$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json) Hash identifier: ALZDAPCfi8Wr87O0PCOjhJUFFhIzszRRWEihW+gttas= Subject key identifier: 45:5A:4A:CA:1C:CF:49:45:78:24:D6:CA:CA:EE:7B:76:18:A9:1B:C9 Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Certificate serial: 040B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft Manifest number: 0400 Signing time: Wed 05 Nov 2025 00:33:51 +0000 Manifest this update: Wed 05 Nov 2025 00:33:51 +0000 Manifest next update: Wed 12 Nov 2025 00:33:51 +0000 Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: v0ytcq6DS4ADbmawHgd7PzMC8X3T4WEG/a+wSc2j8CQ=) 2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: yEVRrXufQh+Qc/HqPk/jAvaqGmnT+PN1jZ/kXTfyo9A=) 3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: hYiudA2rwhN316Pb5lt+GNf53uhu2FFhMUzTaTRI2hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1035 (0x40b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Validity Not Before: Nov 5 00:33:51 2025 GMT Not After : Nov 12 00:33:51 2025 GMT Subject: CN=690a9b6f-6a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ca:fe:12:a7:3e:ec:32:f0:d2:8d:54:9d:46: fd:a6:e4:3f:4d:36:c3:6a:cf:9d:0f:61:0e:43:8b: b3:91:df:b8:95:63:6f:69:3b:b1:7b:5d:b1:d2:03: bc:e3:21:4d:5c:4f:cf:65:14:12:1b:e1:2e:77:d6: a6:72:c0:7c:a8:c3:45:81:af:9c:4c:42:9c:cd:25: 97:60:8c:df:97:e5:05:7b:bf:4d:79:a3:2b:27:32: 38:fd:9f:8e:69:90:7f:ed:fa:46:38:06:f7:56:35: df:77:1f:f7:76:75:f3:38:dd:b4:59:fe:21:19:68: 9e:9f:9b:47:90:23:91:26:0d:40:8b:28:85:5a:4f: 1e:bb:75:3c:2f:44:ff:f5:4e:cd:7a:9b:35:2d:1c: c6:00:43:2d:34:4b:85:c7:0a:c8:bf:b3:3a:72:26: b5:10:fc:af:a3:40:aa:7e:e6:c5:b4:13:9a:7d:ec: bb:d1:91:47:65:c0:8c:88:da:cc:b5:40:34:24:5b: 4b:87:44:d9:d5:3c:fc:46:0f:07:00:c4:f9:f9:4c: 6f:71:a6:c9:21:25:6d:37:17:35:46:2e:1c:69:9d: 7f:32:63:b0:f9:66:d9:6c:31:c8:51:c3:d0:f3:76: 9c:4c:d6:7f:86:2f:e7:8f:18:c1:81:84:c1:57:2f: da:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5A:4A:CA:1C:CF:49:45:78:24:D6:CA:CA:EE:7B:76:18:A9:1B:C9 X509v3 Authority Key Identifier: keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:fe:92:7a:9b:ff:6a:28:8d:f4:18:90:05:91:45:bd:41:39: 77:60:18:3a:1e:f9:2c:e4:26:6a:e9:d5:85:08:cd:eb:42:1a: 4a:22:de:9a:6d:41:07:a6:90:32:54:62:09:41:0d:99:18:c4: 85:22:75:7b:7f:38:05:6a:e0:45:cd:a1:c6:4d:86:29:fe:05: f7:7c:ab:c4:80:00:b8:56:af:ee:9a:1a:47:ef:1e:d9:46:be: f4:7a:19:0a:25:2c:ea:d8:3c:de:6b:96:25:ad:42:f2:70:a7: d9:16:0f:31:cb:15:52:82:a0:c5:1a:37:49:f4:d1:28:30:10: 5f:c4:57:10:e9:d7:89:ae:74:1d:d8:80:96:52:44:88:f7:dc: db:fc:e4:83:69:94:2e:08:17:16:fb:e1:a4:71:62:fc:51:a9: 68:40:ba:a2:1e:b3:83:56:ea:89:1b:d8:fd:e0:d7:25:ee:e8: 0e:9d:e7:29:d9:97:45:be:ed:15:93:f8:f2:46:44:55:bc:9d: 05:75:40:38:5a:89:1c:f6:0c:1a:44:50:71:e2:0f:62:2a:17: fc:d5:90:72:15:02:cd:07:34:90:fb:f9:05:48:3f:c5:de:91: ea:0b:8e:8f:28:45:9f:f3:a8:ab:6a:00:8e:b5:4f:44:97:d2: 51:2d:65:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF OEU4NkQ4MEIwHhcNMjUxMTA1MDAzMzUxWhcNMjUxMTEyMDAzMzUxWjAYMRYwFAYD VQQDEw02OTBhOWI2Zi02YTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28r+Eqc+7DLw0o1UnUb9puQ/TTbDas+dD2EOQ4uzkd+4lWNvaTuxe12x0gO8 4yFNXE/PZRQSG+Eud9amcsB8qMNFga+cTEKczSWXYIzfl+UFe79NeaMrJzI4/Z+O aZB/7fpGOAb3VjXfdx/3dnXzON20Wf4hGWien5tHkCORJg1AiyiFWk8eu3U8L0T/ 9U7Neps1LRzGAEMtNEuFxwrIv7M6cia1EPyvo0CqfubFtBOafey70ZFHZcCMiNrM tUA0JFtLh0TZ1Tz8Rg8HAMT5+UxvcabJISVtNxc1Ri4caZ1/MmOw+WbZbDHIUcPQ 83acTNZ/hi/njxjBgYTBVy/aowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVaSsoc z0lFeCTWysrue3YYqRvJMB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80NEE1MTk0ODk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJ dzQtRHlNckNELURvNkcyQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY/pJ6m/9qKI30GJAFkUW9QTl3YBg6Hvks5CZq6dWFCM3rQhpKIt6a bUEHppAyVGIJQQ2ZGMSFInV7fzgFauBFzaHGTYYp/gX3fKvEgAC4Vq/umhpH7x7Z Rr70ehkKJSzq2Dzea5YlrULycKfZFg8xyxVSgqDFGjdJ9NEoMBBfxFcQ6deJrnQd 2ICWUkSI99zb/OSDaZQuCBcW++GkcWL8UaloQLqiHrODVuqJG9j94Ncl7ugOnecp 2ZdFvu0Vk/jyRkRVvJ0FdUA4Wokc9gwaRFBx4g9iKhf81ZByFQLNBzSQ+/kFSD/F 3pHqC46PKEWf86iragCOtU9El9JRLWX5 -----END CERTIFICATE-----Generated at Wed Nov 5 11:49:28 2025 by rpki-client