$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft File: 4G_oQca7SYofv2fuOqjIqcU4fQ8.mft (raw, json) Hash identifier: +9Y7qYYiSLbXoJag6Lt25AjvoKUdL/EXhv9lZQk/z50= Subject key identifier: 5D:EC:5C:93:F7:85:BD:C2:32:FE:C8:60:5E:56:15:31:A0:2E:00:2A Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F Certificate issuer: /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft Manifest number: F2 Signing time: Mon 03 Nov 2025 05:16:20 +0000 Manifest this update: Mon 03 Nov 2025 05:16:19 +0000 Manifest next update: Mon 10 Nov 2025 05:16:19 +0000 Files and hashes: 1: 4G_oQca7SYofv2fuOqjIqcU4fQ8.crl (hash: hT6yDk5ala3/t8wWZ+xlm8k2lENv9T5sUKusbT5ZNs4=) 2: 47C532D045B911EF93633071C4F9AE02.roa (hash: wnnmQPYTxqkM9WvnTTi4MEpEuQ7gabJzkmyVQ4uhwWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Validity Not Before: Nov 3 05:16:19 2025 GMT Not After : Nov 10 05:16:19 2025 GMT Subject: CN=69083aa4-8fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:05:17:c8:27:c2:93:32:b5:3f:64:e2:b4:f2: 2e:2d:14:59:ab:36:9b:c3:d9:06:32:7f:40:0f:27: c6:fa:6a:d1:a9:02:bc:21:6b:f3:a8:28:84:33:7b: 5d:3a:ba:10:f4:4b:b3:4d:38:8c:a5:87:0a:8c:76: 38:cc:f8:20:95:84:80:2f:81:e9:af:3b:0f:2e:3f: 83:c5:c7:2b:ff:82:10:ff:11:50:9c:10:9c:d2:f6: 71:70:bc:c8:d5:26:0e:e7:1c:f4:01:82:e0:f6:96: 0e:3b:12:ff:78:19:0e:88:10:bd:13:e0:a2:a9:e9: b7:c7:b6:11:15:1b:72:85:bc:76:95:88:2b:2e:c6: 33:c4:8a:6a:97:1a:7f:01:44:83:56:9d:be:c7:67: e8:eb:d6:8d:e8:2f:d6:fb:34:a1:9f:7f:41:58:ff: 4d:8a:9c:c1:ad:78:f0:53:9f:d8:50:1d:10:39:5a: 3b:4d:2f:21:28:a7:38:8d:b5:c9:7f:b9:7b:8c:be: 21:a6:1d:ed:9f:6e:63:1e:3b:8e:74:1e:88:03:83: d4:80:f0:4c:98:96:ce:03:c8:e1:de:5e:54:4f:29: 69:04:4c:55:0e:aa:1d:32:8d:29:a0:24:61:c8:da: 90:37:59:0c:25:21:49:e0:d8:ee:75:b5:3d:a9:a1: ec:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EC:5C:93:F7:85:BD:C2:32:FE:C8:60:5E:56:15:31:A0:2E:00:2A X509v3 Authority Key Identifier: keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:98:4f:13:df:8e:3a:13:05:fa:24:b0:5f:c0:c8:62:d6:e6: cb:b4:5a:eb:23:b0:8d:bb:22:e6:e3:11:39:ac:22:59:5d:e9: 36:a5:f4:b5:5e:6e:f7:c5:87:60:39:6c:9f:6e:80:c2:17:0b: 21:7f:1a:e5:e0:63:71:fc:56:ba:04:ff:26:30:3f:3b:53:21: d8:f0:3f:f7:e6:9f:ad:f2:24:a3:12:ee:f9:26:6c:94:d3:6f: 06:b8:46:de:55:45:55:b2:9e:ce:26:d1:29:83:6e:cc:14:6c: cd:2d:2d:84:7e:d9:09:4c:ee:84:62:68:bb:a6:22:98:65:9c: f9:f6:c5:a6:2c:97:48:e2:b5:09:ef:bc:be:da:6d:99:e8:ba: 0d:fd:5c:d7:06:0b:32:ef:af:d3:87:07:a9:43:d0:ec:80:e2: 3f:c7:d8:8d:f3:1b:85:9a:6b:ac:19:21:7b:57:89:be:85:65: 99:10:7b:4e:2a:0f:fb:60:e9:b9:0f:06:47:69:6f:29:64:c6: 31:88:74:d0:6c:7b:3f:3d:94:b9:97:55:7c:d4:9a:ee:5c:45: a9:04:dd:df:cd:05:99:c9:d4:d3:f1:64:2b:02:b1:9a:69:65: 71:87:05:27:4d:58:6a:db:2b:da:7d:e7:21:a1:b7:bd:e7:ec: a3:6e:06:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM0RDAxMTAvBgNVBAUTKEUwNkZFODQxQzZCQjQ5OEExRkJGNjdFRTNBQThDOEE5 QzUzODdEMEYwHhcNMjUxMTAzMDUxNjE5WhcNMjUxMTEwMDUxNjE5WjAYMRYwFAYD VQQDEw02OTA4M2FhNC04ZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8QUXyCfCkzK1P2TitPIuLRRZqzabw9kGMn9ADyfG+mrRqQK8IWvzqCiEM3td OroQ9EuzTTiMpYcKjHY4zPgglYSAL4HprzsPLj+Dxccr/4IQ/xFQnBCc0vZxcLzI 1SYO5xz0AYLg9pYOOxL/eBkOiBC9E+Ciqem3x7YRFRtyhbx2lYgrLsYzxIpqlxp/ AUSDVp2+x2fo69aN6C/W+zShn39BWP9NipzBrXjwU5/YUB0QOVo7TS8hKKc4jbXJ f7l7jL4hph3tn25jHjuOdB6IA4PUgPBMmJbOA8jh3l5UTylpBExVDqodMo0poCRh yNqQN1kMJSFJ4NjudbU9qaHscQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3sXJP3 hb3CMv7IYF5WFTGgLgAqMB8GA1UdIwQYMBaAFOBv6EHGu0mKH79n7jqoyKnFOH0P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9FQ0Y4MEY4NjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80R19vUWNhN1NZb2Z2MmZ1T3FqSXFjVTRm UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRHX29RY2E3U1lvZnYyZnVPcWpJcWNVNGZROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9FQ0Y4MEY4NjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80R19vUWNhN1NZ b2Z2MmZ1T3FqSXFjVTRmUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHmE8T3446EwX6JLBfwMhi1ubLtFrrI7CNuyLm4xE5rCJZXek2pfS1 Xm73xYdgOWyfboDCFwshfxrl4GNx/Fa6BP8mMD87UyHY8D/35p+t8iSjEu75JmyU 028GuEbeVUVVsp7OJtEpg27MFGzNLS2EftkJTO6EYmi7piKYZZz59sWmLJdI4rUJ 77y+2m2Z6LoN/VzXBgsy76/ThwepQ9DsgOI/x9iN8xuFmmusGSF7V4m+hWWZEHtO Kg/7YOm5DwZHaW8pZMYxiHTQbHs/PZS5l1V81JruXEWpBN3fzQWZydTT8WQrArGa aWVxhwUnTVhq2yvafechobe95+yjbgaY -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:16 2025 by rpki-client