$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft File: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json) Hash identifier: e3hCJ5yNCNGSVfpokWggbVJzvSVQx8hHQYR9Ja4TiOo= Subject key identifier: 48:15:82:D6:70:16:92:7F:11:77:C2:8A:4E:F6:D6:21:A9:6C:BE:2E Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft Manifest number: 52 Signing time: Mon 03 Nov 2025 07:13:54 +0000 Manifest this update: Mon 03 Nov 2025 07:13:54 +0000 Manifest next update: Mon 10 Nov 2025 07:13:54 +0000 Files and hashes: 1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: eCftJXBc7OH+At5BHp12QJEMwek/im0kzD+R31s3nQo=) 2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: EdyHrGdK241FduLFJE474YipzEeOWQ4qQLPgbqAJOd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Validity Not Before: Nov 3 07:13:54 2025 GMT Not After : Nov 10 07:13:54 2025 GMT Subject: CN=69085632-6bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:4a:8a:b4:10:49:f1:5e:2b:1c:18:e9:af: cb:86:ff:20:11:39:f2:dc:da:53:3e:54:fb:85:27: e5:71:ee:f4:a6:31:ae:8a:5e:53:5b:f4:8d:d1:76: 6f:86:b7:ef:14:03:5f:7e:d7:4d:41:55:b0:6e:9a: fc:4b:28:69:19:c5:4b:f2:10:07:2b:e3:4b:d8:5e: c2:34:cb:e7:87:12:42:66:fc:0d:5e:f6:54:57:57: 5a:50:1b:fd:cf:0c:9a:32:68:f6:77:5c:f7:5f:15: d4:b7:2d:1f:82:28:e9:54:f0:ba:cc:26:65:d8:a2: 5a:8a:8b:ee:bd:4f:b9:b4:3e:f8:9e:e6:9b:b1:ac: c7:10:fa:36:26:d9:25:1b:ce:f5:df:99:22:1b:08: c0:79:b0:ca:2e:63:0a:9b:ce:ed:69:0f:4e:c6:77: ce:ab:25:79:a7:0c:64:ed:be:b6:60:a3:57:1a:cf: 51:ae:22:8c:dc:6c:5f:ae:92:91:b2:8b:79:2a:ab: 3f:32:69:fc:7b:8a:e9:c7:a6:df:86:a4:21:43:82: 3e:a5:69:1f:54:d1:d5:26:6c:3b:7b:08:bd:31:af: 5f:ca:26:85:9a:4f:f1:6a:82:78:0d:38:f4:3c:88: 2a:af:eb:c2:7e:76:8c:d9:ba:c3:d3:b0:57:70:8f: eb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:15:82:D6:70:16:92:7F:11:77:C2:8A:4E:F6:D6:21:A9:6C:BE:2E X509v3 Authority Key Identifier: keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:f9:3c:6d:28:f7:71:28:ef:7a:c5:42:cf:de:9f:b6:04:d2: 10:47:da:cc:53:74:29:cf:ad:b2:c5:f6:06:f2:54:2f:30:98: ec:bf:5d:cf:7d:5e:e7:b1:96:26:fc:1a:04:96:01:c0:1a:6e: f1:64:34:b1:35:f3:d7:fb:f4:de:cd:07:e5:a2:b6:5d:f2:12: 5e:79:87:65:90:d4:0f:0f:f9:83:84:c9:f1:f6:d8:61:dc:35: e2:23:04:90:2e:34:20:a9:36:fe:56:ab:85:9f:a3:be:61:f5: 34:f5:6a:ba:a9:a6:f5:6a:f4:13:39:c9:75:72:e6:12:3e:94: 87:c0:7e:0b:07:57:67:86:3c:70:d5:02:e7:9d:4a:24:da:12: 58:d6:fd:e2:f8:c9:bc:61:07:97:20:39:67:82:71:2f:30:35: 1c:19:da:34:ee:c7:1e:7c:8f:53:23:09:89:23:d8:2a:65:1c: d0:8f:78:0b:44:76:d8:20:f3:fd:f9:26:61:4e:64:98:63:45: 57:6f:9d:58:4b:5c:3b:46:09:15:9a:f6:b7:f7:f9:63:cf:07: b6:c0:66:0d:83:9d:f5:6c:6c:57:c8:50:cd:a6:a4:61:fe:7c: ec:ae:bd:dc:7b:a2:c4:92:ea:70:01:02:37:70:08:37:bd:91: 42:be:63:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkE0RjExMC8GA1UEBRMoRTAzOThENTRBQ0Q5REIzM0VENEZDQUE4RDIyODA1RDQ1 RTgwQ0JCNjAeFw0yNTExMDMwNzEzNTRaFw0yNTExMTAwNzEzNTRaMBgxFjAUBgNV BAMTDTY5MDg1NjMyLTZiZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvTkqKtBBJ8V4rHBjpr8uG/yAROfLc2lM+VPuFJ+Vx7vSmMa6KXlNb9I3Rdm+G t+8UA19+101BVbBumvxLKGkZxUvyEAcr40vYXsI0y+eHEkJm/A1e9lRXV1pQG/3P DJoyaPZ3XPdfFdS3LR+CKOlU8LrMJmXYolqKi+69T7m0Pvie5puxrMcQ+jYm2SUb zvXfmSIbCMB5sMouYwqbzu1pD07Gd86rJXmnDGTtvrZgo1caz1GuIozcbF+ukpGy i3kqqz8yafx7iunHpt+GpCFDgj6laR9U0dUmbDt7CL0xr1/KJoWaT/FqgngNOPQ8 iCqv68J+dozZusPTsFdwj+vfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSBWC1nAW kn8Rd8KKTvbWIalsvi4wHwYDVR0jBBgwFoAU4DmNVKzZ2zPtT8qo0igF1F6Ay7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTRGLzU4N0YzNURBM0I3 NzExRjA5N0E4QkIyNEM0RjlBRTAyLzREbU5WS3paMnpQdFQ4cW8waWdGMUY2QXk3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNERtTlZLeloyelB0VDhxbzBpZ0YxRjZBeTdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTRGLzU4N0YzNURBM0I3NzExRjA5N0E4QkIyNEM0RjlBRTAyLzREbU5WS3paMnpQ dFQ4cW8waWdGMUY2QXk3WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKf5PG0o93Eo73rFQs/en7YE0hBH2sxTdCnPrbLF9gbyVC8wmOy/Xc99 Xuexlib8GgSWAcAabvFkNLE189f79N7NB+Witl3yEl55h2WQ1A8P+YOEyfH22GHc NeIjBJAuNCCpNv5Wq4Wfo75h9TT1arqppvVq9BM5yXVy5hI+lIfAfgsHV2eGPHDV AuedSiTaEljW/eL4ybxhB5cgOWeCcS8wNRwZ2jTuxx58j1MjCYkj2CplHNCPeAtE dtgg8/35JmFOZJhjRVdvnVhLXDtGCRWa9rf3+WPPB7bAZg2DnfVsbFfIUM2mpGH+ fOyuvdx7osSS6nABAjdwCDe9kUK+Y/0= -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:19 2025 by rpki-client