$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft File: 4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json) Hash identifier: /f0wFNeh0AjvoFeG+NDfE7gXRoD2jgPNGm240SeZ298= Subject key identifier: AE:EB:97:E7:F1:77:D8:28:BB:A3:79:B1:87:98:9F:56:C6:41:90:BC Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 Certificate issuer: /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Certificate serial: 0923 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft Manifest number: 0914 Signing time: Tue 04 Nov 2025 20:23:25 +0000 Manifest this update: Tue 04 Nov 2025 20:23:24 +0000 Manifest next update: Tue 11 Nov 2025 20:23:24 +0000 Files and hashes: 1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: kv/cnowXEZ81xDKynYxZ7w5iu7ijO95RF6p2uXl+BtA=) 2: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: hfrhHFCjm9A1IZZ68jj/fGY3wp72/JwweOhEQKmJp+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2339 (0x923) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Validity Not Before: Nov 4 20:23:24 2025 GMT Not After : Nov 11 20:23:24 2025 GMT Subject: CN=690a60bc-ad29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:26:e3:15:4a:ea:54:11:88:88:ee:e2:68: 28:12:84:ed:8c:bb:e4:cb:cf:cc:3f:26:fd:71:f2: 85:b6:ac:33:0e:01:23:ae:15:5a:00:11:fa:fa:46: 0b:5b:30:15:8d:7f:ce:32:ee:31:f3:36:38:b2:4a: f3:e2:1d:ae:a1:94:b5:3e:07:77:df:81:43:31:dc: fc:e6:4c:99:a1:5e:8a:ee:ce:59:8a:5e:04:ff:14: f3:f3:fc:eb:a5:7c:1a:41:06:b2:a6:4f:3e:cb:be: f9:85:b3:68:49:24:19:79:9a:75:0e:90:d5:c2:58: 18:c9:c9:fc:db:cb:7b:c9:8a:af:2e:74:16:f8:5c: 26:69:7a:62:1a:b4:ff:08:77:66:48:c0:9e:4b:da: 79:52:e7:79:ef:f9:02:a7:9f:8c:af:a7:8f:24:83: d9:39:c8:04:f5:32:e4:35:e9:a6:52:0f:2d:1b:55: ff:09:92:a5:a7:c1:78:ac:16:91:ee:6c:0a:10:05: 07:f5:07:8d:ca:21:17:0f:89:bc:8e:1a:b6:67:69: a4:59:ef:bc:44:47:80:65:98:de:67:4f:3b:19:1f: 05:66:78:f0:bf:d6:86:43:77:14:91:fb:73:80:33: c0:13:43:4e:ba:6b:35:7a:2f:1a:e9:ee:b4:fb:fe: 7d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EB:97:E7:F1:77:D8:28:BB:A3:79:B1:87:98:9F:56:C6:41:90:BC X509v3 Authority Key Identifier: keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:15:d7:b3:77:e6:b0:4e:fa:d7:f1:34:03:09:00:0c:39:69: 82:e6:ed:c9:0a:57:22:ab:ef:47:75:99:0a:50:f8:b3:ad:78: ae:8a:ea:4c:7d:de:95:ba:30:b2:f6:22:7b:40:43:74:2e:7c: 38:06:91:84:9f:bf:93:c4:20:32:55:e3:f3:07:0d:56:2c:3f: 9d:31:88:9e:e6:f7:93:61:39:4e:ac:7f:15:30:6a:ca:81:28: 0c:ca:2e:a7:9b:a8:18:8e:d9:75:15:22:b2:87:28:f8:bb:c1: e4:60:45:2f:2f:57:85:e9:1a:4c:c0:ca:c9:6e:25:a0:bb:fb: 82:e5:29:81:7f:29:21:15:63:f2:74:f7:ec:5d:20:c1:05:13: e5:56:f0:82:a3:60:99:b0:a1:15:2f:af:00:e3:db:6f:4e:fe: f1:fc:2f:7e:49:da:5e:a8:85:63:65:34:77:c1:93:51:ee:62: 31:29:22:7a:bc:36:ae:ba:bd:3d:e8:4d:23:94:53:73:5c:01: d4:5c:17:ed:2c:de:3e:7d:9f:68:e1:36:12:78:08:12:f2:62: 49:0f:df:4a:85:8b:5d:ac:a4:3c:a4:07:ed:c1:81:1d:cd:13: d2:05:39:f1:ef:12:06:d8:a3:a8:13:ee:10:9d:45:69:70:1b: 16:87:58:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRDNkIxMTAvBgNVBAUTKEUyNjg3M0I0NUY4OEQxRjVEODgzQzE3RTRDQ0Y3MEEy NDUxNjIxNDIwHhcNMjUxMTA0MjAyMzI0WhcNMjUxMTExMjAyMzI0WjAYMRYwFAYD VQQDEw02OTBhNjBiYy1hZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkMm4xVK6lQRiIju4mgoEoTtjLvky8/MPyb9cfKFtqwzDgEjrhVaABH6+kYL WzAVjX/OMu4x8zY4skrz4h2uoZS1Pgd334FDMdz85kyZoV6K7s5Zil4E/xTz8/zr pXwaQQaypk8+y775hbNoSSQZeZp1DpDVwlgYycn828t7yYqvLnQW+FwmaXpiGrT/ CHdmSMCeS9p5Uud57/kCp5+Mr6ePJIPZOcgE9TLkNemmUg8tG1X/CZKlp8F4rBaR 7mwKEAUH9QeNyiEXD4m8jhq2Z2mkWe+8REeAZZjeZ087GR8FZnjwv9aGQ3cUkftz gDPAE0NOums1ei8a6e60+/59wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7rl+fx d9gou6N5sYeYn1bGQZC8MB8GA1UdIwQYMBaAFOJoc7RfiNH12IPBfkzPcKJFFiFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEM2Qi8yNzhBQTNFNEI1 MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBmWFlnOEYtVE05d29rVVdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRtaHp0Ri1JMGZYWWc4Ri1UTTl3b2tVV0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEM2Qi8yNzhBQTNFNEI1MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBm WFlnOEYtVE05d29rVVdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTFdezd+awTvrX8TQDCQAMOWmC5u3JClciq+9HdZkKUPizrXiuiupM fd6VujCy9iJ7QEN0Lnw4BpGEn7+TxCAyVePzBw1WLD+dMYie5veTYTlOrH8VMGrK gSgMyi6nm6gYjtl1FSKyhyj4u8HkYEUvL1eF6RpMwMrJbiWgu/uC5SmBfykhFWPy dPfsXSDBBRPlVvCCo2CZsKEVL68A49tvTv7x/C9+SdpeqIVjZTR3wZNR7mIxKSJ6 vDauur096E0jlFNzXAHUXBftLN4+fZ9o4TYSeAgS8mJJD99KhYtdrKQ8pAftwYEd zRPSBTnx7xIG2KOoE+4QnUVpcBsWh1hk -----END CERTIFICATE-----Generated at Wed Nov 5 16:06:54 2025 by rpki-client