$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: 7EI6RcE4NewQgDFCst9K9TOceEI4WvcTlTXOK8CN4EE= Subject key identifier: 0C:13:4B:CB:8D:7D:10:61:0F:48:D0:35:BB:56:F8:59:04:FC:D6:5A Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 34D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 34D4 Signing time: Tue 04 Nov 2025 14:57:53 +0000 Manifest this update: Tue 04 Nov 2025 14:57:53 +0000 Manifest next update: Tue 11 Nov 2025 14:57:53 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: y15TVOR9ZDZtPuyKvFtue/hLVOeakHRleZcjhjlhYaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13524 (0x34d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: Nov 4 14:57:53 2025 GMT Not After : Nov 11 14:57:53 2025 GMT Subject: CN=690a1471-01cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ff:4c:1f:05:a1:1b:86:e9:c2:56:f7:21:48: e9:d7:84:00:ef:66:9e:b4:98:32:a0:fa:22:eb:5e: f5:e9:58:59:68:45:63:a2:b4:ff:cd:50:e8:59:a1: a9:ee:12:b2:2d:58:59:76:5b:a9:30:1f:c4:85:31: 2d:8b:4b:a7:48:f9:56:68:74:1d:d4:44:50:ac:2d: 15:fa:5a:48:f0:9c:17:1c:8f:0f:55:a1:9b:0e:56: 4a:95:77:98:71:73:dd:7f:bd:84:42:ac:fc:b1:f7: 93:3f:aa:94:bb:97:a3:e6:d6:9e:b0:cd:cf:85:ff: 61:f7:75:32:cd:ad:8a:76:6b:7c:48:5b:7c:16:0d: c9:34:4c:cc:aa:fa:b8:7c:18:b1:9c:ea:77:e8:94: 85:a5:13:fe:3c:61:05:54:1a:89:85:f8:12:f3:8c: 22:35:3a:6a:70:93:0d:be:af:15:99:5a:72:59:62: 24:9c:71:59:b4:ab:58:ea:77:c9:0b:d0:ce:3c:15: ec:d8:5a:e7:a6:b5:80:fe:e5:e1:86:e8:e3:81:d4: 60:78:3e:d8:6e:6f:9c:f4:5b:2e:39:56:57:d0:01: fb:b1:30:97:58:d3:a1:25:ed:af:9f:fa:75:72:b5: 4b:0b:d8:07:49:35:44:69:88:29:ca:af:b8:f9:39: d7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:13:4B:CB:8D:7D:10:61:0F:48:D0:35:BB:56:F8:59:04:FC:D6:5A X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a3:0e:25:03:3f:12:8a:5d:2d:4d:d0:04:00:e6:af:8e:10: 19:f0:33:21:3d:d9:64:b5:ff:a7:2a:e0:c0:18:c9:f8:da:5d: ce:38:a5:dd:17:be:b4:87:99:8c:20:9f:9b:6f:a4:a2:a9:1f: 8e:53:fe:9c:48:45:65:70:0e:a8:e9:96:02:1d:5d:43:81:9f: 6d:85:1f:39:9b:21:21:3a:b5:d3:0f:83:04:3a:e2:c2:a0:fa: 80:d4:4f:e6:dd:e6:cd:ba:89:7d:11:0e:51:05:6c:3d:13:66: 76:b1:39:3c:f5:4a:b0:7d:8f:31:d1:df:be:7c:de:79:5c:7d: 6a:5c:e1:40:fa:4e:af:2e:bf:bb:cb:4d:f5:2c:e9:8d:20:d8: 3d:d7:79:5c:e1:67:76:92:cb:db:5f:88:c1:fd:9f:07:92:20: de:bc:3e:c0:89:ef:11:dc:2e:d1:0d:ce:05:0c:33:1e:70:1e: 32:e5:12:84:46:04:fd:df:2d:03:75:45:f8:9e:cc:c2:4b:22: 2f:8c:15:3e:85:65:07:a6:b2:5e:8f:1a:a3:87:81:aa:05:2e: 93:fb:89:d8:7f:b9:36:e1:1a:ce:cc:56:c2:b2:ec:78:32:9c: b6:3d:53:47:21:f6:8a:fe:bc:8d:0e:9a:bf:83:e9:36:5d:8c: b3:bc:49:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjUxMTA0MTQ1NzUzWhcNMjUxMTExMTQ1NzUzWjAYMRYwFAYD VQQDEw02OTBhMTQ3MS0wMWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/9MHwWhG4bpwlb3IUjp14QA72aetJgyoPoi61716VhZaEVjorT/zVDoWaGp 7hKyLVhZdlupMB/EhTEti0unSPlWaHQd1ERQrC0V+lpI8JwXHI8PVaGbDlZKlXeY cXPdf72EQqz8sfeTP6qUu5ej5taesM3Phf9h93Uyza2Kdmt8SFt8Fg3JNEzMqvq4 fBixnOp36JSFpRP+PGEFVBqJhfgS84wiNTpqcJMNvq8VmVpyWWIknHFZtKtY6nfJ C9DOPBXs2FrnprWA/uXhhujjgdRgeD7Ybm+c9FsuOVZX0AH7sTCXWNOhJe2vn/p1 crVLC9gHSTVEaYgpyq+4+TnXWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwTS8uN fRBhD0jQNbtW+FkE/NZaMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtow4lAz8Sil0tTdAEAOavjhAZ8DMhPdlktf+nKuDAGMn42l3OOKXd F760h5mMIJ+bb6SiqR+OU/6cSEVlcA6o6ZYCHV1DgZ9thR85myEhOrXTD4MEOuLC oPqA1E/m3ebNuol9EQ5RBWw9E2Z2sTk89UqwfY8x0d++fN55XH1qXOFA+k6vLr+7 y031LOmNINg913lc4Wd2ksvbX4jB/Z8HkiDevD7Aie8R3C7RDc4FDDMecB4y5RKE RgT93y0DdUX4nszCSyIvjBU+hWUHprJejxqjh4GqBS6T+4nYf7k24RrOzFbCsux4 Mpy2PVNHIfaK/ryNDpq/g+k2XYyzvEmd -----END CERTIFICATE-----Generated at Tue Nov 4 21:10:09 2025 by rpki-client