$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json) Hash identifier: myp3SY7NGC0m1WthefUMhHIOpNv7eOBJHKTRSDT00PQ= Subject key identifier: CE:C0:DE:F0:F9:B3:8A:48:53:43:4B:D6:E2:60:33:7C:20:0A:D9:9E Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft Manifest number: 54 Signing time: Wed 05 Nov 2025 07:25:54 +0000 Manifest this update: Wed 05 Nov 2025 07:25:53 +0000 Manifest next update: Wed 12 Nov 2025 07:25:53 +0000 Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: W72gBhzNmyQ8UXmtYzqDEhxSvKp0H4MB5+pkjRGwZ18=) 2: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: iR9RmJIaK9kKAtKzjMGd269EeycB0OEwfaUigxvrCq4=) 3: F88154843B9D11F091B39D67C4F9AE02.roa (hash: nNxkYkRl2gKLDvZBsXppHYQmBwtDL7vgL/l44dOoypk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Validity Not Before: Nov 5 07:25:53 2025 GMT Not After : Nov 12 07:25:53 2025 GMT Subject: CN=690afc01-eb1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:5b:2a:8f:ce:ac:3d:17:f3:88:cd:2d:82: fd:02:ee:9e:12:5d:b2:7c:ad:b7:e3:a9:4d:7c:5e: 0e:18:79:7f:56:ae:7e:81:1b:72:9b:4e:3f:aa:ba: 70:21:a6:24:c1:14:0f:d7:38:0f:c3:2a:b7:fe:8a: 55:6a:6b:1c:7a:51:04:5d:30:90:cd:ea:33:bd:b1: 86:c7:59:43:bb:58:f9:0a:3c:f5:08:d0:c9:cb:17: 89:a5:7d:8a:2f:de:69:ae:9a:c2:b0:c4:a7:9c:fc: c2:f4:6a:07:5a:53:30:95:00:01:d1:e0:f9:2a:d3: 63:c8:60:02:28:bd:1e:d7:b0:86:f5:ed:55:e6:80: 8b:9f:c2:69:f4:de:71:fa:f0:03:a9:c9:fc:77:43: 00:52:4f:97:cb:7d:bc:90:d3:dc:85:d7:04:5c:4c: dc:62:f2:04:f5:8c:da:9e:12:6e:a3:ef:8a:da:72: c5:7f:70:23:a1:3e:27:32:69:a1:fb:f8:33:be:f2: c8:a9:dc:6a:f9:f8:26:43:b3:c1:5f:f4:42:58:93: 44:b5:a8:c7:9d:25:9c:7a:51:72:ef:2f:0e:58:4e: d6:08:0a:92:da:59:2e:64:b4:b3:d4:37:44:2e:b1: 08:af:d2:96:51:f5:d8:a7:8d:29:bf:0d:3c:9f:b4: 5b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C0:DE:F0:F9:B3:8A:48:53:43:4B:D6:E2:60:33:7C:20:0A:D9:9E X509v3 Authority Key Identifier: keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:43:40:ad:96:25:c9:5b:75:91:50:85:dd:aa:49:6f:9f:7f: a4:bd:4a:68:1d:9e:9e:b6:9b:5c:0b:1e:3c:4d:b5:1c:55:f5: 78:c5:24:9b:be:4a:f1:bc:76:0b:9f:68:42:7f:11:5b:2a:e4: 81:51:9e:4f:b9:3e:c0:ff:5b:00:dc:8f:7f:b3:76:7c:26:2a: cc:42:72:0b:c5:63:1e:19:20:04:4b:7b:60:10:a6:24:e0:55: f9:a0:7c:60:8d:f1:bc:5e:57:1c:43:1a:1a:6b:a0:5a:d3:dc: dc:47:72:5b:f0:70:96:a4:fb:2e:84:0f:68:f3:b2:66:dd:af: 83:a7:bb:aa:52:a6:55:64:95:fa:10:6e:50:84:4e:68:17:36: 3a:19:6c:4d:f9:06:47:85:ae:8e:2b:c5:8b:31:3a:6f:8e:87: 4c:fc:35:49:5c:79:4b:d5:3d:bc:72:4f:73:27:ed:21:b6:7a: 9a:72:bf:cc:42:3b:36:1c:3f:b4:41:77:48:94:b4:82:3b:e0: 0c:8c:dc:f0:dc:e8:6a:a4:d3:55:86:22:a7:41:e7:ba:f8:42: ea:b5:ad:fd:17:ce:df:e7:52:88:73:27:bc:ae:80:dc:e6:82: 4e:80:c3:4b:e4:3c:1d:20:d2:5d:45:3c:52:96:fc:c6:80:d8: a2:ed:dc:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NkMxMDExMC8GA1UEBRMoRTJCMERGQTY5MEQyQzdFQUM0MzYzNjc1NkU0MzdCN0My NjI2RjRCQjAeFw0yNTExMDUwNzI1NTNaFw0yNTExMTIwNzI1NTNaMBgxFjAUBgNV BAMTDTY5MGFmYzAxLWViMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvSVsqj86sPRfziM0tgv0C7p4SXbJ8rbfjqU18Xg4YeX9Wrn6BG3KbTj+qunAh piTBFA/XOA/DKrf+ilVqaxx6UQRdMJDN6jO9sYbHWUO7WPkKPPUI0MnLF4mlfYov 3mmumsKwxKec/ML0agdaUzCVAAHR4Pkq02PIYAIovR7XsIb17VXmgIufwmn03nH6 8AOpyfx3QwBST5fLfbyQ09yF1wRcTNxi8gT1jNqeEm6j74racsV/cCOhPicyaaH7 +DO+8sip3Gr5+CZDs8Ff9EJYk0S1qMedJZx6UXLvLw5YTtYICpLaWS5ktLPUN0Qu sQiv0pZR9dinjSm/DTyftFu3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzsDe8Pmz ikhTQ0vW4mAzfCAK2Z4wHwYDVR0jBBgwFoAU4rDfppDSx+rENjZ1bkN7fCYm9Lsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2QzEwLzBFOTQwNUJBM0I5 RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlM cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNHJEZnBwRFN4LXJFTmpaMWJrTjdmQ1ltOUxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2 QzEwLzBFOTQwNUJBM0I5RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1y RU5qWjFia043ZkNZbTlMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAVDQK2WJclbdZFQhd2qSW+ff6S9Smgdnp62m1wLHjxNtRxV9XjFJJu+ SvG8dgufaEJ/EVsq5IFRnk+5PsD/WwDcj3+zdnwmKsxCcgvFYx4ZIARLe2AQpiTg VfmgfGCN8bxeVxxDGhproFrT3NxHclvwcJak+y6ED2jzsmbdr4Onu6pSplVklfoQ blCETmgXNjoZbE35BkeFro4rxYsxOm+Oh0z8NUlceUvVPbxyT3Mn7SG2eppyv8xC OzYcP7RBd0iUtII74AyM3PDc6Gqk01WGIqdB57r4Quq1rf0Xzt/nUohzJ7yugNzm gk6Aw0vkPB0g0l1FPFKW/MaA2KLt3Mw= -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:12 2025 by rpki-client