$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json) Hash identifier: UdCNeY2CeBN7gAPVsMUWSg5giZHKgbKZOlkbCi4clbg= Subject key identifier: 3E:51:93:74:53:A3:02:2A:37:79:75:F6:A8:C6:2A:17:D2:03:7D:5C Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Certificate serial: 0637 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft Manifest number: 0630 Signing time: Tue 04 Nov 2025 22:49:51 +0000 Manifest this update: Tue 04 Nov 2025 22:49:50 +0000 Manifest next update: Tue 11 Nov 2025 22:49:50 +0000 Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: PqIIWPvV5EFPoW1aL6j9p66n21fThpxxlSQOehYYM8k=) 2: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: LrOS5vT6G1w5nCu4oa5LHxalQDErRntPMrUYlIi++Aw=) 3: F78605D8778A11F08EDAFE28C4F9AE02.roa (hash: NMP/9h7Q+kMraIM38Dl6bwkPc4zc3AHpMdJgqonRBcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1591 (0x637) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5ECA, serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Validity Not Before: Nov 4 22:49:50 2025 GMT Not After : Nov 11 22:49:50 2025 GMT Subject: CN=690a830e-c12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:f9:9d:96:30:ae:f3:d5:48:91:45:3b:e9: 13:05:a7:a7:ff:07:52:d0:4a:29:7c:b1:33:8f:b3: 98:d5:98:ea:c3:56:67:3a:51:b6:c7:6a:f1:4e:45: 11:81:a1:14:7c:44:38:b0:65:20:4b:70:ae:b9:b6: 8e:ca:c2:f1:f7:40:be:c4:f2:a5:71:55:d3:d6:c0: 15:a2:a2:e3:9b:82:9e:f2:0f:83:d2:77:de:18:29: c2:9d:ae:57:8c:f9:85:f5:8f:a9:37:26:71:6b:56: d0:89:0a:9c:d7:30:af:55:81:f8:2d:30:ee:aa:c6: 32:ef:ad:62:53:24:3b:9a:fb:7a:80:d7:58:12:c7: c3:45:40:a7:f7:76:68:4a:e6:a1:fb:0c:bb:5a:4d: 7c:30:16:e5:12:f2:25:92:67:da:a4:73:c1:05:7e: e1:2d:c7:aa:b7:f7:d1:18:8e:3d:7f:b7:e4:a8:bd: 15:06:5d:bf:2c:64:5d:32:a1:cc:c2:a7:ca:4c:47: 0c:91:db:05:d3:3a:2a:43:c5:cd:f7:fb:80:08:be: 8c:06:70:f0:72:3f:c9:92:d2:43:4f:0a:6e:fb:8a: 4d:09:c4:e3:16:aa:21:41:42:d5:fc:3c:31:d6:4d: e0:9e:14:8a:a1:e2:f2:e5:98:5e:bf:fc:6a:75:cd: b4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:51:93:74:53:A3:02:2A:37:79:75:F6:A8:C6:2A:17:D2:03:7D:5C X509v3 Authority Key Identifier: keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:66:5e:4c:c0:6e:61:7d:21:5b:0a:0f:ea:36:29:8e:b2:85: b9:6d:04:01:1d:dc:90:7a:c0:f5:d7:13:74:bb:3e:6b:20:50: de:fe:5e:9a:a0:84:68:32:63:f8:e2:c7:37:b0:18:49:9d:f7: 6e:88:36:aa:6b:35:f2:c3:7a:ff:8e:11:87:67:4f:b0:3a:fb: 3b:ef:f6:f1:68:32:90:04:78:99:32:70:d5:97:3a:48:2e:be: d7:f1:cb:83:87:b7:d7:5b:1a:7b:78:15:e8:1c:ef:86:54:a2: 6a:c7:e4:af:65:86:46:d1:a3:7d:fd:95:00:f7:5e:46:a9:b1: c1:a8:91:92:02:d3:ba:19:fb:2e:c3:4b:f8:e4:ab:30:3e:d6: cb:02:d4:1d:db:d2:a8:22:35:e0:3f:9f:b6:68:71:a5:43:29: 59:91:2b:ad:fc:7f:f4:68:61:94:ca:23:18:4d:98:9e:85:27: 29:9f:41:1d:6b:ad:c0:0e:a2:b7:e7:5b:d8:c0:8c:1a:b9:c8: e2:a7:92:5c:f0:ab:e5:5c:ca:c9:89:21:37:d3:bb:88:5e:86: 4b:a9:a4:0c:ef:7b:43:06:ee:6c:73:ae:09:95:2d:60:16:b2: dc:31:01:8a:fd:1d:9d:01:9f:59:e1:0c:a4:db:ca:53:76:83: 96:4e:94:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFQ0ExMTAvBgNVBAUTKEZCODA1RDUzNzlDQjA3RDUyQTQxMUVGRkZEMDQ5MUNB MzlCN0JGMjcwHhcNMjUxMTA0MjI0OTUwWhcNMjUxMTExMjI0OTUwWjAYMRYwFAYD VQQDEw02OTBhODMwZS1jMTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRH5nZYwrvPVSJFFO+kTBaen/wdS0EopfLEzj7OY1Zjqw1ZnOlG2x2rxTkUR gaEUfEQ4sGUgS3CuubaOysLx90C+xPKlcVXT1sAVoqLjm4Ke8g+D0nfeGCnCna5X jPmF9Y+pNyZxa1bQiQqc1zCvVYH4LTDuqsYy761iUyQ7mvt6gNdYEsfDRUCn93Zo Suah+wy7Wk18MBblEvIlkmfapHPBBX7hLceqt/fRGI49f7fkqL0VBl2/LGRdMqHM wqfKTEcMkdsF0zoqQ8XN9/uACL6MBnDwcj/JktJDTwpu+4pNCcTjFqohQULV/Dwx 1k3gnhSKoeLy5Zhev/xqdc20awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5Rk3RT owIqN3l19qjGKhfSA31cMB8GA1UdIwQYMBaAFPuAXVN5ywfVKkEe//0Ekco5t78n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUVDQS9CRkQyMzIwNkI5 MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5VXFRUjdfX1FTUnlqbTN2 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy00QmRVM25MQjlVcVFSN19fUVNSeWptM3Z5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUVDQS9CRkQyMzIwNkI5MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5 VXFRUjdfX1FTUnlqbTN2eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVZl5MwG5hfSFbCg/qNimOsoW5bQQBHdyQesD11xN0uz5rIFDe/l6a oIRoMmP44sc3sBhJnfduiDaqazXyw3r/jhGHZ0+wOvs77/bxaDKQBHiZMnDVlzpI Lr7X8cuDh7fXWxp7eBXoHO+GVKJqx+SvZYZG0aN9/ZUA915GqbHBqJGSAtO6Gfsu w0v45KswPtbLAtQd29KoIjXgP5+2aHGlQylZkSut/H/0aGGUyiMYTZiehScpn0Ed a63ADqK351vYwIwaucjip5Jc8KvlXMrJiSE307uIXoZLqaQM73tDBu5sc64JlS1g FrLcMQGK/R2dAZ9Z4Qyk28pTdoOWTpQt -----END CERTIFICATE-----Generated at Wed Nov 5 05:50:13 2025 by rpki-client