$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft File: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft (raw, json) Hash identifier: grnM4O6LdLiKamo7X3GlA6lcTxmz5T5/Zu37cEuRgDA= Subject key identifier: F6:2E:74:90:0F:B0:3F:98:9B:BA:57:9D:EE:FA:86:C2:FB:9F:8B:60 Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A Certificate issuer: /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft Manifest number: 0207 Signing time: Wed 05 Nov 2025 02:26:28 +0000 Manifest this update: Wed 05 Nov 2025 02:26:28 +0000 Manifest next update: Wed 12 Nov 2025 02:26:28 +0000 Files and hashes: 1: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl (hash: deH5WtyKiagfCMg+gKYrr0D2IgfBPjutrlBzYnVmOZA=) 2: 38702E769AF611ED8D41985BC4F9AE02.roa (hash: ZhWBxmhvIB+43KRBVHlsXZ7qRlNDQ90SpnXAY8rEx0A=) 3: D076B1A49F2911ED937CF05AC4F9AE02.roa (hash: DMBYC+/NRUlRPJuHXxC2cxoOT1tZHI2lI1sjea+2JhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A Validity Not Before: Nov 5 02:26:28 2025 GMT Not After : Nov 12 02:26:28 2025 GMT Subject: CN=690ab5d4-f89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fe:95:b5:07:0a:12:7c:4b:ab:f1:22:80:ab: 44:ee:61:f1:5c:b4:74:62:34:6e:22:07:ee:49:c9: a3:14:04:ec:ae:de:0f:c2:ce:ae:00:00:c5:85:6a: 9e:c8:18:81:1a:b9:24:2d:03:62:44:31:e6:06:04: 3f:cb:52:2c:37:67:f9:4a:0e:29:45:eb:7d:37:13: 40:c1:05:7b:7b:72:85:21:22:a7:96:23:fb:86:70: d8:92:17:91:09:83:9a:51:ea:cc:fb:85:7f:00:ce: bf:67:6a:a8:1b:0f:36:b7:f5:e6:64:a1:15:ce:1f: ca:44:36:1e:31:12:61:2b:ba:bc:f9:cb:49:a2:e6: c8:35:fc:4a:4d:15:a4:98:31:c0:57:72:99:d8:cc: 74:85:28:a5:eb:10:fc:6d:be:d0:fc:e6:cc:f1:c0: de:38:1e:7e:6b:6a:98:a5:f8:9a:24:48:bc:49:f4: 92:19:a3:2d:91:31:c9:65:3e:24:21:de:05:9b:81: 16:cf:c3:c1:32:c9:cf:ab:7d:75:3a:91:d4:74:18: 75:20:55:48:31:06:a4:77:76:b1:f2:c7:13:32:ee: 64:aa:0f:19:0a:ab:6e:d9:d4:ce:a0:bd:8c:7a:32: 99:0f:0e:13:41:13:c1:20:19:bb:a0:c6:ec:67:17: 1f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2E:74:90:0F:B0:3F:98:9B:BA:57:9D:EE:FA:86:C2:FB:9F:8B:60 X509v3 Authority Key Identifier: keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:cc:d6:a0:bc:33:e0:08:93:48:61:0c:38:b0:01:46:5b:9c: d3:73:91:b6:c3:13:ba:48:c5:15:42:96:0a:cf:0e:07:b6:82: 91:de:a5:71:3c:d5:12:d4:92:fc:7c:5a:f4:2f:2b:3a:62:af: 65:b5:d0:9d:79:59:15:65:11:37:ab:a0:d3:9f:9a:91:f0:3e: 27:88:6f:85:a1:d3:63:0e:a2:ef:a7:0d:37:25:18:a1:b9:c2: 84:ea:4d:8f:cc:97:89:4b:34:46:27:0b:fd:3b:b1:d4:4a:a4: 13:0c:36:e9:0d:f7:c6:9a:7a:8f:44:97:10:47:62:38:2f:02: a9:cc:3b:5b:b7:7a:f0:c5:13:54:e6:f6:17:05:4b:4c:67:67: d9:5e:c1:15:9d:7f:b4:6b:4d:d0:92:94:17:a9:08:b7:66:a3: ee:db:e9:54:d4:3b:14:20:77:54:db:29:5c:ae:ab:d0:fe:fc: 79:e2:b7:70:e7:6b:25:fb:55:1b:a5:03:62:bc:15:5a:46:75: 4b:e4:18:77:fc:36:f6:00:93:d5:42:b2:d7:17:d1:d8:a4:6d: 6d:e6:d2:70:c9:5d:71:4e:39:1f:97:eb:67:98:69:bf:89:8d: af:e7:a5:ba:5b:54:b5:c1:48:5d:7b:15:90:8e:19:9b:68:c3: f1:ea:07:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzRkMxMTAvBgNVBAUTKEUxQzFDNzJCNjc5M0E5MDNCQTNERTAzMTAyNzUxOUI0 MzAyMTc1NkEwHhcNMjUxMTA1MDIyNjI4WhcNMjUxMTEyMDIyNjI4WjAYMRYwFAYD VQQDEw02OTBhYjVkNC1mODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/6VtQcKEnxLq/EigKtE7mHxXLR0YjRuIgfuScmjFATsrt4Pws6uAADFhWqe yBiBGrkkLQNiRDHmBgQ/y1IsN2f5Sg4pRet9NxNAwQV7e3KFISKnliP7hnDYkheR CYOaUerM+4V/AM6/Z2qoGw82t/XmZKEVzh/KRDYeMRJhK7q8+ctJoubINfxKTRWk mDHAV3KZ2Mx0hSil6xD8bb7Q/ObM8cDeOB5+a2qYpfiaJEi8SfSSGaMtkTHJZT4k Id4Fm4EWz8PBMsnPq311OpHUdBh1IFVIMQakd3ax8scTMu5kqg8ZCqtu2dTOoL2M ejKZDw4TQRPBIBm7oMbsZxcfiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYudJAP sD+Ym7pXne76hsL7n4tgMB8GA1UdIwQYMBaAFOHBxytnk6kDuj3gMQJ1GbQwIXVq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNGQy9BOTZGNEI3ODlB RjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFRTzZQZUF4QW5VWnREQWhk V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjSEhLMmVUcVFPNlBlQXhBblVadERBaGRXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNGQy9BOTZGNEI3ODlBRjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFR TzZQZUF4QW5VWnREQWhkV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASzNagvDPgCJNIYQw4sAFGW5zTc5G2wxO6SMUVQpYKzw4HtoKR3qVx PNUS1JL8fFr0Lys6Yq9ltdCdeVkVZRE3q6DTn5qR8D4niG+FodNjDqLvpw03JRih ucKE6k2PzJeJSzRGJwv9O7HUSqQTDDbpDffGmnqPRJcQR2I4LwKpzDtbt3rwxRNU 5vYXBUtMZ2fZXsEVnX+0a03QkpQXqQi3ZqPu2+lU1DsUIHdU2ylcrqvQ/vx54rdw 52sl+1UbpQNivBVaRnVL5Bh3/Db2AJPVQrLXF9HYpG1t5tJwyV1xTjkfl+tnmGm/ iY2v56W6W1S1wUhdexWQjhmbaMPx6gfT -----END CERTIFICATE-----Generated at Wed Nov 5 15:32:55 2025 by rpki-client