$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft (raw, json) Hash identifier: mJq9GeYn9J2gIXtKzJMbqGRdU1D52a85HAbha08E7jk= Subject key identifier: 6A:27:4B:8C:41:45:E5:30:1A:84:48:7E:F4:4B:0D:E6:63:B6:69:FC Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Certificate serial: 08B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft Manifest number: 08A2 Signing time: Fri 10 Oct 2025 18:57:16 +0000 Manifest this update: Fri 10 Oct 2025 18:57:15 +0000 Manifest next update: Fri 17 Oct 2025 18:57:15 +0000 Files and hashes: 1: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl (hash: ESzWwcWPqzlKshRGw+aT7iTXaPUfPg4qPtYNEQVNihY=) 2: 18B1B5361CE611EBB543881CC4F9AE02.roa (hash: qnuam7WR9nNoSALeN6aIELormJYa9PcytIxvW+OP1aE=) 3: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (hash: /kIJQGWq5uSGzv2Hlgx55daJuqaTWlcXb9ZHCo//sns=) 4: D385E420314711EBA579873DC4F9AE02.roa (hash: o1Hw/spcKOOb0VVRRR+YO5Yydeov4PBZjAAS3/6uAVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Oct 2025 18:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2233 (0x8b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Validity Not Before: Oct 10 18:57:15 2025 GMT Not After : Oct 17 18:57:15 2025 GMT Subject: CN=68e9570b-56c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:42:7b:ed:e6:ff:99:fa:3f:e4:ef:bc:14:5f: 4d:db:fb:52:6a:fc:3d:7e:bd:29:f2:34:6b:09:9c: ed:cb:bc:0a:e4:d3:78:19:f9:60:ac:d8:f1:e8:41: 29:89:bd:41:39:e5:4a:8d:d0:36:28:59:73:e7:a5: 81:2d:47:bf:22:e0:12:8c:95:b9:d7:8b:00:cd:6f: 44:e3:e1:42:80:e3:be:c1:4f:cf:3c:34:40:f8:7f: 47:6c:35:46:63:f6:3a:15:02:94:7d:98:55:3d:cc: 69:5a:9d:ed:02:35:4d:77:bc:15:36:b9:17:04:5d: 99:7e:db:44:a8:4b:84:2c:02:2f:ca:41:fd:20:35: df:72:0e:54:6c:9c:33:da:7e:a0:39:69:b2:41:22: 78:1c:41:a2:da:84:ed:91:85:59:e6:d9:bc:63:8f: ca:e2:c4:f4:ff:5c:60:c6:b2:66:55:50:94:81:97: 8d:9e:a2:31:cd:05:0a:54:ee:4e:6a:32:63:7d:66: b8:19:e3:30:29:22:8e:4c:eb:6b:b9:4a:2d:9e:56: 5c:55:62:25:16:ef:35:40:79:05:46:a9:a4:93:25: 80:c4:0f:3c:0e:97:cd:59:49:68:fd:0f:bc:2e:b1: 45:40:fe:3f:ea:cf:d2:91:bc:7e:f6:a5:8a:60:8f: ac:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:27:4B:8C:41:45:E5:30:1A:84:48:7E:F4:4B:0D:E6:63:B6:69:FC X509v3 Authority Key Identifier: keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:b2:d6:62:74:76:9b:f9:c6:67:3e:d9:26:f0:33:b5:f6:5b: 5f:9e:ea:81:d5:16:91:0a:58:18:fb:d4:76:d9:72:27:65:62: 04:3c:c5:79:cc:53:fa:0b:a0:21:88:c3:e2:cf:1f:4d:27:88: 52:1b:0f:5b:a9:cb:0f:2d:e9:f3:63:c9:b6:f1:99:ad:21:53: 5f:06:f9:57:12:a8:19:5a:fb:25:60:57:17:bd:b3:5b:f6:84: f3:2a:00:5b:3c:81:18:24:21:22:65:33:4f:76:4e:b0:54:1f: 40:9b:f7:ed:ee:48:76:fb:a7:0f:d5:fd:c7:0e:1f:ee:01:5e: 5d:c2:af:d3:b1:41:09:bd:6d:de:b6:53:97:5c:a9:1c:fb:76: e5:37:65:4d:82:e1:56:62:d6:ab:c7:45:c4:ac:42:b4:d8:5f: fa:54:ca:a9:79:5d:2e:2d:af:e0:10:1b:46:0b:55:ed:08:16: fc:a7:2a:6e:14:6c:60:b8:72:46:c7:50:31:a8:24:76:25:7f: 44:80:37:d4:e0:a2:73:12:ad:11:0d:c8:58:e7:d1:47:f6:e3: ae:55:e0:bf:55:84:b1:b6:76:f1:79:2b:5e:01:17:f5:e4:1e: 4b:be:41:cf:06:45:a1:ce:6b:d3:50:95:54:25:4d:56:1c:cf: 24:24:9e:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKEUyNUZDRDlCNzcyNTg1Mzk0Mjc5MUE2MkQ0NzVFQ0ZF RDdDMDNGNjQwHhcNMjUxMDEwMTg1NzE1WhcNMjUxMDE3MTg1NzE1WjAYMRYwFAYD VQQDEw02OGU5NTcwYi01NmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEJ77eb/mfo/5O+8FF9N2/tSavw9fr0p8jRrCZzty7wK5NN4GflgrNjx6EEp ib1BOeVKjdA2KFlz56WBLUe/IuASjJW514sAzW9E4+FCgOO+wU/PPDRA+H9HbDVG Y/Y6FQKUfZhVPcxpWp3tAjVNd7wVNrkXBF2ZfttEqEuELAIvykH9IDXfcg5UbJwz 2n6gOWmyQSJ4HEGi2oTtkYVZ5tm8Y4/K4sT0/1xgxrJmVVCUgZeNnqIxzQUKVO5O ajJjfWa4GeMwKSKOTOtruUotnlZcVWIlFu81QHkFRqmkkyWAxA88DpfNWUlo/Q+8 LrFFQP4/6s/Skbx+9qWKYI+s4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGonS4xB ReUwGoRIfvRLDeZjtmn8MB8GA1UdIwQYMBaAFOJfzZt3JYU5QnkaYtR17P7XwD9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi9FNEVEQUMxOENC MUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhUbENlUnBpMUhYc190ZkFQ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRsX05tM2NsaFRsQ2VScGkxSFhzX3RmQVAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi9FNEVEQUMxOENCMUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhU bENlUnBpMUhYc190ZkFQMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACstZidHab+cZnPtkm8DO19ltfnuqB1RaRClgY+9R22XInZWIEPMV5 zFP6C6AhiMPizx9NJ4hSGw9bqcsPLenzY8m28ZmtIVNfBvlXEqgZWvslYFcXvbNb 9oTzKgBbPIEYJCEiZTNPdk6wVB9Am/ft7kh2+6cP1f3HDh/uAV5dwq/TsUEJvW3e tlOXXKkc+3blN2VNguFWYtarx0XErEK02F/6VMqpeV0uLa/gEBtGC1XtCBb8pypu FGxguHJGx1AxqCR2JX9EgDfU4KJzEq0RDchY59FH9uOuVeC/VYSxtnbxeSteARf1 5B5LvkHPBkWhzmvTUJVUJU1WHM8kJJ6e -----END CERTIFICATE-----Generated at Sat Oct 11 08:54:13 2025 by rpki-client