$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json) Hash identifier: I1MjUODfjaXnnvkDgMKpolDtpXmgN01rGulXJikBlBQ= Subject key identifier: AA:EA:F6:11:D4:BB:D7:AB:EB:46:32:1F:90:4A:1E:DD:A3:17:9B:44 Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft Manifest number: 3D Signing time: Wed 05 Nov 2025 07:41:59 +0000 Manifest this update: Wed 05 Nov 2025 07:41:58 +0000 Manifest next update: Wed 12 Nov 2025 07:41:58 +0000 Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: O0purj2fDdavqto2J2kGDLZG9auRQv9YkEVO91LbcD8=) 2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: SdgAZZ52cjGHFYLx6r6iySsbR8aD22mEVfk3u39V65w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Validity Not Before: Nov 5 07:41:58 2025 GMT Not After : Nov 12 07:41:58 2025 GMT Subject: CN=690affc6-da8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:3a:40:d2:34:79:80:b9:d3:43:f4:17:e8: 3b:c8:05:af:1f:7f:1a:cf:0f:a6:41:7d:ad:e1:c3: 10:1f:9f:af:d4:39:d3:95:b7:0d:50:1d:7b:bc:03: 54:5a:4e:2c:b2:3e:b7:62:e9:db:ba:3e:44:2a:b0: 29:ca:18:fb:db:f5:1e:54:77:e0:27:24:ca:7a:ec: 3e:ba:52:3b:b6:26:46:e7:59:48:af:14:1e:fe:ca: 61:cb:ef:64:99:41:90:b1:91:d8:31:64:bd:c5:3b: 28:63:15:db:7b:f2:ba:f4:6f:de:0c:bc:86:27:fa: 5f:4a:f9:cc:47:ec:8f:f8:85:c5:ab:07:95:69:b1: 2d:01:5b:53:e1:43:5e:72:af:be:8f:4d:56:2c:9c: 35:52:aa:55:e7:30:3b:b1:28:19:79:dd:ec:9d:fe: aa:3c:00:a2:2b:06:38:28:23:ff:df:5e:55:b0:cd: c4:72:1c:d5:24:cf:2b:43:3f:31:a0:70:a9:15:37: 5e:7b:52:7a:58:80:6a:04:f4:db:7e:dc:ec:33:b5: 0e:7d:a0:56:cd:f1:16:69:5e:65:d1:0a:58:17:93: 9a:37:df:5c:30:85:3e:b1:5b:3e:39:00:19:99:ab: 12:ec:e6:8e:40:7d:5d:48:8a:e6:7a:9d:a2:e7:8b: 0c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EA:F6:11:D4:BB:D7:AB:EB:46:32:1F:90:4A:1E:DD:A3:17:9B:44 X509v3 Authority Key Identifier: keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:81:67:3d:6e:08:c9:19:c5:0b:81:27:42:b2:90:5e:c2:8b: 34:85:12:ea:34:24:25:ee:cd:e8:7b:e6:7f:42:39:cb:98:5d: e3:e7:57:01:dc:0b:76:64:7c:90:1e:d5:87:76:fc:e3:fc:78: 2c:e3:95:57:94:f7:7b:b0:34:0e:46:8d:44:4c:b3:82:38:21: a8:b2:4a:09:ef:96:97:9b:04:d9:43:3b:fc:6c:2f:77:f5:17: 02:50:18:43:c0:95:ab:ea:46:14:ec:ad:e0:cd:0e:e6:8d:1b: a3:08:ce:79:b0:57:65:aa:e4:ad:cd:b5:23:09:f4:36:2d:74: 4c:01:12:6e:74:2d:66:59:1c:0f:7b:57:a6:be:74:b4:c5:22: 85:e5:41:bb:28:d1:37:bf:ce:f1:7d:1d:39:2b:33:fb:ed:a2: b2:56:d3:7e:d4:c6:99:53:58:95:92:c6:07:7e:ea:2f:25:cb: 43:f1:64:2e:4a:90:1c:49:07:d6:15:00:33:2e:6d:16:9a:9f: 74:27:97:46:eb:83:7c:2f:b2:d3:35:9c:cb:5d:8d:87:f2:16: 5b:cc:29:64:b8:e0:d1:28:f6:21:64:a7:44:6a:86:06:f2:8b: 8d:dc:64:ba:94:b8:b9:4a:29:42:d8:87:95:81:23:a3:68:f2: 42:f0:a0:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTFERTExMC8GA1UEBRMoNkI4Mjk2QTU4MTU0MzAyNzhFQzMxMUI1RTlDQkVCN0ZG MEE5MERDNjAeFw0yNTExMDUwNzQxNThaFw0yNTExMTIwNzQxNThaMBgxFjAUBgNV BAMTDTY5MGFmZmM2LWRhOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB/zpA0jR5gLnTQ/QX6DvIBa8ffxrPD6ZBfa3hwxAfn6/UOdOVtw1QHXu8A1Ra TiyyPrdi6du6PkQqsCnKGPvb9R5Ud+AnJMp67D66Uju2JkbnWUivFB7+ymHL72SZ QZCxkdgxZL3FOyhjFdt78rr0b94MvIYn+l9K+cxH7I/4hcWrB5VpsS0BW1PhQ15y r76PTVYsnDVSqlXnMDuxKBl53eyd/qo8AKIrBjgoI//fXlWwzcRyHNUkzytDPzGg cKkVN157UnpYgGoE9Nt+3OwztQ59oFbN8RZpXmXRClgXk5o331wwhT6xWz45ABmZ qxLs5o5AfV1IiuZ6naLniwwrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqur2EdS7 16vrRjIfkEoe3aMXm0QwHwYDVR0jBBgwFoAUa4KWpYFUMCeOwxG16cvrf/CpDcYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1MURFLzg3MUZEQTM2NjBC NDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNlT3d4RzE2Y3ZyZl9DcERj WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYTRLV3BZRlVNQ2VPd3hHMTZjdnJmX0NwRGNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 MURFLzg3MUZEQTM2NjBCNDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNl T3d4RzE2Y3ZyZl9DcERjWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKCBZz1uCMkZxQuBJ0KykF7CizSFEuo0JCXuzeh75n9COcuYXePnVwHc C3ZkfJAe1Yd2/OP8eCzjlVeU93uwNA5GjURMs4I4IaiySgnvlpebBNlDO/xsL3f1 FwJQGEPAlavqRhTsreDNDuaNG6MIznmwV2Wq5K3NtSMJ9DYtdEwBEm50LWZZHA97 V6a+dLTFIoXlQbso0Te/zvF9HTkrM/vtorJW037UxplTWJWSxgd+6i8ly0PxZC5K kBxJB9YVADMubRaan3Qnl0brg3wvstM1nMtdjYfyFlvMKWS44NEo9iFkp0Rqhgby i43cZLqUuLlKKULYh5WBI6No8kLwoOM= -----END CERTIFICATE-----Generated at Thu Nov 6 04:35:01 2025 by rpki-client