$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: 5FxhIwJt7DtcM1dfvfvat1L5Ooit8H+WPj2twJPw4lo= Subject key identifier: BF:15:B1:57:A4:74:63:41:CD:0C:9D:4E:F9:42:55:D3:2C:35:23:AD Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 07EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 07DF Signing time: Tue 04 Nov 2025 21:15:46 +0000 Manifest this update: Tue 04 Nov 2025 21:15:46 +0000 Manifest next update: Tue 11 Nov 2025 21:15:46 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: f9K38lgm03gkL7OkFnNEb8uajVL6ImeEM3CoE/73juk=) 2: 009FA5F0397C11EF9EC42850C4F9AE02.roa (hash: E4kJ9iOaWgd6kt6tetVvQMWfFOobpWfFfGNUTYY1QpA=) 3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: ULfIGDxLDtcTmx758s/wyZezobSONv5OLR5TRBpsLtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2027 (0x7eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Nov 4 21:15:46 2025 GMT Not After : Nov 11 21:15:46 2025 GMT Subject: CN=690a6d02-898e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:50:b5:5b:45:b7:c9:ad:1a:37:20:d8:44:5c: 71:b6:73:ce:36:cb:1d:1b:b1:31:26:64:95:92:0b: 6a:3b:3d:d4:b7:fd:52:c0:66:6b:b9:e0:f0:af:ed: 15:3e:eb:58:c1:63:78:5a:9a:49:aa:44:45:ae:95: 87:db:53:dd:3c:19:77:72:85:ed:0f:d4:76:38:8d: 03:c0:22:7b:91:b3:ce:bf:e9:86:3a:07:b4:57:38: 16:1d:f1:4a:31:6a:48:30:9d:3e:4b:6f:2e:15:a9: 59:85:30:df:a4:dd:42:97:fb:d3:14:dd:df:31:ff: 15:c1:37:a6:61:6f:fe:0a:c9:0a:51:2a:d6:8d:18: 4a:ce:0b:32:78:a6:75:cc:2f:fe:f5:62:06:72:7d: 4a:49:1c:b2:50:49:13:4e:5e:ab:23:dd:0c:0d:f3: cc:2b:eb:a9:64:86:42:56:7d:e3:bc:dc:2d:75:8a: 15:e4:6f:58:87:86:8b:28:20:b0:a1:99:2c:04:72: 86:ac:8d:27:f4:7a:ec:02:46:c2:a9:f0:11:5e:b6: 54:26:3a:80:4a:58:10:6a:a0:80:8c:8f:54:3f:c7: 50:51:41:f2:18:30:95:e2:46:d0:b0:af:d3:68:f2: ca:d9:94:d3:6c:a3:bc:a6:5a:c8:4c:b7:b7:76:da: e1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:15:B1:57:A4:74:63:41:CD:0C:9D:4E:F9:42:55:D3:2C:35:23:AD X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:96:c5:ee:d3:5c:c5:35:d4:0e:6c:40:6f:3c:4d:cc:42:97: 27:6d:98:79:1d:a7:27:e3:59:91:f6:f6:5f:31:ab:a2:59:25: 60:cb:98:48:d9:ad:b8:e8:04:db:10:8d:96:56:00:13:aa:99: 55:a4:bd:d4:92:eb:6b:41:74:8d:17:0f:5e:36:dc:7b:26:81: 84:74:a4:a9:3f:ec:ea:04:97:95:bb:bd:0e:90:8d:1e:32:c0: 9f:6a:01:e2:2d:9c:6f:12:17:ff:79:a0:6a:61:ac:0a:6d:1b: ce:9c:aa:b8:7e:19:a3:84:89:71:34:3d:c0:fd:22:d9:ca:ca: eb:c9:f4:02:e5:60:f5:b2:db:c9:1b:ba:9f:39:7a:95:37:da: 14:44:18:fe:96:61:3a:20:fd:d5:04:79:e2:2d:4e:bb:1d:e7: 2e:9f:4f:78:6f:06:92:7a:2b:bb:e8:e8:a3:62:34:e4:a2:20: cc:46:56:e8:b6:99:3d:51:3a:53:9c:2c:eb:2e:d8:5a:46:6a: 45:ea:77:d6:bd:cd:1c:b6:5f:50:17:56:32:26:05:3a:89:47: 72:e9:67:0f:3e:e8:e7:57:88:56:be:33:0a:88:f2:87:5b:3d: c6:03:e0:6b:cd:95:95:9c:af:a6:fe:6b:f7:5b:41:01:b1:59: 22:bf:43:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjUxMTA0MjExNTQ2WhcNMjUxMTExMjExNTQ2WjAYMRYwFAYD VQQDEw02OTBhNmQwMi04OThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlC1W0W3ya0aNyDYRFxxtnPONssdG7ExJmSVkgtqOz3Ut/1SwGZrueDwr+0V PutYwWN4WppJqkRFrpWH21PdPBl3coXtD9R2OI0DwCJ7kbPOv+mGOge0VzgWHfFK MWpIMJ0+S28uFalZhTDfpN1Cl/vTFN3fMf8VwTemYW/+CskKUSrWjRhKzgsyeKZ1 zC/+9WIGcn1KSRyyUEkTTl6rI90MDfPMK+upZIZCVn3jvNwtdYoV5G9Yh4aLKCCw oZksBHKGrI0n9HrsAkbCqfARXrZUJjqASlgQaqCAjI9UP8dQUUHyGDCV4kbQsK/T aPLK2ZTTbKO8plrITLe3dtrhbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8VsVek dGNBzQydTvlCVdMsNSOtMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBulsXu01zFNdQObEBvPE3MQpcnbZh5Hacn41mR9vZfMauiWSVgy5hI 2a246ATbEI2WVgATqplVpL3UkutrQXSNFw9eNtx7JoGEdKSpP+zqBJeVu70OkI0e MsCfagHiLZxvEhf/eaBqYawKbRvOnKq4fhmjhIlxND3A/SLZysrryfQC5WD1stvJ G7qfOXqVN9oURBj+lmE6IP3VBHniLU67Hecun094bwaSeiu76OijYjTkoiDMRlbo tpk9UTpTnCzrLthaRmpF6nfWvc0ctl9QF1YyJgU6iUdy6WcPPujnV4hWvjMKiPKH Wz3GA+BrzZWVnK+m/mv3W0EBsVkiv0Ne -----END CERTIFICATE-----Generated at Wed Nov 5 10:38:35 2025 by rpki-client