$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft File: a4J2B8F85j5hIUwuZCxaqFHuOE4.mft (raw, json) Hash identifier: S0bHN11MgFCh09eR2yDq+JO3/pnkYgkzPYxf1ajxpo0= Subject key identifier: 4E:A5:42:60:28:E2:E0:AA:77:8D:3B:21:51:D5:BE:84:2E:C8:E4:FF Authority key identifier: 6B:82:76:07:C1:7C:E6:3E:61:21:4C:2E:64:2C:5A:A8:51:EE:38:4E Certificate issuer: /CN=A91BFD4B/serialNumber=6B827607C17CE63E61214C2E642C5AA851EE384E Certificate serial: 064C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft Manifest number: 0648 Signing time: Sun 02 Nov 2025 22:39:07 +0000 Manifest this update: Sun 02 Nov 2025 22:39:06 +0000 Manifest next update: Sun 09 Nov 2025 22:39:06 +0000 Files and hashes: 1: a4J2B8F85j5hIUwuZCxaqFHuOE4.crl (hash: ByjzlyBGv3aowtbQxqaJwtizwTjii6/HbY5Tdc6qSGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.crl rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1612 (0x64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFD4B, serialNumber=6B827607C17CE63E61214C2E642C5AA851EE384E Validity Not Before: Nov 2 22:39:06 2025 GMT Not After : Nov 9 22:39:06 2025 GMT Subject: CN=6907dd8b-0796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f5:e4:68:f4:7a:46:cf:be:31:21:97:05:8e: cd:c4:2f:8c:85:1a:d6:e8:cd:a6:cd:28:62:cc:43: c5:10:7b:fc:70:7a:4d:20:7a:47:c9:71:07:a3:e1: cf:81:db:1a:b4:23:31:83:87:e4:fa:35:f6:23:c0: d7:c9:e5:12:f0:77:1c:a8:38:3b:48:5d:93:fd:34: 5d:06:b7:ef:e9:b7:93:92:97:48:39:51:e7:0a:31: 42:5e:8d:fc:0c:d8:fe:13:07:b6:eb:0b:75:b9:8e: 7a:6c:3b:cc:f3:f7:1b:78:19:be:84:49:11:3e:24: ba:50:54:07:46:71:0e:86:df:e4:dd:ba:2d:da:f9: 9b:ae:2a:0e:54:24:bf:ed:9c:57:d7:d6:08:9e:87: 06:28:fd:af:b7:d7:5d:4c:d1:6b:1c:51:8e:f6:22: 9d:65:3d:e7:24:67:c6:92:c1:27:cd:bf:1e:fc:c5: 1e:44:44:10:4b:8f:ef:26:50:7d:b4:dc:b9:a9:90: ad:1c:16:7d:73:17:79:13:3e:94:5f:80:1c:a4:55: 7a:78:83:77:38:d5:ca:b3:e7:52:9b:15:7f:63:67: ed:db:f6:7c:11:e9:b4:e9:29:b7:a3:21:46:8b:f0: 74:a7:c5:21:96:de:f2:ce:23:e8:fa:1e:68:9b:e0: 5a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A5:42:60:28:E2:E0:AA:77:8D:3B:21:51:D5:BE:84:2E:C8:E4:FF X509v3 Authority Key Identifier: keyid:6B:82:76:07:C1:7C:E6:3E:61:21:4C:2E:64:2C:5A:A8:51:EE:38:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:57:69:09:c2:c9:c2:ab:02:16:e4:e4:86:da:24:fc:8e:b2: