$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json) Hash identifier: /2JZ5TDGjj5L5esm2g4U2619DO83x56Hccei5Olm1kE= Subject key identifier: F4:E5:D6:F6:D9:3B:7D:8D:FE:84:EB:B9:8A:72:72:BB:BC:35:FD:8C Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Certificate serial: 0944 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft Manifest number: 19D6 Signing time: Sun 02 Nov 2025 17:19:51 +0000 Manifest this update: Sun 02 Nov 2025 17:19:50 +0000 Manifest next update: Sun 09 Nov 2025 17:19:50 +0000 Files and hashes: 1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: Z42XfF8otol1bOfIDUA77NbrqOtrNzxU8Qtduxf31do=) 2: 42BEF0C6965A11F089F1E151C4F9AE02.roa (hash: I0UwUhNOM9UD9C8spTt2KELyT5sspCh/FuCrUf/DLxg=) 3: A460F59AB30111F0870CBA50C4F9AE02.roa (hash: OniChjyeEXj5cVvVwWs//hBr0jYalsY+nH9sGBE3ExQ=) 4: 52703058B29211F0A466572FC4F9AE02.roa (hash: EAnnXLdoBap6sg9ETuzgpTeeWcNHp5G/1/Gi4frw3fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2372 (0x944) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Validity Not Before: Nov 2 17:19:50 2025 GMT Not After : Nov 9 17:19:50 2025 GMT Subject: CN=690792b6-ddf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:a3:36:b3:46:38:9d:db:63:be:51:e3:96: 9f:e4:11:bc:e1:a8:13:c7:3f:fd:53:85:13:e9:f6: 96:75:0f:56:06:bf:e9:4f:e9:d4:66:34:35:af:3d: e4:cd:61:01:26:3d:82:94:10:08:03:ed:d8:e1:7f: 94:df:27:cd:1f:72:9e:b7:b9:3f:b7:a4:3c:5d:01: 0d:8c:3c:7f:eb:60:40:f8:7b:22:6f:2a:33:d9:82: bc:95:7a:55:c7:60:7c:c4:5f:aa:5d:e3:55:53:16: 74:af:a3:a8:45:b1:5c:32:e4:b4:d3:e7:a3:7b:9d: bf:d3:19:4b:e6:9f:7b:14:86:53:29:f7:c1:f1:c1: fe:ff:6f:7d:2a:a5:8e:29:b9:32:ad:ce:00:3a:63: 70:f3:42:ee:b9:23:f9:d3:ef:e7:54:93:00:f2:25: a2:ab:24:4a:12:1b:a5:2c:f4:be:cd:96:6a:d2:91: ab:cf:82:eb:98:4e:8d:99:30:c0:62:60:08:f0:ac: f9:fd:50:6f:c6:50:94:84:a1:9c:a1:f9:20:d2:89: 15:68:b7:df:df:19:b9:96:a4:fe:47:d1:72:3d:d4: 5f:0b:e2:3a:65:99:22:91:ec:53:33:e1:b5:58:7d: 0d:60:52:81:26:5e:63:23:6e:32:b9:14:fa:1a:e7: 78:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E5:D6:F6:D9:3B:7D:8D:FE:84:EB:B9:8A:72:72:BB:BC:35:FD:8C X509v3 Authority Key Identifier: keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8d:de:8b:bd:1e:eb:23:5d:53:df:a1:96:f5:59:22:2b:89: b0:49:4e:4a:77:36:c4:92:80:5d:bd:5b:a6:ba:19:68:3c:55: 50:6d:3d:5f:17:6a:fd:ce:d7:dd:9f:2f:2f:b9:73:9b:bf:93: 7a:da:da:a8:66:06:f7:e2:85:b0:35:5c:e6:f8:49:3c:9f:b5: ac:a5:bd:06:41:65:c1:89:aa:cb:0d:2b:e1:32:d9:c5:fe:42: 3b:7f:19:c9:da:b7:eb:d9:d5:44:31:44:a3:54:88:5b:77:3d: d6:ed:d6:06:d2:f7:07:ab:0d:82:dc:b1:a1:02:8a:24:b5:9e: 2f:f2:ff:c4:a3:f2:ce:29:c7:1a:27:5d:02:68:04:f2:47:01: 6d:ec:29:73:b7:5e:6a:32:35:3b:65:8d:e8:71:22:9b:a5:6a: aa:63:72:5a:81:02:99:8e:50:ab:18:53:0e:76:5c:8d:b6:4b: b8:81:27:72:a9:34:c2:89:21:d3:5b:8d:2c:eb:e2:85:6e:a4: c4:d3:25:f1:e5:89:1a:4c:49:d5:56:22:d2:4c:83:99:79:94: f2:67:ec:e2:fa:46:99:1a:32:7c:08:81:dc:86:da:e1:7e:6f: 7f:1e:a3:19:a4:cf:31:7c:e6:d4:9f:5c:2e:39:d1:82:7d:d4: 8b:1b:d8:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG Rjc5RDFFMDEwHhcNMjUxMTAyMTcxOTUwWhcNMjUxMTA5MTcxOTUwWjAYMRYwFAYD VQQDEw02OTA3OTJiNi1kZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLCjNrNGOJ3bY75R45af5BG84agTxz/9U4UT6faWdQ9WBr/pT+nUZjQ1rz3k zWEBJj2ClBAIA+3Y4X+U3yfNH3Ket7k/t6Q8XQENjDx/62BA+Hsibyoz2YK8lXpV x2B8xF+qXeNVUxZ0r6OoRbFcMuS00+eje52/0xlL5p97FIZTKffB8cH+/299KqWO Kbkyrc4AOmNw80LuuSP50+/nVJMA8iWiqyRKEhulLPS+zZZq0pGrz4LrmE6NmTDA YmAI8Kz5/VBvxlCUhKGcofkg0okVaLff3xm5lqT+R9FyPdRfC+I6ZZkikexTM+G1 WH0NYFKBJl5jI24yuRT6Gud48QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTl1vbZ O32N/oTruYpycru8Nf2MMB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01i UndmcDFiUUcxWXJfZWRIZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALjd6LvR7rI11T36GW9VkiK4mwSU5KdzbEkoBdvVumuhloPFVQbT1f F2r9ztfdny8vuXObv5N62tqoZgb34oWwNVzm+Ek8n7Wspb0GQWXBiarLDSvhMtnF /kI7fxnJ2rfr2dVEMUSjVIhbdz3W7dYG0vcHqw2C3LGhAooktZ4v8v/Eo/LOKcca J10CaATyRwFt7Clzt15qMjU7ZY3ocSKbpWqqY3JagQKZjlCrGFMOdlyNtku4gSdy qTTCiSHTW40s6+KFbqTE0yXx5YkaTEnVViLSTIOZeZTyZ+zi+kaZGjJ8CIHchtrh fm9/HqMZpM8xfObUn1wuOdGCfdSLG9g6 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:22 2025 by rpki-client