$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json) Hash identifier: bteO/7eJfJq/s27aMr1L/aZhzn8X33wZsf5ZVw26u80= Subject key identifier: 5A:87:A2:2B:C2:01:47:FB:F6:53:93:D4:91:3D:EC:69:98:C1:28:A9 Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Certificate serial: 0842 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft Manifest number: 07FD Signing time: Wed 22 Oct 2025 22:03:36 +0000 Manifest this update: Wed 22 Oct 2025 22:03:36 +0000 Manifest next update: Wed 29 Oct 2025 22:03:36 +0000 Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: juV3E+4UJq/tiUW+cm+2gf+HULb7PU2uA1734NedU/I=) 2: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: JGXFZsvdAlPkzVwMIVDlhUnyxUdEjpH4xc3F+m/pQB0=) 3: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: yu9kaJ9SbaIghj5mweHVls+umbPvibjZ8k0y4rtHgrI=) 4: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: KYrgpq+j2JdiosQSHACv2bRMY5BVzOvfLnyNf5narws=) 5: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: Y/iBnK8ZipjxkATaALxABZ9CTEeJIdjjxY8Yxx9n9DM=) 6: 0989F3EE120911EB83107638C4F9AE02.roa (hash: ZN83zETo/fGZjHplsgi4LIPj/1+Cv9tK+RMfhDQAvcM=) 7: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: MIyFaAMcoVX+JijHyNBp9lzEprzyQwwRu4V9wwVXios=) 8: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: CoOgUqT0FD59n+BELVSjes/s0qoXYfrPfM4+T31Fkoo=) 9: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: Ej4Olhx/k6YWemdl2TV8Frzo1JOOuwGbcCqfJq8lBxg=) 10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: UjevdaGjYYh/fLHbv94Vi82GRHni+SflrmcRbP8Ltsg=) 11: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: BJy4+HNv8kQ6Lc2CH7nff6rHz79DtOyFMzKFxBbxH6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 22:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2114 (0x842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Validity Not Before: Oct 22 22:03:36 2025 GMT Not After : Oct 29 22:03:36 2025 GMT Subject: CN=68f954b8-c26d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:11:b0:5f:b2:15:fc:f7:19:20:7a:61:89:46: 88:fd:f3:8e:3a:ec:de:12:07:db:4d:f4:1b:8b:b5: 9b:24:bd:11:c8:ae:4b:93:63:ee:91:0e:b3:be:5d: 40:65:05:11:ea:f5:94:61:fa:f8:72:39:77:67:99: c3:e2:47:ac:50:4d:c8:2d:ce:82:f4:15:cb:c5:20: d9:3a:15:e4:f8:90:9f:7d:30:b4:9a:6f:fd:fb:80: a3:ad:cf:10:9d:f6:d6:76:1d:b0:20:89:5e:46:47: 16:ae:45:54:c8:69:a0:32:d7:b9:1a:6f:a4:a8:84: c6:30:e3:1e:e5:e7:73:0a:3f:42:bd:11:36:84:8d: 9f:49:4e:6a:b0:03:84:32:1c:d1:a1:44:5a:38:8d: 36:9c:ac:7e:11:61:ab:0f:60:51:35:b9:94:3b:73: 