$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json) Hash identifier: /+2zlOMZaDo4/sI5LNwV0yzki2vw7Xh1BzQtZLtUia0= Subject key identifier: A9:AF:12:13:6B:C6:2C:E7:2E:F3:55:6D:34:0B:39:68:24:17:3F:63 Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Certificate serial: 2476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft Manifest number: 476E Signing time: Tue 04 Nov 2025 15:51:56 +0000 Manifest this update: Tue 04 Nov 2025 15:51:56 +0000 Manifest next update: Tue 11 Nov 2025 15:51:56 +0000 Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: jA1st1PhSZY7/qlVelA04qsJ1GydLACIkVJiTaoDIMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9334 (0x2476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Validity Not Before: Nov 4 15:51:56 2025 GMT Not After : Nov 11 15:51:56 2025 GMT Subject: CN=690a211c-53df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:3e:12:9a:7a:b8:e4:ee:db:ec:1b:21:b7: 52:8d:ea:66:36:dc:81:31:b6:12:4b:69:71:3e:57: 16:db:55:dd:ca:eb:1a:5a:a0:b9:b2:8c:51:4b:e0: f9:f0:a9:9e:aa:2c:64:3c:f3:a5:85:6b:af:88:57: 9b:7f:a0:33:a1:93:bf:f5:71:db:13:c4:e4:50:bb: 75:94:18:bb:06:53:19:fc:f5:19:7a:d0:8b:fe:dd: b2:0e:47:d6:6a:0a:b7:41:93:cb:2c:e4:f1:0c:f5: 1a:d7:59:c6:35:a3:83:df:60:c7:63:ae:24:08:74: 24:25:6a:bc:eb:b0:7a:1d:92:07:49:b5:85:b5:c4: eb:c2:b3:af:f2:5e:bc:f9:0a:af:fa:99:94:aa:89: 7a:dd:f5:f1:2a:40:59:ee:9b:a4:ef:48:56:16:99: 22:78:b1:ed:f2:38:7c:92:b3:f0:dc:4b:15:cb:b2: cc:c0:59:00:87:cb:4f:34:fb:58:48:f7:aa:21:b1: 9f:14:26:2f:12:51:2a:0e:c2:01:ad:91:ca:0e:22: 1c:9b:3c:f5:9b:21:db:3e:61:77:6b:0b:42:f2:e3: c0:95:4b:ef:81:22:6b:f6:66:81:90:96:d8:35:e5: 95:0e:35:ad:46:19:ef:dc:95:36:c6:79:75:44:9b: 59:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AF:12:13:6B:C6:2C:E7:2E:F3:55:6D:34:0B:39:68:24:17:3F:63 X509v3 Authority Key Identifier: keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:95:a2:ca:15:ff:b1:2a:14:ae:cd:f0:40:67:19:1d:b9:bb: a1:9a:8c:0c:ee:ad:44:6f:1e:a9:bc:c1:44:16:c5:ad:d4:96: 80:99:77:1c:f3:51:69:60:b0:2e:cd:f9:9b:eb:e8:00:71:6d: fd:d6:01:e4:2c:6f:4b:0a:b7:47:db:bb:a9:5c:7e:1c:94:25: a7:64:4d:cc:a6:d1:69:86:ba:21:ed:8b:b4:e3:30:e9:78:9d: 11:99:33:0b:63:ef:d6:db:8d:68:6e:4e:75:1b:03:25:87:cd: 1f:23:67:0e:38:48:41:31:04:c9:00:66:77:cb:89:88:09:63: 0b:0f:0b:e3:0a:ce:f1:b4:49:05:1e:a5:b9:fc:d8:8b:7a:f0: f3:e9:71:a4:15:64:c3:2b:e5:ac:3e:25:fd:ba:09:26:ec:95: 00:4a:9c:de:5e:38:a9:9b:c2:7e:62:4b:4b:54:47:77:5d:44: ae:bb:92:cc:15:d2:f0:9a:1b:9b:24:37:56:80:6c:a9:4f:e3: f0:b7:d4:63:f2:2e:65:e8:f5:c6:7b:f0:a8:38:b2:21:af:8a: ce:32:82:c3:a5:e3:72:d7:7c:0e:9c:9c:7b:85:ab:67:c1:a4: 48:0c:52:60:45:85:8b:85:ba:8f:39:40:8e:4e:1f:80:60:4d: f1:4e:7a:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDczOEMyM0FBNENFNzU1NUVFQTJGQzhDMkJFRDhGNDZB NDg4REM5M0QwHhcNMjUxMTA0MTU1MTU2WhcNMjUxMTExMTU1MTU2WjAYMRYwFAYD VQQDEw02OTBhMjExYy01M2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwL8+Epp6uOTu2+wbIbdSjepmNtyBMbYSS2lxPlcW21XdyusaWqC5soxRS+D5 8KmeqixkPPOlhWuviFebf6AzoZO/9XHbE8TkULt1lBi7BlMZ/PUZetCL/t2yDkfW agq3QZPLLOTxDPUa11nGNaOD32DHY64kCHQkJWq867B6HZIHSbWFtcTrwrOv8l68 +Qqv+pmUqol63fXxKkBZ7puk70hWFpkieLHt8jh8krPw3EsVy7LMwFkAh8tPNPtY SPeqIbGfFCYvElEqDsIBrZHKDiIcmzz1myHbPmF3awtC8uPAlUvvgSJr9maBkJbY NeWVDjWtRhnv3JU2xnl1RJtZEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmvEhNr xiznLvNVbTQLOWgkFz9jMB8GA1UdIwQYMBaAFHOMI6pM51Ve6i/Iwr7Y9GpIjck9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZWN3FMOGpDdnRqMGFraU55 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0d2pxa3puVlY3cUw4akN2dGowYWtpTnlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZW N3FMOGpDdnRqMGFraU55VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwlaLKFf+xKhSuzfBAZxkdubuhmowM7q1Ebx6pvMFEFsWt1JaAmXcc 81FpYLAuzfmb6+gAcW391gHkLG9LCrdH27upXH4clCWnZE3MptFphroh7Yu04zDp eJ0RmTMLY+/W241obk51GwMlh80fI2cOOEhBMQTJAGZ3y4mICWMLDwvjCs7xtEkF HqW5/NiLevDz6XGkFWTDK+WsPiX9ugkm7JUASpzeXjipm8J+YktLVEd3XUSuu5LM FdLwmhubJDdWgGypT+Pwt9Rj8i5l6PXGe/CoOLIhr4rOMoLDpeNy13wOnJx7hatn waRIDFJgRYWLhbqPOUCOTh+AYE3xTnoS -----END CERTIFICATE-----Generated at Wed Nov 5 05:21:23 2025 by rpki-client