$ rpki-client -vvf rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft File: 4WPw_lTxea9MbAlwmP774tQ4Wxk.mft (raw, json) Hash identifier: jRg7MrdgxeY4JU/OT1HZSg2Iqf810C8Jq7Mm9kNZBr8= Subject key identifier: A0:F7:4A:EC:E1:82:D1:79:CC:E7:69:D4:BA:5C:8C:36:77:A1:B5:F8 Authority key identifier: E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 Certificate issuer: /CN=A91F54CD/serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft Manifest number: 7C Signing time: Mon 03 Nov 2025 06:47:10 +0000 Manifest this update: Mon 03 Nov 2025 06:47:09 +0000 Manifest next update: Mon 10 Nov 2025 06:47:09 +0000 Files and hashes: 1: 4WPw_lTxea9MbAlwmP774tQ4Wxk.crl (hash: PUbGYqIOkKTWTAUi81zURXRmggQp0Td+p6asIvWG2U8=) 2: 2CA96408FD8811EF9404CD48C4F9AE02.roa (hash: ijzYb1r/oyAKx1Hjreuyv8IcJPnhFB/m1NQeL+FUTHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F54CD, serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Validity Not Before: Nov 3 06:47:09 2025 GMT Not After : Nov 10 06:47:09 2025 GMT Subject: CN=69084fed-52cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a1:b7:5c:33:81:22:d3:db:70:b1:99:e2:7f: 20:54:3d:28:56:10:9a:85:89:58:cd:df:64:ee:bf: 5d:24:bd:c7:dc:e1:df:b1:0e:c2:70:4a:ed:6e:21: 9b:5f:0d:5b:fa:f4:32:d0:fb:97:ba:a5:45:18:fe: 47:fb:1f:dd:ce:54:2b:a1:d1:82:20:65:ba:9b:37: 26:91:94:86:68:96:ae:fb:4c:9f:11:f9:37:5c:72: 09:bf:d9:5d:5c:ba:05:7e:b1:f7:5c:46:ce:3a:90: c0:9a:94:87:4a:0e:32:96:12:e3:54:53:07:22:6f: 96:42:b5:20:57:57:f5:87:66:a1:0a:8d:a5:02:a0: 43:35:66:84:2e:12:19:b0:b9:55:0a:bd:6e:20:64: 67:38:8d:b3:e0:b4:f0:8d:c1:91:25:f9:de:2c:55: e6:3b:9e:be:79:c5:a6:7c:40:4a:14:c2:6a:9e:cf: 73:86:b7:eb:ba:f7:95:15:73:f9:27:2e:77:38:c8: 29:23:42:89:0b:94:7f:b8:42:68:37:00:a0:10:f1: 0e:f1:53:15:a5:43:1b:29:05:4a:de:f3:48:15:43: 1e:02:ff:95:d3:8b:26:67:bb:17:2a:3f:0b:d6:2d: ce:eb:94:ce:7b:b3:75:82:bc:c5:88:88:58:d9:a7: f4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F7:4A:EC:E1:82:D1:79:CC:E7:69:D4:BA:5C:8C:36:77:A1:B5:F8 X509v3 Authority Key Identifier: keyid:E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:6a:ed:56:67:e5:5f:31:35:30:30:e1:84:ae:6d:ce:06:21: e2:ca:79:6d:f1:e4:d4:36:a9:ba:17:00:aa:ea:79:3f:73:37: db:c5:91:5a:11:5e:00:c2:32:f8:e6:29:96:f2:4f:a8:95:ae: b4:3b:de:fa:0d:25:9b:7e:f3:5b:ad:5c:74:9b:27:59:a6:1e: 7a:0b:78:18:f3:f9:af:09:c3:97:ec:06:1d:e4:14:1e:86:28: ab:43:34:24:8c:96:e8:79:3a:e3:ea:74:1b:17:2c:0e:b4:4a: af:b6:ba:e8:0a:09:05:7b:9d:ca:71:ea:55:ca:67:c5:ba:60: f6:9e:7d:47:86:a3:80:5f:db:db:cb:dd:73:12:e3:1c:44:bb: 30:1e:4f:6e:ce:43:89:52:0f:2a:40:54:a0:fa:14:0b:6e:46: e0:1a:0e:b3:cb:65:cd:3a:b4:6c:26:82:a4:10:d9:1e:5d:ca: a8:2e:43:5a:eb:f2:ce:ae:af:47:63:3d:36:ef:40:a7:01:1a: 4a:ce:5c:87:cb:dc:9c:ec:ee:06:99:8c:3d:84:f5:99:02:5f: f8:b0:c5:5c:97:57:5a:ef:d6:88:cd:5f:9e:9e:54:9a:f0:6f: c3:7b:ba:ed:d4:79:e4:62:3d:cb:62:64:76:28:ea:fb:f0:45: 3e:a2:d2:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTRDRDExMC8GA1UEBRMoRTE2M0YwRkU1NEYxNzlBRjRDNkMwOTcwOThGRUZCRTJE NDM4NUIxOTAeFw0yNTExMDMwNjQ3MDlaFw0yNTExMTAwNjQ3MDlaMBgxFjAUBgNV BAMTDTY5MDg0ZmVkLTUyY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDobdcM4Ei09twsZnifyBUPShWEJqFiVjN32Tuv10kvcfc4d+xDsJwSu1uIZtf DVv69DLQ+5e6pUUY/kf7H93OVCuh0YIgZbqbNyaRlIZolq77TJ8R+Tdccgm/2V1c ugV+sfdcRs46kMCalIdKDjKWEuNUUwcib5ZCtSBXV/WHZqEKjaUCoEM1ZoQuEhmw uVUKvW4gZGc4jbPgtPCNwZEl+d4sVeY7nr55xaZ8QEoUwmqez3OGt+u695UVc/kn Lnc4yCkjQokLlH+4Qmg3AKAQ8Q7xUxWlQxspBUre80gVQx4C/5XTiyZnuxcqPwvW Lc7rlM57s3WCvMWIiFjZp/TLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoPdK7OGC 0XnM52nUulyMNnehtfgwHwYDVR0jBBgwFoAU4WPw/lTxea9MbAlwmP774tQ4Wxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NENEL0QyRTJDQTdDRkQ4 NzExRUZCNjYyNEEyOEM0RjlBRTAyLzRXUHdfbFR4ZWE5TWJBbHdtUDc3NHRRNFd4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFdQd19sVHhlYTlNYkFsd21QNzc0dFE0V3hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NENEL0QyRTJDQTdDRkQ4NzExRUZCNjYyNEEyOEM0RjlBRTAyLzRXUHdfbFR4ZWE5 TWJBbHdtUDc3NHRRNFd4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKxq7VZn5V8xNTAw4YSubc4GIeLKeW3x5NQ2qboXAKrqeT9zN9vFkVoR XgDCMvjmKZbyT6iVrrQ73voNJZt+81utXHSbJ1mmHnoLeBjz+a8Jw5fsBh3kFB6G KKtDNCSMluh5OuPqdBsXLA60Sq+2uugKCQV7ncpx6lXKZ8W6YPaefUeGo4Bf29vL 3XMS4xxEuzAeT27OQ4lSDypAVKD6FAtuRuAaDrPLZc06tGwmgqQQ2R5dyqguQ1rr 8s6ur0djPTbvQKcBGkrOXIfL3Jzs7gaZjD2E9ZkCX/iwxVyXV1rv1ojNX56eVJrw b8N7uu3UeeRiPctiZHYo6vvwRT6i0rM= -----END CERTIFICATE-----Generated at Tue Nov 4 13:18:07 2025 by rpki-client