72:87:84:fd:5c:76:3f:5f:04:89:a3:5a:53:2b:7a: 5e:19:a2:35:6d:f4:6d:2d:0b:1e:9f:20:a7:b4:d1: 99:fe:e0:04:95:68:86:d9:00:7c:1c:ab:c3:11:40: ab:bc:89:f9:42:5d:1a:fd:83:83:6f:67:6a:75:9d: d4:ce:f1:e2:21:f6:31:19:c8:2c:0b:e1:13:00:8a: 6c:c5:fb:18:9f:9a:8c:d5:3c:ff:bd:4f:f2:57:0e: ba:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:87:A2:2B:C2:01:47:FB:F6:53:93:D4:91:3D:EC:69:98:C1:28:A9 X509v3 Authority Key Identifier: keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:4e:ff:98:97:06:f9:db:e8:80:90:06:30:6a:12:8e:73:a9: 34:db:67:26:c6:c4:76:fc:14:8a:e1:46:f8:41:de:4a:31:e1: 89:ae:d2:28:e1:76:87:56:65:0e:d2:c0:3c:1d:63:a0:e2:19: 2b:ad:4d:f1:c2:1b:02:b7:b5:b9:f6:ee:4a:9a:fa:0c:8e:f9: 16:6d:2b:e5:d6:b7:e7:2b:e5:d7:58:99:62:af:8d:16:53:b1: 68:32:4f:1e:f8:8d:f6:11:26:1c:95:f1:35:80:29:f5:7b:07: 77:74:47:bd:7e:a0:12:0b:d6:2c:42:91:c6:ac:4f:97:75:4f: 5c:62:c3:06:c2:fc:d5:81:29:42:42:24:ac:22:09:ee:47:40: f3:73:44:aa:a8:77:a5:94:af:40:1d:fc:9e:64:ac:f8:f5:46: a1:34:ab:96:d1:ad:ab:74:07:2b:2a:0a:19:0c:f6:e6:bd:f1: 71:e2:80:3f:c8:ed:5e:b2:00:4b:f3:98:c0:71:0c:23:8c:69: aa:fc:ee:6a:27:dd:c0:e0:be:ef:e5:8f:e5:30:e7:bb:82:f5: a0:8c:99:7d:35:1c:1a:8a:b9:69:ce:a0:5a:c6:35:e7:99:2b: 9b:36:9a:c8:10:fe:73:fe:c3:5a:09:c8:12:37:e2:c1:b8:f0: 24:0b:28:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3 NDRBQUY0ODAwHhcNMjUxMDIyMjIwMzM2WhcNMjUxMDI5MjIwMzM2WjAYMRYwFAYD VQQDEw02OGY5NTRiOC1jMjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhGwX7IV/PcZIHphiUaI/fOOOuzeEgfbTfQbi7WbJL0RyK5Lk2PukQ6zvl1A ZQUR6vWUYfr4cjl3Z5nD4kesUE3ILc6C9BXLxSDZOhXk+JCffTC0mm/9+4Cjrc8Q nfbWdh2wIIleRkcWrkVUyGmgMte5Gm+kqITGMOMe5edzCj9CvRE2hI2fSU5qsAOE MhzRoURaOI02nKx+EWGrD2BRNbmUO3Nyh4T9XHY/XwSJo1pTK3peGaI1bfRtLQse nyCntNGZ/uAElWiG2QB8HKvDEUCrvIn5Ql0a/YODb2dqdZ3UzvHiIfYxGcgsC+ET AIpsxfsYn5qM1Tz/vU/yVw66QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqHoivC AUf79lOT1JE97GmYwSipMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI1Ri8yMkQ5MUY3MjExQ0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pv ZDJBdm1VLVBfVDUwU3E5SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHTv+Ylwb52+iAkAYwahKOc6k022cmxsR2/BSK4Ub4Qd5KMeGJrtIo 4XaHVmUO0sA8HWOg4hkrrU3xwhsCt7W59u5KmvoMjvkWbSvl1rfnK+XXWJlir40W U7FoMk8e+I32ESYclfE1gCn1ewd3dEe9fqASC9YsQpHGrE+XdU9cYsMGwvzVgSlC QiSsIgnuR0Dzc0SqqHellK9AHfyeZKz49UahNKuW0a2rdAcrKgoZDPbmvfFx4oA/ yO1esgBL85jAcQwjjGmq/O5qJ93A4L7v5Y/lMOe7gvWgjJl9NRwairlpzqBaxjXn mSubNprIEP5z/sNaCcgSN+LBuPAkCyhu -----END CERTIFICATE-----Generated at Fri Oct 24 00:24:30 2025 by rpki-client