$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft File: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft (raw, json) Hash identifier: g7ZdaVqsqRImG2JwPMubwuhZnCXaiJPHhap/6NkbXlo= Subject key identifier: 55:56:50:48:65:01:4B:2D:55:C4:AE:50:C6:2C:A5:8D:4C:7C:39:3A Authority key identifier: E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A Certificate issuer: /CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A Certificate serial: 0DED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft Manifest number: 0DE6 Signing time: Sun 02 Nov 2025 17:52:12 +0000 Manifest this update: Sun 02 Nov 2025 17:52:11 +0000 Manifest next update: Sun 09 Nov 2025 17:52:11 +0000 Files and hashes: 1: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl (hash: AoXiSee0sxlZgMWF+fpNULLimMxEswX/MwlLVKdtGGI=) 2: 7321413EC22511E99FB7F225C4F9AE02.roa (hash: H10nxhyS/VwDB93m2/HXj3BoCowkULE1EpiVOf28AL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3565 (0xded) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0367, serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A Validity Not Before: Nov 2 17:52:11 2025 GMT Not After : Nov 9 17:52:11 2025 GMT Subject: CN=69079a4b-ff7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7b:a4:3a:05:78:9f:38:ff:bc:60:c6:6e:f6: 2b:e1:52:0f:fa:5b:29:29:c5:86:b7:df:76:e9:e3: 72:89:b5:05:31:1d:22:c0:27:0c:ca:74:7e:c8:f2: ba:42:86:b4:87:92:13:79:ea:5a:19:1a:ce:1a:b7: dc:4e:91:f6:15:a6:7a:26:06:ed:7d:44:34:d5:f3: 07:1b:a4:35:3f:e0:20:6b:a1:13:ec:6c:ef:b5:61: 8c:13:dd:40:b8:4d:b1:f5:0f:11:3f:91:c5:72:a6: 9d:71:b0:e3:ad:9d:0f:71:2f:0b:db:1c:26:69:1d: a9:56:e3:b0:28:5a:14:be:b5:bb:1f:08:4e:8b:67: 34:33:e2:fd:7b:72:fd:39:08:7d:d3:bd:1f:33:5c: 7f:07:71:3c:73:ca:2e:8c:13:9e:6c:01:78:9d:b8: 36:8f:08:76:14:4f:ff:33:6f:08:fa:d7:26:ae:fd: b4:07:2e:64:7c:a8:95:42:28:f9:f6:31:f3:11:62: db:8a:57:1b:c9:c9:ea:96:d4:81:dc:fb:b3:10:77: a3:60:ee:2d:28:64:61:20:d8:fd:97:1c:de:40:43: 61:fb:cb:50:e6:ec:26:cb:ab:22:07:54:d6:9a:64: 33:df:67:29:9c:af:11:f1:33:e2:ba:09:c3:56:18: 33:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:56:50:48:65:01:4B:2D:55:C4:AE:50:C6:2C:A5:8D:4C:7C:39:3A X509v3 Authority Key Identifier: keyid:E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:66:11:08:a4:38:d8:e5:8c:ca:69:e9:eb:61:a2:b9:cb:7b: 1e:2e:d5:d5:26:af:87:db:0f:6c:b4:cb:71:39:58:ac:ab:1e: d0:11:14:6e:87:e4:1a:2c:dd:ed:42:01:0e:1b:44:5c:0b:29: a1:8e:eb:12:fb:c9:17:4d:18:81:4e:9a:96:db:98:10:2e:0e: 2b:3f:7a:7d:87:53:91:5c:e7:f2:ca:4a:12:a4:3e:7b:1d:1a: 4b:52:fd:9f:1f:32:33:8d:62:46:cd:52:c3:aa:cb:97:d7:56: c6:8d:84:b1:98:92:73:8d:52:e6:30:f5:65:b3:c8:9f:46:94: 8a:77:4a:d9:af:41:34:2c:64:40:c3:51:71:76:fe:d1:6d:73: 4b:34:c8:1c:15:75:ae:e4:b1:1d:d6:4d:22:bc:43:ec:c0:07: f8:cc:9f:55:48:fa:ae:e2:cc:96:97:08:99:62:3a:a0:51:6d: e3:4f:b0:33:d4:6c:a7:d3:a0:3b:ba:cb:3c:03:9b:a5:39:de: 95:d3:ae:63:70:59:80:17:93:14:e7:a4:44:45:d4:41:91:fd: 63:fb:26:63:c3:8f:64:72:a1:4b:e2:89:17:20:59:aa:70:06: 05:14:d7:83:41:50:b6:d8:95:27:ec:9a:e8:c3:9f:9c:ca:1d: 4c:d9:3a:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNjcxMTAvBgNVBAUTKEUxNUEzNjAzNzJEREFGMUM1QjIxOEU4QzRDRjY5RjZG OEJEN0Y1OUEwHhcNMjUxMTAyMTc1MjExWhcNMjUxMTA5MTc1MjExWjAYMRYwFAYD VQQDEw02OTA3OWE0Yi1mZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XukOgV4nzj/vGDGbvYr4VIP+lspKcWGt9926eNyibUFMR0iwCcMynR+yPK6 Qoa0h5ITeepaGRrOGrfcTpH2FaZ6JgbtfUQ01fMHG6Q1P+Aga6ET7GzvtWGME91A uE2x9Q8RP5HFcqadcbDjrZ0PcS8L2xwmaR2pVuOwKFoUvrW7HwhOi2c0M+L9e3L9 OQh9070fM1x/B3E8c8oujBOebAF4nbg2jwh2FE//M28I+tcmrv20By5kfKiVQij5 9jHzEWLbilcbycnqltSB3PuzEHejYO4tKGRhINj9lxzeQENh+8tQ5uwmy6siB1TW mmQz32cpnK8R8TPiugnDVhgzqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVWUEhl AUstVcSuUMYspY1MfDk6MB8GA1UdIwQYMBaAFOFaNgNy3a8cWyGOjEz2n2+L1/Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2Ny8wOEMzRDI4RUMy MjUxMUU5QTM2N0QzMjVDNEY5QUUwMi80Vm8yQTNMZHJ4eGJJWTZNVFBhZmI0dlg5 Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWbzJBM0xkcnh4YklZNk1UUGFmYjR2WDlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2Ny8wOEMzRDI4RUMyMjUxMUU5QTM2N0QzMjVDNEY5QUUwMi80Vm8yQTNMZHJ4 eGJJWTZNVFBhZmI0dlg5Wm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoZhEIpDjY5YzKaenrYaK5y3seLtXVJq+H2w9stMtxOVisqx7QERRu h+QaLN3tQgEOG0RcCymhjusS+8kXTRiBTpqW25gQLg4rP3p9h1ORXOfyykoSpD57 HRpLUv2fHzIzjWJGzVLDqsuX11bGjYSxmJJzjVLmMPVls8ifRpSKd0rZr0E0LGRA w1Fxdv7RbXNLNMgcFXWu5LEd1k0ivEPswAf4zJ9VSPqu4syWlwiZYjqgUW3jT7Az 1Gyn06A7uss8A5ulOd6V065jcFmAF5MU56RERdRBkf1j+yZjw49kcqFL4okXIFmq cAYFFNeDQVC22JUn7Jrow5+cyh1M2TqS -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:52 2025 by rpki-client