$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft File: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft (raw, json) Hash identifier: nSvvJBSRFaVY7zEkRZ3lIYl3ftOjGHf57Nv+URSF6Fc= Subject key identifier: 72:30:B1:7A:30:05:30:C4:A1:C1:62:FC:98:2D:9E:96:C6:A0:1C:40 Authority key identifier: E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D Certificate issuer: /CN=A91F2B47/serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D Certificate serial: 027D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft Manifest number: 0276 Signing time: Thu 06 Nov 2025 22:05:10 +0000 Manifest this update: Thu 06 Nov 2025 22:05:09 +0000 Manifest next update: Thu 13 Nov 2025 22:05:09 +0000 Files and hashes: 1: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl (hash: lj6lLnK2NyEYqSGw0QrnbmLHe4Zv2wBJ/OgjGkWL47Q=) 2: 909F94F070F911EDBA42F056C4F9AE02.roa (hash: J59LrtIyPPPdrZKXDpKJBMgQFNUlF3OmhLoyAq20BcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 22:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 637 (0x27d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D Validity Not Before: Nov 6 22:05:09 2025 GMT Not After : Nov 13 22:05:09 2025 GMT Subject: CN=690d1b95-984d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:58:1a:38:98:6f:a9:17:c5:f7:8b:91:3b:45: 29:8b:93:f5:55:c6:3f:8e:0a:b0:33:7a:8f:4b:19: 1b:79:33:d3:d9:69:95:4a:9a:f2:bd:4a:7b:0e:e1: 8e:23:5f:0d:6c:0c:61:bf:64:78:d7:6b:03:83:3b: b1:5d:11:a4:86:96:75:a0:7b:71:1a:c6:69:78:0a: 9a:38:7a:32:0b:c1:ed:0c:ee:3a:38:02:50:72:06: cc:4b:d3:d3:b6:e9:0a:07:b5:86:ad:c5:d9:8a:a4: e9:80:93:21:4a:ea:b0:e2:7e:47:d7:3a:13:e5:fe: 1b:5f:f7:74:89:d6:dc:d4:18:69:82:1b:4f:d3:4d: 85:b8:b5:6c:d3:c9:be:bf:cd:e0:ea:f5:0d:20:18: 36:6e:c8:91:df:2b:b3:ec:35:d2:fa:98:69:87:1d: 7a:ab:31:64:e6:60:30:fb:c9:a5:51:3a:b1:91:04: 49:b8:e5:65:ad:b1:fd:1e:20:5b:97:2d:36:4b:71: e8:cf:e4:ec:3e:ed:63:dd:71:3a:36:41:11:15:c5: 31:95:e0:2a:7c:9b:fd:d7:51:81:5a:36:4a:01:6c: 82:b0:90:9c:44:7f:a4:b5:63:93:e9:4d:2e:ef:43: 92:31:b6:61:ff:69:87:cb:12:9d:eb:75:05:f6:67: 6a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:30:B1:7A:30:05:30:C4:A1:C1:62:FC:98:2D:9E:96:C6:A0:1C:40 X509v3 Authority Key Identifier: keyid:E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:a2:62:eb:23:47:c3:c2:5a:a6:6e:da:42:58:0e:15:a2:eb: 2a:19:50:49:a3:bd:79:62:31:23:c6:99:2b:c2:c6:54:dd:d4: dc:75:a9:e3:42:87:8f:a4:a7:8d:85:33:f9:5b:f9:37:cd:e3: 7b:e0:27:48:4f:15:54:93:81:06:34:67:e9:58:cf:08:4c:80: 15:f0:e8:c7:f7:21:5e:15:07:c4:b4:df:3d:aa:00:5e:c4:16: 59:fe:29:5a:07:f0:62:7b:01:d4:1d:97:ab:fa:c1:a7:e5:1e: fb:6c:9f:bf:c5:07:97:1b:7a:ef:84:a4:63:db:84:21:4c:f3: 4f:2b:12:7f:01:94:7a:fc:26:c6:54:5d:e0:9e:ab:b0:b0:e2: 5a:38:a7:41:19:34:e1:e1:98:95:0b:e5:c3:20:4a:34:96:6f: c2:19:69:92:29:de:e2:81:50:e2:05:f3:6d:b0:6f:3c:a7:92: c1:0a:fd:b4:3f:55:ca:d3:66:c1:6d:e4:f6:a9:f0:5e:23:8b: 68:b9:da:cc:52:a4:db:3f:f9:f7:bc:02:cc:58:d2:ea:75:1c: 2b:1b:77:41:a8:0b:66:21:cb:7c:3f:e5:68:75:b0:40:2a:6b: b1:c8:39:ab:d9:07:f0:b9:72:d0:0a:13:2f:9f:dd:7c:72:40: 8b:fa:92:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKEUxMTg5NkIwMEM5NDg2RTQzRUU3NDgwMkQyMTk2OUY4 ODhFRTRFMkQwHhcNMjUxMTA2MjIwNTA5WhcNMjUxMTEzMjIwNTA5WjAYMRYwFAYD VQQDEw02OTBkMWI5NS05ODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lgaOJhvqRfF94uRO0Upi5P1VcY/jgqwM3qPSxkbeTPT2WmVSpryvUp7DuGO I18NbAxhv2R412sDgzuxXRGkhpZ1oHtxGsZpeAqaOHoyC8HtDO46OAJQcgbMS9PT tukKB7WGrcXZiqTpgJMhSuqw4n5H1zoT5f4bX/d0idbc1BhpghtP002FuLVs08m+ v83g6vUNIBg2bsiR3yuz7DXS+phphx16qzFk5mAw+8mlUTqxkQRJuOVlrbH9HiBb ly02S3Hoz+TsPu1j3XE6NkERFcUxleAqfJv911GBWjZKAWyCsJCcRH+ktWOT6U0u 70OSMbZh/2mHyxKd63UF9mdqCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIwsXow BTDEocFi/JgtnpbGoBxAMB8GA1UdIwQYMBaAFOEYlrAMlIbkPudIAtIZafiI7k4t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9GMUZFMzJCQTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi80UmlXc0F5VWh1US01MGdDMGhscC1JanVU aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSaVdzQXlVaHVRLTUwZ0MwaGxwLUlqdVRpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9GMUZFMzJCQTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi80UmlXc0F5VWh1 US01MGdDMGhscC1JanVUaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByomLrI0fDwlqmbtpCWA4VousqGVBJo715YjEjxpkrwsZU3dTcdanj QoePpKeNhTP5W/k3zeN74CdITxVUk4EGNGfpWM8ITIAV8OjH9yFeFQfEtN89qgBe xBZZ/ilaB/BiewHUHZer+sGn5R77bJ+/xQeXG3rvhKRj24QhTPNPKxJ/AZR6/CbG VF3gnquwsOJaOKdBGTTh4ZiVC+XDIEo0lm/CGWmSKd7igVDiBfNtsG88p5LBCv20 P1XK02bBbeT2qfBeI4toudrMUqTbP/n3vALMWNLqdRwrG3dBqAtmIct8P+VodbBA KmuxyDmr2QfwuXLQChMvn918ckCL+pIJ -----END CERTIFICATE-----Generated at Fri Nov 7 16:34:17 2025 by rpki-client