$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json) Hash identifier: bu+4rOg9wX8Y9s2r5OGHX1qmJA7Z0FrY4l1gi67o9LE= Subject key identifier: 2D:1D:5B:66:5F:5A:A8:46:19:8E:56:38:37:CD:A4:6F:76:F4:AF:CA Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Certificate serial: 479B216684F739447501B90D2E03BEE816AD291D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft Manifest number: 033A Signing time: Mon 03 Nov 2025 14:17:26 +0000 Manifest this update: Mon 03 Nov 2025 14:12:26 +0000 Manifest next update: Tue 04 Nov 2025 17:47:26 +0000 Files and hashes: 1: 4B1987D5160068092602529871C93EA320045A75.crl (hash: FGxtOcoMk1+0Q0Xq9000cwdmQkQpHRIDI+WdedYnzw0=) 2: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: h2bSnnI9a+kGlKn3GxEShW8TmFpFzCWMgYRzWIvLc4c=) 3: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=) 4: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: IuJmEVUfqCPytnG8AEOkj/ZoGEMJgsuh1bHlpcX48s4=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 17:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:9b:21:66:84:f7:39:44:75:01:b9:0d:2e:03:be:e8:16:ad:29:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75 Validity Not Before: Nov 3 14:12:26 2025 GMT Not After : Nov 4 17:47:26 2025 GMT Subject: CN=2D1D5B665F5AA846198E563837CDA46F76F4AFCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:8b:af:f0:d6:fd:80:39:fd:f0:fa:9f:c6: cb:51:6a:fd:6a:27:a7:4d:77:aa:28:1a:e0:97:38: 4e:5a:e1:6a:20:ad:5c:62:00:c6:70:60:f3:27:da: 46:78:d6:4d:56:75:a4:5f:56:65:6d:3e:20:9e:6c: ca:42:83:c3:a8:75:06:c5:73:fd:1a:4c:93:1a:8f: 47:92:58:0f:3b:a3:1b:ce:92:77:ac:35:e6:f3:28: 21:ec:b0:2a:be:c3:12:da:74:a8:2e:8b:2c:73:cd: 73:b6:5e:df:48:d9:94:63:3e:d1:24:e8:6a:9c:11: bf:2c:99:1d:3a:6b:62:99:8a:a8:46:47:12:b9:bb: 01:0f:af:ca:bf:61:4c:ab:e3:3b:d9:01:2d:94:15: 52:9b:a5:5d:34:3d:3b:3c:e6:28:d9:51:38:f9:76: 5a:5b:11:9f:5d:23:88:cc:34:0a:c0:71:a1:91:12: c5:7a:4c:05:66:81:18:a8:95:3a:d9:e4:eb:43:20: 69:c5:b3:bc:b4:c7:5c:c7:5d:06:95:27:65:4a:1e: df:5d:7b:75:fc:59:fc:40:fd:af:63:84:6c:c7:21: 56:0f:a6:d0:9c:c2:35:52:b0:e5:42:38:5d:b8:28: 3a:d1:fb:26:25:06:34:e3:c5:86:06:2c:2e:b6:51: d4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1D:5B:66:5F:5A:A8:46:19:8E:56:38:37:CD:A4:6F:76:F4:AF:CA X509v3 Authority Key Identifier: keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9e:7a:2e:e9:09:6b:71:37:c4:4e:ec:72:b8:63:58:36:24: 28:06:89:84:15:38:da:f7:4d:40:92:fa:d7:64:49:c6:a7:2d: 14:34:5f:d2:dc:bf:ad:9b:db:28:cc:02:cd:5b:06:a4:49:4a: 7e:c0:b9:b0:05:7e:7c:51:b4:29:df:e3:dd:19:4f:77:35:9d: d6:95:ef:b0:ac:1e:26:5d:2d:6b:fc:ce:73:99:52:dd:7a:c5: 6e:79:33:19:b2:ec:d6:28:70:50:6e:1a:0e:d2:b8:5c:39:00: 37:0a:e4:cb:c0:14:b8:3c:6f:02:a8:de:2b:8f:de:f6:16:f5: 5a:e3:8f:7a:dc:c0:a8:ac:e2:f6:78:af:9c:72:61:60:ac:d9: a2:7f:8e:8c:f6:5e:a0:58:20:d8:a7:17:b0:f0:57:f4:dc:7b: 42:31:b7:6e:5d:e4:72:eb:38:a8:1d:f3:82:3b:b5:05:1b:e0: 12:ff:6c:44:c8:38:c9:66:0d:e6:4c:c5:c4:15:4b:53:76:4b: f5:39:1d:1b:62:76:96:78:e0:4c:3a:82:53:c4:43:b7:53:90: e3:12:1f:74:4f:e6:5b:06:85:d6:43:53:e2:56:dd:54:8a:32: 9f:05:08:7e:65:d4:e1:af:fe:59:e9:c0:bd:16:4e:e7:c6:a9: 10:b3:d1:7d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUR5shZoT3OUR1AbkNLgO+6BatKR0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2 MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI1MTEwMzE0MTIyNloX DTI1MTEwNDE3NDcyNlowMzExMC8GA1UEAxMoMkQxRDVCNjY1RjVBQTg0NjE5OEU1 NjM4MzdDREE0NkY3NkY0QUZDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+5i6/w1v2AOf3w+p/Gy1Fq/Wonp013qiga4Jc4TlrhaiCtXGIAxnBg8yfa RnjWTVZ1pF9WZW0+IJ5sykKDw6h1BsVz/RpMkxqPR5JYDzujG86Sd6w15vMoIeyw Kr7DEtp0qC6LLHPNc7Ze30jZlGM+0SToapwRvyyZHTprYpmKqEZHErm7AQ+vyr9h TKvjO9kBLZQVUpulXTQ9OzzmKNlROPl2WlsRn10jiMw0CsBxoZESxXpMBWaBGKiV Otnk60MgacWzvLTHXMddBpUnZUoe3117dfxZ/ED9r2OEbMchVg+m0JzCNVKw5UI4 XbgoOtH7JiUGNOPFhgYsLrZR1H8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBQtHVtm X1qoRhmOVjg3zaRvdvSvyjAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAHZ56LukJa3E3xE7scrhjWDYkKAaJhBU42vdNQJL612RJxqct FDRf0ty/rZvbKMwCzVsGpElKfsC5sAV+fFG0Kd/j3RlPdzWd1pXvsKweJl0ta/zO c5lS3XrFbnkzGbLs1ihwUG4aDtK4XDkANwrky8AUuDxvAqjeK4/e9hb1WuOPetzA qKzi9nivnHJhYKzZon+OjPZeoFgg2KcXsPBX9Nx7QjG3bl3kcus4qB3zgju1BRvg Ev9sRMg4yWYN5kzFxBVLU3ZL9TkdG2J2lnjgTDqCU8RDt1OQ4xIfdE/mWwaF1kNT 4lbdVIoynwUIfmXU4a/+WenAvRZO58apELPRfQ== -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:11 2025 by rpki-client