$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft File: 4H5XaJwnqZNhHLq6l7GU0xeWz28.mft (raw, json) Hash identifier: sshoN/3JpZXmYK+So76d229sWN0iKs2gvC5Z19M4wLg= Subject key identifier: 13:B9:73:A1:E7:8B:6A:C4:9B:AB:A0:0B:0F:40:0A:F8:01:38:A6:61 Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F Certificate issuer: /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft Manifest number: 53 Signing time: Wed 05 Nov 2025 07:26:19 +0000 Manifest this update: Wed 05 Nov 2025 07:26:18 +0000 Manifest next update: Wed 12 Nov 2025 07:26:18 +0000 Files and hashes: 1: 4H5XaJwnqZNhHLq6l7GU0xeWz28.crl (hash: JyEhoU1k1e4Rd+d80ERGDdoj++gbZuvkeYK69FINk08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Validity Not Before: Nov 5 07:26:18 2025 GMT Not After : Nov 12 07:26:18 2025 GMT Subject: CN=690afc1a-4a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:61:38:72:3e:b8:52:bb:87:05:f3:3b:91:44: 2b:19:23:e8:f6:af:d3:7f:11:5b:2f:59:22:13:b0: b0:c4:50:13:50:0c:d1:df:ed:af:74:c4:c4:03:f4: b7:11:59:12:99:8b:e3:d4:fe:65:e2:07:ab:a5:76: f6:d9:93:48:21:20:d4:ae:02:c9:49:cc:42:91:66: 45:bb:3e:be:70:fd:a2:e5:60:76:1c:aa:63:48:5a: 60:87:b3:8b:24:5d:68:8e:55:26:c8:c3:47:3e:31: a2:0c:4a:28:f3:55:14:be:70:a8:7f:6f:71:1b:1d: 3d:d2:2e:77:ce:dd:bb:54:b5:83:3a:16:07:dc:4b: b1:07:fb:ec:d5:eb:1f:32:76:2b:88:8d:23:7e:47: 33:77:fb:1f:d6:a0:51:da:f4:96:32:1d:2d:b9:3b: f7:5b:e8:45:a1:c0:33:e9:bb:3b:93:b6:fb:78:c0: 3e:8d:22:9e:42:c2:c0:81:16:a6:f7:30:62:da:2f: 3b:f4:0e:7a:51:0b:e0:a3:fa:d8:00:b6:6e:59:df: 2f:54:bc:de:bb:71:3d:fc:32:c3:fc:9d:b2:e7:2b: 6f:af:08:ea:5e:b5:ab:80:ac:a9:6b:46:bb:da:ce: 75:8a:c1:54:c5:79:b7:e0:21:73:52:8e:42:45:25: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B9:73:A1:E7:8B:6A:C4:9B:AB:A0:0B:0F:40:0A:F8:01:38:A6:61 X509v3 Authority Key Identifier: keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:8a:9f:78:8a:aa:97:43:a5:e8:cc:20:63:37:68:f5:99:4c: a8:bf:6e:7c:bf:1a:74:be:62:87:2c:c6:08:ef:58:5d:fd:a7: 5c:6c:6b:f6:c5:17:25:84:70:93:22:82:a9:c0:61:2c:6c:86: 74:0b:2e:a7:f8:1a:e9:88:b7:64:a7:fc:6a:2f:5c:49:e7:ec: 88:50:45:a9:82:fd:7e:fc:18:ec:1b:50:42:e2:46:3c:07:b3: d9:a2:ba:08:58:9c:ea:15:e2:8d:9b:16:ad:a6:b2:52:59:5d: d2:22:fd:76:61:47:b7:67:06:14:43:c1:cb:c0:38:46:1f:2f: 80:4c:5e:d2:d9:f2:4d:fd:05:48:6e:de:c7:cb:22:68:4b:f8: 58:75:48:86:1d:62:64:e0:5d:3f:9a:ce:cb:1a:8a:ae:66:34: e1:c5:93:c5:b5:88:4a:d1:41:0f:a5:74:39:87:63:63:98:63: 3a:4b:4c:12:37:6e:19:78:5e:49:e3:c3:db:b7:3e:31:af:46: d8:6b:d2:95:cf:91:48:99:02:67:36:c5:52:91:9c:e8:88:21: 9d:e7:8b:08:90:ce:77:3b:0d:ec:33:52:f3:13:f0:ab:2b:f6: 30:70:da:cc:4e:7d:ac:9d:8e:3b:77:a9:6f:5c:4a:c0:fa:5b: bf:b0:b2:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0U1QjExMC8GA1UEBRMoRTA3RTU3Njg5QzI3QTk5MzYxMUNCQUJBOTdCMTk0RDMx Nzk2Q0Y2RjAeFw0yNTExMDUwNzI2MThaFw0yNTExMTIwNzI2MThaMBgxFjAUBgNV BAMTDTY5MGFmYzFhLTRhOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdYThyPrhSu4cF8zuRRCsZI+j2r9N/EVsvWSITsLDEUBNQDNHf7a90xMQD9LcR WRKZi+PU/mXiB6uldvbZk0ghINSuAslJzEKRZkW7Pr5w/aLlYHYcqmNIWmCHs4sk XWiOVSbIw0c+MaIMSijzVRS+cKh/b3EbHT3SLnfO3btUtYM6FgfcS7EH++zV6x8y diuIjSN+RzN3+x/WoFHa9JYyHS25O/db6EWhwDPpuzuTtvt4wD6NIp5CwsCBFqb3 MGLaLzv0DnpRC+Cj+tgAtm5Z3y9UvN67cT38MsP8nbLnK2+vCOpetauArKlrRrva znWKwVTFebfgIXNSjkJFJWFFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE7lzoeeL asSbq6ALD0AK+AE4pmEwHwYDVR0jBBgwFoAU4H5XaJwnqZNhHLq6l7GU0xeWz28w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RTVCL0UxNEY3MjI0M0M2 RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpOaEhMcTZsN0dVMHhlV3oy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEg1WGFKd25xWk5oSExxNmw3R1UweGVXejI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RTVCL0UxNEY3MjI0M0M2RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpO aEhMcTZsN0dVMHhlV3oyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAOKn3iKqpdDpejMIGM3aPWZTKi/bny/GnS+YocsxgjvWF39p1xsa/bF FyWEcJMigqnAYSxshnQLLqf4GumIt2Sn/GovXEnn7IhQRamC/X78GOwbUELiRjwH s9miughYnOoV4o2bFq2mslJZXdIi/XZhR7dnBhRDwcvAOEYfL4BMXtLZ8k39BUhu 3sfLImhL+Fh1SIYdYmTgXT+azssaiq5mNOHFk8W1iErRQQ+ldDmHY2OYYzpLTBI3 bhl4Xknjw9u3PjGvRthr0pXPkUiZAmc2xVKRnOiIIZ3niwiQznc7DewzUvMT8Ksr 9jBw2sxOfaydjjt3qW9cSsD6W7+wshs= -----END CERTIFICATE-----Generated at Wed Nov 5 10:02:09 2025 by rpki-client