$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: nwxrR4olnBxWgMNyUj3AkJWuAqU+uSneqQnxYaHVAOg= Subject key identifier: 4F:F1:03:68:C5:B9:D4:5A:6E:02:7C:7E:61:72:2A:A9:11:47:2B:E0 Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 022C Signing time: Wed 05 Nov 2025 02:05:00 +0000 Manifest this update: Wed 05 Nov 2025 02:05:00 +0000 Manifest next update: Wed 12 Nov 2025 02:05:00 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: kRAxQ397lXPTxzF84X8A03c3eWJ5e0hZ+iGdRCvgYDU=) 2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: XoJZF9Jz8ZccwqIcrKIVr4/ZTC4E2cHCJSHMspLqgb4=) 3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: j0KJtUAylCCCv7Fkk/Ws7qR9yBTk+ovFn0tv4R3Wr5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: Nov 5 02:05:00 2025 GMT Not After : Nov 12 02:05:00 2025 GMT Subject: CN=690ab0cc-cd41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:26:c6:60:a2:ca:c3:73:47:d4:7a:8a:db: 00:ec:b7:da:a1:a9:a5:fb:63:a7:66:24:c4:38:67: 25:58:3f:86:05:d5:3c:85:33:5c:22:52:e7:17:ad: c6:6d:b7:31:45:60:6c:83:c5:01:12:af:b4:7b:1b: 0a:57:db:c5:92:22:0b:8c:59:66:97:3e:6a:27:94: a0:f9:5c:30:2d:61:5a:8b:74:b8:a0:4b:7b:20:9d: c5:dd:89:66:79:bd:7c:ff:af:00:11:ff:aa:68:53: 1d:87:a5:64:b9:05:eb:04:8b:cb:1e:2c:79:47:35: 66:17:b6:c4:0d:f0:df:4d:9c:68:76:b4:66:d3:f1: 67:7f:34:aa:66:b8:45:ca:ec:86:75:91:c0:85:cf: 0b:84:6a:df:cf:2a:43:a4:dd:36:50:16:12:bf:7b: 7a:3a:76:69:17:40:26:ff:0e:59:82:ac:4b:43:c5: 15:63:af:b6:c2:c9:03:09:f0:4e:95:db:51:1c:57: 12:62:c9:c4:bc:56:c6:5a:70:1c:f0:f3:9b:99:5c: de:a1:0d:e9:0b:26:a9:ed:27:6b:7b:a7:49:2a:08: 0c:c9:19:b3:3f:d5:b5:28:53:75:3d:d7:ee:e5:47: a2:97:b8:ec:1c:01:3c:79:d6:7b:fc:d1:1c:53:f0: a4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F1:03:68:C5:B9:D4:5A:6E:02:7C:7E:61:72:2A:A9:11:47:2B:E0 X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:68:ab:c3:8e:b7:9c:34:76:d2:6c:69:15:c3:f1:7e:00:d4: 97:9b:de:27:51:16:47:c6:d8:4d:39:e6:6c:b1:e0:10:e2:b3: e8:b9:df:68:ba:48:29:83:16:e2:50:57:db:79:8f:25:df:a0: 87:dd:ca:f2:8d:0e:74:26:da:f7:74:ed:1e:07:b4:d7:37:c3: 8a:7b:8c:cc:80:42:a7:14:e0:94:af:41:85:fb:2f:b9:27:25: 63:f1:d9:1f:46:6e:b2:f3:6c:7c:bf:54:1b:5b:c1:c2:6b:6d: cf:4a:3d:cd:8f:0b:5c:1f:35:f4:5b:d1:a9:f0:33:ed:1b:da: 9a:3c:b8:0f:10:ab:22:42:df:29:b2:95:0e:b8:07:f5:4e:b1: 99:45:c7:5c:43:98:da:9c:06:65:94:85:bf:1e:26:b9:10:6f: 95:01:16:b4:3e:d1:63:63:cf:5f:0a:56:eb:e0:a9:c3:3d:e1: 2c:f2:7d:5e:b3:63:6a:62:5b:f5:b9:65:92:92:17:6c:6e:58: 74:77:61:7f:55:99:10:99:31:fb:50:0e:1a:81:bd:f5:f5:f1: df:b6:29:4b:a6:d5:5e:f9:e7:74:1d:ff:0a:4f:22:8d:b0:ae: cc:1e:11:11:4a:eb:2a:a7:10:02:00:fa:e5:7c:11:57:3d:d3: ba:32:53:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjUxMTA1MDIwNTAwWhcNMjUxMTEyMDIwNTAwWjAYMRYwFAYD VQQDEw02OTBhYjBjYy1jZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscYmxmCiysNzR9R6itsA7Lfaoaml+2OnZiTEOGclWD+GBdU8hTNcIlLnF63G bbcxRWBsg8UBEq+0exsKV9vFkiILjFlmlz5qJ5Sg+VwwLWFai3S4oEt7IJ3F3Ylm eb18/68AEf+qaFMdh6VkuQXrBIvLHix5RzVmF7bEDfDfTZxodrRm0/FnfzSqZrhF yuyGdZHAhc8LhGrfzypDpN02UBYSv3t6OnZpF0Am/w5ZgqxLQ8UVY6+2wskDCfBO ldtRHFcSYsnEvFbGWnAc8PObmVzeoQ3pCyap7Sdre6dJKggMyRmzP9W1KFN1Pdfu 5Ueil7jsHAE8edZ7/NEcU/CkrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/xA2jF udRabgJ8fmFyKqkRRyvgMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgaKvDjrecNHbSbGkVw/F+ANSXm94nURZHxthNOeZsseAQ4rPoud9o ukgpgxbiUFfbeY8l36CH3cryjQ50Jtr3dO0eB7TXN8OKe4zMgEKnFOCUr0GF+y+5 JyVj8dkfRm6y82x8v1QbW8HCa23PSj3NjwtcHzX0W9Gp8DPtG9qaPLgPEKsiQt8p spUOuAf1TrGZRcdcQ5janAZllIW/Hia5EG+VARa0PtFjY89fClbr4KnDPeEs8n1e s2NqYlv1uWWSkhdsblh0d2F/VZkQmTH7UA4agb319fHftilLptVe+ed0Hf8KTyKN sK7MHhERSusqpxACAPrlfBFXPdO6MlNe -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:24 2025 by rpki-client