$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft File: V4hJyblKNVp2IKl0eXPSG77aP1M.mft (raw, json) Hash identifier: a8R2+qtCyH+YT0dvSdmGAGFlPh7tCE5kGTRb8e+gJfs= Subject key identifier: B6:E2:05:29:2D:A1:D8:B8:27:E7:6F:49:DB:3C:76:EE:92:E4:EC:10 Authority key identifier: 57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53 Certificate issuer: /CN=A91410C5/serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft Manifest number: 40 Signing time: Fri 17 Oct 2025 11:14:43 +0000 Manifest this update: Fri 17 Oct 2025 11:14:42 +0000 Manifest next update: Fri 24 Oct 2025 11:14:42 +0000 Files and hashes: 1: V4hJyblKNVp2IKl0eXPSG77aP1M.crl (hash: gNCX5hrux6nfbFASk9atuUBDbMIhaKltNqaUMHZsSrA=) 2: C7142BC6654E11F0903B1F31C4F9AE02.roa (hash: N2WAIBH8ZMkrMk9CktT8AtzaLV74cC0YpuQq3dTGOmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91410C5, serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53 Validity Not Before: Oct 17 11:14:42 2025 GMT Not After : Oct 24 11:14:42 2025 GMT Subject: CN=68f22523-9e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a3:9f:b8:3e:d9:86:b2:55:a3:1e:27:dd:d1: a8:77:7e:0d:2c:e5:33:dc:f2:bd:b4:27:43:14:f2: b0:03:6d:b5:89:11:1c:c1:17:33:e2:7d:66:fc:f4: a0:1b:2d:5c:ec:0d:a1:24:df:c9:56:52:a4:37:c3: 51:30:92:4d:37:7d:9c:41:a0:62:f4:cf:ec:29:73: 23:e4:30:6a:da:28:b0:4b:fa:41:52:e7:6f:fd:da: 00:24:c9:5a:a6:31:29:96:ef:48:bd:6c:aa:ce:bd: b2:69:56:9b:8d:cd:71:01:00:cc:e9:44:cc:d7:77: 11:8b:a9:2d:6b:89:35:13:2d:de:2a:a0:62:88:42: f5:ec:89:09:25:f5:f2:f2:35:31:b3:9b:78:bc:97: cf:95:66:45:67:e6:87:ac:90:75:3b:05:db:b3:93: bc:f1:c1:55:2a:71:d6:8b:00:e4:0b:13:36:f5:1e: 44:3f:31:94:8c:6f:56:c8:f5:e6:63:e9:c0:4f:30: a3:71:35:aa:d3:3d:96:cb:05:72:82:58:67:da:c1: 9a:78:67:64:71:04:98:12:bb:d7:a1:54:ea:b6:64: 1c:76:9a:f2:df:77:65:7e:8a:9c:e7:53:8c:52:4a: ab:8e:96:b8:39:80:ab:2a:8b:4e:c3:8c:4f:55:bc: 6c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E2:05:29:2D:A1:D8:B8:27:E7:6F:49:DB:3C:76:EE:92:E4:EC:10 X509v3 Authority Key Identifier: keyid:57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2b:d5:68:78:f4:b4:cd:78:d1:3a:3e:5a:de:0d:dd:ef:35: 8e:92:c5:a6:b2:a6:4b:c1:7b:2f:b2:41:97:71:79:b4:0c:67: 45:ac:9b:86:cf:ad:83:08:56:99:b2:ff:4d:7a:38:b8:74:f2: 88:68:1c:23:71:de:fa:10:8a:8b:c4:c7:94:d1:9a:e9:f9:67: 3b:d2:50:e9:d7:8f:30:69:26:2a:94:fd:bb:10:d0:2e:86:32: 67:c3:74:d3:76:7e:48:c1:10:51:b0:bf:eb:ab:b7:69:c3:d2: 84:13:38:6f:c0:92:34:33:a9:5a:9f:78:84:cf:83:a0:ff:b5: 90:6b:82:27:ad:8b:06:46:5f:83:25:1c:10:9b:11:2c:3d:df: 6f:44:5f:83:79:6a:b1:fc:b2:c5:ca:ea:48:e0:66:b2:8b:c5: 90:6c:de:07:f9:3a:85:f8:8b:77:66:7e:0d:95:15:ac:93:3d: 32:c9:22:45:86:81:76:f2:d6:94:9e:c8:bb:fe:db:8b:66:1f: db:d4:85:2a:64:d4:43:d0:06:6f:d8:f4:15:1e:8c:55:63:59: 93:e6:3d:c7:11:21:e8:7f:09:5a:49:32:94:72:1d:cf:d9:7d: bb:9b:af:be:a2:54:f8:2a:50:22:ba:a1:ac:37:17:2e:f6:57: 37:e2:5c:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTBDNTExMC8GA1UEBRMoNTc4ODQ5QzlCOTRBMzU1QTc2MjBBOTc0Nzk3M0QyMUJC RURBM0Y1MzAeFw0yNTEwMTcxMTE0NDJaFw0yNTEwMjQxMTE0NDJaMBgxFjAUBgNV BAMTDTY4ZjIyNTIzLTllOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGo5+4PtmGslWjHifd0ah3fg0s5TPc8r20J0MU8rADbbWJERzBFzPifWb89KAb LVzsDaEk38lWUqQ3w1Ewkk03fZxBoGL0z+wpcyPkMGraKLBL+kFS52/92gAkyVqm MSmW70i9bKrOvbJpVpuNzXEBAMzpRMzXdxGLqS1riTUTLd4qoGKIQvXsiQkl9fLy NTGzm3i8l8+VZkVn5oeskHU7Bduzk7zxwVUqcdaLAOQLEzb1HkQ/MZSMb1bI9eZj 6cBPMKNxNarTPZbLBXKCWGfawZp4Z2RxBJgSu9ehVOq2ZBx2mvLfd2V+ipznU4xS SquOlrg5gKsqi07DjE9VvGy5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtuIFKS2h 2Lgn529J2zx27pLk7BAwHwYDVR0jBBgwFoAUV4hJyblKNVp2IKl0eXPSG77aP1Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMEM1L0QxMDlFQkQwNTcy RTExRjA5NUY3RkU0OEM0RjlBRTAyL1Y0aEp5YmxLTlZwMklLbDBlWFBTRzc3YVAx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVjRoSnlibEtOVnAySUtsMGVYUFNHNzdhUDFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx MEM1L0QxMDlFQkQwNTcyRTExRjA5NUY3RkU0OEM0RjlBRTAyL1Y0aEp5YmxLTlZw MklLbDBlWFBTRzc3YVAxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAor1Wh49LTNeNE6PlreDd3vNY6SxaaypkvBey+yQZdxebQMZ0Wsm4bP rYMIVpmy/016OLh08ohoHCNx3voQiovEx5TRmun5ZzvSUOnXjzBpJiqU/bsQ0C6G MmfDdNN2fkjBEFGwv+urt2nD0oQTOG/AkjQzqVqfeITPg6D/tZBrgietiwZGX4Ml HBCbESw9329EX4N5arH8ssXK6kjgZrKLxZBs3gf5OoX4i3dmfg2VFayTPTLJIkWG gXby1pSeyLv+24tmH9vUhSpk1EPQBm/Y9BUejFVjWZPmPccRIeh/CVpJMpRyHc/Z fbubr76iVPgqUCK6oaw3Fy72VzfiXJA= -----END CERTIFICATE-----Generated at Sat Oct 18 23:35:51 2025 by rpki-client