$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft File: T4ElgrV_TBLHNl5qp_D_yncQlJE.mft (raw, json) Hash identifier: Y6BjbuLo2wkMl3MFBR6KsuFV/zAQsvdfUbiXtBX9hfo= Subject key identifier: 21:AE:04:FD:89:0E:45:1B:9F:F3:3F:F0:A4:26:8C:70:BE:A1:36:3D Authority key identifier: 4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91 Certificate issuer: /CN=A91B2D29/serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491 Certificate serial: 1901 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft Manifest number: 476F Signing time: Tue 04 Nov 2025 15:51:58 +0000 Manifest this update: Tue 04 Nov 2025 15:51:58 +0000 Manifest next update: Tue 11 Nov 2025 15:51:58 +0000 Files and hashes: 1: T4ElgrV_TBLHNl5qp_D_yncQlJE.crl (hash: lfPwWaQ9jLo1I7hoopcBlzG6Ij40XpEnnqEcSY+Kn3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6401 (0x1901) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491 Validity Not Before: Nov 4 15:51:58 2025 GMT Not After : Nov 11 15:51:58 2025 GMT Subject: CN=690a211e-984a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3b:61:dd:42:47:49:c6:eb:17:3d:e6:03:40: 74:8b:3f:53:bb:60:5e:1c:80:7d:7e:55:7d:03:3c: 95:f1:5b:1e:12:8b:cd:fb:a5:b9:71:1f:85:05:e4: 57:1c:30:f8:08:19:67:92:d3:64:6b:7d:b7:de:03: ac:01:60:be:f4:83:fb:e9:e7:64:5a:93:5b:24:f2: 87:10:da:1e:18:ea:1c:0c:8c:37:77:63:67:43:d3: 45:31:88:c4:9c:08:f4:92:3c:fc:a1:8c:19:72:2a: 3a:61:fb:9e:e5:24:1c:58:97:44:7b:6c:69:f3:13: c7:f8:e9:af:81:9a:36:76:15:bf:7f:8a:71:0d:a4: 45:66:b5:21:ce:fd:99:ee:84:e6:81:38:9c:45:d2: 97:fc:5c:50:5d:53:1e:b8:1b:79:d9:fd:13:50:a5: 87:10:03:dc:5c:23:1a:cb:2c:d1:d2:2a:15:a5:97: 50:03:d4:0e:2f:19:0c:87:f3:96:4b:60:47:55:4e: f6:55:21:5d:73:bd:41:6a:ca:15:4d:b0:3b:40:24: 9a:a6:06:f3:91:61:36:9c:5f:58:24:40:17:e8:d3: 7a:33:8a:6a:d5:97:31:43:5f:94:8f:67:3d:5e:f0: 02:3d:00:82:86:ee:82:b3:60:97:28:c8:fe:03:d4: 34:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AE:04:FD:89:0E:45:1B:9F:F3:3F:F0:A4:26:8C:70:BE:A1:36:3D X509v3 Authority Key Identifier: keyid:4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:95:62:b1:71:86:ed:c3:82:ac:c7:0f:e6:81:25:63:b2:37: 43:c0:f0:bd:89:7f:11:f0:08:30:25:51:60:c2:4e:8f:92:a3: 4f:52:21:8e:05:a6:f7:f0:bf:30:5e:80:92:48:a0:7c:d1:17: 6f:0e:7e:f7:11:09:59:69:46:61:9f:34:fc:36:f7:00:f5:1d: 45:31:10:98:0c:d2:89:be:59:e8:a3:a3:b4:ce:fd:5c:6d:49: f1:dd:12:c8:63:27:ed:35:32:68:7f:59:9c:a4:ec:86:b8:6e: 27:36:ee:f1:88:ba:28:43:15:74:d4:1a:94:ac:e8:52:70:32: 73:af:bb:2c:08:59:62:5c:23:fe:39:21:c6:b0:75:7d:7a:42: 5c:86:8b:ae:2b:c3:13:28:8b:e8:b1:8c:21:05:d2:82:28:3e: 03:55:11:13:d9:a9:60:21:74:56:9c:e6:41:30:11:81:e7:9b: cb:43:dc:4c:7b:dc:f5:ba:61:a2:1a:5f:db:55:64:da:ef:23: 79:cc:4e:76:e6:9e:68:ba:80:fb:c9:2f:b6:5e:2e:fa:6b:98: 66:ad:1b:19:20:ec:d6:e1:01:10:ed:da:63:81:67:b1:31:ba: 77:22:9b:11:0e:11:56:64:57:cc:e5:63:bb:9c:44:7a:31:35: ac:2a:f1:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDRGODEyNTgyQjU3RjRDMTJDNzM2NUU2QUE3RjBGRkNB NzcxMDk0OTEwHhcNMjUxMTA0MTU1MTU4WhcNMjUxMTExMTU1MTU4WjAYMRYwFAYD VQQDEw02OTBhMjExZS05ODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTth3UJHScbrFz3mA0B0iz9Tu2BeHIB9flV9AzyV8VseEovN+6W5cR+FBeRX HDD4CBlnktNka3233gOsAWC+9IP76edkWpNbJPKHENoeGOocDIw3d2NnQ9NFMYjE nAj0kjz8oYwZcio6Yfue5SQcWJdEe2xp8xPH+OmvgZo2dhW/f4pxDaRFZrUhzv2Z 7oTmgTicRdKX/FxQXVMeuBt52f0TUKWHEAPcXCMayyzR0ioVpZdQA9QOLxkMh/OW S2BHVU72VSFdc71BasoVTbA7QCSapgbzkWE2nF9YJEAX6NN6M4pq1ZcxQ1+Uj2c9 XvACPQCChu6Cs2CXKMj+A9Q0twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGuBP2J DkUbn/M/8KQmjHC+oTY9MB8GA1UdIwQYMBaAFE+BJYK1f0wSxzZeaqfw/8p3EJSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9UNEVsZ3JWX1RCTEhObDVxcF9EX3luY1Fs SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0RWxnclZfVEJMSE5sNXFwX0RfeW5jUWxKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9UNEVsZ3JWX1RC TEhObDVxcF9EX3luY1FsSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdlWKxcYbtw4Ksxw/mgSVjsjdDwPC9iX8R8AgwJVFgwk6PkqNPUiGO Bab38L8wXoCSSKB80RdvDn73EQlZaUZhnzT8NvcA9R1FMRCYDNKJvlnoo6O0zv1c bUnx3RLIYyftNTJof1mcpOyGuG4nNu7xiLooQxV01BqUrOhScDJzr7ssCFliXCP+ OSHGsHV9ekJchouuK8MTKIvosYwhBdKCKD4DVRET2algIXRWnOZBMBGB55vLQ9xM e9z1umGiGl/bVWTa7yN5zE525p5ouoD7yS+2Xi76a5hmrRsZIOzW4QEQ7dpjgWex Mbp3IpsRDhFWZFfM5WO7nER6MTWsKvEM -----END CERTIFICATE-----Generated at Wed Nov 5 09:50:16 2025 by rpki-client