$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft File: a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json) Hash identifier: Oib+pTyH+0gO95b2uSwsHlWchKwmMhHkRgrd3jgHrzw= Subject key identifier: 77:DC:15:BF:29:8E:5D:CC:46:2D:27:CF:00:14:56:7E:72:A1:57:CD Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Certificate serial: 1B9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft Manifest number: 1B91 Signing time: Tue 04 Nov 2025 16:21:22 +0000 Manifest this update: Tue 04 Nov 2025 16:21:21 +0000 Manifest next update: Tue 11 Nov 2025 16:21:21 +0000 Files and hashes: 1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: kVSBR1bH5J+TyebHr4IXPGq5XZmBaLFmcSbVjc6UKLs=) 2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: ZmGMH4g7cGfub9A5Ucup2yr3pAIXwRpZ1v4yX9SvAOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7070 (0x1b9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAD6F, serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Validity Not Before: Nov 4 16:21:21 2025 GMT Not After : Nov 11 16:21:21 2025 GMT Subject: CN=690a2801-794a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:f1:a1:e4:87:d3:85:ee:d3:70:e3:18:a5: 3b:be:3a:b9:5c:fd:d7:c5:43:d9:55:41:1a:40:df: 4e:72:59:69:85:d1:c6:25:83:5d:15:87:8c:08:4d: d7:31:dd:56:14:f6:7e:3a:5e:b9:40:bd:c6:86:73: a8:fe:a3:41:01:56:2e:bc:2a:b9:04:27:bb:46:f9: 38:23:d9:2b:73:d4:db:b8:4c:81:20:85:eb:56:4d: 48:f7:c2:01:31:9a:61:dc:2f:1e:cc:33:0d:65:95: 73:a2:09:40:f2:53:83:be:46:9d:ad:94:27:60:85: 41:80:57:2b:04:3f:5f:e1:2a:e7:24:98:44:7c:7e: cd:f3:ee:1f:d9:0b:ec:da:13:c3:54:69:b7:6c:9f: 58:65:b0:c8:ea:e6:2d:d7:12:9a:94:73:26:fe:cf: 01:e1:3f:2a:44:f9:4e:36:01:01:ab:16:d4:6f:2a: 1f:92:ec:43:7a:1c:cf:39:f1:0f:11:57:0a:ad:22: 79:42:1b:08:26:c2:de:f4:c2:f2:09:5a:ad:1e:90: d5:88:2b:94:e2:b6:8f:93:05:5b:c6:2c:55:e4:90: fd:49:39:1c:49:ba:de:f0:39:3f:6b:3f:e2:23:a0: 88:45:78:cc:b6:a3:2f:dc:d4:8c:7d:ba:b5:9e:64: 2e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DC:15:BF:29:8E:5D:CC:46:2D:27:CF:00:14:56:7E:72:A1:57:CD X509v3 Authority Key Identifier: keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:0f:3f:05:24:cb:4c:7f:e8:ce:83:50:d1:b4:3f:f2:7d:88: 38:1a:47:00:4c:e0:84:15:b5:d5:85:8d:08:3f:b1:1d:12:64: 58:3c:4a:47:7b:2f:19:c7:6c:14:4c:75:3a:e3:da:3b:c9:35: f2:6b:07:ec:65:a7:68:9c:62:66:56:ae:6d:7c:3f:7f:ab:9f: 7d:3e:86:8e:c6:3d:f0:a8:96:bf:f2:c2:64:18:17:dd:9d:a7: 37:97:00:d6:d6:c6:c4:a1:b3:d2:26:c7:77:ad:48:fc:e5:fc: eb:41:63:37:bf:3a:56:2e:37:4a:d0:5e:03:4f:22:ae:0a:5d: 16:ea:41:97:fe:8a:ce:ef:2d:52:68:ef:ac:bf:ca:41:25:7a: 31:04:89:a9:3d:eb:0e:a2:69:e1:a9:4a:d6:d2:da:b8:d1:e9: 9b:c7:c9:0d:87:62:17:0c:a9:9c:ce:bc:37:64:81:ba:a1:fb: 5b:20:ad:92:88:ef:23:83:e0:f1:d0:c8:4b:be:2f:8d:8b:c8: 23:eb:e6:3e:a7:e8:43:a7:94:4d:fa:6a:fc:97:a5:90:a5:7e: 71:5f:dc:bf:4f:81:5a:b9:2f:64:c7:79:f8:73:c5:3f:b2:ac: 5d:0c:15:f8:e8:58:95:11:26:eb:ff:67:cf:a9:49:1b:3a:39: 22:1c:42:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFENkYxMTAvBgNVBAUTKDZCODY0MjQxREYwMTJGMjM5MjdBMDFDMEUzODZFMDdB QUI0OUM1MjIwHhcNMjUxMTA0MTYyMTIxWhcNMjUxMTExMTYyMTIxWjAYMRYwFAYD VQQDEw02OTBhMjgwMS03OTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtq/xoeSH04Xu03DjGKU7vjq5XP3XxUPZVUEaQN9OcllphdHGJYNdFYeMCE3X Md1WFPZ+Ol65QL3GhnOo/qNBAVYuvCq5BCe7Rvk4I9krc9TbuEyBIIXrVk1I98IB MZph3C8ezDMNZZVzoglA8lODvkadrZQnYIVBgFcrBD9f4SrnJJhEfH7N8+4f2Qvs 2hPDVGm3bJ9YZbDI6uYt1xKalHMm/s8B4T8qRPlONgEBqxbUbyofkuxDehzPOfEP EVcKrSJ5QhsIJsLe9MLyCVqtHpDViCuU4raPkwVbxixV5JD9STkcSbre8Dk/az/i I6CIRXjMtqMv3NSMfbq1nmQuDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfcFb8p jl3MRi0nzwAUVn5yoVfNMB8GA1UdIwQYMBaAFGuGQkHfAS8jknoBwOOG4HqrScUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUQ2Ri80NkM5NDA5NDE0 NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5T1NlZ0hBNDRiZ2VxdEp4 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0WkNRZDhCTHlPU2VnSEE0NGJnZXF0SnhTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUQ2Ri80NkM5NDA5NDE0NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5 T1NlZ0hBNDRiZ2VxdEp4U0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2Dz8FJMtMf+jOg1DRtD/yfYg4GkcATOCEFbXVhY0IP7EdEmRYPEpH ey8Zx2wUTHU649o7yTXyawfsZadonGJmVq5tfD9/q599PoaOxj3wqJa/8sJkGBfd nac3lwDW1sbEobPSJsd3rUj85fzrQWM3vzpWLjdK0F4DTyKuCl0W6kGX/orO7y1S aO+sv8pBJXoxBImpPesOomnhqUrW0tq40embx8kNh2IXDKmczrw3ZIG6oftbIK2S iO8jg+Dx0MhLvi+Ni8gj6+Y+p+hDp5RN+mr8l6WQpX5xX9y/T4FauS9kx3n4c8U/ sqxdDBX46FiVESbr/2fPqUkbOjkiHEK3 -----END CERTIFICATE-----Generated at Wed Nov 5 19:27:57 2025 by rpki-client