$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: cG9ZltCI9qhT/bhmstq9j7bZvyay0NFVfJhnokeK2qs= Subject key identifier: BA:36:CD:12:65:04:74:B2:83:77:82:C8:E8:FE:D3:93:76:35:34:E9 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 34F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 34E8 Signing time: Tue 04 Nov 2025 14:38:18 +0000 Manifest this update: Tue 04 Nov 2025 14:38:17 +0000 Manifest next update: Tue 11 Nov 2025 14:38:17 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: y3x24moglwxVEkOpcNPgz54zr+8nSjgAKbGgWBRxeRI=) 2: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: WAqkzYiOMG3eVsSlxconspeITWeLsHW6M6BKW5GBoNA=) 3: 1733DE66945D11F09E173B0CC4F9AE02.roa (hash: 7XJqHJEnhdUplCJ4iz+cv5gM2kcVkpUwLnhh4FUX6U8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13553 (0x34f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Nov 4 14:38:17 2025 GMT Not After : Nov 11 14:38:17 2025 GMT Subject: CN=690a0fd9-a0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:37:1f:32:c6:7a:ef:62:55:42:77:d9:2f: 57:8c:c7:49:26:16:90:b8:c1:e4:57:95:88:eb:07: 53:03:11:52:84:24:c3:20:cd:fd:88:cb:11:7a:27: a0:4d:90:c8:32:ed:07:03:e8:92:9f:5e:8c:51:7d: 2e:78:c4:d8:34:4f:fb:4d:58:26:b2:52:6d:d7:37: 23:b4:a7:25:a6:09:52:64:0d:85:ae:b3:b0:34:29: ae:c4:15:8b:f4:cf:c5:78:bf:66:6f:03:71:2b:b6: a3:9a:4f:8d:83:eb:a1:52:69:fe:6d:2c:7a:e3:0b: 2f:87:e5:8a:24:71:bd:64:ad:4b:6e:62:df:da:e4: d1:6e:1f:56:a6:a6:96:d0:71:96:65:bf:e3:ef:3a: 0c:78:f5:f0:ff:7d:3d:08:61:55:87:e2:da:14:18: b7:a2:a0:fe:70:7d:71:33:c0:5d:ae:b1:2d:0a:e4: fd:fb:ea:ee:31:28:96:81:20:63:71:46:07:66:40: e4:e2:e1:da:ac:97:58:e6:0e:ee:11:90:18:c7:70: cd:37:8c:06:60:86:74:12:9d:af:50:38:56:5f:0b: 4f:31:4c:82:11:80:2d:80:81:79:97:ec:74:1c:35: cd:25:c2:c8:46:62:20:b9:ad:0d:dd:ea:aa:29:d5: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:36:CD:12:65:04:74:B2:83:77:82:C8:E8:FE:D3:93:76:35:34:E9 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:10:93:a5:9e:a7:72:02:67:99:3e:85:27:2e:bd:1e:f5:9e: ce:ed:d6:2a:3d:0e:9e:0e:09:91:d9:bd:5f:e4:42:67:c9:be: 24:69:69:da:d2:d2:e7:8c:be:2c:a0:dc:6f:a5:b1:9e:09:d3: d4:1d:0b:d9:a7:71:7d:64:d7:43:70:95:93:e6:30:64:2b:38: 52:a4:09:aa:ef:c7:7b:8a:c1:b4:f1:f6:b3:91:70:a4:76:e5: 2a:31:70:0f:b5:1e:9a:88:de:5b:af:b2:56:d2:f4:9f:e5:ef: b0:f6:73:58:ac:c4:97:a1:ae:ef:2e:b4:58:15:44:53:22:2c: f8:e1:01:79:16:83:b6:55:5f:cc:a5:03:7f:d4:5c:be:fe:3d: 73:35:57:2f:66:02:57:2b:8a:6b:7a:8a:f4:1f:62:07:18:99: 6e:89:65:1a:0b:33:4f:62:3e:6f:df:5a:b2:f5:a3:5f:92:71: 0a:1f:89:11:76:dc:d0:7a:73:45:5c:dd:20:65:07:77:de:fa: 0a:26:32:d6:84:51:73:9a:22:32:3c:9a:84:98:29:1a:3f:6f: 0c:b0:1b:8f:d8:96:3e:46:e3:21:60:52:3b:a5:83:7a:cb:90: bb:d2:26:9c:70:ed:96:ed:3f:fa:c0:b0:dd:b0:97:74:b6:1f: d0:a1:a2:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjUxMTA0MTQzODE3WhcNMjUxMTExMTQzODE3WjAYMRYwFAYD VQQDEw02OTBhMGZkOS1hMGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6c3HzLGeu9iVUJ32S9XjMdJJhaQuMHkV5WI6wdTAxFShCTDIM39iMsReieg TZDIMu0HA+iSn16MUX0ueMTYNE/7TVgmslJt1zcjtKclpglSZA2FrrOwNCmuxBWL 9M/FeL9mbwNxK7ajmk+Ng+uhUmn+bSx64wsvh+WKJHG9ZK1LbmLf2uTRbh9WpqaW 0HGWZb/j7zoMePXw/309CGFVh+LaFBi3oqD+cH1xM8BdrrEtCuT9++ruMSiWgSBj cUYHZkDk4uHarJdY5g7uEZAYx3DNN4wGYIZ0Ep2vUDhWXwtPMUyCEYAtgIF5l+x0 HDXNJcLIRmIgua0N3eqqKdXVcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLo2zRJl BHSyg3eCyOj+05N2NTTpMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyEJOlnqdyAmeZPoUnLr0e9Z7O7dYqPQ6eDgmR2b1f5EJnyb4kaWna 0tLnjL4soNxvpbGeCdPUHQvZp3F9ZNdDcJWT5jBkKzhSpAmq78d7isG08fazkXCk duUqMXAPtR6aiN5br7JW0vSf5e+w9nNYrMSXoa7vLrRYFURTIiz44QF5FoO2VV/M pQN/1Fy+/j1zNVcvZgJXK4preor0H2IHGJluiWUaCzNPYj5v31qy9aNfknEKH4kR dtzQenNFXN0gZQd33voKJjLWhFFzmiIyPJqEmCkaP28MsBuP2JY+RuMhYFI7pYN6 y5C70iaccO2W7T/6wLDdsJd0th/QoaJW -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:37 2025 by rpki-client