$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft (raw, json) Hash identifier: iKkhwVy0ts2HKgPw0mCggEkQIlLEaBVzS2jvUTOZ6Gg= Subject key identifier: B1:9A:A8:49:C8:A6:E7:D1:0E:B7:84:31:16:8B:57:9F:7F:1F:C2:1E Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Certificate serial: 08C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft Manifest number: 08AE Signing time: Sun 02 Nov 2025 18:02:21 +0000 Manifest this update: Sun 02 Nov 2025 18:02:20 +0000 Manifest next update: Sun 09 Nov 2025 18:02:20 +0000 Files and hashes: 1: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl (hash: tLIjMLKIcPYCquFncTdCLy5M5YYkNhk9LL6lokipQ0s=) 2: 18B1B5361CE611EBB543881CC4F9AE02.roa (hash: qnuam7WR9nNoSALeN6aIELormJYa9PcytIxvW+OP1aE=) 3: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (hash: /kIJQGWq5uSGzv2Hlgx55daJuqaTWlcXb9ZHCo//sns=) 4: D385E420314711EBA579873DC4F9AE02.roa (hash: o1Hw/spcKOOb0VVRRR+YO5Yydeov4PBZjAAS3/6uAVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2245 (0x8c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Validity Not Before: Nov 2 18:02:20 2025 GMT Not After : Nov 9 18:02:20 2025 GMT Subject: CN=69079cac-1b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:15:1f:ad:84:c4:80:5d:3b:5a:61:fd:6a:9e: 16:5f:b3:03:dd:a8:82:c3:fa:d1:52:b1:4f:38:13: 34:ca:13:e4:d6:e2:2d:e5:8e:2c:29:f5:50:4b:1c: 11:1c:3a:a9:ca:c5:97:4a:18:c6:0e:26:f1:c8:63: 9b:61:3e:89:d6:6c:ac:41:c7:de:f7:66:eb:d4:7e: 5f:8c:f2:48:94:a6:5d:ad:cf:22:0c:cd:8f:dd:18: 66:e6:00:5b:e6:72:11:b3:ad:35:93:f9:68:08:d6: c8:64:f0:24:41:2f:69:65:9c:0a:a2:0d:e3:b4:9d: 2b:a6:1a:37:f2:93:25:ee:9f:5f:65:b1:7d:8a:e0: 6b:a1:6a:c1:0a:e4:51:f3:29:9a:0f:45:58:25:b7: c4:8b:7f:70:2a:1b:7f:b9:d1:8e:ef:86:59:fd:61: 89:2f:d7:0f:5f:93:78:4d:50:08:4b:9d:37:9a:f3: 49:ad:18:08:14:c1:70:47:60:60:66:43:af:69:02: f4:64:67:1e:fd:11:8b:8e:09:ce:56:b9:19:bc:53: 18:0c:9b:85:db:eb:7e:22:2a:57:25:dc:a5:72:36: 78:9e:fb:77:23:c9:03:7c:9c:10:ec:ca:41:90:aa: 46:3a:6c:19:f8:bd:c8:c9:ec:96:c4:d4:9f:b8:90: 4c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9A:A8:49:C8:A6:E7:D1:0E:B7:84:31:16:8B:57:9F:7F:1F:C2:1E X509v3 Authority Key Identifier: keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:70:f8:0c:22:57:69:1f:7a:6c:3c:2f:e3:cf:59:be:cd:19: 40:7e:74:78:15:4e:a4:63:d0:e9:7d:89:d7:27:b6:cb:e1:b9: 96:6d:73:d9:9b:db:5d:34:fd:1b:72:54:4a:9b:7e:cc:1a:07: d7:24:e1:82:4e:31:e3:76:bc:b8:b2:49:89:2b:c1:93:5e:b0: b7:33:82:e1:d5:6b:69:ae:8b:d1:ba:59:43:92:86:60:40:95: 64:49:d0:d8:0e:e5:23:4f:88:0f:bb:74:a7:23:41:f6:c6:e7: c1:95:89:1d:5b:d1:ad:e1:13:df:94:d4:b8:a1:cd:7e:dc:17: f6:33:08:43:d5:41:d3:49:a0:84:2f:45:7f:97:7f:72:63:cf: 2e:1d:dc:90:80:93:47:e4:fb:95:95:97:dc:7f:b1:a0:37:6b: 1c:b0:66:2b:d6:b0:30:f5:c3:1f:71:ac:d9:35:2a:c4:4c:4b: d5:0e:65:62:72:1b:3e:71:1b:46:1c:39:ce:43:f2:1a:69:be: 32:2d:00:77:ba:68:03:41:21:8c:68:5e:27:ce:07:06:39:b5: d5:16:f2:bf:83:e5:a1:77:fb:af:6e:a4:6a:11:f0:d2:b2:af: 78:c4:67:87:cf:12:3d:db:a0:fa:d0:6d:e2:25:3d:8e:67:4d: 88:08:ef:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKEUyNUZDRDlCNzcyNTg1Mzk0Mjc5MUE2MkQ0NzVFQ0ZF RDdDMDNGNjQwHhcNMjUxMTAyMTgwMjIwWhcNMjUxMTA5MTgwMjIwWjAYMRYwFAYD VQQDEw02OTA3OWNhYy0xYjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/BUfrYTEgF07WmH9ap4WX7MD3aiCw/rRUrFPOBM0yhPk1uIt5Y4sKfVQSxwR HDqpysWXShjGDibxyGObYT6J1mysQcfe92br1H5fjPJIlKZdrc8iDM2P3Rhm5gBb 5nIRs601k/loCNbIZPAkQS9pZZwKog3jtJ0rpho38pMl7p9fZbF9iuBroWrBCuRR 8ymaD0VYJbfEi39wKht/udGO74ZZ/WGJL9cPX5N4TVAIS503mvNJrRgIFMFwR2Bg ZkOvaQL0ZGce/RGLjgnOVrkZvFMYDJuF2+t+IipXJdylcjZ4nvt3I8kDfJwQ7MpB kKpGOmwZ+L3IyeyWxNSfuJBMpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGaqEnI pufRDreEMRaLV59/H8IeMB8GA1UdIwQYMBaAFOJfzZt3JYU5QnkaYtR17P7XwD9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi9FNEVEQUMxOENC MUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhUbENlUnBpMUhYc190ZkFQ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRsX05tM2NsaFRsQ2VScGkxSFhzX3RmQVAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi9FNEVEQUMxOENCMUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhU bENlUnBpMUhYc190ZkFQMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOcPgMIldpH3psPC/jz1m+zRlAfnR4FU6kY9DpfYnXJ7bL4bmWbXPZ m9tdNP0bclRKm37MGgfXJOGCTjHjdry4skmJK8GTXrC3M4Lh1WtprovRullDkoZg QJVkSdDYDuUjT4gPu3SnI0H2xufBlYkdW9Gt4RPflNS4oc1+3Bf2MwhD1UHTSaCE L0V/l39yY88uHdyQgJNH5PuVlZfcf7GgN2scsGYr1rAw9cMfcazZNSrETEvVDmVi chs+cRtGHDnOQ/Iaab4yLQB3umgDQSGMaF4nzgcGObXVFvK/g+Whd/uvbqRqEfDS sq94xGeHzxI926D60G3iJT2OZ02ICO9F -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:32 2025 by rpki-client