$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json) Hash identifier: +kN/LGMwwcBnzcEAmEx/azkfrm65uFHBhfeSv0emi9E= Subject key identifier: 61:45:0F:D0:69:F7:B9:D7:5C:6D:AE:B6:6B:B8:AA:6F:76:AA:9C:58 Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Certificate serial: 0DE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft Manifest number: 0DC9 Signing time: Sun 26 Oct 2025 18:15:50 +0000 Manifest this update: Sun 26 Oct 2025 18:15:49 +0000 Manifest next update: Sun 02 Nov 2025 18:15:49 +0000 Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: jgzVnlu2wHt+jjLfCD/Pqg6sEy988NrZ8uf9xzysEJU=) 2: 8B41351885EB11F0B665685EC4F9AE02.roa (hash: 3jicQmgQkvww41dqycYyBrr/vfnWtkA7h6bxqXU86fw=) 3: 3AA99BFC85E311F08C58A47BC4F9AE02.roa (hash: P7cfUWJzhGI/B+OEAI2GfYhnJaFGcv7V45ZOvv42ixM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 18:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3559 (0xde7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Validity Not Before: Oct 26 18:15:49 2025 GMT Not After : Nov 2 18:15:49 2025 GMT Subject: CN=68fe6555-a887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:61:ba:99:42:91:8a:0a:40:32:d5:34:41:3e: 5e:27:09:00:5f:6d:fe:a5:ab:53:7b:e6:c8:23:60: 89:51:e3:e6:d6:48:03:13:8b:fd:ea:c5:54:d1:ed: d1:ba:6e:51:9d:2a:db:ae:cb:d1:83:dc:78:46:cc: 69:e5:ed:9a:fe:ae:65:da:7a:6f:38:3a:f2:d1:ed: c2:cc:7c:df:4a:a8:51:97:7f:2b:97:a6:e2:e9:d1: 1e:5b:45:2a:4d:d9:db:41:49:ad:2a:38:df:d9:d4: f9:f2:87:f4:db:40:15:54:b4:5f:f1:38:9d:f2:fa: 28:82:11:9e:f7:f9:69:12:0a:be:9f:cd:cf:f9:9f: 57:06:20:64:0e:56:d3:83:4b:ca:e1:42:69:14:9f: ef:21:19:10:b6:17:7d:c4:54:53:81:4b:2c:b0:ba: 39:d3:34:4d:d7:f1:9c:9e:ce:f2:2f:61:a6:9c:d2: af:d6:1d:16:82:4d:56:9d:c0:3f:c8:c7:43:ee:bb: 8b:8e:da:11:4b:39:8f:9e:58:b1:e2:ae:8a:17:40: 03:71:b4:06:c7:f3:97:49:f4:d8:da:19:7d:7f:8f: 71:d5:99:90:ac:7e:32:ed:ce:25:2e:de:46:8f:7c: 6d:12:93:5d:8b:b7:f7:ec:54:e2:87:c5:b1:58:b8: 06:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:45:0F:D0:69:F7:B9:D7:5C:6D:AE:B6:6B:B8:AA:6F:76:AA:9C:58 X509v3 Authority Key Identifier: keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:43:ef:54:8e:17:08:3c:bb:ff:1d:9b:7f:26:62:d5:91:16: 2f:28:da:0e:53:79:a1:c0:78:08:3f:52:45:5a:ac:af:28:51: fb:82:d3:e9:5e:04:1d:9f:08:6d:65:94:fb:b4:c8:df:32:96: e9:42:13:0e:76:ac:9f:ca:e9:50:c4:03:de:19:b1:e7:d0:e1: e6:8c:53:fa:1b:d7:53:b0:8c:c2:5f:a2:83:1c:3f:e9:aa:7b: f9:22:9a:ff:d2:c1:f4:57:6b:a0:05:8e:48:ea:92:83:be:10: ed:5a:0e:d5:38:67:46:45:da:52:c2:e1:43:76:3c:7d:04:b7: f9:92:37:6d:7a:63:0f:7d:de:ca:79:67:8a:ba:b6:5b:3d:25: fb:53:09:e1:3b:ed:f0:2e:e7:06:b7:ef:1b:ae:13:ba:80:c7: e0:58:1d:19:e3:92:ee:41:48:d1:f5:cd:6a:e5:34:26:6b:e7: bc:5e:87:43:1b:20:50:4b:cb:6a:c9:e0:e7:e3:2b:04:09:0f: 02:bc:f7:01:18:0e:65:80:8a:3a:6b:a1:78:cc:4c:52:f4:a4: bd:a4:08:b8:2e:6a:97:15:e1:a5:0c:95:b5:7b:31:8c:dc:f2: 01:25:f4:51:2b:5c:af:45:14:aa:7a:77:95:00:e3:14:08:0b: e0:4d:21:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdGNDcxMTAvBgNVBAUTKEUzMEE0Q0RERjZDMjY5QUNCQTM5Q0E1OEFBOTU5MkQ4 OTg2NDAxRjQwHhcNMjUxMDI2MTgxNTQ5WhcNMjUxMTAyMTgxNTQ5WjAYMRYwFAYD VQQDEw02OGZlNjU1NS1hODg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2G6mUKRigpAMtU0QT5eJwkAX23+patTe+bII2CJUePm1kgDE4v96sVU0e3R um5RnSrbrsvRg9x4Rsxp5e2a/q5l2npvODry0e3CzHzfSqhRl38rl6bi6dEeW0Uq TdnbQUmtKjjf2dT58of020AVVLRf8Tid8vooghGe9/lpEgq+n83P+Z9XBiBkDlbT g0vK4UJpFJ/vIRkQthd9xFRTgUsssLo50zRN1/Gcns7yL2GmnNKv1h0Wgk1WncA/ yMdD7ruLjtoRSzmPnlix4q6KF0ADcbQGx/OXSfTY2hl9f49x1ZmQrH4y7c4lLt5G j3xtEpNdi7f37FTih8WxWLgGuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFFD9Bp 97nXXG2utmu4qm92qpxYMB8GA1UdIwQYMBaAFOMKTN32wmmsujnKWKqVktiYZAH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0Y0Ny8zMzBBMDA4Q0NF NTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2FheTZPY3BZcXBXUzJKaGtB ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR3cE0zZmJDYWF5Nk9jcFlxcFdTMkpoa0FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0Y0Ny8zMzBBMDA4Q0NFNTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2Fh eTZPY3BZcXBXUzJKaGtBZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZQ+9UjhcIPLv/HZt/JmLVkRYvKNoOU3mhwHgIP1JFWqyvKFH7gtPp XgQdnwhtZZT7tMjfMpbpQhMOdqyfyulQxAPeGbHn0OHmjFP6G9dTsIzCX6KDHD/p qnv5Ipr/0sH0V2ugBY5I6pKDvhDtWg7VOGdGRdpSwuFDdjx9BLf5kjdtemMPfd7K eWeKurZbPSX7UwnhO+3wLucGt+8brhO6gMfgWB0Z45LuQUjR9c1q5TQma+e8XodD GyBQS8tqyeDn4ysECQ8CvPcBGA5lgIo6a6F4zExS9KS9pAi4LmqXFeGlDJW1ezGM 3PIBJfRRK1yvRRSqeneVAOMUCAvgTSFu -----END CERTIFICATE-----Generated at Tue Oct 28 18:10:54 2025 by rpki-client