$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft File: g4L2GIxKbdZpVNVxij2cz5uL-JU.mft (raw, json) Hash identifier: Z1vChs6z8LMKb2cuM7mjl3PEn4s1UsALQ+1dJeMdFo4= Subject key identifier: 79:6C:85:03:8E:C2:BE:4B:BD:5F:4E:9F:21:02:09:FD:8F:39:83:E8 Authority key identifier: 83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 Certificate issuer: /CN=A91CB8BA/serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Certificate serial: 0833 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft Manifest number: 082D Signing time: Tue 04 Nov 2025 20:25:45 +0000 Manifest this update: Tue 04 Nov 2025 20:25:44 +0000 Manifest next update: Tue 11 Nov 2025 20:25:44 +0000 Files and hashes: 1: g4L2GIxKbdZpVNVxij2cz5uL-JU.crl (hash: 5cpPiiSmuAL4uRn7aOxxQkPy7t3Bfo8Dib/WaRfecQ8=) 2: 21B96F2E7BC911EBABCF472DC4F9AE02.roa (hash: jfAjvDFneg9TxfVOqlYPDujvfvVSOSgnFYEvXUOG5OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2099 (0x833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Validity Not Before: Nov 4 20:25:44 2025 GMT Not After : Nov 11 20:25:44 2025 GMT Subject: CN=690a6149-f5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:48:79:15:ca:41:a5:4e:48:17:21:38:1a: 2c:a7:fc:8d:71:fe:bc:b9:52:2a:1e:1c:fa:14:05: 81:f0:84:b5:1c:97:c7:64:eb:f5:ec:ea:a2:29:ed: c5:c4:bd:03:ce:5f:f5:85:06:b7:30:18:74:dd:60: a6:ff:53:f0:de:4c:be:d6:d6:87:ff:7f:ff:65:46: 39:14:5e:a1:2e:52:ae:ff:95:78:78:65:35:5a:8e: 94:f6:06:66:21:3f:3f:b1:22:77:8f:fa:e3:2c:9f: 36:39:12:04:62:77:95:1f:49:94:21:d0:28:45:27: 23:e3:9e:90:ef:63:a5:4b:50:de:a8:9f:56:9b:c5: 99:be:74:ea:16:64:0e:f0:75:bd:74:0e:86:49:28: 93:10:26:85:22:53:36:3a:04:04:76:80:a0:21:63: 4d:c1:0f:c2:b0:3a:3b:3c:f1:9e:99:3b:52:c1:a3: 63:c8:6b:e9:5d:8c:46:0e:f8:6b:b0:2e:bd:f7:34: 5d:fd:33:56:02:f7:30:7c:fd:e1:45:8d:8c:59:18: 50:78:88:59:66:20:94:8a:60:a3:71:68:a7:d3:78: e9:42:dd:f7:d4:38:83:af:93:44:73:50:18:8c:ef: 79:81:d7:33:1f:57:5e:9f:60:ac:e3:5e:ed:20:6f: be:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6C:85:03:8E:C2:BE:4B:BD:5F:4E:9F:21:02:09:FD:8F:39:83:E8 X509v3 Authority Key Identifier: keyid:83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b1:3e:08:31:d8:0c:15:60:6f:17:f6:9f:e7:5f:a5:27:a1: 34:a8:fb:f6:3a:d0:21:9c:98:e3:0f:de:7c:75:59:17:45:a3: 1b:49:b4:6e:35:44:70:73:2c:f1:5d:80:58:08:b1:ca:3a:6c: d6:29:80:75:e4:cc:39:8e:ff:da:3f:91:bc:06:cf:04:5d:12: 2c:68:de:49:46:02:eb:bf:f1:32:41:50:48:26:da:c0:16:79: 8f:bb:d1:aa:fe:0f:cf:79:3a:c3:e0:5b:86:d4:9d:46:ca:34: 10:54:27:25:53:f1:23:8c:80:6a:74:c7:ba:02:cb:bc:1a:7f: 0b:38:d9:7a:1c:1e:53:7b:0c:50:c7:72:40:d0:ba:95:ab:f2: 0e:91:d2:75:55:97:68:e0:d9:e9:38:de:22:6b:35:bd:e1:c2: eb:c6:7c:a7:fe:e8:d2:2e:1f:c2:33:f9:f0:87:4b:4c:2e:39: be:ec:78:2a:82:2e:cb:0d:61:69:e4:06:4f:b7:8f:9a:ef:11: d5:98:d8:95:18:55:d4:d4:2e:ed:b6:74:ed:e2:de:b0:8f:13: a2:34:4f:25:c3:b7:c6:a2:50:4c:02:bd:ef:7f:d0:fa:00:29: f0:81:47:b1:fb:a9:21:b0:da:84:44:a1:dc:75:7a:fe:f6:a4: fb:00:a3:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDgzODJGNjE4OEM0QTZERDY2OTU0RDU3MThBM0Q5Q0NG OUI4QkY4OTUwHhcNMjUxMTA0MjAyNTQ0WhcNMjUxMTExMjAyNTQ0WjAYMRYwFAYD VQQDEw02OTBhNjE0OS1mNWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH9IeRXKQaVOSBchOBosp/yNcf68uVIqHhz6FAWB8IS1HJfHZOv17OqiKe3F xL0Dzl/1hQa3MBh03WCm/1Pw3ky+1taH/3//ZUY5FF6hLlKu/5V4eGU1Wo6U9gZm IT8/sSJ3j/rjLJ82ORIEYneVH0mUIdAoRScj456Q72OlS1DeqJ9Wm8WZvnTqFmQO 8HW9dA6GSSiTECaFIlM2OgQEdoCgIWNNwQ/CsDo7PPGemTtSwaNjyGvpXYxGDvhr sC699zRd/TNWAvcwfP3hRY2MWRhQeIhZZiCUimCjcWin03jpQt331DiDr5NEc1AY jO95gdczH1den2Cs417tIG++NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlshQOO wr5LvV9OnyECCf2POYPoMB8GA1UdIwQYMBaAFIOC9hiMSm3WaVTVcYo9nM+bi/iV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yNTEwQjRFNkYw RkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2JkWnBWTlZ4aWoyY3o1dUwt SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2c0TDJHSXhLYmRacFZOVnhpajJjejV1TC1KVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yNTEwQjRFNkYwRkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2Jk WnBWTlZ4aWoyY3o1dUwtSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzsT4IMdgMFWBvF/af51+lJ6E0qPv2OtAhnJjjD958dVkXRaMbSbRu NURwcyzxXYBYCLHKOmzWKYB15Mw5jv/aP5G8Bs8EXRIsaN5JRgLrv/EyQVBIJtrA FnmPu9Gq/g/PeTrD4FuG1J1GyjQQVCclU/EjjIBqdMe6Asu8Gn8LONl6HB5TewxQ x3JA0LqVq/IOkdJ1VZdo4NnpON4iazW94cLrxnyn/ujSLh/CM/nwh0tMLjm+7Hgq gi7LDWFp5AZPt4+a7xHVmNiVGFXU1C7ttnTt4t6wjxOiNE8lw7fGolBMAr3vf9D6 ACnwgUex+6khsNqERKHcdXr+9qT7AKO/ -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:41 2025 by rpki-client