$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft File: 4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json) Hash identifier: padTLgtpOnRDID3AOcfCjcdEKpf05EnngLHKbhhEZTA= Subject key identifier: 6D:D4:58:E0:93:39:16:DE:D9:68:C9:55:BE:7B:DD:DD:4D:50:53:E9 Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft Manifest number: 01FF Signing time: Mon 03 Nov 2025 02:20:23 +0000 Manifest this update: Mon 03 Nov 2025 02:20:23 +0000 Manifest next update: Mon 10 Nov 2025 02:20:23 +0000 Files and hashes: 1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: fUnfMGi97Wxi0D8LPhhObgIt1d+AscGw1/ikRcVvRwk=) 2: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: V89TVKMG86FWKeqAC80eNKWm9QeM+Xm489cfb+DFW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Validity Not Before: Nov 3 02:20:23 2025 GMT Not After : Nov 10 02:20:23 2025 GMT Subject: CN=69081167-f09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:23:fc:3a:d0:d2:d6:0b:90:6d:6d:0a:43:96: 7d:2a:86:81:0b:24:ad:75:0a:8d:42:2f:3b:00:62: d5:af:7a:02:27:de:d0:63:c9:2e:4c:1c:d9:49:ac: f0:7d:4c:94:68:8e:6c:3b:4e:27:fb:3f:f4:39:cb: dd:88:2e:a0:44:c2:3f:72:79:6f:54:23:1d:d3:2e: d4:64:b3:a9:27:cb:1e:ef:8a:e5:dd:43:90:f6:9a: 1d:73:6d:db:01:ee:d5:fa:58:87:9b:cb:22:4e:a8: 1f:60:93:fa:b3:25:ef:a3:be:2f:64:2a:bb:b3:47: 11:e3:0d:6b:60:f0:14:ce:27:6d:56:b5:98:07:a3: 07:a8:c5:ce:de:05:7a:d2:2e:31:6c:bc:d5:1f:5b: 11:e4:e0:b1:f7:1c:a2:75:69:3c:b5:d6:e7:d4:66: 19:92:41:74:21:d5:d8:6e:b7:2a:b8:75:ac:6b:08: ac:11:ce:14:12:86:e0:a5:fe:b8:70:88:6d:b8:83: 02:79:71:b8:62:21:eb:3f:82:e4:23:53:be:8b:1f: a2:37:eb:e5:5c:df:b6:f9:57:2a:47:34:d4:15:52: 9b:c8:48:4c:bb:7e:22:fa:f1:d2:4c:d7:1e:d2:27: 76:71:88:a3:0c:08:18:d6:8c:00:31:69:90:e8:eb: b7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D4:58:E0:93:39:16:DE:D9:68:C9:55:BE:7B:DD:DD:4D:50:53:E9 X509v3 Authority Key Identifier: keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:12:ae:94:f4:1b:1b:7f:7c:ff:3a:b2:e3:66:23:5f:85:44: 08:de:65:82:78:48:6a:83:16:d9:ea:e7:39:36:6a:fa:78:ac: e6:5e:57:a4:08:8c:9c:81:5c:0c:1a:a2:64:38:7e:a3:7c:bf: 9e:41:4e:80:52:2e:65:d7:56:e2:cf:34:1f:ac:bb:ff:a5:81: b8:1f:dc:11:cb:ff:1e:07:77:5d:c2:cc:04:f2:d5:be:c1:e8: 61:10:6d:b8:65:e2:94:9d:e3:7b:2c:e9:12:5c:5e:11:09:5c: 75:55:a3:51:3f:bf:21:3f:71:9a:4c:4c:4a:ea:c7:1b:61:a9: a0:e4:ff:a8:d9:55:84:54:6a:33:71:bc:f3:1a:08:d6:ad:81: da:2d:19:f1:ca:76:99:f5:89:69:5d:3c:d8:14:cc:57:cf:0b: 09:1c:cd:5e:fd:6d:59:2a:be:d5:42:7c:95:cc:f4:c6:91:07: 14:dc:4a:ad:5b:86:c2:ac:24:9b:e6:e1:89:fb:fb:76:d5:89: bb:57:6c:68:61:cd:e9:9d:6b:c1:ce:f6:28:6b:01:b5:63:9a: 87:ad:50:6f:2c:57:93:9a:b5:51:49:6e:70:b5:5e:0a:9d:18: 69:90:c0:80:84:5b:75:cd:4b:90:f1:28:61:d3:a6:bd:7e:8b: ba:66:ed:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0NjkxMTAvBgNVBAUTKEUwRDU0NDVCODBCMTgxN0Y2MkYzQzY0QUE4QzhGNkQ3 RTEzQUUxMDMwHhcNMjUxMTAzMDIyMDIzWhcNMjUxMTEwMDIyMDIzWjAYMRYwFAYD VQQDEw02OTA4MTE2Ny1mMDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAriP8OtDS1guQbW0KQ5Z9KoaBCyStdQqNQi87AGLVr3oCJ97QY8kuTBzZSazw fUyUaI5sO04n+z/0OcvdiC6gRMI/cnlvVCMd0y7UZLOpJ8se74rl3UOQ9podc23b Ae7V+liHm8siTqgfYJP6syXvo74vZCq7s0cR4w1rYPAUzidtVrWYB6MHqMXO3gV6 0i4xbLzVH1sR5OCx9xyidWk8tdbn1GYZkkF0IdXYbrcquHWsawisEc4UEobgpf64 cIhtuIMCeXG4YiHrP4LkI1O+ix+iN+vlXN+2+VcqRzTUFVKbyEhMu34i+vHSTNce 0id2cYijDAgY1owAMWmQ6Ou3oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3UWOCT ORbe2WjJVb573d1NUFPpMB8GA1UdIwQYMBaAFODVRFuAsYF/YvPGSqjI9tfhOuED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTQ2OS9FRkE1NjNDOEE1 QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdYOWk4OFpLcU1qMjEtRTY0 UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROVkVXNEN4Z1g5aTg4WktxTWoyMS1FNjRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTQ2OS9FRkE1NjNDOEE1QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdY OWk4OFpLcU1qMjEtRTY0UU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnEq6U9Bsbf3z/OrLjZiNfhUQI3mWCeEhqgxbZ6uc5Nmr6eKzmXlek CIycgVwMGqJkOH6jfL+eQU6AUi5l11bizzQfrLv/pYG4H9wRy/8eB3ddwswE8tW+ wehhEG24ZeKUneN7LOkSXF4RCVx1VaNRP78hP3GaTExK6scbYamg5P+o2VWEVGoz cbzzGgjWrYHaLRnxynaZ9YlpXTzYFMxXzwsJHM1e/W1ZKr7VQnyVzPTGkQcU3Eqt W4bCrCSb5uGJ+/t21Ym7V2xoYc3pnWvBzvYoawG1Y5qHrVBvLFeTmrVRSW5wtV4K nRhpkMCAhFt1zUuQ8Shh06a9fou6Zu0B -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:32 2025 by rpki-client