$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: D4WTH/P2RMpMQeohktzK2MUvwgFlRpWDDb4Iqrppvw8= Subject key identifier: CD:A4:FC:95:97:24:1A:9E:89:2F:96:1B:CC:86:E1:71:5B:09:9B:15 Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 07D1 Signing time: Mon 06 Oct 2025 21:20:28 +0000 Manifest this update: Mon 06 Oct 2025 21:20:27 +0000 Manifest next update: Mon 13 Oct 2025 21:20:27 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: 11Z/OoDPUj1SZ76h2yOM/ug2ozV2mdJwVEixeBoI8f8=) 2: 009FA5F0397C11EF9EC42850C4F9AE02.roa (hash: E4kJ9iOaWgd6kt6tetVvQMWfFOobpWfFfGNUTYY1QpA=) 3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: ULfIGDxLDtcTmx758s/wyZezobSONv5OLR5TRBpsLtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Oct 2025 21:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Oct 6 21:20:27 2025 GMT Not After : Oct 13 21:20:27 2025 GMT Subject: CN=68e4329c-b5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:a4:cc:d9:2d:fe:c7:59:f2:07:f5:40:94: e4:59:16:55:2a:68:b7:c6:e1:2a:2b:a4:c0:a0:77: 12:49:e3:b9:74:aa:6e:3f:61:6b:62:19:ad:08:23: c4:31:76:6b:16:df:fa:1a:e1:5a:9f:83:e7:6b:1a: b2:b7:9e:99:da:26:97:1f:39:58:55:c7:db:f4:b8: e8:56:bd:c8:82:6b:5c:1c:ee:30:1d:e6:55:40:2d: ed:10:04:e2:a0:a7:3a:4e:d9:4a:ac:f8:4a:4d:b4: 24:11:a5:01:a9:03:1b:0a:b6:fc:88:5d:91:07:50: a4:a4:19:56:66:f1:53:a6:93:3e:68:9d:86:24:0d: fb:f7:1a:51:27:df:8f:36:76:b0:e6:ec:cd:a2:2d: 20:11:11:a1:e0:2c:d1:a5:4f:f0:1b:b2:a6:b8:34: 7c:0b:62:bd:0d:fc:3e:2f:d7:91:33:d4:e0:5a:30: f8:66:b5:dd:13:ff:a7:2e:fa:b3:93:a5:a9:cd:29: c1:29:fe:6f:e9:0b:06:c8:38:68:58:97:7c:ad:ec: 03:2f:f4:8c:09:c1:4b:7d:75:81:02:59:f8:de:c6: 88:fc:98:b3:74:c8:76:e6:f5:3a:66:93:a2:c3:85: 74:d8:30:b3:c9:4d:0d:24:4b:43:9d:04:60:66:f7: 86:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A4:FC:95:97:24:1A:9E:89:2F:96:1B:CC:86:E1:71:5B:09:9B:15 X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:cb:be:7d:00:66:47:90:c7:9e:9f:0a:be:18:91:b9:25:77: 85:c9:2f:c6:97:6e:63:11:6a:b8:5d:be:81:74:99:f6:69:14: 44:45:3e:d2:a2:bd:18:98:48:a4:59:17:f4:7a:8b:65:03:26: 29:51:1b:90:61:e1:73:45:48:48:e4:c4:7e:38:90:02:4d:72: 90:e1:56:75:46:d0:63:50:ad:33:eb:35:03:8c:61:ce:1e:65: ed:af:f2:01:49:5c:a2:26:47:8d:55:86:43:fb:ce:da:09:65: de:1c:1d:2a:13:c9:4d:dc:93:13:44:d4:c6:6b:62:8b:a0:83: 7b:91:68:f8:fa:76:04:4b:90:2b:17:9a:1d:8f:69:89:2d:6b: 18:c9:6b:03:62:a4:de:6b:c8:f4:d7:80:05:22:b7:61:e4:56: 64:80:b2:0b:8b:c5:bf:10:e5:c7:ce:98:ba:3c:57:31:fe:03: 3d:cb:04:f4:d2:a8:b2:c2:01:c0:a3:88:8e:da:27:54:bb:70: e7:68:21:27:8e:45:07:36:e5:86:b7:12:dd:08:4e:bf:bb:89: b1:40:25:a7:0d:3f:4c:2d:31:89:4a:1a:63:1a:85:98:58:d2: 98:53:aa:b5:5e:ff:3d:f0:17:85:d6:d6:64:51:bd:b3:00:a3: 90:f3:4e:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjUxMDA2MjEyMDI3WhcNMjUxMDEzMjEyMDI3WjAYMRYwFAYD VQQDEw02OGU0MzI5Yy1iNWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufykzNkt/sdZ8gf1QJTkWRZVKmi3xuEqK6TAoHcSSeO5dKpuP2FrYhmtCCPE MXZrFt/6GuFan4Pnaxqyt56Z2iaXHzlYVcfb9LjoVr3IgmtcHO4wHeZVQC3tEATi oKc6TtlKrPhKTbQkEaUBqQMbCrb8iF2RB1CkpBlWZvFTppM+aJ2GJA379xpRJ9+P Nnaw5uzNoi0gERGh4CzRpU/wG7KmuDR8C2K9Dfw+L9eRM9TgWjD4ZrXdE/+nLvqz k6WpzSnBKf5v6QsGyDhoWJd8rewDL/SMCcFLfXWBAln43saI/JizdMh25vU6ZpOi w4V02DCzyU0NJEtDnQRgZveG3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2k/JWX JBqeiS+WG8yG4XFbCZsVMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0y759AGZHkMeenwq+GJG5JXeFyS/Gl25jEWq4Xb6BdJn2aRRERT7S or0YmEikWRf0eotlAyYpURuQYeFzRUhI5MR+OJACTXKQ4VZ1RtBjUK0z6zUDjGHO HmXtr/IBSVyiJkeNVYZD+87aCWXeHB0qE8lN3JMTRNTGa2KLoIN7kWj4+nYES5Ar F5odj2mJLWsYyWsDYqTea8j014AFIrdh5FZkgLILi8W/EOXHzpi6PFcx/gM9ywT0 0qiywgHAo4iO2idUu3DnaCEnjkUHNuWGtxLdCE6/u4mxQCWnDT9MLTGJShpjGoWY WNKYU6q1Xv898BeF1tZkUb2zAKOQ804S -----END CERTIFICATE-----Generated at Wed Oct 8 13:39:50 2025 by rpki-client