$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft File: 4uYwZnXV9U0ge2eCqWx6qWex_JE.mft (raw, json) Hash identifier: 2gjNqk7YkcT85cN/Mpjm8P8qU/+dScdcHkvO4xlYZbo= Subject key identifier: 7E:37:9D:32:76:FB:77:9C:3C:F9:14:3C:BE:66:37:DA:3E:7A:8E:2B Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 Certificate issuer: /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft Manifest number: B1 Signing time: Wed 05 Nov 2025 06:22:25 +0000 Manifest this update: Wed 05 Nov 2025 06:22:25 +0000 Manifest next update: Wed 12 Nov 2025 06:22:25 +0000 Files and hashes: 1: 4uYwZnXV9U0ge2eCqWx6qWex_JE.crl (hash: zymeZyiYwHoZN4EM35R60J3ZPB0f7x23rFxzAA0rO/k=) 2: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (hash: +DamE3tU9Fo7eBYdyyuSzK/6/nm5KtgHW7yUMIG6MHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Validity Not Before: Nov 5 06:22:25 2025 GMT Not After : Nov 12 06:22:25 2025 GMT Subject: CN=690aed21-0d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9d:ef:ad:64:82:72:10:11:cf:b9:e3:40:79: e0:0b:9e:8e:ff:5a:47:0e:3a:a7:ec:fc:05:10:89: d4:56:76:ed:d9:36:c8:f5:e8:3b:9e:ff:ed:7a:54: df:7a:54:37:c4:f8:dd:36:88:93:ad:4a:9c:fc:35: 38:ac:f8:d1:5f:fc:2f:75:29:6e:da:64:58:9c:95: 44:ac:5f:3b:3d:9f:02:6e:5e:72:6e:71:20:03:0f: 06:1a:70:50:d4:75:d6:49:9c:5e:56:81:b6:9a:8a: 61:87:06:38:c9:bc:95:e2:3c:c9:b0:7f:ea:34:d6: 46:b3:68:dc:bd:56:be:1d:c9:4a:7e:30:be:52:a5: 41:55:a7:14:e1:71:9e:a6:33:cf:98:b5:9f:77:16: 79:85:6d:c6:62:b3:95:b2:78:9b:84:50:d0:d3:a6: b6:0a:a4:3c:21:e9:ef:a8:2d:9b:2a:86:e6:c2:fa: e6:58:a6:f0:7a:73:aa:1d:34:54:f0:77:6e:95:2a: 51:cd:16:1f:b7:91:2c:e6:c8:e9:cb:9d:0f:4f:8d: 26:77:5c:79:28:2a:4e:d7:f9:b4:5b:1c:46:ba:66: 34:74:16:a4:bf:87:58:24:81:05:53:9b:00:c3:a7: 21:c0:3c:78:63:81:27:58:8e:49:88:b1:a9:cc:ff: 56:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:37:9D:32:76:FB:77:9C:3C:F9:14:3C:BE:66:37:DA:3E:7A:8E:2B X509v3 Authority Key Identifier: keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:88:bd:19:b9:c6:c0:71:2a:3d:89:0f:c4:f3:27:fa:42:57: 84:44:40:47:43:56:cc:f6:13:c2:ce:bd:97:b2:73:b1:68:21: 8e:e2:9e:50:be:ea:aa:35:30:46:44:1d:02:11:c3:63:0f:6c: d6:63:f3:bd:d0:1c:ea:99:a4:a0:ea:a8:d1:6e:03:3a:c3:c3: b1:d8:90:d6:94:c2:b5:84:b0:b9:3b:74:74:c2:bb:46:59:66: 05:06:06:10:aa:00:97:85:94:5e:63:ae:80:99:81:28:74:2c: cc:ba:ad:b8:dd:e6:4c:42:c1:8e:56:32:0c:d6:78:8f:a1:75: 7a:0d:83:b7:c1:d0:1d:33:56:9d:e5:52:cc:74:60:44:79:79: d9:6b:14:09:fe:ef:d4:8c:a7:32:e3:c8:52:9d:3b:13:c7:8a: de:13:78:e2:ce:81:e8:b2:3c:d3:85:e1:ed:ab:f8:8d:0d:13: 42:f2:75:18:17:56:32:6b:f0:b5:ca:6b:35:5a:0c:c6:07:6b: 3c:26:b1:42:e5:a9:d1:54:6c:9d:30:a6:de:ac:52:bf:d7:d7: 31:d4:f4:fc:80:69:e1:5b:aa:26:fd:9c:12:eb:aa:7c:f6:2d: 1e:53:4e:97:58:29:2a:be:5d:17:69:02:cb:fe:d6:d3:66:24: b1:a7:6a:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBQzgxMTAvBgNVBAUTKEUyRTYzMDY2NzVENUY1NEQyMDdCNjc4MkE5NkM3QUE5 NjdCMUZDOTEwHhcNMjUxMTA1MDYyMjI1WhcNMjUxMTEyMDYyMjI1WjAYMRYwFAYD VQQDEw02OTBhZWQyMS0wZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJ3vrWSCchARz7njQHngC56O/1pHDjqn7PwFEInUVnbt2TbI9eg7nv/telTf elQ3xPjdNoiTrUqc/DU4rPjRX/wvdSlu2mRYnJVErF87PZ8Cbl5ybnEgAw8GGnBQ 1HXWSZxeVoG2mophhwY4ybyV4jzJsH/qNNZGs2jcvVa+HclKfjC+UqVBVacU4XGe pjPPmLWfdxZ5hW3GYrOVsnibhFDQ06a2CqQ8IenvqC2bKobmwvrmWKbwenOqHTRU 8HdulSpRzRYft5Es5sjpy50PT40md1x5KCpO1/m0WxxGumY0dBakv4dYJIEFU5sA w6chwDx4Y4EnWI5JiLGpzP9WJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH43nTJ2 +3ecPPkUPL5mN9o+eo4rMB8GA1UdIwQYMBaAFOLmMGZ11fVNIHtngqlseqlnsfyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEFDOC9FOUJFMDVEQ0Ix M0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi80dVl3Wm5YVjlVMGdlMmVDcVd4NnFXZXhf SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1WXdablhWOVUwZ2UyZUNxV3g2cVdleF9KRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEFDOC9FOUJFMDVEQ0IxM0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi80dVl3Wm5YVjlV MGdlMmVDcVd4NnFXZXhfSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqiL0ZucbAcSo9iQ/E8yf6QleEREBHQ1bM9hPCzr2XsnOxaCGO4p5Q vuqqNTBGRB0CEcNjD2zWY/O90BzqmaSg6qjRbgM6w8Ox2JDWlMK1hLC5O3R0wrtG WWYFBgYQqgCXhZReY66AmYEodCzMuq243eZMQsGOVjIM1niPoXV6DYO3wdAdM1ad 5VLMdGBEeXnZaxQJ/u/UjKcy48hSnTsTx4reE3jizoHosjzTheHtq/iNDRNC8nUY F1Yya/C1yms1WgzGB2s8JrFC5anRVGydMKberFK/19cx1PT8gGnhW6om/ZwS66p8 9i0eU06XWCkqvl0XaQLL/tbTZiSxp2q6 -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:36 2025 by rpki-client