$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft File: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft (raw, json) Hash identifier: DxfF0vTLgnHn/TVVgRAeo6E+yYGrvTE9No+qQOWWqt8= Subject key identifier: 57:ED:15:2F:4E:D2:6B:E2:EC:ED:94:68:A6:14:79:5E:55:4C:89:3A Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A Certificate issuer: /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A Certificate serial: 1968 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft Manifest number: 195C Signing time: Tue 04 Nov 2025 16:30:23 +0000 Manifest this update: Tue 04 Nov 2025 16:30:22 +0000 Manifest next update: Tue 11 Nov 2025 16:30:22 +0000 Files and hashes: 1: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl (hash: tKQ89OI7mobcOCXL0iQqqFN47yKWct4qN/3kxQP2544=) 2: 66BEBEDE83CB11E796105342C4F9AE02.roa (hash: /U/CsYIhht9s+NW7SN7K/1R2JyIlhuy3zjDWLZs60Yg=) 3: 09C0DFCE202011F098619934C4F9AE02.roa (hash: VTcOwA4/ZHFl9NF0jVq8bKcfk95wITIQIkP9/wxqkas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6504 (0x1968) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1306, serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A Validity Not Before: Nov 4 16:30:22 2025 GMT Not After : Nov 11 16:30:22 2025 GMT Subject: CN=690a2a1f-63fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:63:d8:d5:e4:c4:e1:d7:99:7c:8c:df:87:47: 15:f8:21:be:e0:38:f0:dc:ad:2e:07:f1:80:a8:ff: df:c7:73:b5:02:1c:3a:d3:79:56:ae:07:51:82:66: 0b:5e:03:36:88:da:92:9d:d5:7a:68:1f:0c:33:0f: 98:df:9f:dd:67:f1:bb:d9:ff:27:25:9d:a7:74:1b: 9a:04:9e:ff:29:a0:0c:4e:e2:62:b0:f3:0f:4c:fd: 98:a1:c1:5b:84:d5:f4:a8:73:b0:1c:e5:05:69:91: f5:a6:80:cc:f5:f6:4a:9e:67:ec:e3:55:da:03:9b: 5d:db:d0:8a:aa:39:97:39:36:a8:82:78:1c:3b:52: 98:9f:f5:78:b6:1d:2e:cb:70:14:7f:87:86:fb:c3: 08:c8:db:f5:e4:f6:f7:45:7e:af:dc:57:11:81:5b: 14:6e:8c:c1:65:f8:b0:19:ef:5e:bb:a3:7f:73:09: 9e:f1:3f:f4:60:26:a7:33:f8:0b:ad:ba:27:22:95: 58:38:27:a1:3d:63:05:68:09:85:14:74:d0:63:22: 2a:57:41:3b:6e:da:32:b3:61:af:3e:3b:3c:0d:b6: 38:77:87:05:31:0d:a2:24:53:01:24:52:53:b9:ba: 81:eb:9f:e9:f2:60:b5:d2:9a:c3:70:4a:3d:81:11: b3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:ED:15:2F:4E:D2:6B:E2:EC:ED:94:68:A6:14:79:5E:55:4C:89:3A X509v3 Authority Key Identifier: keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:95:9e:56:39:06:13:93:cb:a2:ef:02:9a:60:d4:8f:41:b9: 36:92:1f:76:9d:f1:d4:ee:aa:4a:17:65:82:c3:1d:8a:dd:a7: b0:90:bf:e4:3e:5c:9e:84:d9:7a:2d:c7:c8:07:f3:b5:cd:f9: 4d:60:99:bd:28:fc:b3:fd:4a:6b:05:f0:2c:aa:00:42:e3:f3: 70:66:b2:db:af:1b:e0:1a:b0:65:ab:77:c3:d9:90:20:61:be: 8b:bd:fd:10:4e:df:e6:96:5e:d8:e7:ad:da:d9:16:f8:4d:d4: c4:9a:f2:f9:96:e8:bc:1c:58:6d:19:54:39:a1:22:ae:d5:a8: c1:b0:5a:3a:3c:ef:a5:05:c8:62:ef:db:70:53:4c:7f:77:46: 90:6c:cf:e3:7e:cf:8e:fc:1b:bc:5a:e1:37:15:74:d8:8e:4a: dd:38:cb:a2:0d:a2:e9:8f:a4:5f:29:56:4c:48:8f:00:cb:e1: 79:cb:a7:f8:44:96:e7:a3:3b:51:6e:18:ad:e3:a7:31:33:65: 2b:52:32:56:c3:71:2a:6e:cc:93:23:78:df:51:04:91:8c:2a: 43:ee:0d:03:4c:2c:fb:28:de:5f:bf:aa:7b:1e:cf:29:68:a2: b4:93:59:dc:83:4c:98:37:e5:d6:8f:5f:72:83:1d:52:2b:89: cc:c7:94:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEzMDYxMTAvBgNVBAUTKEUwNEZCMkFBNjI3RDk3Qjk4OUFFQ0ZFODY5NzRFM0M1 RjMwMzEyMUEwHhcNMjUxMTA0MTYzMDIyWhcNMjUxMTExMTYzMDIyWjAYMRYwFAYD VQQDEw02OTBhMmExZi02M2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGPY1eTE4deZfIzfh0cV+CG+4Djw3K0uB/GAqP/fx3O1Ahw603lWrgdRgmYL XgM2iNqSndV6aB8MMw+Y35/dZ/G72f8nJZ2ndBuaBJ7/KaAMTuJisPMPTP2YocFb hNX0qHOwHOUFaZH1poDM9fZKnmfs41XaA5td29CKqjmXOTaogngcO1KYn/V4th0u y3AUf4eG+8MIyNv15Pb3RX6v3FcRgVsUbozBZfiwGe9eu6N/cwme8T/0YCanM/gL rbonIpVYOCehPWMFaAmFFHTQYyIqV0E7btoys2GvPjs8DbY4d4cFMQ2iJFMBJFJT ubqB65/p8mC10prDcEo9gRGzFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFftFS9O 0mvi7O2UaKYUeV5VTIk6MB8GA1UdIwQYMBaAFOBPsqpifZe5ia7P6Gl048XzAxIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTMwNi9GRTQ5NzQ5ODgz Q0ExMUU3QjgyNDBBNDJDNEY5QUUwMi80RS15cW1KOWw3bUpyc19vYVhUanhmTURF aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRFLXlxbUo5bDdtSnJzX29hWFRqeGZNREVoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTMwNi9GRTQ5NzQ5ODgzQ0ExMUU3QjgyNDBBNDJDNEY5QUUwMi80RS15cW1KOWw3 bUpyc19vYVhUanhmTURFaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKlZ5WOQYTk8ui7wKaYNSPQbk2kh92nfHU7qpKF2WCwx2K3aewkL/k PlyehNl6LcfIB/O1zflNYJm9KPyz/UprBfAsqgBC4/NwZrLbrxvgGrBlq3fD2ZAg Yb6Lvf0QTt/mll7Y563a2Rb4TdTEmvL5lui8HFhtGVQ5oSKu1ajBsFo6PO+lBchi 79twU0x/d0aQbM/jfs+O/Bu8WuE3FXTYjkrdOMuiDaLpj6RfKVZMSI8Ay+F5y6f4 RJbnoztRbhit46cxM2UrUjJWw3EqbsyTI3jfUQSRjCpD7g0DTCz7KN5fv6p7Hs8p aKK0k1ncg0yYN+XWj19ygx1SK4nMx5Q3 -----END CERTIFICATE-----Generated at Wed Nov 5 13:55:24 2025 by rpki-client