$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft File: fHiVltWjewRcnZ8TpCAMHodHf3Q.mft (raw, json) Hash identifier: MYJn6BXRLP/vd9Yi2GGV1oBocKiaU/l9a+V1+j7Jv5c= Subject key identifier: DA:D4:D7:0F:C5:9F:49:01:05:66:F1:B2:31:75:00:C5:2A:29:06:E3 Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 Certificate issuer: /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft Manifest number: 03 Signing time: Tue 04 Nov 2025 08:23:48 +0000 Manifest this update: Tue 04 Nov 2025 08:23:47 +0000 Manifest next update: Tue 11 Nov 2025 08:23:47 +0000 Files and hashes: 1: fHiVltWjewRcnZ8TpCAMHodHf3Q.crl (hash: mE4PtusZd7CJKOFYIW+jxfS11Cb/ywFD1ZPPxo3Qwgc=) 2: 9402F1E2B95711F0959B8139C4F9AE02.roa (hash: yGR2xqnv87rJpxXoRJ5BLEOl4DCEpjBSrdz8OkezYaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 08:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Validity Not Before: Nov 4 08:23:47 2025 GMT Not After : Nov 11 08:23:47 2025 GMT Subject: CN=6909b813-0cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c7:b2:9f:13:fb:90:eb:93:94:52:4a:d9:ea: 42:95:24:0c:47:e0:6f:71:87:4e:fa:4c:d7:b2:13: 3d:fb:6a:a4:a9:0f:ac:5a:d2:dc:2e:91:24:2d:e6: 7d:8b:dc:0e:7d:84:61:95:2e:a2:1f:c0:e4:9f:30: a8:c1:59:58:28:c7:de:00:0e:2a:e4:fe:34:11:5b: ed:8b:72:24:c9:70:ac:67:06:df:d9:b7:63:97:97: 23:a1:03:98:af:3f:58:e9:6e:9b:36:2f:a1:ba:11: 5e:10:69:80:07:3c:87:9b:af:3d:7e:4f:39:1f:60: ce:e5:31:18:02:61:a5:6b:c9:4e:32:9c:6c:46:ec: 89:ba:48:de:76:34:ef:56:92:b8:69:1e:99:08:cc: bd:9a:ce:cf:62:4f:c1:db:aa:b7:52:ae:64:cb:5d: 4c:5b:ea:1c:38:a2:9a:91:7c:76:24:d9:ea:13:5f: a5:77:df:26:a2:64:73:32:0d:c6:5f:60:9e:72:62: 36:e3:87:1b:22:f2:0b:69:32:3d:c8:6a:f0:52:4a: 3a:8f:53:12:d4:9c:15:f8:97:d1:da:68:c3:6d:8d: 3f:74:fe:9f:ea:92:dd:45:d5:c5:3c:de:34:f9:19: e4:f6:1c:6c:69:9b:c6:7f:33:d5:a8:3f:a8:12:36: 17:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D4:D7:0F:C5:9F:49:01:05:66:F1:B2:31:75:00:C5:2A:29:06:E3 X509v3 Authority Key Identifier: keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:06:34:13:9f:98:b0:75:f4:99:41:bc:66:88:7c:f0:78:c3: eb:47:a6:7c:0b:83:fe:37:a8:f4:dc:a7:87:86:09:20:a4:08: 51:66:f3:e9:bc:43:1d:64:50:f5:1b:4c:57:bc:13:2b:ce:5f: 32:bf:8e:18:b3:31:80:52:45:a0:35:59:1d:d2:26:2e:c6:de: c0:ec:0d:51:83:3a:14:50:c8:4d:88:49:91:c0:50:dd:0f:45: 5f:28:0a:26:fb:72:f5:cf:02:b9:d7:22:e4:18:e7:88:a4:82: 91:b1:cc:10:71:30:48:5c:e0:ce:0d:e1:7b:2f:72:ce:7c:a5: c0:f1:ef:c1:ec:07:4f:6a:fc:7e:33:b4:6d:dd:09:d3:96:fc: 6d:2a:57:d7:5c:05:06:46:eb:d3:ec:c6:3f:f1:a1:0d:be:99: 71:a7:a3:36:dc:c1:cf:32:99:30:70:44:51:83:6d:33:63:bd: 16:cc:ff:0d:ef:cd:56:26:0a:e6:7e:62:8e:0f:47:20:a5:27: b8:ec:f7:e0:da:da:e0:a1:13:71:17:46:07:40:b0:59:94:80: 60:03:2f:b8:21:6b:00:a7:f0:9b:58:f0:39:2a:1b:8c:3d:68: 9f:7e:78:b9:d4:b7:7f:49:bd:1e:0d:86:83:15:ff:d2:3f:c1: 40:20:b0:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNENDExMC8GA1UEBRMoN0M3ODk1OTZENUEzN0IwNDVDOUQ5RjEzQTQyMDBDMUU4 NzQ3N0Y3NDAeFw0yNTExMDQwODIzNDdaFw0yNTExMTEwODIzNDdaMBgxFjAUBgNV BAMTDTY5MDliODEzLTBjZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqx7KfE/uQ65OUUkrZ6kKVJAxH4G9xh076TNeyEz37aqSpD6xa0twukSQt5n2L 3A59hGGVLqIfwOSfMKjBWVgox94ADirk/jQRW+2LciTJcKxnBt/Zt2OXlyOhA5iv P1jpbps2L6G6EV4QaYAHPIebrz1+TzkfYM7lMRgCYaVryU4ynGxG7Im6SN52NO9W krhpHpkIzL2azs9iT8HbqrdSrmTLXUxb6hw4opqRfHYk2eoTX6V33yaiZHMyDcZf YJ5yYjbjhxsi8gtpMj3IavBSSjqPUxLUnBX4l9HaaMNtjT90/p/qkt1F1cU83jT5 GeT2HGxpm8Z/M9WoP6gSNhf/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2tTXD8Wf SQEFZvGyMXUAxSopBuMwHwYDVR0jBBgwFoAUfHiVltWjewRcnZ8TpCAMHodHf3Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0Q0L0Q0N0Y0OTBDQjk1 NTExRjA5QTdGNkQ3MUM0RjlBRTAyL2ZIaVZsdFdqZXdSY25aOFRwQ0FNSG9kSGYz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZkhpVmx0V2pld1Jjblo4VHBDQU1Ib2RIZjNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0Q0L0Q0N0Y0OTBDQjk1NTExRjA5QTdGNkQ3MUM0RjlBRTAyL2ZIaVZsdFdqZXdS Y25aOFRwQ0FNSG9kSGYzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADgGNBOfmLB19JlBvGaIfPB4w+tHpnwLg/43qPTcp4eGCSCkCFFm8+m8 Qx1kUPUbTFe8EyvOXzK/jhizMYBSRaA1WR3SJi7G3sDsDVGDOhRQyE2ISZHAUN0P RV8oCib7cvXPArnXIuQY54ikgpGxzBBxMEhc4M4N4Xsvcs58pcDx78HsB09q/H4z tG3dCdOW/G0qV9dcBQZG69Psxj/xoQ2+mXGnozbcwc8ymTBwRFGDbTNjvRbM/w3v zVYmCuZ+Yo4PRyClJ7js9+Da2uChE3EXRgdAsFmUgGADL7ghawCn8JtY8DkqG4w9 aJ9+eLnUt39JvR4NhoMV/9I/wUAgsJs= -----END CERTIFICATE-----Generated at Tue Nov 4 19:13:44 2025 by rpki-client