eb:1d:f6:83:8c:5c:00:a9:bc:cf:22:ee:a0:0c:ab:c8:bd:92: a8:72:30:1e:09:93:f3:d3:b4:e4:fc:aa:40:5e:76:a9:f9:cc: 00:4d:85:6b:45:58:f2:7f:d0:35:53:9f:d3:1e:bd:7f:75:83: c1:53:81:f5:4f:67:61:c2:87:b3:b9:93:74:98:25:30:4c:8c: 97:db:35:b1:a1:0c:46:ff:f3:f0:a8:df:2c:83:57:2a:d4:18: fd:1e:d1:25:aa:f3:09:53:94:51:17:89:f9:c5:d9:af:9b:49: 87:e0:16:86:63:9e:5a:8f:b7:0f:a3:f7:ec:f8:d9:f9:35:ec: aa:c3:9e:d0:72:55:cc:67:72:22:67:54:30:6c:5f:11:09:a5: 13:25:35:47:94:91:41:78:db:f2:6c:f1:66:a9:06:18:ea:d2: ba:46:5c:f2:7d:9f:6e:42:b8:e7:e5:60:35:e3:a0:ab:42:80: 14:5a:42:0f:24:54:71:20:83:58:8b:87:d0:58:e2:1c:6f:62: 1c:7a:5e:cf:d6:5c:1d:28:af:9f:84:12:11:91:5c:15:91:ed: eb:38:e1:0b:34:c6:48:d3:60:cb:89:cd:a3:10:64:c7:a5:f9: 08:db:fa:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZENEIxMTAvBgNVBAUTKDZCODI3NjA3QzE3Q0U2M0U2MTIxNEMyRTY0MkM1QUE4 NTFFRTM4NEUwHhcNMjUxMTAyMjIzOTA2WhcNMjUxMTA5MjIzOTA2WjAYMRYwFAYD VQQDEw02OTA3ZGQ4Yi0wNzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPXkaPR6Rs++MSGXBY7NxC+MhRrW6M2mzShizEPFEHv8cHpNIHpHyXEHo+HP gdsatCMxg4fk+jX2I8DXyeUS8HccqDg7SF2T/TRdBrfv6beTkpdIOVHnCjFCXo38 DNj+Ewe26wt1uY56bDvM8/cbeBm+hEkRPiS6UFQHRnEOht/k3bot2vmbrioOVCS/ 7ZxX19YInocGKP2vt9ddTNFrHFGO9iKdZT3nJGfGksEnzb8e/MUeREQQS4/vJlB9 tNy5qZCtHBZ9cxd5Ez6UX4AcpFV6eIN3ONXKs+dSmxV/Y2ft2/Z8Eem06Sm3oyFG i/B0p8Uhlt7yziPo+h5om+BapQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6lQmAo 4uCqd407IVHVvoQuyOT/MB8GA1UdIwQYMBaAFGuCdgfBfOY+YSFMLmQsWqhR7jhO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkQ0Qi9BQTQ3ODkzQUFC RDkxMUVCODMzRDRDNkFDNEY5QUUwMi9hNEoyQjhGODVqNWhJVXd1WkN4YXFGSHVP RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0SjJCOEY4NWo1aElVd3VaQ3hhcUZIdU9FNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkQ0Qi9BQTQ3ODkzQUFCRDkxMUVCODMzRDRDNkFDNEY5QUUwMi9hNEoyQjhGODVq NWhJVXd1WkN4YXFGSHVPRTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+V2kJwsnCqwIW5OSG2iT8jrLrHfaDjFwAqbzPIu6gDKvIvZKocjAe CZPz07Tk/KpAXnap+cwATYVrRVjyf9A1U5/THr1/dYPBU4H1T2dhwoezuZN0mCUw TIyX2zWxoQxG//PwqN8sg1cq1Bj9HtElqvMJU5RRF4n5xdmvm0mH4BaGY55aj7cP o/fs+Nn5Neyqw57QclXMZ3IiZ1QwbF8RCaUTJTVHlJFBeNvybPFmqQYY6tK6Rlzy fZ9uQrjn5WA146CrQoAUWkIPJFRxIINYi4fQWOIcb2Icel7P1lwdKK+fhBIRkVwV ke3rOOELNMZI02DLic2jEGTHpfkI2/p8 -----END CERTIFICATE-----Generated at Tue Nov 4 08:08:16 2025 by rpki-client