$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft File: d4fx5T6beBMt6aeHEQiDFt1gVbM.mft (raw, json) Hash identifier: TOfrDTs82xD9ggmTjcRSIdLA6tguHdY/0OHCBNJHhbU= Subject key identifier: 08:AF:BA:30:0C:F0:83:2B:35:AC:99:B4:A6:F2:BD:D2:DA:E8:2E:66 Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 Certificate issuer: /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Certificate serial: 3500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft Manifest number: 34E4 Signing time: Tue 04 Nov 2025 14:24:23 +0000 Manifest this update: Tue 04 Nov 2025 14:24:22 +0000 Manifest next update: Tue 11 Nov 2025 14:24:22 +0000 Files and hashes: 1: d4fx5T6beBMt6aeHEQiDFt1gVbM.crl (hash: XbQVg3IdnWuF2CCG9cosy8mNwyjhXnSGja1U1yJQHbk=) 2: 8F368BEEF9C411EB9F9E645DC4F9AE02.roa (hash: VGqKOKmiRQqT6yzNCTI4GsckVdo9EsIqZ8D30e0mo6o=) 3: C28E34620A2011EC8B517885C4F9AE02.roa (hash: WML6bSJiK9+KF/pEPMbVuQofZWsQq5X8goxfmm+ACQg=) 4: C3C5C43A0A2011EC8B517885C4F9AE02.roa (hash: mmOf8E5cH5F9E51SwHybcc0hD3kIHBOrU1OwIH3yXaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13568 (0x3500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A60A9, serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Validity Not Before: Nov 4 14:24:22 2025 GMT Not After : Nov 11 14:24:22 2025 GMT Subject: CN=690a0c96-728c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:56:ff:38:9d:c7:6e:ca:8e:54:b8:a2:c9:ac: f0:4c:a2:ae:57:77:52:50:dd:2c:80:6a:7f:91:34: 38:c8:4a:67:d7:34:41:f9:58:8c:3a:42:1a:f0:47: 43:a9:2b:87:48:30:ea:ca:55:a3:4a:2e:2a:c0:12: 73:85:ad:42:59:d0:a7:93:37:c5:c7:2b:7f:08:27: e7:73:89:08:4c:5e:d0:da:9f:25:8c:92:58:71:8d: cf:13:2a:e8:fd:9d:9a:9c:29:2a:98:83:0c:be:f1: 23:b9:6a:7f:f6:b9:66:3d:b0:dd:ee:26:1d:8e:41: 5e:b1:29:dd:b0:51:4b:cf:28:bc:a2:5e:97:c5:dc: 78:a4:73:46:a8:0d:90:52:5c:8b:19:4b:54:32:e8: 88:d8:30:44:f7:e0:03:c8:58:dd:e8:dc:e7:6c:d9: ef:de:7a:32:ff:02:e7:98:3e:b5:fc:eb:5a:5c:c3: 56:d3:da:a6:f1:a7:80:00:56:07:08:13:3b:39:cb: 23:67:8d:31:97:48:18:0e:12:29:92:07:c3:ac:d4: 2b:4f:58:06:15:f8:f0:dd:df:69:c4:55:1c:15:05: c6:e3:71:32:60:e3:37:70:e7:01:a7:80:97:c1:ff: 7d:28:f3:df:88:3f:fe:48:17:32:4a:c4:e0:d7:c4: 63:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AF:BA:30:0C:F0:83:2B:35:AC:99:B4:A6:F2:BD:D2:DA:E8:2E:66 X509v3 Authority Key Identifier: keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:94:ca:e5:7c:84:88:36:99:3b:14:be:4d:e9:39:42:6c:93: 