$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json) Hash identifier: y5pTviRBRmss6vnfWns8nfSe8ob1vFTj5LN9koV1M0g= Subject key identifier: 3D:02:1E:85:2E:E7:0F:38:6D:86:F1:E7:1B:46:EA:BB:5C:1F:40:79 Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Certificate serial: 0DEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft Manifest number: 0DCE Signing time: Tue 04 Nov 2025 17:59:21 +0000 Manifest this update: Tue 04 Nov 2025 17:59:21 +0000 Manifest next update: Tue 11 Nov 2025 17:59:21 +0000 Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: vwHpNDj1ssOkI2ZgUA6xCv+NMRhO1vc4DZp46TTh2uA=) 2: 8B41351885EB11F0B665685EC4F9AE02.roa (hash: 3jicQmgQkvww41dqycYyBrr/vfnWtkA7h6bxqXU86fw=) 3: 3AA99BFC85E311F08C58A47BC4F9AE02.roa (hash: P7cfUWJzhGI/B+OEAI2GfYhnJaFGcv7V45ZOvv42ixM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3564 (0xdec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Validity Not Before: Nov 4 17:59:21 2025 GMT Not After : Nov 11 17:59:21 2025 GMT Subject: CN=690a3ef9-0f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7c:b5:20:6f:0f:13:b4:b7:f5:51:9f:db:1a: 06:51:c0:1d:61:b2:26:03:03:e4:3a:e2:23:92:25: de:02:1c:96:26:5e:9e:44:09:d3:89:52:ac:85:81: a3:47:77:2a:a4:f5:85:35:6c:7b:00:e7:44:4c:fc: b0:62:15:4a:ef:8b:a9:aa:1d:35:45:f8:80:3d:df: 4e:87:ae:58:2f:19:c0:a9:6f:92:f3:d2:5d:2a:ae: 79:04:4b:e6:c0:04:6b:92:70:b2:66:4d:a0:98:b0: a6:97:37:c7:0f:5d:1b:54:fc:d6:d5:03:63:fe:0c: 4f:d6:d0:45:7b:6e:73:b6:38:0e:8e:64:b9:ac:7f: 86:ee:cc:ab:57:1c:0a:11:bd:de:19:2f:da:d4:d4: a2:d9:03:4a:0e:59:24:15:63:d8:af:b3:6b:4d:e9: 88:af:76:b1:14:50:01:6e:bd:78:15:96:15:fb:33: fc:ce:20:10:b6:3c:44:96:4d:4d:80:f8:2b:46:31: c1:6a:86:15:0b:80:c7:29:9d:0c:75:45:0e:57:a3: d8:85:bf:75:6a:4b:a8:86:81:5e:d3:18:ac:33:48: 6b:a6:f9:27:7e:98:76:02:90:52:8b:4e:d9:f1:15: f0:4b:39:81:0e:cf:90:75:d2:8e:25:d2:92:10:ba: b6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:02:1E:85:2E:E7:0F:38:6D:86:F1:E7:1B:46:EA:BB:5C:1F:40:79 X509v3 Authority Key Identifier: keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:90:dd:54:90:e1:c6:dc:e8:38:e9:55:25:92:bc:56:2d:15: eb:85:6d:90:f6:59:4e:af:48:31:38:22:62:3f:e3:3b:72:0b: 5a:dc:48:25:63:b7:23:1d:43:f9:1a:af:e1:66:fa:4d:bb:4a: 66:d5:ad:72:35:3c:6f:f2:20:e2:5a:5d:25:a9:b3:49:cc:d6: ae:f3:61:ce:d4:46:ff:ed:e1:46:74:02:85:e4:f6:2c:36:a3: 1d:13:7d:60:22:dd:dd:4a:4a:8a:23:36:c3:fa:8c:29:cf:3e: d0:e7:a8:e6:94:35:76:d3:fe:65:ba:b9:97:31:45:e8:82:9d: 2a:12:df:32:cc:e7:66:a8:4d:6c:ef:88:c8:79:f4:45:19:df: 3b:d0:f5:09:0d:c5:84:ab:23:2f:31:ae:7e:4b:31:0f:71:39: 74:dc:92:1f:64:0a:96:9d:fe:7f:4c:29:b0:ce:30:6b:49:35: de:ef:5f:e9:c9:19:38:98:dd:0b:e7:a4:38:23:60:9b:54:5e: 64:1d:b4:35:13:26:d6:8b:7a:63:49:bf:52:69:9e:a2:79:45: 58:2d:a7:5d:2e:5f:16:70:6c:a4:96:b8:16:71:ce:5c:f4:a3: c7:39:24:78:a4:44:ef:fc:d2:18:3f:f7:a6:7b:01:c1:64:59: 20:f1:c1:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdGNDcxMTAvBgNVBAUTKEUzMEE0Q0RERjZDMjY5QUNCQTM5Q0E1OEFBOTU5MkQ4 OTg2NDAxRjQwHhcNMjUxMTA0MTc1OTIxWhcNMjUxMTExMTc1OTIxWjAYMRYwFAYD VQQDEw02OTBhM2VmOS0wZjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Hy1IG8PE7S39VGf2xoGUcAdYbImAwPkOuIjkiXeAhyWJl6eRAnTiVKshYGj R3cqpPWFNWx7AOdETPywYhVK74upqh01RfiAPd9Oh65YLxnAqW+S89JdKq55BEvm wARrknCyZk2gmLCmlzfHD10bVPzW1QNj/gxP1tBFe25ztjgOjmS5rH+G7syrVxwK Eb3eGS/a1NSi2QNKDlkkFWPYr7NrTemIr3axFFABbr14FZYV+zP8ziAQtjxElk1N gPgrRjHBaoYVC4DHKZ0MdUUOV6PYhb91akuohoFe0xisM0hrpvknfph2ApBSi07Z 8RXwSzmBDs+QddKOJdKSELq2DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0CHoUu 5w84bYbx5xtG6rtcH0B5MB8GA1UdIwQYMBaAFOMKTN32wmmsujnKWKqVktiYZAH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0Y0Ny8zMzBBMDA4Q0NF NTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2FheTZPY3BZcXBXUzJKaGtB ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR3cE0zZmJDYWF5Nk9jcFlxcFdTMkpoa0FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0Y0Ny8zMzBBMDA4Q0NFNTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2Fh eTZPY3BZcXBXUzJKaGtBZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADkN1UkOHG3Og46VUlkrxWLRXrhW2Q9llOr0gxOCJiP+M7cgta3Egl Y7cjHUP5Gq/hZvpNu0pm1a1yNTxv8iDiWl0lqbNJzNau82HO1Eb/7eFGdAKF5PYs NqMdE31gIt3dSkqKIzbD+owpzz7Q56jmlDV20/5lurmXMUXogp0qEt8yzOdmqE1s 74jIefRFGd870PUJDcWEqyMvMa5+SzEPcTl03JIfZAqWnf5/TCmwzjBrSTXe71/p yRk4mN0L56Q4I2CbVF5kHbQ1EybWi3pjSb9SaZ6ieUVYLaddLl8WcGyklrgWcc5c 9KPHOSR4pETv/NIYP/emewHBZFkg8cHO -----END CERTIFICATE-----Generated at Wed Nov 5 10:30:46 2025 by rpki-client