a7:09:e5:ef:1a:78:c5:32: 0e:55:dd:23:9c:54:4d:9a:a4:6c:05:4f:85:02:e2: b8:e1:a8:26:86:f9:7b:1f:b8:b8:d5:bc:40:a9:65: c7:32:98:74:fd:54:52:b3:ec:56:94:89:9e:5f:f6: 90:22:10:6e:a5:e1:d6:57:93:cc:43:4e:c2:f4:c2: b1:4d:fa:92:d3:41:38:c3:d0:36:b6:c8:8d:58:8f: 98:d0:6f:87:5b:e5:b2:17:f4:94:80:94:c6:2a:a2: 58:99:d1:ff:93:92:56:b8:dd:63:19:b2:c2:07:71: 26:da:52:ad:ba:93:69:b1:81:c4:6e:7b:99:fb:79: 01:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7D:EC:AE:16:0B:1A:1B:14:99:15:99:F9:C2:99:68:3A:04:8E:C9 X509v3 Authority Key Identifier: keyid:E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:23:ca:8d:66:02:6e:f8:04:aa:5d:c0:4b:10:01:26:02:e0: a5:cd:ad:da:2b:99:ec:6f:b7:b7:8e:f8:94:0c:24:f6:1f:e7: c0:78:fd:be:36:54:93:8d:16:56:aa:9a:57:a6:9e:35:f6:7e: 3b:e3:fe:bc:d0:09:25:b5:bc:27:fb:c9:11:fb:76:88:35:23: 28:ad:19:51:54:8d:4d:d9:85:d2:a7:41:52:69:85:ba:85:0d: 13:ae:af:21:22:4f:09:59:dd:83:19:1b:94:12:18:a0:5e:20: 50:ea:a0:5d:8c:e0:dd:d5:85:99:9d:58:21:05:fc:0e:35:a3: 10:ec:e4:e6:d5:d6:d7:9d:11:e2:a1:6b:35:30:30:bd:3f:de: ee:a8:ff:35:4a:95:2d:48:d5:03:67:4e:5d:9a:29:30:27:17: bd:14:03:61:64:ef:1d:9a:1d:8f:02:d2:bb:3b:e8:6d:bc:f5: c2:03:89:62:15:ce:95:e7:6b:a4:19:e4:b2:18:2f:b3:4c:45: ce:31:28:e5:16:16:67:ee:84:c5:dd:8d:c1:50:7b:99:9a:5a: f0:cc:78:83:66:a6:9d:6f:04:88:15:60:97:5b:a7:83:e6:17: ed:c6:99:0c:92:99:e8:5e:30:41:36:e2:a1:0b:8c:64:6d:1a: 83:c8:3d:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2OTUxMTAvBgNVBAUTKEUzQUU3RDA3NEQ2OTY3RTJGNDlGRjlFM0I4RDc5QkJG QTI4MDlBOTIwHhcNMjUxMTA1MDU0MjM5WhcNMjUxMTEyMDU0MjM5WjAYMRYwFAYD VQQDEw02OTBhZTNjZi00OTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQQmUYI1H8JUvT3r6aaW/573i123c+h2BsZ+PRsXEXvbBbcguotTlq1DFTBB WgTYzB/m3TJkSfD2g10M/Rn4R7ZSB49ZjwSaOehnrg9+jtSNKcubKHS1NoBjbc/s Qdp2pnKsRIZ76jcYdNMA+nGiasc1An3J7xqIjn5ObMvqpwnl7xp4xTIOVd0jnFRN mqRsBU+FAuK44agmhvl7H7i41bxAqWXHMph0/VRSs+xWlImeX/aQIhBupeHWV5PM Q07C9MKxTfqS00E4w9A2tsiNWI+Y0G+HW+WyF/SUgJTGKqJYmdH/k5JWuN1jGbLC B3Em2lKtupNpsYHEbnuZ+3kB1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPN97K4W CxobFJkVmfnCmWg6BI7JMB8GA1UdIwQYMBaAFOOufQdNaWfi9J/547jXm7+igJqS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTY5NS84REVGRTgwRTY5 MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi80NjU5QjAxcFotTDBuX25qdU5lYnY2S0Ft cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ2NTlCMDFwWi1MMG5fbmp1TmVidjZLQW1wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTY5NS84REVGRTgwRTY5MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi80NjU5QjAxcFot TDBuX25qdU5lYnY2S0FtcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjI8qNZgJu+ASqXcBLEAEmAuClza3aK5nsb7e3jviUDCT2H+fAeP2+ NlSTjRZWqppXpp419n474/680Akltbwn+8kR+3aINSMorRlRVI1N2YXSp0FSaYW6 hQ0Trq8hIk8JWd2DGRuUEhigXiBQ6qBdjODd1YWZnVghBfwONaMQ7OTm1dbXnRHi oWs1MDC9P97uqP81SpUtSNUDZ05dmikwJxe9FANhZO8dmh2PAtK7O+htvPXCA4li Fc6V52ukGeSyGC+zTEXOMSjlFhZn7oTF3Y3BUHuZmlrwzHiDZqadbwSIFWCXW6eD 5hftxpkMkpnoXjBBNuKhC4xkbRqDyD3v -----END CERTIFICATE-----Generated at Wed Nov 5 16:39:32 2025 by rpki-client