$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft File: cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json) Hash identifier: xFVxODRUOF1DUtb8Nk1xRPXWm/Fr3PSB/bZm3T3VpRo= Subject key identifier: B0:48:94:AD:80:37:2A:39:DE:E8:E9:40:FC:A1:78:4E:7B:BC:28:97 Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Certificate serial: 0482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft Manifest number: 0478 Signing time: Mon 03 Nov 2025 00:07:00 +0000 Manifest this update: Mon 03 Nov 2025 00:06:59 +0000 Manifest next update: Mon 10 Nov 2025 00:06:59 +0000 Files and hashes: 1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: 7OwKsc+MkAcYjTLNFWb/V3XYFjVaxiLTxEZR7OBcFZc=) 2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: IyhV9MGtQ1VyJp3y60dauCI+itu5hIIH24D+SkqtwwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF19B, serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Validity Not Before: Nov 3 00:06:59 2025 GMT Not After : Nov 10 00:06:59 2025 GMT Subject: CN=6907f224-1f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c1:21:29:98:3c:82:0f:c4:e8:76:60:52:47: 05:1a:f9:f1:73:07:0d:0e:5c:42:38:63:72:a1:53: 09:e8:5f:51:96:06:11:03:ed:8f:fd:8c:01:16:16: 51:95:95:2d:e6:c9:82:be:3a:bc:8b:5d:d3:a6:8e: cc:69:b6:10:1d:73:21:38:1b:ab:fc:20:9e:9c:12: 23:f3:29:7f:ec:dd:d2:fa:fd:41:f6:99:27:dd:8c: d6:59:82:bb:95:f7:4f:9d:cd:bb:62:a8:a6:3a:03: 83:4c:e0:d9:6d:b1:9b:86:b6:40:73:52:6c:3d:9d: 6c:43:1c:8f:3f:2c:96:ea:05:5c:9c:29:de:dd:a6: c1:bb:ac:1f:44:6b:08:4a:b9:c7:1f:9b:db:1d:a5: 1f:32:e2:c5:2d:f4:ab:75:bb:f7:54:06:f7:8e:05: c7:da:8f:cb:95:87:34:ad:c1:5b:92:2c:13:ad:3e: 33:63:c4:a9:37:59:60:20:4e:f7:13:22:b9:45:be: 45:6c:9d:31:c3:02:4f:d5:b4:96:17:79:11:64:73: 68:aa:b1:d9:fa:4e:31:3b:35:08:fe:5b:c2:55:86: 2c:12:90:d6:f0:a2:3f:23:33:a2:ec:ac:de:92:25: 8f:b3:e4:92:b7:f8:46:e4:a3:d2:d8:c7:f6:5d:1d: 2a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:48:94:AD:80:37:2A:39:DE:E8:E9:40:FC:A1:78:4E:7B:BC:28:97 X509v3 Authority Key Identifier: keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:4d:3b:ce:6b:a5:19:df:02:88:be:0e:14:48:7e:c3:a4:6b: cd:3c:fb:3e:32:41:1d:18:f9:0c:a4:9c:07:30:c5:d7:fc:22: 3b:61:3e:a3:f0:45:c9:d1:0b:98:46:49:c6:96:06:50:a1:ce: 34:36:0e:25:94:39:42:7f:86:b2:53:e5:76:af:3a:22:91:f5: 37:95:b2:b8:1f:5f:64:5f:91:42:bd:10:14:a0:9d:99:c8:cf: 19:a1:73:c0:96:e4:09:23:ad:d0:2c:ed:89:e4:b9:ff:86:23: cc:cb:07:97:f9:70:bd:e5:c7:c5:a3:16:09:da:f3:a0:28:17: a6:4f:c6:90:3f:fd:ea:fe:28:fc:e4:7d:13:fd:cd:66:dd:30: 36:47:08:c2:ba:1d:49:a4:f1:ed:3f:8a:e9:8e:c1:f1:0b:ad: 5f:c5:56:a4:2f:2b:5b:92:ec:d7:2a:60:f4:b4:4e:97:ff:03: d8:4c:de:3f:9d:0c:83:a9:7d:49:b2:ec:7d:3c:53:60:44:ba: 9d:3a:55:f0:0c:89:23:82:4f:c2:79:f4:3f:43:32:95:21:8a: 50:0f:55:2a:17:06:56:a4:37:df:0c:00:d1:75:b4:fb:f0:15: 1a:0b:10:fd:02:8d:87:b4:64:07:41:6f:7e:63:74:70:11:76: a0:d3:c1:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxOUIxMTAvBgNVBAUTKDcyQjhCOENEMTAzMDdCMTYzMjREODc5ODI3REYzMkE0 QUE4RDZBQTEwHhcNMjUxMTAzMDAwNjU5WhcNMjUxMTEwMDAwNjU5WjAYMRYwFAYD VQQDEw02OTA3ZjIyNC0xZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cEhKZg8gg/E6HZgUkcFGvnxcwcNDlxCOGNyoVMJ6F9RlgYRA+2P/YwBFhZR lZUt5smCvjq8i13Tpo7MabYQHXMhOBur/CCenBIj8yl/7N3S+v1B9pkn3YzWWYK7 lfdPnc27YqimOgODTODZbbGbhrZAc1JsPZ1sQxyPPyyW6gVcnCne3abBu6wfRGsI SrnHH5vbHaUfMuLFLfSrdbv3VAb3jgXH2o/LlYc0rcFbkiwTrT4zY8SpN1lgIE73 EyK5Rb5FbJ0xwwJP1bSWF3kRZHNoqrHZ+k4xOzUI/lvCVYYsEpDW8KI/IzOi7Kze kiWPs+SSt/hG5KPS2Mf2XR0qbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBIlK2A Nyo53ujpQPyheE57vCiXMB8GA1UdIwQYMBaAFHK4uM0QMHsWMk2HmCffMqSqjWqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE5Qi8zNjQ4OEQ4MDY2 NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4WXlUWWVZSjk4eXBLcU5h cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NyaTR6UkF3ZXhZeVRZZVlKOTh5cEtxTmFxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE5Qi8zNjQ4OEQ4MDY2NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4 WXlUWWVZSjk4eXBLcU5hcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzTTvOa6UZ3wKIvg4USH7DpGvNPPs+MkEdGPkMpJwHMMXX/CI7YT6j 8EXJ0QuYRknGlgZQoc40Ng4llDlCf4ayU+V2rzoikfU3lbK4H19kX5FCvRAUoJ2Z yM8ZoXPAluQJI63QLO2J5Ln/hiPMyweX+XC95cfFoxYJ2vOgKBemT8aQP/3q/ij8 5H0T/c1m3TA2RwjCuh1JpPHtP4rpjsHxC61fxVakLytbkuzXKmD0tE6X/wPYTN4/ nQyDqX1Jsux9PFNgRLqdOlXwDIkjgk/CefQ/QzKVIYpQD1UqFwZWpDffDADRdbT7 8BUaCxD9Ao2HtGQHQW9+Y3RwEXag08Hz -----END CERTIFICATE-----Generated at Wed Nov 5 00:08:32 2025 by rpki-client