$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json) Hash identifier: GbXzx2X+tGlRf1Ok9q6OZ6iiz7bFXL1rFQAM4VWp8fE= Subject key identifier: CE:4E:5C:A4:A6:F9:0F:E6:53:37:2A:B7:8B:DA:3D:39:C1:D7:5A:E4 Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Certificate serial: 2475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft Manifest number: 476B Signing time: Sun 02 Nov 2025 15:48:05 +0000 Manifest this update: Sun 02 Nov 2025 15:48:05 +0000 Manifest next update: Sun 09 Nov 2025 15:48:05 +0000 Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: q+gy4w8YETERDNY7dJzS4f525xZufUAvVVzA498ySEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9333 (0x2475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Validity Not Before: Nov 2 15:48:05 2025 GMT Not After : Nov 9 15:48:05 2025 GMT Subject: CN=69077d35-32bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:08:4b:3a:6b:f9:7a:94:54:5a:a8:e6:44: 4e:f3:f4:49:c4:b6:66:19:aa:b9:16:cc:f2:ec:0f: 5e:25:88:88:9d:a2:ff:17:b7:88:c2:59:86:2b:ed: 94:1d:73:b9:dc:5d:1f:aa:2d:4c:ad:a5:73:24:30: 40:33:00:2f:85:e5:8a:c4:26:6c:02:cb:4d:86:f9: 08:4b:69:7d:e0:81:86:32:9f:90:b9:44:0d:d2:51: aa:d2:ff:ef:14:30:55:43:ee:af:26:ac:b7:c9:17: 14:fb:a7:74:4f:e2:20:7d:62:f3:d4:ff:13:7f:6b: 35:0b:71:20:d3:0f:c2:cb:f3:db:37:04:a9:2b:78: 58:71:4e:cd:9f:85:4f:4a:f2:f4:4d:25:cc:31:27: f7:e1:84:b0:b4:54:32:f5:d6:26:f3:b6:dd:ec:02: 1b:c7:ce:37:6c:7d:a8:b5:28:40:f6:00:2a:9b:89: 8c:38:fa:09:1a:a9:3c:8c:b0:f6:10:44:57:12:b9: f5:48:41:68:4b:ba:e9:fb:17:08:d0:09:f3:be:44: 1b:93:4a:31:ec:16:36:4e:97:89:b0:f7:9d:e7:30: ef:6b:9b:38:d4:80:77:06:41:2d:24:75:84:4e:f8: 1f:db:a9:c7:d0:cf:98:4a:25:fc:12:4d:85:fa:0f: 17:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4E:5C:A4:A6:F9:0F:E6:53:37:2A:B7:8B:DA:3D:39:C1:D7:5A:E4 X509v3 Authority Key Identifier: keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:16:e6:59:65:f8:e6:3d:79:1c:8a:60:64:46:02:90:93:c4: 9d:45:f3:17:87:86:03:2c:d4:c5:24:cd:a3:c6:2f:c3:82:6b: 47:fa:fc:c1:e8:b6:48:cf:5b:82:ca:c7:b6:0e:70:d8:b3:9d: be:74:4a:89:bb:68:d1:b4:5b:61:af:01:14:e3:e8:09:c1:79: 72:d6:b6:40:a5:82:e3:80:55:69:87:fa:35:0d:0a:5b:88:1c: 5d:d4:4c:02:ee:01:3d:c3:e9:38:80:8c:c6:ba:a0:a3:ef:c3: e0:66:d1:4c:a6:1d:c7:06:4c:73:f9:e0:e1:3f:24:8b:01:a2: 57:36:c3:f6:a7:89:5d:c5:52:39:24:71:1c:6d:55:b5:23:f8: 57:62:27:21:b0:e3:b9:cf:84:14:0e:89:32:4c:0a:e5:73:a8: e0:b5:4d:e2:36:2e:8f:7d:a1:05:4d:2e:2e:02:ad:c0:b6:6f: 52:b6:bf:41:07:6f:86:d7:95:6e:60:e6:0f:a1:4a:47:ca:9b: 40:90:66:08:86:25:fa:9f:95:bd:1d:12:d9:a3:c2:64:e6:ab: f4:f8:31:4d:9a:83:50:40:ea:32:6e:9d:a0:1f:4f:e6:3b:00: 8c:a7:d7:fc:47:7a:b5:cf:36:70:61:aa:d7:2e:34:9c:7e:48: 8b:22:3c:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDczOEMyM0FBNENFNzU1NUVFQTJGQzhDMkJFRDhGNDZB NDg4REM5M0QwHhcNMjUxMTAyMTU0ODA1WhcNMjUxMTA5MTU0ODA1WjAYMRYwFAYD VQQDEw02OTA3N2QzNS0zMmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsC8ISzpr+XqUVFqo5kRO8/RJxLZmGaq5Fszy7A9eJYiInaL/F7eIwlmGK+2U HXO53F0fqi1MraVzJDBAMwAvheWKxCZsAstNhvkIS2l94IGGMp+QuUQN0lGq0v/v FDBVQ+6vJqy3yRcU+6d0T+IgfWLz1P8Tf2s1C3Eg0w/Cy/PbNwSpK3hYcU7Nn4VP SvL0TSXMMSf34YSwtFQy9dYm87bd7AIbx843bH2otShA9gAqm4mMOPoJGqk8jLD2 EERXErn1SEFoS7rp+xcI0AnzvkQbk0ox7BY2TpeJsPed5zDva5s41IB3BkEtJHWE Tvgf26nH0M+YSiX8Ek2F+g8XfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5OXKSm +Q/mUzcqt4vaPTnB11rkMB8GA1UdIwQYMBaAFHOMI6pM51Ve6i/Iwr7Y9GpIjck9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZWN3FMOGpDdnRqMGFraU55 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0d2pxa3puVlY3cUw4akN2dGowYWtpTnlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZW N3FMOGpDdnRqMGFraU55VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFFuZZZfjmPXkcimBkRgKQk8SdRfMXh4YDLNTFJM2jxi/DgmtH+vzB 6LZIz1uCyse2DnDYs52+dEqJu2jRtFthrwEU4+gJwXly1rZApYLjgFVph/o1DQpb iBxd1EwC7gE9w+k4gIzGuqCj78PgZtFMph3HBkxz+eDhPySLAaJXNsP2p4ldxVI5 JHEcbVW1I/hXYichsOO5z4QUDokyTArlc6jgtU3iNi6PfaEFTS4uAq3Atm9Str9B B2+G15VuYOYPoUpHyptAkGYIhiX6n5W9HRLZo8Jk5qv0+DFNmoNQQOoybp2gH0/m OwCMp9f8R3q1zzZwYarXLjScfkiLIjxg -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:28 2025 by rpki-client