$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json) Hash identifier: mT5bJdm6eIxSSQgT1QL/J+zLFuJOFqSyenPGvFEavFQ= Subject key identifier: 7E:D5:83:06:65:5C:EA:04:05:9E:11:FB:FF:E7:88:3D:43:93:A1:81 Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Certificate serial: 0A23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft Manifest number: 0A15 Signing time: Tue 04 Nov 2025 19:53:29 +0000 Manifest this update: Tue 04 Nov 2025 19:53:29 +0000 Manifest next update: Tue 11 Nov 2025 19:53:29 +0000 Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: qXQOZ+QrZjrqdL/qe9q/kie3+9FmiD8b4ELyXWDHBMk=) 2: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: PugK/HlSlwCNhEasOZjO6B/uomD7VotHJLA2wV6jZrM=) 3: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: hvomTHOFg3fOu5UVv4a+8zSBR7jdgf3xO/+H6ZJICO8=) 4: 305312F67CA011F098F1673CC4F9AE02.roa (hash: wVxD4Ia4NFpgdZDCkPWfFk89K3NA8UH13kaAx87O4u8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2595 (0xa23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Validity Not Before: Nov 4 19:53:29 2025 GMT Not After : Nov 11 19:53:29 2025 GMT Subject: CN=690a59b9-651d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:52:8a:48:23:4c:5e:50:9d:d1:74:04:ef:04: 37:1b:8d:09:a7:bf:62:7e:37:6f:39:50:44:09:a4: 71:e5:f1:58:f0:e5:e3:ed:35:02:11:bf:53:3a:ae: 83:31:c8:d5:5d:51:d9:76:47:df:9c:22:e3:4e:76: e5:fa:6c:6d:ac:1d:e3:99:dc:3a:22:f9:59:f6:81: 73:40:0f:81:8d:62:be:b7:b8:3c:99:a1:5c:ba:53: cf:49:b8:c8:99:4b:9e:f8:9a:b2:b1:70:b3:7d:43: 09:61:05:74:66:86:01:35:b2:f2:b0:43:17:1f:a5: 61:97:71:3a:24:33:39:73:88:e3:27:7e:66:49:42: a2:11:47:19:50:6d:82:06:84:51:ad:29:bb:3c:8b: b9:9c:96:73:1f:3e:cd:1a:54:cc:1f:69:fb:a2:b4: b4:a1:2e:9e:9e:9c:86:da:05:db:fc:ac:fb:85:98: 7a:4b:72:e0:fd:e2:d7:8b:b2:8f:de:36:cd:68:ab: dc:17:dd:2f:8f:7e:da:a1:63:c9:22:f3:2c:34:cc: e3:c2:08:da:e6:a4:99:09:df:e5:08:a8:d7:c1:07: af:08:45:b7:78:83:16:f7:3a:80:9f:6b:99:5e:f4: 1e:c3:0f:d6:73:d2:88:2b:96:c6:41:1a:f9:9c:2f: 9e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D5:83:06:65:5C:EA:04:05:9E:11:FB:FF:E7:88:3D:43:93:A1:81 X509v3 Authority Key Identifier: keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:8f:79:c1:c0:d5:25:0e:cf:3b:71:fe:53:a4:4e:ef:19:99: a6:29:3d:9e:61:d9:9c:bf:c6:d3:95:67:8d:b4:20:bd:f6:6b: 1d:df:c8:69:75:92:cc:dc:24:42:ce:f7:85:1d:af:88:b6:bf: 02:d4:8b:ff:bd:16:a2:87:11:38:43:1d:85:42:93:42:33:1c: a3:39:e4:af:b8:cf:46:a1:d8:26:d3:68:8a:37:33:65:9f:a6: 04:05:d0:06:b5:7a:cb:29:32:e2:46:f0:ba:48:e0:e9:59:d3: 5f:fa:ce:0f:b8:9f:06:05:7c:30:57:9e:bb:67:5f:38:a0:b5: 53:4e:f6:37:86:26:1c:fe:bf:d3:f4:10:5c:b8:89:47:78:f8: de:e5:ab:a5:16:6b:e5:7a:2c:5c:0a:ff:6c:1e:83:62:1a:21: 40:64:3a:cc:07:b8:b2:91:d4:46:17:23:4e:8b:03:57:3e:86: 8c:8e:d8:cb:15:4c:12:07:11:3f:46:db:9a:1a:d1:6e:4b:3f: 54:0f:b6:88:78:e8:ee:d2:24:64:5f:04:7c:c1:5f:63:84:ad: 28:77:9e:b5:27:fe:ed:6f:27:24:db:3b:88:98:c8:41:61:a0: e7:6b:16:fc:fd:6e:8c:2b:c6:ae:b1:d1:d0:4e:fe:f0:3b:9d: 1d:e1:00:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBBNkMxMTAvBgNVBAUTKEE3ODdBNjNFNDlFRThFQzZGOTc1MTE2MDdGMUI3QzVC MERGMTE2NEUwHhcNMjUxMTA0MTk1MzI5WhcNMjUxMTExMTk1MzI5WjAYMRYwFAYD VQQDEw02OTBhNTliOS02NTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VKKSCNMXlCd0XQE7wQ3G40Jp79ifjdvOVBECaRx5fFY8OXj7TUCEb9TOq6D McjVXVHZdkffnCLjTnbl+mxtrB3jmdw6IvlZ9oFzQA+BjWK+t7g8maFculPPSbjI mUue+JqysXCzfUMJYQV0ZoYBNbLysEMXH6Vhl3E6JDM5c4jjJ35mSUKiEUcZUG2C BoRRrSm7PIu5nJZzHz7NGlTMH2n7orS0oS6enpyG2gXb/Kz7hZh6S3Lg/eLXi7KP 3jbNaKvcF90vj37aoWPJIvMsNMzjwgja5qSZCd/lCKjXwQevCEW3eIMW9zqAn2uZ XvQeww/Wc9KIK5bGQRr5nC+exQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7VgwZl XOoEBZ4R+//niD1Dk6GBMB8GA1UdIwQYMBaAFKeHpj5J7o7G+XURYH8bfFsN8RZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEE2Qy9COTE2RjM4ODgy QzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpzYjVkUkZnZnh0OFd3M3hG azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0ZW1Qa251anNiNWRSRmdmeHQ4V3czeEZrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEE2Qy9COTE2RjM4ODgyQzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpz YjVkUkZnZnh0OFd3M3hGazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXj3nBwNUlDs87cf5TpE7vGZmmKT2eYdmcv8bTlWeNtCC99msd38hp dZLM3CRCzveFHa+Itr8C1Iv/vRaihxE4Qx2FQpNCMxyjOeSvuM9Godgm02iKNzNl n6YEBdAGtXrLKTLiRvC6SODpWdNf+s4PuJ8GBXwwV567Z184oLVTTvY3hiYc/r/T 9BBcuIlHePje5aulFmvleixcCv9sHoNiGiFAZDrMB7iykdRGFyNOiwNXPoaMjtjL FUwSBxE/RtuaGtFuSz9UD7aIeOju0iRkXwR8wV9jhK0od561J/7tbyck2zuImMhB YaDnaxb8/W6MK8ausdHQTv7wO50d4QDi -----END CERTIFICATE-----Generated at Wed Nov 5 13:07:20 2025 by rpki-client