$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft File: 4ggepNPNtZniYIYCcE_bNYbUj1c.mft (raw, json) Hash identifier: NbI7Odpl2WFE3++xRP6bk5KN2Yish+Owpr1v82YWo6w= Subject key identifier: 41:BA:A2:F3:0C:FB:3E:FE:91:9C:FB:BE:EE:85:6C:0B:7D:28:D3:AE Authority key identifier: E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 Certificate issuer: /CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Certificate serial: 0BEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft Manifest number: 0BE9 Signing time: Tue 04 Nov 2025 18:58:06 +0000 Manifest this update: Tue 04 Nov 2025 18:58:05 +0000 Manifest next update: Tue 11 Nov 2025 18:58:05 +0000 Files and hashes: 1: 4ggepNPNtZniYIYCcE_bNYbUj1c.crl (hash: 91md/0kAlYZf+ZsMFv+/aUL6mYqbrj6iz1jnHJXGe0Q=) 2: 277BE15035CD11EAA2366620C4F9AE02.roa (hash: hJTBnRNb+rBuco3pui7GARCwhnSPV6pCkk0fRFtrHKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3055 (0xbef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF1C, serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Validity Not Before: Nov 4 18:58:05 2025 GMT Not After : Nov 11 18:58:05 2025 GMT Subject: CN=690a4cbe-93bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2a:e7:79:7b:01:42:a4:c6:aa:b0:1f:1f:0b: 50:88:ac:ee:9f:eb:fa:f9:29:e5:b9:9d:cc:38:88: 8b:9b:6a:65:aa:1a:fd:6c:94:86:ba:98:13:e1:7e: 88:e4:62:ea:99:8b:2f:54:50:56:3b:6e:e3:7b:c3: 8a:ce:f8:4d:98:2b:b6:22:65:ac:1b:1e:7e:24:bf: a1:c0:5f:31:f9:da:98:99:e8:d9:da:3d:f7:38:2a: ce:aa:98:bb:a4:de:9b:24:4e:25:18:63:31:49:2f: 2b:9d:86:5e:aa:3c:cd:0d:8d:e4:0b:04:5c:f9:f1: 96:45:4d:36:57:ba:52:ac:5c:22:4a:42:bf:41:87: 2a:23:f4:f3:1d:9a:82:a6:70:98:a8:76:90:1e:9a: c6:08:52:20:b4:e9:f6:bc:02:93:9f:aa:4d:05:2a: 98:a0:c0:47:3b:ec:ef:84:3b:5d:a0:96:ca:b7:74: 76:f7:21:90:b9:79:d1:4f:dd:62:ad:35:91:e5:b4: 01:f4:62:d3:b1:9d:0b:6c:04:e3:0f:38:fa:bc:81: 26:02:f1:58:5e:04:a7:cb:e2:ff:d8:ed:be:fd:e5: a6:86:f8:b4:63:28:81:2e:77:f9:04:f7:e1:83:00: 43:b8:fb:84:f8:f0:c4:de:a2:e3:46:e4:4e:16:f7: 7a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BA:A2:F3:0C:FB:3E:FE:91:9C:FB:BE:EE:85:6C:0B:7D:28:D3:AE X509v3 Authority Key Identifier: keyid:E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:0c:d3:22:73:19:70:99:fd:67:2a:cf:0e:9b:63:4d:3e:33: 87:85:03:6c:cb:51:8c:e4:e2:5c:89:db:8e:22:6d:fc:eb:bc: 1b:59:76:6d:00:f0:16:a1:df:c1:ae:7e:ab:60:f0:e9:71:d4: c4:da:6a:1c:b2:1c:e0:79:72:ad:d6:ef:9c:ec:4a:01:10:32: 16:a5:f7:b1:18:32:de:1e:5c:aa:36:f6:f6:f4:27:38:5d:5f: 10:10:05:4d:cb:ed:10:58:8d:55:68:da:0e:f5:52:e8:de:7b: c8:b8:2f:c2:32:c8:6c:59:2a:e9:2a:e6:95:7d:23:8b:06:fd: d5:96:c4:da:18:47:6b:97:84:c7:07:7a:88:bb:cd:55:8e:49: b2:12:4f:89:d2:be:fd:f9:1d:57:a4:f9:5c:12:3a:3c:f7:c9: 44:6a:c7:26:c3:23:bc:53:47:f5:59:52:6d:ba:57:28:1c:05: 2c:75:1e:2d:c2:bf:01:02:5d:26:ea:2b:31:e3:e2:ea:43:fe: c1:ed:ba:b5:c6:72:aa:bc:a3:ba:3f:b1:b7:32:72:d1:be:67: 9d:dc:43:a2:3e:8f:c0:c4:0a:3b:69:4b:43:8d:7c:49:d2:05: bf:87:19:6a:2f:e5:7c:b8:e0:60:70:6a:b1:10:f7:00:74:30: 33:5a:49:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGMUMxMTAvBgNVBAUTKEUyMDgxRUE0RDNDREI1OTlFMjYwODYwMjcwNEZEQjM1 ODZENDhGNTcwHhcNMjUxMTA0MTg1ODA1WhcNMjUxMTExMTg1ODA1WjAYMRYwFAYD VQQDEw02OTBhNGNiZS05M2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SrneXsBQqTGqrAfHwtQiKzun+v6+SnluZ3MOIiLm2plqhr9bJSGupgT4X6I 5GLqmYsvVFBWO27je8OKzvhNmCu2ImWsGx5+JL+hwF8x+dqYmejZ2j33OCrOqpi7 pN6bJE4lGGMxSS8rnYZeqjzNDY3kCwRc+fGWRU02V7pSrFwiSkK/QYcqI/TzHZqC pnCYqHaQHprGCFIgtOn2vAKTn6pNBSqYoMBHO+zvhDtdoJbKt3R29yGQuXnRT91i rTWR5bQB9GLTsZ0LbATjDzj6vIEmAvFYXgSny+L/2O2+/eWmhvi0YyiBLnf5BPfh gwBDuPuE+PDE3qLjRuROFvd67wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEG6ovMM +z7+kZz7vu6FbAt9KNOuMB8GA1UdIwQYMBaAFOIIHqTTzbWZ4mCGAnBP2zWG1I9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREYxQy8zNkM5NjIyMDI2 M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRabmlZSVlDY0VfYk5ZYlVq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRnZ2VwTlBOdFpuaVlJWUNjRV9iTlliVWoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REYxQy8zNkM5NjIyMDI2M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRa bmlZSVlDY0VfYk5ZYlVqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxDNMicxlwmf1nKs8Om2NNPjOHhQNsy1GM5OJciduOIm3867wbWXZt APAWod/Brn6rYPDpcdTE2mocshzgeXKt1u+c7EoBEDIWpfexGDLeHlyqNvb29Cc4 XV8QEAVNy+0QWI1VaNoO9VLo3nvIuC/CMshsWSrpKuaVfSOLBv3VlsTaGEdrl4TH B3qIu81VjkmyEk+J0r79+R1XpPlcEjo898lEascmwyO8U0f1WVJtulcoHAUsdR4t wr8BAl0m6isx4+LqQ/7B7bq1xnKqvKO6P7G3MnLRvmed3EOiPo/AxAo7aUtDjXxJ 0gW/hxlqL+V8uOBgcGqxEPcAdDAzWkl1 -----END CERTIFICATE-----Generated at Wed Nov 5 05:19:03 2025 by rpki-client