$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json) Hash identifier: zCsIEapk4C33Ol/znvs2J/fhoUdOx9mbKkaaxqgR/dg= Subject key identifier: 87:59:7E:B4:86:D6:3B:61:A6:6E:AF:F0:09:E2:60:62:ED:B5:0F:12 Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Certificate serial: 0F57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft Manifest number: 0F46 Signing time: Tue 04 Nov 2025 17:41:33 +0000 Manifest this update: Tue 04 Nov 2025 17:41:33 +0000 Manifest next update: Tue 11 Nov 2025 17:41:33 +0000 Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: 3ffP10oZsbH3wZ2wYKrRnTDP68LWFwTEVDl+KZ4UY7Q=) 2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: 4nfL4JBKGiookOgEUtMY2He+i4zGwZxLBLPzmr/3qA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3927 (0xf57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Validity Not Before: Nov 4 17:41:33 2025 GMT Not After : Nov 11 17:41:33 2025 GMT Subject: CN=690a3acd-43cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:d1:69:dc:1a:fd:08:ac:3a:31:08:56:76: 1c:71:63:bd:93:35:13:5e:87:3d:01:7e:71:03:22: 6d:dd:6c:5f:de:a9:de:4a:71:18:ec:a7:af:da:d6: 02:96:93:28:ce:f2:46:24:94:42:a9:08:e1:65:4a: 4b:df:75:91:4d:b2:56:36:a2:27:4c:09:04:96:61: 68:d2:68:79:42:a7:58:b9:98:08:df:85:d3:03:b4: 71:76:ac:7a:49:6b:29:84:91:04:11:52:04:52:3d: 7b:47:af:7c:16:2e:70:dc:e8:88:60:a3:23:d5:ff: 23:b6:27:7b:82:19:ae:1a:5d:da:f2:21:bd:10:86: 7d:05:77:97:23:40:a9:c7:ac:97:39:44:65:1d:d2: a9:81:68:9c:0a:1b:08:49:d8:3a:3c:24:50:38:48: 10:69:2f:b5:84:d1:2b:10:b4:35:12:17:46:d6:bc: 7e:4c:83:1a:8b:fa:6c:35:73:ec:21:4e:4e:ea:b3: 46:a4:3e:0f:46:18:8f:0f:52:95:18:de:06:1a:af: b7:c0:0f:bd:3d:f7:37:dd:a9:a4:fa:33:69:90:ba: d7:43:11:1e:1b:45:35:7f:03:ca:95:df:7e:5f:6e: 2a:54:c7:17:21:b3:bd:4b:1d:0d:3d:e6:05:c8:6e: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:59:7E:B4:86:D6:3B:61:A6:6E:AF:F0:09:E2:60:62:ED:B5:0F:12 X509v3 Authority Key Identifier: keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:1f:8b:a0:cc:d0:07:af:ca:a9:39:3e:cf:1a:49:eb:65:3d: 2e:e7:62:0d:21:27:12:bb:7d:b9:c5:0b:7a:80:8a:44:90:4f: e4:e5:86:95:74:89:18:5b:58:f7:0f:24:b6:54:d6:28:b5:b8: f9:94:45:f7:db:e8:7f:48:cb:e4:e6:ce:5e:af:5d:59:4f:ba: 26:c6:8c:2b:56:a8:2f:48:85:23:1b:8a:22:85:89:d6:cf:a6: 9f:59:5c:c5:ca:99:f3:e3:59:1b:07:ad:c0:15:ca:c0:fa:88: 68:ec:1a:30:22:64:04:e9:d4:89:6a:37:3a:3b:6a:c1:62:3b: cd:ae:5f:52:b4:a3:5f:5b:bc:57:b8:f3:57:81:17:49:8d:ae: 5d:3c:84:20:a7:22:c2:e1:22:fb:bd:ac:89:ee:58:6b:10:a0: f7:b2:7c:63:b5:95:d9:95:da:09:df:0f:95:31:a2:f4:f4:c5: e3:2e:d9:10:12:a0:c3:f9:5e:4f:06:55:34:21:50:b6:6f:c3: 38:27:cf:2f:60:17:ce:69:5a:f0:f4:90:17:28:43:04:3d:75: 84:64:74:26:fa:54:9f:d4:d0:97:f4:9c:e8:a2:84:eb:b6:df: 46:f0:52:17:19:3b:98:db:d1:96:a8:9d:54:96:27:71:a8:28: 96:d7:d0:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RUMxMTAvBgNVBAUTKDczMUUyN0UxMkZCM0RCMEI2Q0NDMEIyMEYxODY4MDlC QTA4RDA5MTUwHhcNMjUxMTA0MTc0MTMzWhcNMjUxMTExMTc0MTMzWjAYMRYwFAYD VQQDEw02OTBhM2FjZC00M2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvj3Radwa/QisOjEIVnYccWO9kzUTXoc9AX5xAyJt3Wxf3qneSnEY7Kev2tYC lpMozvJGJJRCqQjhZUpL33WRTbJWNqInTAkElmFo0mh5QqdYuZgI34XTA7Rxdqx6 SWsphJEEEVIEUj17R698Fi5w3OiIYKMj1f8jtid7ghmuGl3a8iG9EIZ9BXeXI0Cp x6yXOURlHdKpgWicChsISdg6PCRQOEgQaS+1hNErELQ1EhdG1rx+TIMai/psNXPs IU5O6rNGpD4PRhiPD1KVGN4GGq+3wA+9Pfc33amk+jNpkLrXQxEeG0U1fwPKld9+ X24qVMcXIbO9Sx0NPeYFyG6+cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdZfrSG 1jthpm6v8AniYGLttQ8SMB8GA1UdIwQYMBaAFHMeJ+Evs9sLbMwLIPGGgJugjQkV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThFQy9BRjUwQTBFODgz NjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3dHN6QXNnOFlhQW02Q05D UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NG40Uy16Mnd0c3pBc2c4WWFBbTZDTkNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThFQy9BRjUwQTBFODgzNjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3 dHN6QXNnOFlhQW02Q05DUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUH4ugzNAHr8qpOT7PGknrZT0u52INIScSu325xQt6gIpEkE/k5YaV dIkYW1j3DyS2VNYotbj5lEX32+h/SMvk5s5er11ZT7omxowrVqgvSIUjG4oihYnW z6afWVzFypnz41kbB63AFcrA+oho7BowImQE6dSJajc6O2rBYjvNrl9StKNfW7xX uPNXgRdJja5dPIQgpyLC4SL7vayJ7lhrEKD3snxjtZXZldoJ3w+VMaL09MXjLtkQ EqDD+V5PBlU0IVC2b8M4J88vYBfOaVrw9JAXKEMEPXWEZHQm+lSf1NCX9JzoooTr tt9G8FIXGTuY29GWqJ1UlidxqCiW19Dq -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:58 2025 by rpki-client