$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft File: 4V0TCwuymA4b8RwBvMt1O0loSoA.mft (raw, json) Hash identifier: ABQizhskWFsiTgxX/3OoRiHqMogdugOVKS8yBOPs1TQ= Subject key identifier: FB:15:84:6C:CE:96:60:AE:86:DC:7A:E8:33:A1:2C:A1:A7:19:01:51 Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 Certificate issuer: /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Certificate serial: 0660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft Manifest number: 065B Signing time: Tue 04 Nov 2025 22:42:10 +0000 Manifest this update: Tue 04 Nov 2025 22:42:09 +0000 Manifest next update: Tue 11 Nov 2025 22:42:09 +0000 Files and hashes: 1: 4V0TCwuymA4b8RwBvMt1O0loSoA.crl (hash: WsvX7nuztteLEv62zXarMTRhPKJ/T1dcX0lw0SA60e4=) 2: 6AE1616AA3F711EBBA757063C4F9AE02.roa (hash: Om3xOjvt7/SStBWrpIGKKE+8s1rKbJeum5OSIuQByU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1632 (0x660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7BD, serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Validity Not Before: Nov 4 22:42:09 2025 GMT Not After : Nov 11 22:42:09 2025 GMT Subject: CN=690a8141-50f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cb:88:57:6c:5a:f0:6c:f8:63:8c:48:f3:b6: 78:7c:d5:76:d5:67:90:4e:de:52:79:67:8a:dc:c4: 87:85:74:38:c4:f4:58:eb:06:0c:e3:fd:19:dc:ad: 10:30:52:4d:66:8d:c3:56:38:3e:39:fd:23:f8:72: 4f:3d:10:00:07:d8:67:85:ad:66:41:12:e4:bc:c1: 15:c5:0b:97:e8:1f:85:fd:a6:98:60:51:8a:e7:03: 6e:a9:ac:d8:91:28:1b:d7:d4:84:4e:0b:35:63:64: df:a0:ff:2c:33:db:2f:e0:99:52:ec:87:6d:0f:ee: 8e:1a:18:10:4f:72:44:38:ed:89:c1:4f:03:e7:69: c8:53:e1:f8:3f:98:95:ba:28:5f:3c:b2:54:47:dd: 87:a9:0d:be:d8:14:1c:44:09:1c:ed:77:7a:8c:95: a4:f0:23:4e:9c:5e:fb:a7:23:ed:a1:6a:27:7f:40: 83:2f:db:24:ee:42:49:3b:d0:77:83:f6:e9:5c:0d: ea:d4:73:c4:10:e0:5f:de:bf:32:34:b0:ee:dc:83: 7a:8c:fb:2f:ca:7f:08:85:cb:e3:db:7a:90:67:ef: 7f:1d:f3:e2:2a:8a:ff:a4:d2:83:6a:c2:3c:89:19: 6f:25:0a:67:01:46:bf:f4:42:b5:18:66:d6:c2:87: 4b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:15:84:6C:CE:96:60:AE:86:DC:7A:E8:33:A1:2C:A1:A7:19:01:51 X509v3 Authority Key Identifier: keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:fd:a3:50:d2:40:38:3e:2d:77:77:b3:f3:8b:0d:4e:75:fe: 8d:68:1e:32:8c:27:24:b5:26:f8:a8:9c:b0:b4:20:db:88:f5: 2b:12:bc:e7:19:ef:5c:d9:15:ea:41:d2:30:f8:fb:f6:11:bb: 5c:4e:5c:66:d4:7a:6e:51:cd:6a:9c:24:7e:e7:f8:43:a8:d2: 0f:cb:8b:81:c9:f8:fa:c8:6b:2a:5f:a3:d7:1b:26:5d:f9:44: 05:7f:8a:2c:9e:c9:11:2b:da:09:e9:ad:30:06:4d:d9:e9:12: 9c:36:97:05:4d:3f:f2:6d:e4:67:d7:f7:80:57:21:ad:56:22: 9e:16:e2:68:b9:ea:23:d1:c5:30:47:a9:91:84:98:b6:d0:9e: 40:f2:2e:b2:f0:83:aa:1c:80:e9:e4:6b:6c:1f:0c:dd:0d:80: 91:39:f7:9c:2e:0c:25:33:4f:1e:a7:38:10:3c:24:a1:e1:79: df:1e:f0:71:fb:1a:f4:4a:1b:9e:4b:83:5e:5c:3b:bf:9a:75: b4:b2:b2:bc:1b:7d:95:fc:a6:a1:a0:40:5d:ae:27:c1:5e:83: 2e:3b:99:e0:ba:ed:91:52:2e:85:e5:e5:60:6a:4f:81:ec:d9: c7:fb:ff:62:2f:5e:7d:b8:4d:fc:5f:c7:99:3b:a0:f0:e8:30: 47:f2:e1:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QkQxMTAvBgNVBAUTKEUxNUQxMzBCMEJCMjk4MEUxQkYxMUMwMUJDQ0I3NTNC NDk2ODRBODAwHhcNMjUxMTA0MjI0MjA5WhcNMjUxMTExMjI0MjA5WjAYMRYwFAYD VQQDEw02OTBhODE0MS01MGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1suIV2xa8Gz4Y4xI87Z4fNV21WeQTt5SeWeK3MSHhXQ4xPRY6wYM4/0Z3K0Q MFJNZo3DVjg+Of0j+HJPPRAAB9hnha1mQRLkvMEVxQuX6B+F/aaYYFGK5wNuqazY kSgb19SETgs1Y2TfoP8sM9sv4JlS7IdtD+6OGhgQT3JEOO2JwU8D52nIU+H4P5iV uihfPLJUR92HqQ2+2BQcRAkc7Xd6jJWk8CNOnF77pyPtoWonf0CDL9sk7kJJO9B3 g/bpXA3q1HPEEOBf3r8yNLDu3IN6jPsvyn8Ihcvj23qQZ+9/HfPiKor/pNKDasI8 iRlvJQpnAUa/9EK1GGbWwodLNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsVhGzO lmCuhtx66DOhLKGnGQFRMB8GA1UdIwQYMBaAFOFdEwsLspgOG/EcAbzLdTtJaEqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdCRC9EMzAyNjAzNEEz RjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1BNGI4UndCdk10MU8wbG9T b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWMFRDd3V5bUE0YjhSd0J2TXQxTzBsb1NvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdCRC9EMzAyNjAzNEEzRjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1B NGI4UndCdk10MU8wbG9Tb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL/aNQ0kA4Pi13d7Pziw1Odf6NaB4yjCcktSb4qJywtCDbiPUrErzn Ge9c2RXqQdIw+Pv2EbtcTlxm1HpuUc1qnCR+5/hDqNIPy4uByfj6yGsqX6PXGyZd +UQFf4osnskRK9oJ6a0wBk3Z6RKcNpcFTT/ybeRn1/eAVyGtViKeFuJoueoj0cUw R6mRhJi20J5A8i6y8IOqHIDp5GtsHwzdDYCROfecLgwlM08epzgQPCSh4XnfHvBx +xr0ShueS4NeXDu/mnW0srK8G32V/KahoEBdrifBXoMuO5nguu2RUi6F5eVgak+B 7NnH+/9iL159uE38X8eZO6Dw6DBH8uGG -----END CERTIFICATE-----Generated at Wed Nov 5 17:08:38 2025 by rpki-client