$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: fhRP82Nh0CeXmmbQCsZzxBpkLussCMG3BDpuDe5infc= Subject key identifier: 87:41:2F:58:EC:B0:07:CB:A2:A0:BB:9B:4C:03:BD:4A:C8:F9:F1:8C Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 01AA Signing time: Wed 05 Nov 2025 03:22:57 +0000 Manifest this update: Wed 05 Nov 2025 03:22:57 +0000 Manifest next update: Wed 12 Nov 2025 03:22:57 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: FgRcVvZEQMbj3m3MI6nolwKFSMIejEgiYLWmXwNQn7M=) 2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: glLqt8A+PG2i48HeZjmY7dCokn6j6eyQTAGv7a4dQe4=) 3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: cXsdzPTH/yRS7sygsATYiwsQyV1n0HK8W/wMQYfB7Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: Nov 5 03:22:57 2025 GMT Not After : Nov 12 03:22:57 2025 GMT Subject: CN=690ac311-db36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3c:19:08:50:72:f1:d8:0d:ec:f2:e8:57:94: 03:32:33:89:b4:ff:e8:10:4e:3e:6a:c3:0a:09:e2: 64:a8:b1:ac:63:06:c9:e3:c4:5d:b0:31:58:81:f1: aa:54:71:ce:d4:3a:f8:58:d7:53:97:f0:48:fc:59: fe:69:6d:85:cf:32:4a:61:cf:5b:e6:00:b4:d5:76: d3:d4:3c:5d:b2:44:be:62:ef:28:da:03:1f:2f:1b: 6f:b8:98:74:cc:23:76:11:7d:fe:b1:21:d2:66:e8: ef:da:94:29:c2:b3:08:dc:8c:3c:a2:96:e5:42:db: 34:5d:45:10:b4:4f:c3:1e:45:70:7e:a2:c3:75:fb: cc:94:02:38:45:9e:93:64:ce:cc:7d:30:1c:06:ff: 49:86:86:95:02:79:5f:cb:c5:18:74:fd:00:af:1c: d6:8e:d6:f1:01:c3:de:63:86:c8:a3:8b:f6:1c:9b: 24:69:d5:96:64:2e:75:c6:71:a8:59:86:3e:54:a9: 08:3c:e2:35:64:71:ba:2f:25:e6:3c:a2:73:26:a9: c4:01:2d:a6:99:a9:9d:67:d4:b5:71:54:53:2c:b9: c0:ab:89:82:e4:31:3a:15:dc:01:e3:06:6b:6e:8f: d3:39:7d:cf:40:4d:c6:2e:b1:44:86:91:32:d8:4d: 0c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:41:2F:58:EC:B0:07:CB:A2:A0:BB:9B:4C:03:BD:4A:C8:F9:F1:8C X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:b0:6c:6a:de:51:96:f0:ba:4c:b4:c4:2e:ef:97:09:50:05: d1:20:d3:8b:5c:72:94:db:05:a8:bd:cd:98:f2:59:9e:eb:08: 63:76:6e:b4:ec:a7:42:cd:bb:b7:04:f0:6b:f2:3d:69:fe:74: 00:c9:ad:f0:ca:8a:4e:95:65:ab:a0:41:0a:a6:19:20:b3:3a: fa:cf:c0:94:31:00:47:87:87:03:65:40:54:71:e3:21:73:7d: 2a:16:c1:20:2b:c8:5f:7a:af:a4:bd:37:4f:be:32:60:7b:81: 6c:59:0b:17:00:eb:2d:ce:2d:1a:29:ca:a5:94:59:a1:0c:b9: 6f:f5:e3:42:ba:a5:b1:08:25:ef:ad:9b:d6:43:7f:81:74:50: 62:18:57:60:7c:93:5e:0b:d1:20:23:9d:00:ae:e7:07:c7:99: b3:92:60:fb:86:6c:a0:55:6a:85:65:6b:8d:1f:85:ce:75:99: 8f:96:c5:8f:0e:81:2a:ae:87:dc:20:a1:2d:fb:00:5d:2c:d7: 58:c8:6f:24:93:fd:51:c5:94:27:68:04:e2:ab:d5:87:1e:7d: 4e:03:48:40:68:5e:d6:21:0d:01:86:e3:2c:04:20:c3:be:87: 20:9b:2f:39:ba:7c:4f:ba:9d:88:7a:57:e1:25:2d:24:ff:dd: 37:a9:25:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjUxMTA1MDMyMjU3WhcNMjUxMTEyMDMyMjU3WjAYMRYwFAYD VQQDEw02OTBhYzMxMS1kYjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTwZCFBy8dgN7PLoV5QDMjOJtP/oEE4+asMKCeJkqLGsYwbJ48RdsDFYgfGq VHHO1Dr4WNdTl/BI/Fn+aW2FzzJKYc9b5gC01XbT1DxdskS+Yu8o2gMfLxtvuJh0 zCN2EX3+sSHSZujv2pQpwrMI3Iw8opblQts0XUUQtE/DHkVwfqLDdfvMlAI4RZ6T ZM7MfTAcBv9JhoaVAnlfy8UYdP0ArxzWjtbxAcPeY4bIo4v2HJskadWWZC51xnGo WYY+VKkIPOI1ZHG6LyXmPKJzJqnEAS2mmamdZ9S1cVRTLLnAq4mC5DE6FdwB4wZr bo/TOX3PQE3GLrFEhpEy2E0MpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdBL1js sAfLoqC7m0wDvUrI+fGMMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCsGxq3lGW8LpMtMQu75cJUAXRINOLXHKU2wWovc2Y8lme6whjdm60 7KdCzbu3BPBr8j1p/nQAya3wyopOlWWroEEKphkgszr6z8CUMQBHh4cDZUBUceMh c30qFsEgK8hfeq+kvTdPvjJge4FsWQsXAOstzi0aKcqllFmhDLlv9eNCuqWxCCXv rZvWQ3+BdFBiGFdgfJNeC9EgI50ArucHx5mzkmD7hmygVWqFZWuNH4XOdZmPlsWP DoEqrofcIKEt+wBdLNdYyG8kk/1RxZQnaATiq9WHHn1OA0hAaF7WIQ0BhuMsBCDD vocgmy85unxPup2IelfhJS0k/903qSVf -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:12 2025 by rpki-client