$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json) Hash identifier: 6lqky3pqqzsv7NDux9pKm+2mTWiATwwAkfsJ55EhXcs= Subject key identifier: 63:F7:D6:1F:5D:D1:D4:69:BC:1C:FA:E0:42:83:77:7C:03:E1:7D:81 Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft Manifest number: 017D Signing time: Mon 03 Nov 2025 03:41:15 +0000 Manifest this update: Mon 03 Nov 2025 03:41:15 +0000 Manifest next update: Mon 10 Nov 2025 03:41:15 +0000 Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: YA4zHAi/Q3kX0NnEsYMNOt0Dxt6KliqRb+EcFVjG4UU=) 2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: 1MgG7WTwswH0kCn616eOpfwXJOyuod5SbIGbahzjBCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Validity Not Before: Nov 3 03:41:15 2025 GMT Not After : Nov 10 03:41:15 2025 GMT Subject: CN=6908245b-0d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3c:94:83:6f:cc:47:ee:4d:64:e8:d5:d5:9f: 1c:9a:a2:7d:cb:ab:66:8c:83:5b:e0:6e:43:16:4f: e3:e7:a6:4d:8f:98:f7:5e:06:d6:b7:05:69:74:cc: 02:c1:57:d8:86:3d:98:56:8c:3d:d0:68:7f:9b:76: 1c:f0:84:60:10:4f:11:da:09:fa:04:07:7b:ea:06: f4:28:88:94:0e:7d:10:ee:d7:b9:89:5e:20:35:66: 3f:1a:c6:91:6b:be:13:bf:c9:75:9e:5d:c2:3e:3c: 96:8b:71:27:10:3b:1b:bf:02:1b:1e:09:3f:ec:e3: d1:55:bc:b7:ff:24:62:4f:af:1a:2d:3c:e0:7a:49: 08:87:b1:d3:0c:e3:bb:ce:9b:1d:e3:11:5a:0d:ad: e9:f9:cd:b2:e5:9d:fc:a8:39:de:fe:0d:d2:f7:c4: 20:20:7b:18:b4:25:fd:ee:99:0d:6f:84:d8:83:48: f3:f6:8a:5a:40:0c:87:4c:98:54:2b:86:e3:10:4b: 84:32:84:38:06:cd:65:97:1e:9e:7d:1b:5a:1a:1a: 5c:29:e6:29:52:59:c7:66:12:c5:da:08:dd:c7:80: c7:39:de:6c:6f:8d:0e:26:42:bc:3a:d2:f1:7e:7d: c6:82:a4:a2:28:18:40:77:01:66:25:c7:cf:8a:ab: 1e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F7:D6:1F:5D:D1:D4:69:BC:1C:FA:E0:42:83:77:7C:03:E1:7D:81 X509v3 Authority Key Identifier: keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f6:8f:eb:9c:22:3d:d0:fe:fa:e9:ca:26:79:1a:72:8a:3d: 68:78:73:55:3c:b7:69:c8:9a:65:43:d7:2d:33:1b:42:b3:1f: a1:27:0a:77:f4:1e:34:27:da:9c:cd:0e:70:e4:ec:a2:f5:4d: e7:df:5d:86:64:c1:d8:0a:74:46:e1:d6:d8:c8:3d:af:c4:46: 52:6f:e3:78:ad:a8:97:a8:6a:b2:97:a3:39:e5:ab:34:e1:b0: de:b0:ca:23:d8:41:16:58:d0:f9:95:b6:76:e1:cc:d3:2d:eb: 8f:20:b5:94:b7:1f:8d:87:7f:af:b8:48:37:54:e4:2f:2d:ad: ba:07:db:04:8b:d4:d5:b9:23:31:f3:52:87:21:3d:10:c7:7c: 10:1b:f3:8a:bf:0e:b9:57:e4:cd:f4:cb:45:8b:3a:6f:19:e9: d1:1c:e3:ed:a1:16:e2:a4:c9:be:c7:da:04:7b:7c:f8:73:17: b0:22:d6:88:10:57:25:a8:4a:26:09:4e:e8:e4:9d:0e:04:23: b7:64:c0:c4:cf:01:a2:00:ae:7d:62:66:58:14:1a:a4:93:da: e8:c9:26:6d:25:1f:a0:f8:27:02:a3:98:39:21:bb:ae:fe:1e: 52:f6:23:f0:30:d3:d5:8c:d9:86:08:eb:4c:31:15:64:77:cc: c3:52:b4:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMDcxMTAvBgNVBAUTKDczODREQzY2N0I0RDQ5QTVBQ0Q1MEE1OEI0ODkxNkEx NUFDMjYxNkIwHhcNMjUxMTAzMDM0MTE1WhcNMjUxMTEwMDM0MTE1WjAYMRYwFAYD VQQDEw02OTA4MjQ1Yi0wZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDyUg2/MR+5NZOjV1Z8cmqJ9y6tmjINb4G5DFk/j56ZNj5j3XgbWtwVpdMwC wVfYhj2YVow90Gh/m3Yc8IRgEE8R2gn6BAd76gb0KIiUDn0Q7te5iV4gNWY/GsaR a74Tv8l1nl3CPjyWi3EnEDsbvwIbHgk/7OPRVby3/yRiT68aLTzgekkIh7HTDOO7 zpsd4xFaDa3p+c2y5Z38qDne/g3S98QgIHsYtCX97pkNb4TYg0jz9opaQAyHTJhU K4bjEEuEMoQ4Bs1llx6efRtaGhpcKeYpUlnHZhLF2gjdx4DHOd5sb40OJkK8OtLx fn3GgqSiKBhAdwFmJcfPiqse4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGP31h9d 0dRpvBz64EKDd3wD4X2BMB8GA1UdIwQYMBaAFHOE3GZ7TUmlrNUKWLSJFqFawmFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQwNy81MDU1NjBCNjZF N0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNhV3MxUXBZdElrV29WckNZ V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQwNy81MDU1NjBCNjZFN0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNh V3MxUXBZdElrV29WckNZV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc9o/rnCI90P766comeRpyij1oeHNVPLdpyJplQ9ctMxtCsx+hJwp3 9B40J9qczQ5w5Oyi9U3n312GZMHYCnRG4dbYyD2vxEZSb+N4raiXqGqyl6M55as0 4bDesMoj2EEWWND5lbZ24czTLeuPILWUtx+Nh3+vuEg3VOQvLa26B9sEi9TVuSMx 81KHIT0Qx3wQG/OKvw65V+TN9MtFizpvGenRHOPtoRbipMm+x9oEe3z4cxewItaI EFclqEomCU7o5J0OBCO3ZMDEzwGiAK59YmZYFBqkk9roySZtJR+g+CcCo5g5Ibuu /h5S9iPwMNPVjNmGCOtMMRVkd8zDUrRk -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:19 2025 by rpki-client