$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft File: 4UpZOzEqmIVz16Xd-uB_kSaTyII.mft (raw, json) Hash identifier: Ri9MQLLRCDLX3XmO6kcXxDF7+py8TZIpAOIeS1BjEMQ= Subject key identifier: A4:43:3E:10:51:00:2E:20:8B:D3:9D:07:44:4D:2C:5B:D0:4D:4F:F3 Authority key identifier: E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 Certificate issuer: /CN=A91D4ACD/serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft Manifest number: D9 Signing time: Wed 05 Nov 2025 05:48:41 +0000 Manifest this update: Wed 05 Nov 2025 05:48:41 +0000 Manifest next update: Wed 12 Nov 2025 05:48:41 +0000 Files and hashes: 1: 4UpZOzEqmIVz16Xd-uB_kSaTyII.crl (hash: J3BnulwZGSCg9+wP6DgvdQ6qcoTluMLdZcBpS3A+XsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4ACD, serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Validity Not Before: Nov 5 05:48:41 2025 GMT Not After : Nov 12 05:48:41 2025 GMT Subject: CN=690ae539-861f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:65:61:d8:22:a2:41:66:a6:c2:3c:0f:dd:5b: 25:a0:79:86:ad:0a:d3:61:7e:3e:b4:21:3f:1b:da: 7f:5b:ce:0a:b0:52:cc:7d:af:c5:fe:30:a2:03:93: 4a:41:2b:17:6b:6c:70:87:0f:35:6d:f4:e2:31:08: 03:ec:c1:5f:3f:2c:5b:d3:e0:01:0c:47:33:e3:fd: 76:95:9a:36:19:e6:68:f1:46:b1:b9:df:6c:51:27: 95:57:8c:98:8e:c9:3c:b7:98:78:a2:3c:bc:8e:b7: 2b:e1:50:2b:51:8c:06:86:fc:4f:72:ff:89:b7:54: 83:21:cc:45:55:be:67:69:27:eb:31:39:26:79:52: ac:88:87:e0:74:62:dc:f7:89:81:7c:b3:b2:a2:0f: bb:be:91:79:ad:d6:94:dc:31:0c:ae:e6:85:8a:45: 7a:db:92:55:d3:c2:a8:f8:6b:70:1d:6f:13:a7:cd: 28:a3:84:55:6a:53:40:34:a7:37:32:ee:3e:07:b8: 11:56:8a:28:27:71:3e:b8:7d:4a:9a:09:4c:ec:15: 02:21:4c:7e:c8:b1:26:58:ba:f6:7b:6e:95:3a:83: 3b:8a:e0:71:5e:04:87:99:09:95:32:f4:6d:16:bd: 7c:37:16:e9:b7:04:a1:7f:26:0d:00:9e:0e:e8:84: a5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:43:3E:10:51:00:2E:20:8B:D3:9D:07:44:4D:2C:5B:D0:4D:4F:F3 X509v3 Authority Key Identifier: keyid:E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:23:47:8c:82:e7:7b:a1:9a:ec:4d:9f:02:44:0c:c9:42:74: 24:95:75:66:d6:58:2d:74:c3:bb:85:e5:40:3e:ac:64:89:35: 33:4a:ba:72:8a:ae:a8:80:ed:00:8b:da:03:5d:f3:68:c3:47: 17:f1:f7:ef:21:ae:19:fe:78:35:3f:89:b6:9a:3e:df:fd:6c: 2b:22:0e:dd:44:c0:89:3d:9e:a7:22:15:f0:7f:cf:09:4e:1a: 61:a1:f3:40:13:d1:e6:44:38:41:ee:88:0e:17:92:2c:94:c7: a8:12:b8:ab:17:27:9d:29:5d:6a:ad:a4:4d:b5:6f:b4:d8:20: 28:71:1b:1d:78:aa:81:94:64:2b:07:fd:b6:24:bb:7b:10:1a: c2:95:b9:c7:67:37:13:53:50:a8:ed:2a:76:ce:9d:15:58:55: 98:85:bc:9f:8d:6c:5b:69:31:da:2d:fa:5e:70:08:19:bc:5b: f6:44:84:f8:bf:90:3d:7b:2f:39:5a:cb:21:a1:e1:35:2c:5c: 90:1c:96:39:56:b2:24:62:5a:5b:b3:b5:b8:31:65:a8:30:98: 8a:59:ab:97:cc:8b:33:f2:1f:4e:95:a3:2b:ab:99:cb:b9:1d: a6:91:fa:2a:2b:2c:93:3d:c2:89:c5:31:4b:e9:6d:76:a8:70: 5a:26:27:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBQ0QxMTAvBgNVBAUTKEUxNEE1OTNCMzEyQTk4ODU3M0Q3QTVEREZBRTA3Rjkx MjY5M0M4ODIwHhcNMjUxMTA1MDU0ODQxWhcNMjUxMTEyMDU0ODQxWjAYMRYwFAYD VQQDEw02OTBhZTUzOS04NjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWVh2CKiQWamwjwP3VsloHmGrQrTYX4+tCE/G9p/W84KsFLMfa/F/jCiA5NK QSsXa2xwhw81bfTiMQgD7MFfPyxb0+ABDEcz4/12lZo2GeZo8Uaxud9sUSeVV4yY jsk8t5h4ojy8jrcr4VArUYwGhvxPcv+Jt1SDIcxFVb5naSfrMTkmeVKsiIfgdGLc 94mBfLOyog+7vpF5rdaU3DEMruaFikV625JV08Ko+GtwHW8Tp80oo4RValNANKc3 Mu4+B7gRVoooJ3E+uH1KmglM7BUCIUx+yLEmWLr2e26VOoM7iuBxXgSHmQmVMvRt Fr18NxbptwShfyYNAJ4O6ISlqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRDPhBR AC4gi9OdB0RNLFvQTU/zMB8GA1UdIwQYMBaAFOFKWTsxKpiFc9el3frgf5Emk8iC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEFDRC8yOTAzMUEzQTc1 NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi80VXBaT3pFcW1JVnoxNlhkLXVCX2tTYVR5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVcFpPekVxbUlWejE2WGQtdUJfa1NhVHlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEFDRC8yOTAzMUEzQTc1NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi80VXBaT3pFcW1J VnoxNlhkLXVCX2tTYVR5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmI0eMgud7oZrsTZ8CRAzJQnQklXVm1lgtdMO7heVAPqxkiTUzSrpy iq6ogO0Ai9oDXfNow0cX8ffvIa4Z/ng1P4m2mj7f/WwrIg7dRMCJPZ6nIhXwf88J ThphofNAE9HmRDhB7ogOF5IslMeoErirFyedKV1qraRNtW+02CAocRsdeKqBlGQr B/22JLt7EBrClbnHZzcTU1Co7Sp2zp0VWFWYhbyfjWxbaTHaLfpecAgZvFv2RIT4 v5A9ey85WsshoeE1LFyQHJY5VrIkYlpbs7W4MWWoMJiKWauXzIsz8h9OlaMrq5nL uR2mkfoqKyyTPcKJxTFL6W12qHBaJieI -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:39 2025 by rpki-client