$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft File: P484Yw9NPXDt2eXJHjbsSO-5_WI.mft (raw, json) Hash identifier: obcfh/JcDDeUhf2oepsnYbTQpqwIZew0Bs7X7CGtqtU= Subject key identifier: 0A:0B:72:72:5F:22:3F:98:B7:4B:7E:11:27:06:22:9C:45:D5:3A:EE Authority key identifier: 3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62 Certificate issuer: /CN=A91E9CD4/serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft Manifest number: 04 Signing time: Wed 05 Nov 2025 08:17:51 +0000 Manifest this update: Wed 05 Nov 2025 08:17:51 +0000 Manifest next update: Wed 12 Nov 2025 08:17:51 +0000 Files and hashes: 1: P484Yw9NPXDt2eXJHjbsSO-5_WI.crl (hash: imuBHAzXupn3RdTGUYBljIUqOx1ABMlf9ez/7j5dboA=) 2: 6E08B7E2B96111F0B44EA641C4F9AE02.roa (hash: 5BoyFe6vauY5VbEjJJ7Dh4FCQg/kfYL0f9QDaipyVwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CD4, serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62 Validity Not Before: Nov 5 08:17:51 2025 GMT Not After : Nov 12 08:17:51 2025 GMT Subject: CN=690b082f-dfe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:71:c2:79:10:50:73:8b:81:a4:8f:60:2e:ed: 74:83:44:30:a3:a6:d4:18:d6:65:b0:05:79:08:c8: 7e:a6:e5:f9:c5:e4:9a:c7:ff:9c:b5:07:6e:f1:3f: e0:72:ee:09:c1:44:cd:06:1b:37:dd:34:a0:09:5a: c4:ac:80:00:87:b4:96:22:72:b6:74:17:f2:3a:5c: 3a:9e:41:45:af:05:92:f1:fa:9a:f9:1c:61:21:87: 00:48:b9:3f:7f:c4:c3:8a:14:c9:18:4b:79:c4:bf: 66:23:28:0b:5a:98:b2:50:48:d9:6e:a7:a4:91:32: d6:86:06:30:ce:3e:5a:f6:0a:e7:21:89:84:16:4d: 5b:1b:95:e6:fe:83:3b:db:0a:88:78:4e:35:ac:7a: 75:c9:5c:29:0e:ce:16:51:91:c1:88:6c:7f:24:90: 4c:34:e9:74:03:a2:65:d2:82:2b:e5:c2:8c:31:26: d7:5e:e1:49:23:67:54:5d:6a:aa:ff:71:6c:0c:30: da:23:57:96:b6:41:72:4f:64:4f:0a:5d:b1:fb:4c: 21:f9:78:c7:33:4b:0b:78:15:2f:0a:e8:f7:e2:41: 71:04:0c:0c:b2:b9:b7:8b:05:5b:a6:0f:3a:df:85: f1:ab:40:5a:63:93:47:2c:9e:6b:d6:cc:4c:52:91: eb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0B:72:72:5F:22:3F:98:B7:4B:7E:11:27:06:22:9C:45:D5:3A:EE X509v3 Authority Key Identifier: keyid:3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:1f:52:45:7d:95:97:3a:09:6e:e9:fb:1d:43:7d:9e:6f:e1: 18:33:f7:4c:b5:f0:ef:57:ae:20:4b:cc:8e:41:cb:91:ce:2a: 76:50:dd:e4:5b:ab:d7:49:68:d4:da:3e:b0:e3:3e:ea:20:a1: 13:79:1a:46:09:b0:c7:f2:09:f2:97:2c:ee:04:6c:55:9f:01: 1d:30:5d:f0:32:03:5b:92:72:c5:7f:93:4c:19:3d:fc:9d:cf: 92:cd:02:1e:e0:f5:25:1b:bc:cb:95:a1:f8:3a:1d:51:31:b1: e1:ef:cb:c0:d2:86:ae:95:d4:9d:63:89:03:35:21:76:c1:6a: f0:43:3e:8c:79:05:24:52:51:2d:90:d9:05:91:b9:b6:fa:44: ff:53:5f:40:b4:73:94:76:97:c8:eb:63:8b:b5:38:08:18:78: 10:e6:7a:f5:ad:4b:52:51:2b:85:b1:01:9a:e4:dc:f3:fa:4b: 8f:ac:a3:ba:04:8b:e1:d6:84:c0:f5:3d:9c:0f:f7:af:b4:f1: 38:a7:de:80:3d:cb:c0:06:00:7f:d0:47:97:97:93:38:fb:99: 1b:42:3a:ae:33:cf:5e:ec:0d:0b:96:33:ae:75:a9:7d:b7:74: 03:02:9f:3e:6e:0f:b4:ce:f2:2b:49:9f:b3:5d:8f:6e:a8:40: e3:be:c0:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNENDExMC8GA1UEBRMoM0Y4RjM4NjMwRjREM0Q3MEVERDlFNUM5MUUzNkVDNDhF RkI5RkQ2MjAeFw0yNTExMDUwODE3NTFaFw0yNTExMTIwODE3NTFaMBgxFjAUBgNV BAMTDTY5MGIwODJmLWRmZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeccJ5EFBzi4Gkj2Au7XSDRDCjptQY1mWwBXkIyH6m5fnF5JrH/5y1B27xP+By 7gnBRM0GGzfdNKAJWsSsgACHtJYicrZ0F/I6XDqeQUWvBZLx+pr5HGEhhwBIuT9/ xMOKFMkYS3nEv2YjKAtamLJQSNlup6SRMtaGBjDOPlr2CuchiYQWTVsbleb+gzvb Coh4TjWsenXJXCkOzhZRkcGIbH8kkEw06XQDomXSgivlwowxJtde4UkjZ1Rdaqr/ cWwMMNojV5a2QXJPZE8KXbH7TCH5eMczSwt4FS8K6PfiQXEEDAyyubeLBVumDzrf hfGrQFpjk0csnmvWzExSkevJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCgtycl8i P5i3S34RJwYinEXVOu4wHwYDVR0jBBgwFoAUP484Yw9NPXDt2eXJHjbsSO+5/WIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0Q0L0RFNTMxMDgwQjk1 NTExRjA5QTdGNkQ3MUM0RjlBRTAyL1A0ODRZdzlOUFhEdDJlWEpIamJzU08tNV9X SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDQ4NFl3OU5QWER0MmVYSkhqYnNTTy01X1dJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0Q0L0RFNTMxMDgwQjk1NTExRjA5QTdGNkQ3MUM0RjlBRTAyL1A0ODRZdzlOUFhE dDJlWEpIamJzU08tNV9XSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK4fUkV9lZc6CW7p+x1DfZ5v4Rgz90y18O9XriBLzI5By5HOKnZQ3eRb q9dJaNTaPrDjPuogoRN5GkYJsMfyCfKXLO4EbFWfAR0wXfAyA1uScsV/k0wZPfyd z5LNAh7g9SUbvMuVofg6HVExseHvy8DShq6V1J1jiQM1IXbBavBDPox5BSRSUS2Q 2QWRubb6RP9TX0C0c5R2l8jrY4u1OAgYeBDmevWtS1JRK4WxAZrk3PP6S4+so7oE i+HWhMD1PZwP96+08Tin3oA9y8AGAH/QR5eXkzj7mRtCOq4zz17sDQuWM651qX23 dAMCnz5uD7TO8itJn7Ndj26oQOO+wMI= -----END CERTIFICATE-----Generated at Wed Nov 5 19:38:22 2025 by rpki-client