$ rpki-client -vvf rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft File: r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft (raw, json) Hash identifier: PRFo8meXrtb6nvrtRRy2Fwza/4C3mEVicDRD7nw3U/s= Subject key identifier: 50:FB:52:5B:09:E2:A4:4B:6F:9B:4B:C8:57:D5:AC:7E:A8:2A:2E:72 Authority key identifier: AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48 Certificate issuer: /CN=A919F53A/serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48 Certificate serial: 0787 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft Manifest number: 0782 Signing time: Tue 04 Nov 2025 21:37:55 +0000 Manifest this update: Tue 04 Nov 2025 21:37:54 +0000 Manifest next update: Tue 11 Nov 2025 21:37:54 +0000 Files and hashes: 1: r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl (hash: 8VwFSipaXjfoML9d38mBWiRYXZpZUg3d4hV81EsdLpo=) 2: 72BCBB042FC211EBB8550B0AC4F9AE02.roa (hash: kntkOaZrAaOx4SVIiImPb0s+dVekp3sawuWhb73K14Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1927 (0x787) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F53A, serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48 Validity Not Before: Nov 4 21:37:54 2025 GMT Not After : Nov 11 21:37:54 2025 GMT Subject: CN=690a7232-6c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ee:51:e2:5a:0c:85:49:50:51:3f:29:8b:17: 30:b7:35:c2:59:50:9b:4b:a1:7a:a8:ee:79:2b:02: 09:a1:df:10:d4:cb:dc:c1:43:20:ca:31:c8:10:bb: 22:70:74:22:27:a2:90:6b:e5:91:58:b4:b4:09:17: 74:79:2f:58:e3:b0:74:85:8a:73:d0:c6:e8:b6:24: 12:2a:73:a9:8b:ff:fe:68:5c:78:7e:19:43:28:44: 58:7c:57:a6:bd:44:2a:1c:5e:9b:3b:4e:00:5f:4c: 7d:d0:f3:00:04:4b:d6:a0:dc:b2:63:bb:a7:b9:37: d0:28:a8:df:5e:05:24:10:24:2a:36:ac:82:8d:f4: 47:38:2c:f4:57:ad:52:1b:4e:b6:97:95:e3:f4:a0: 99:d4:93:d8:af:46:0f:3b:e5:c6:a5:0f:a0:cd:17: 0a:e8:c0:02:b5:72:ee:bf:95:1b:5f:a4:b5:a4:84: fd:d7:97:1a:b9:ff:9d:18:5c:0c:a7:ea:87:38:e2: 05:24:fe:3a:93:41:ca:7e:4a:41:bf:7b:cb:f7:68: 31:ca:de:cf:e9:cf:a0:27:30:bf:85:4a:0c:6b:bd: 41:90:55:a5:b4:78:f3:70:da:ff:e1:1d:3e:94:0f: d7:b5:63:87:7a:8d:be:49:be:43:b3:ea:13:81:f3: ea:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FB:52:5B:09:E2:A4:4B:6F:9B:4B:C8:57:D5:AC:7E:A8:2A:2E:72 X509v3 Authority Key Identifier: keyid:AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7a:55:b8:19:53:85:15:df:30:6e:d3:fb:37:1f:f4:25:de: 21:91:b7:f0:5c:52:20:a0:ad:d0:01:05:25:59:9f:fc:87:d6: a8:03:75:a5:84:0a:32:ab:3e:2d:a0:21:96:35:dc:1e:f9:22: 25:64:7d:32:d2:41:85:28:58:12:84:3a:71:0e:e9:d2:86:0f: 42:58:fb:c3:9c:2b:fb:df:13:95:81:8e:57:65:5f:62:72:e6: d1:17:0e:30:2d:fb:cd:71:09:48:52:34:2b:94:ca:a6:ea:75: e0:62:1c:02:75:28:91:f5:25:80:91:33:05:3f:28:9f:8f:ca: 53:c4:e5:33:68:11:e6:6e:f8:92:8f:b8:8a:74:54:ca:55:fe: c1:2a:cf:32:d2:b9:8a:76:2d:6b:5f:fc:c2:34:a3:8e:fc:17: af:93:7d:80:9e:d1:78:a2:92:ff:2a:c2:9c:92:e1:36:4a:01: 2f:df:b2:bf:dd:4d:c6:3e:e8:6b:b0:9d:f4:3d:5b:25:64:c2: 45:6b:50:3c:57:ac:6a:a7:a9:f4:ea:41:83:42:3d:2a:05:0b: bb:36:dc:c3:50:2c:d2:98:96:4a:7d:28:09:2a:e9:e9:08:5b: d1:9d:81:da:f9:dc:5d:31:3d:ec:93:95:b7:ad:dd:ba:c6:1c: ae:44:9f:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1M0ExMTAvBgNVBAUTKEFGODU3ODhCOEM1MkQxMjhENTM0MEE3NTA5NUI4RjBG MTE3NzlDNDgwHhcNMjUxMTA0MjEzNzU0WhcNMjUxMTExMjEzNzU0WjAYMRYwFAYD VQQDEw02OTBhNzIzMi02YzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAre5R4loMhUlQUT8pixcwtzXCWVCbS6F6qO55KwIJod8Q1MvcwUMgyjHIELsi cHQiJ6KQa+WRWLS0CRd0eS9Y47B0hYpz0MbotiQSKnOpi//+aFx4fhlDKERYfFem vUQqHF6bO04AX0x90PMABEvWoNyyY7unuTfQKKjfXgUkECQqNqyCjfRHOCz0V61S G062l5Xj9KCZ1JPYr0YPO+XGpQ+gzRcK6MACtXLuv5UbX6S1pIT915cauf+dGFwM p+qHOOIFJP46k0HKfkpBv3vL92gxyt7P6c+gJzC/hUoMa71BkFWltHjzcNr/4R0+ lA/XtWOHeo2+Sb5Ds+oTgfPqIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFD7UlsJ 4qRLb5tLyFfVrH6oKi5yMB8GA1UdIwQYMBaAFK+FeIuMUtEo1TQKdQlbjw8Rd5xI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUzQS8zNkI1MkRGQTJG QzAxMUVCQTI1RkU5ODJDNEY5QUUwMi9yNFY0aTR4UzBTalZOQXAxQ1Z1UER4RjNu RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0VjRpNHhTMFNqVk5BcDFDVnVQRHhGM25FZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjUzQS8zNkI1MkRGQTJGQzAxMUVCQTI1RkU5ODJDNEY5QUUwMi9yNFY0aTR4UzBT alZOQXAxQ1Z1UER4RjNuRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKelW4GVOFFd8wbtP7Nx/0Jd4hkbfwXFIgoK3QAQUlWZ/8h9aoA3Wl hAoyqz4toCGWNdwe+SIlZH0y0kGFKFgShDpxDunShg9CWPvDnCv73xOVgY5XZV9i cubRFw4wLfvNcQlIUjQrlMqm6nXgYhwCdSiR9SWAkTMFPyifj8pTxOUzaBHmbviS j7iKdFTKVf7BKs8y0rmKdi1rX/zCNKOO/Bevk32AntF4opL/KsKckuE2SgEv37K/ 3U3GPuhrsJ30PVslZMJFa1A8V6xqp6n06kGDQj0qBQu7NtzDUCzSmJZKfSgJKunp CFvRnYHa+dxdMT3sk5W3rd26xhyuRJ/i -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:24 2025 by rpki-client