$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft File: 4USmzKVqqTEokShNJidwYk784uw.mft (raw, json) Hash identifier: dG9SlWj1M5WDYrWH101dFdyaU/pon/074W9lu78l51A= Subject key identifier: E1:03:18:16:9C:78:DB:2D:A6:DB:0B:D3:31:34:4D:B3:33:E8:20:3B Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC Certificate issuer: /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft Manifest number: 04F2 Signing time: Sun 02 Nov 2025 23:41:49 +0000 Manifest this update: Sun 02 Nov 2025 23:41:48 +0000 Manifest next update: Sun 09 Nov 2025 23:41:48 +0000 Files and hashes: 1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: xDtLu7JO08AC3XKyq+auR0hY8ol4bPdjH3q7foSO7Kk=) 2: 4A20B66AA5FF11F08004B67CC4F9AE02.roa (hash: 8TfJONOc+HpxVfcksRvftex3Ciph8ayPUCuCYT6BQmw=) 3: 6B106380A53111F0A0F3DA52C4F9AE02.roa (hash: 52o4HNktFr0bXb5sV5nUe5yHOLWbl8q2+aJRz9GqXmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC Validity Not Before: Nov 2 23:41:48 2025 GMT Not After : Nov 9 23:41:48 2025 GMT Subject: CN=6907ec3d-aed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:a3:cf:cd:46:9f:f4:e3:83:32:e1:87:bc: 25:cb:ec:10:b8:08:de:b5:d7:cb:68:d3:55:3f:0f: 84:21:eb:e0:60:57:ae:f3:c7:d2:08:7c:87:3c:1c: bb:1c:c8:99:3e:2a:d5:40:49:65:a3:2d:e7:43:bc: 26:88:4e:6f:18:49:d6:9a:58:20:9b:10:61:a8:9b: 55:d2:19:ee:1e:66:c1:0d:10:8b:80:5d:a1:f2:a4: c8:3b:30:13:d9:28:3e:b8:3d:b1:31:68:da:e3:66: 45:2f:b6:58:bb:66:95:04:35:84:9a:d9:10:b2:c0: 26:16:1c:6e:1e:22:f3:31:83:36:c7:23:e6:b9:b9: 00:da:b7:5a:58:7e:cd:65:67:2b:3e:82:c2:ec:61: 17:22:c1:8e:21:a2:26:04:39:1d:75:3f:3c:fa:87: 3d:d0:df:9d:99:04:93:bf:e3:17:7c:87:0e:39:27: 69:a7:42:76:fa:11:6c:ad:22:5d:13:9b:6e:24:08: 35:cb:21:56:1c:98:bb:44:ec:68:dd:3d:97:12:a6: f5:46:e6:fa:da:90:e0:fb:ce:d8:98:7e:95:12:d9: ff:21:a5:ef:73:5a:34:4b:30:a4:e1:e6:cd:f5:c9: 8a:df:ce:70:39:e8:41:5d:4c:74:d1:06:68:1f:52: 2a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:03:18:16:9C:78:DB:2D:A6:DB:0B:D3:31:34:4D:B3:33:E8:20:3B X509v3 Authority Key Identifier: keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:17:77:57:9c:ac:0e:cd:d4:7f:ea:44:32:c0:90:1e:e1:bf: 31:e6:de:09:2a:73:2b:0b:e2:72:5b:25:12:cd:ed:c9:ea:f1: 94:c2:8b:ee:92:8d:c7:be:45:bd:61:ab:cb:47:29:81:38:83: e9:8b:f9:80:e3:5b:7a:a9:1c:b5:99:b1:11:47:35:84:e9:71: 40:19:7e:e9:de:26:3f:75:55:cb:93:dc:9f:1c:98:2b:75:ca: e2:cf:e9:1b:f7:3a:1f:ff:6c:a2:c9:1b:b1:c4:5c:97:b4:f6: d1:14:d4:c1:83:ae:70:47:9e:84:d4:23:09:17:18:2e:6b:0f: 24:95:6e:f0:f9:af:d8:8c:fc:62:15:68:13:b5:88:c9:2e:44: 09:9d:c1:b1:94:aa:f8:59:8c:70:76:7b:a0:76:cc:c6:66:cc: d3:fa:84:7f:7e:61:3f:b7:79:8c:55:da:fe:43:3f:3f:a7:ee: 05:df:80:4a:31:c9:63:03:ff:e6:d5:41:df:e4:c5:a5:1f:21: be:13:3b:4f:d2:13:74:a1:1a:74:7d:cc:e5:7c:9e:6e:86:a1: 1f:b9:01:83:4a:0d:a2:96:27:ce:1d:e2:43:7e:24:17:59:de: 64:4c:b1:70:77:04:18:f1:9e:6c:55:1f:3d:cf:05:32:44:ef: 57:f3:bc:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKEUxNDRBNkNDQTU2QUE5MzEyODkxMjg0RDI2Mjc3MDYy NEVGQ0UyRUMwHhcNMjUxMTAyMjM0MTQ4WhcNMjUxMTA5MjM0MTQ4WjAYMRYwFAYD VQQDEw02OTA3ZWMzZC1hZWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgyjz81Gn/TjgzLhh7wly+wQuAjetdfLaNNVPw+EIevgYFeu88fSCHyHPBy7 HMiZPirVQElloy3nQ7wmiE5vGEnWmlggmxBhqJtV0hnuHmbBDRCLgF2h8qTIOzAT 2Sg+uD2xMWja42ZFL7ZYu2aVBDWEmtkQssAmFhxuHiLzMYM2xyPmubkA2rdaWH7N ZWcrPoLC7GEXIsGOIaImBDkddT88+oc90N+dmQSTv+MXfIcOOSdpp0J2+hFsrSJd E5tuJAg1yyFWHJi7ROxo3T2XEqb1Rub62pDg+87YmH6VEtn/IaXvc1o0SzCk4ebN 9cmK385wOehBXUx00QZoH1IqrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEDGBac eNstptsL0zE0TbMz6CA7MB8GA1UdIwQYMBaAFOFEpsylaqkxKJEoTSYncGJO/OLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My80OUEyRUU2QzM2 ODUxMUVDODBGNTIwMzVDNEY5QUUwMi80VVNtektWcXFURW9rU2hOSmlkd1lrNzg0 dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVU216S1ZxcVRFb2tTaE5KaWR3WWs3ODR1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My80OUEyRUU2QzM2ODUxMUVDODBGNTIwMzVDNEY5QUUwMi80VVNtektWcXFU RW9rU2hOSmlkd1lrNzg0dXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqF3dXnKwOzdR/6kQywJAe4b8x5t4JKnMrC+JyWyUSze3J6vGUwovu ko3HvkW9YavLRymBOIPpi/mA41t6qRy1mbERRzWE6XFAGX7p3iY/dVXLk9yfHJgr dcriz+kb9zof/2yiyRuxxFyXtPbRFNTBg65wR56E1CMJFxguaw8klW7w+a/YjPxi FWgTtYjJLkQJncGxlKr4WYxwdnugdszGZszT+oR/fmE/t3mMVdr+Qz8/p+4F34BK McljA//m1UHf5MWlHyG+EztP0hN0oRp0fczlfJ5uhqEfuQGDSg2ilifOHeJDfiQX Wd5kTLFwdwQY8Z5sVR89zwUyRO9X87yY -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:53 2025 by rpki-client