$ rpki-client -vvf rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft File: g4n9Rv74flk96Bz_3N8guiynYB4.mft (raw, json) Hash identifier: zOjuIPvp4NXS80lMdDCSs/bYxRFifHlCzih7g5g5hak= Subject key identifier: E2:EC:16:6B:4C:85:38:CE:3A:A4:AB:91:F1:60:9F:88:74:8D:2E:5C Authority key identifier: 83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E Certificate issuer: /CN=A91475BA/serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Certificate serial: 0860 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft Manifest number: 085B Signing time: Tue 28 Oct 2025 20:31:48 +0000 Manifest this update: Tue 28 Oct 2025 20:31:47 +0000 Manifest next update: Tue 04 Nov 2025 20:31:47 +0000 Files and hashes: 1: g4n9Rv74flk96Bz_3N8guiynYB4.crl (hash: Mq56j7jEh6g30AuqvCupXf7MQk822k7ko1oYnNvlwGw=) 2: 1E1D32C22FF311EC9220256BC4F9AE02.roa (hash: pTjj2b7GgJwyDNJuxZHgCMBFpwcbCF/p1EbBwHpmEQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 20:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2144 (0x860) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475BA, serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Validity Not Before: Oct 28 20:31:47 2025 GMT Not After : Nov 4 20:31:47 2025 GMT Subject: CN=69012834-a277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ee:70:e3:8f:fe:92:2c:83:c5:24:a0:27:30: f0:e8:22:85:33:34:4b:bb:07:50:f8:87:40:b7:73: 1e:94:09:57:cb:41:7a:a8:ff:6d:c2:13:39:5a:a8: 4e:06:6a:a0:6d:9e:0a:74:48:81:68:0f:4a:83:cc: a8:61:51:7d:2a:4c:f4:f5:4a:5d:c0:9a:04:48:44: d8:4b:23:d5:cc:5e:e4:8c:6a:36:10:cd:f0:16:45: 09:40:06:3d:24:43:68:f0:72:cb:f9:a7:b2:5c:fe: 59:b8:62:38:9d:d5:83:ba:03:ac:49:90:5c:94:37: 31:d6:9c:3f:29:4b:65:b8:61:92:16:aa:ee:8f:db: 40:f5:df:27:20:b4:73:1a:ea:a4:24:2f:25:09:2f: ae:36:c9:8f:cb:3e:56:b9:56:6e:02:c6:05:45:dd: 6e:7a:46:77:a5:cf:85:13:e3:ec:d7:f9:7f:55:3a: 8d:05:b1:a1:e5:cd:70:a0:7f:ae:76:f7:6d:b8:41: 9d:e0:51:01:43:57:10:34:20:87:d5:de:37:d1:01: d3:db:ff:32:f7:7e:55:51:7a:51:9a:b2:1c:77:a0: 7f:0b:5f:c3:eb:e8:8b:20:ff:05:70:17:4e:bb:32: d7:52:15:03:96:8c:bc:1d:38:3c:fd:2f:89:e2:cb: b8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EC:16:6B:4C:85:38:CE:3A:A4:AB:91:F1:60:9F:88:74:8D:2E:5C X509v3 Authority Key Identifier: keyid:83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:9f:ab:1a:9f:dc:32:6c:00:5b:cc:38:7a:f6:22:f9:aa:8f: e8:10:f1:95:d7:81:7a:7f:a2:96:d5:75:0a:0b:06:cd:b5:8c: ec:16:5a:65:f0:cf:88:b5:9e:6a:99:c3:e5:41:91:42:d7:f7: 4f:06:46:ac:67:09:14:03:ff:8d:f2:34:4b:c2:62:de:02:55: 77:00:c1:13:c6:61:7c:06:2a:c3:35:23:1e:78:40:dd:ed:e9: 40:42:81:72:a8:cf:36:e3:a5:e1:70:74:fd:45:8c:3a:70:fb: 06:71:d1:7d:ba:12:1c:15:17:3e:72:85:df:c6:2d:5c:f6:73: 40:d4:db:71:00:dc:f7:f2:ec:2a:83:d5:1a:00:9a:da:60:e1: 1d:2a:20:4d:91:7d:c5:07:9c:4d:62:c2:15:b3:44:09:d6:2b: 47:8a:b3:a2:e6:9f:32:0a:83:ac:52:21:e3:57:49:c2:dd:59: 85:38:16:64:7c:62:8f:8a:3a:ce:72:e8:0d:71:0c:1e:82:27: 42:33:94:53:f0:24:9d:de:77:4d:d7:39:26:29:4c:f8:61:5b: 4c:52:7f:6f:54:6e:fe:32:cf:67:99:aa:e1:ce:28:5d:8c:86: 62:ea:7e:4c:f9:e0:26:d0:55:b7:62:39:ce:f4:88:d4:e1:aa: 40:66:ec:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QkExMTAvBgNVBAUTKDgzODlGRDQ2RkVGODdFNTkzREU4MUNGRkRDREYyMEJB MkNBNzYwMUUwHhcNMjUxMDI4MjAzMTQ3WhcNMjUxMTA0MjAzMTQ3WjAYMRYwFAYD VQQDEw02OTAxMjgzNC1hMjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtO5w44/+kiyDxSSgJzDw6CKFMzRLuwdQ+IdAt3MelAlXy0F6qP9twhM5WqhO BmqgbZ4KdEiBaA9Kg8yoYVF9Kkz09UpdwJoESETYSyPVzF7kjGo2EM3wFkUJQAY9 JENo8HLL+aeyXP5ZuGI4ndWDugOsSZBclDcx1pw/KUtluGGSFqruj9tA9d8nILRz GuqkJC8lCS+uNsmPyz5WuVZuAsYFRd1uekZ3pc+FE+Ps1/l/VTqNBbGh5c1woH+u dvdtuEGd4FEBQ1cQNCCH1d430QHT2/8y935VUXpRmrIcd6B/C1/D6+iLIP8FcBdO uzLXUhUDloy8HTg8/S+J4su4cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLsFmtM hTjOOqSrkfFgn4h0jS5cMB8GA1UdIwQYMBaAFIOJ/Ub++H5ZPegc/9zfILosp2Ae MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVCQS9ENEYwOEVFNkRB RTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZsazk2QnpfM044Z3VpeW5Z QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0bjlSdjc0ZmxrOTZCel8zTjhndWl5bllCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVCQS9ENEYwOEVFNkRBRTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZs azk2QnpfM044Z3VpeW5ZQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDn6san9wybABbzDh69iL5qo/oEPGV14F6f6KW1XUKCwbNtYzsFlpl 8M+ItZ5qmcPlQZFC1/dPBkasZwkUA/+N8jRLwmLeAlV3AMETxmF8BirDNSMeeEDd 7elAQoFyqM8246XhcHT9RYw6cPsGcdF9uhIcFRc+coXfxi1c9nNA1NtxANz38uwq g9UaAJraYOEdKiBNkX3FB5xNYsIVs0QJ1itHirOi5p8yCoOsUiHjV0nC3VmFOBZk fGKPijrOcugNcQwegidCM5RT8CSd3ndN1zkmKUz4YVtMUn9vVG7+Ms9nmarhzihd jIZi6n5M+eAm0FW3YjnO9IjU4apAZuxd -----END CERTIFICATE-----Generated at Wed Oct 29 19:59:51 2025 by rpki-client