94:0b:8f:00:f5:b7:df:e0:9a:e2:a2:3e:7c:ec:f7:68:3d:a9: d7:73:a5:8a:b8:c2:22:8d:6f:94:d8:24:e8:3e:e4:d0:f0:84: bb:2a:b2:34:1d:32:0b:b2:af:aa:e0:36:e9:4e:fc:30:90:8a: 67:fb:23:1c:d6:95:07:e4:5e:84:dc:f2:10:76:62:65:30:01: c0:fa:fc:8e:87:60:38:f1:65:bc:1b:11:34:85:df:25:59:93: b1:1c:a0:f7:bb:fe:91:59:08:27:6d:cc:29:12:ae:8f:c0:97: 11:c1:a3:f8:95:3d:54:13:62:8b:96:13:63:78:67:9f:20:94: 97:29:af:bc:a1:90:0e:f8:e7:b8:e3:0a:83:87:6b:ca:ce:21: f3:d3:11:d6:18:9f:58:c2:8b:fd:20:94:5e:9c:11:c1:eb:b0: 90:d8:aa:02:61:52:87:8e:38:7d:a9:49:7d:27:ed:67:01:3c: 30:53:b7:d2:00:56:e1:09:e3:f5:bd:d2:46:11:68:2a:2a:42: 66:ae:ce:87:98:8f:79:b1:53:22:72:6a:25:d7:fa:dd:70:e4: 45:5e:c4:61:97:48:a1:6d:2a:3b:47:49:aa:64:5f:da:74:ba: 05:0d:47:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYwQTkxMTAvBgNVBAUTKDc3ODdGMUU1M0U5Qjc4MTMyREU5QTc4NzExMDg4MzE2 REQ2MDU1QjMwHhcNMjUxMTA0MTQyNDIyWhcNMjUxMTExMTQyNDIyWjAYMRYwFAYD VQQDEw02OTBhMGM5Ni03MjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Vb/OJ3HbsqOVLiiyazwTKKuV3dSUN0sgGp/kTQ4yEpn1zRB+ViMOkIa8EdD qSuHSDDqylWjSi4qwBJzha1CWdCnkzfFxyt/CCfnc4kITF7Q2p8ljJJYcY3PEyro /Z2anCkqmIMMvvEjuWp/9rlmPbDd7iYdjkFesSndsFFLzyi8ol6Xxdx4pHNGqA2Q UlyLGUtUMuiI2DBE9+ADyFjd6NznbNnv3noy/wLnmD61/OtaXMNW09qm8aeAAFYH CBM7OcsjZ40xl0gYDhIpkgfDrNQrT1gGFfjw3d9pxFUcFQXG43EyYOM3cOcBp4CX wf99KPPfiD/+SBcySsTg18RjtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAivujAM 8IMrNayZtKbyvdLa6C5mMB8GA1UdIwQYMBaAFHeH8eU+m3gTLemnhxEIgxbdYFWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjBBOS82QkE4MDYxQTFE ODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVCTXQ2YWVIRVFpREZ0MWdW Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0Zng1VDZiZUJNdDZhZUhFUWlERnQxZ1ZiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjBBOS82QkE4MDYxQTFEODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVC TXQ2YWVIRVFpREZ0MWdWYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXlMrlfISINpk7FL5N6TlCbJOUC48A9bff4Jrioj587PdoPanXc6WK uMIijW+U2CToPuTQ8IS7KrI0HTILsq+q4DbpTvwwkIpn+yMc1pUH5F6E3PIQdmJl MAHA+vyOh2A48WW8GxE0hd8lWZOxHKD3u/6RWQgnbcwpEq6PwJcRwaP4lT1UE2KL lhNjeGefIJSXKa+8oZAO+Oe44wqDh2vKziHz0xHWGJ9Ywov9IJRenBHB67CQ2KoC YVKHjjh9qUl9J+1nATwwU7fSAFbhCeP1vdJGEWgqKkJmrs6HmI95sVMicmol1/rd cORFXsRhl0ihbSo7R0mqZF/adLoFDUcF -----END CERTIFICATE-----Generated at Wed Nov 5 14:41:19 2025 by rpki-client