$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft File: R4tJDpOd3d8hrKx4y5MZinuBRIU.mft (raw, json) Hash identifier: QdRQZiyCQCnupwDqwidtHnHGEBnYj1M4elNqAGbt2ck= Subject key identifier: 49:C5:BD:57:86:88:9A:61:A3:04:ED:70:5B:0D:71:F2:43:A1:EA:FE Authority key identifier: 47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 Certificate issuer: /CN=A91427E2/serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft Manifest number: C4 Signing time: Fri 07 Nov 2025 01:21:51 +0000 Manifest this update: Fri 07 Nov 2025 01:21:51 +0000 Manifest next update: Fri 14 Nov 2025 01:21:51 +0000 Files and hashes: 1: R4tJDpOd3d8hrKx4y5MZinuBRIU.crl (hash: 5b2LVkkWq2IYfO+xlTpqGusFrHAaGlNqVvtrPqqjGXc=) 2: 534DAEB2935111EF98AA8C86C4F9AE02.roa (hash: X0a7N8BetaJpt9FlsdkHj3TgLJmVFX/78zUcVbqMhpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 01:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Validity Not Before: Nov 7 01:21:51 2025 GMT Not After : Nov 14 01:21:51 2025 GMT Subject: CN=690d49af-a6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9c:b4:6f:7f:29:56:c7:38:1a:e2:ed:91:d1: f5:0d:03:80:5a:34:e5:8a:c3:50:1b:55:e4:ea:5b: a5:33:d3:d9:e3:b5:a4:0e:b8:e5:a3:b6:e9:b0:4e: bb:5e:14:af:4a:a1:c7:b1:4b:32:2f:90:85:9f:1d: 52:e1:5e:67:dc:24:3c:29:b6:7e:e3:87:7a:d1:b5: d1:d8:5e:b5:57:8a:5a:78:1e:f2:18:10:d0:d6:e3: a4:5a:fa:48:26:20:08:d6:6a:e7:36:ef:54:dc:91: 1e:a2:ea:e9:f7:0a:d7:a0:6e:fa:98:d8:fa:0a:11: 1a:89:b6:fc:17:82:1c:ab:30:df:fa:2e:94:74:22: b8:19:c9:4d:9e:46:94:20:fe:e3:e0:ca:54:6e:40: 6c:78:28:89:64:69:81:e5:96:65:b6:3f:ef:81:23: 7d:db:05:72:93:ea:dc:b4:18:2e:9a:d3:b9:c8:62: c5:0f:9b:5c:21:15:8e:6e:c1:64:81:16:93:33:67: fb:23:dd:99:57:b9:be:9a:6c:4d:5c:10:2b:73:81: 1e:c9:b2:57:bf:4b:d0:7e:1e:00:d4:6b:cf:68:ac: 67:2c:a4:3d:6f:5b:45:92:63:dc:85:4c:0f:f9:ae: 43:1e:e7:d9:6a:53:2b:f4:92:c5:fd:6b:7a:59:9a: 8a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C5:BD:57:86:88:9A:61:A3:04:ED:70:5B:0D:71:F2:43:A1:EA:FE X509v3 Authority Key Identifier: keyid:47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ed:97:42:7f:91:c7:34:bf:ee:04:d8:cd:91:1d:24:3e:6d: 96:4f:df:cb:1e:16:60:73:80:36:31:bc:6d:3d:33:9c:ce:19: 6a:38:2f:ef:fd:aa:4f:21:6f:7e:aa:1b:42:c5:03:7b:a8:11: df:d9:b9:92:15:ed:3e:36:5f:b3:3a:8c:88:fe:f9:af:4d:4a: 8e:fb:a4:8e:97:d4:cf:ad:81:6a:9d:7a:d6:30:3c:d7:4a:9c: 1b:4f:23:10:5a:b9:b7:6a:ad:ac:33:fa:9e:e7:f3:24:b4:ee: 1f:94:7a:d1:3f:70:40:7e:c2:c3:a5:bf:95:0e:9b:fc:4d:24: 98:a2:69:cb:72:f8:1e:a6:a5:44:b7:c8:c8:60:bc:c0:cd:b5: 47:6c:b8:4f:da:aa:5a:cd:70:e4:84:24:60:a8:d6:4b:48:f0: e0:0a:06:25:43:bb:0f:d9:09:d0:f8:a5:57:6c:74:b6:f5:9a: 9e:72:76:eb:03:81:5c:cf:3b:aa:08:75:a0:1c:a1:90:83:5a: 5b:2e:a0:bd:20:e3:cc:1f:59:51:27:be:17:89:00:7d:57:0f: c0:d7:44:89:71:49:a2:10:48:de:3c:90:b7:96:d0:6a:f9:0c: ce:d2:74:a1:49:eb:cb:f8:fb:c6:e2:f6:d7:0d:83:ad:7c:bc: b2:01:00:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3RTIxMTAvBgNVBAUTKDQ3OEI0OTBFOTM5REREREYyMUFDQUM3OENCOTMxOThB N0I4MTQ0ODUwHhcNMjUxMTA3MDEyMTUxWhcNMjUxMTE0MDEyMTUxWjAYMRYwFAYD VQQDEw02OTBkNDlhZi1hNmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5y0b38pVsc4GuLtkdH1DQOAWjTlisNQG1Xk6lulM9PZ47WkDrjlo7bpsE67 XhSvSqHHsUsyL5CFnx1S4V5n3CQ8KbZ+44d60bXR2F61V4paeB7yGBDQ1uOkWvpI JiAI1mrnNu9U3JEeourp9wrXoG76mNj6ChEaibb8F4IcqzDf+i6UdCK4GclNnkaU IP7j4MpUbkBseCiJZGmB5ZZltj/vgSN92wVyk+rctBgumtO5yGLFD5tcIRWObsFk gRaTM2f7I92ZV7m+mmxNXBArc4EeybJXv0vQfh4A1GvPaKxnLKQ9b1tFkmPchUwP +a5DHufZalMr9JLF/Wt6WZqK5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnFvVeG iJphowTtcFsNcfJDoer+MB8GA1UdIwQYMBaAFEeLSQ6Tnd3fIayseMuTGYp7gUSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83ODNERkJDNDkz NTAxMUVGQkFDRTAwNENDNEY5QUUwMi9SNHRKRHBPZDNkOGhyS3g0eTVNWmludUJS SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0dEpEcE9kM2Q4aHJLeDR5NU1aaW51QlJJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdFMi83ODNERkJDNDkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi9SNHRKRHBPZDNk OGhyS3g0eTVNWmludUJSSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz7ZdCf5HHNL/uBNjNkR0kPm2WT9/LHhZgc4A2MbxtPTOczhlqOC/v /apPIW9+qhtCxQN7qBHf2bmSFe0+Nl+zOoyI/vmvTUqO+6SOl9TPrYFqnXrWMDzX SpwbTyMQWrm3aq2sM/qe5/MktO4flHrRP3BAfsLDpb+VDpv8TSSYomnLcvgepqVE t8jIYLzAzbVHbLhP2qpazXDkhCRgqNZLSPDgCgYlQ7sP2QnQ+KVXbHS29Zqecnbr A4FczzuqCHWgHKGQg1pbLqC9IOPMH1lRJ74XiQB9Vw/A10SJcUmiEEjePJC3ltBq +QzO0nShSevL+PvG4vbXDYOtfLyyAQDY -----END CERTIFICATE-----Generated at Fri Nov 7 14:21:19 2025 by rpki-client