$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft File: ck4fZGxFGwGeHNo21DRq25tf2_g.mft (raw, json) Hash identifier: /0zfd40NwyS4d3N4UrK+GxpRICPe7XDIUDGpnMlF8HI= Subject key identifier: 10:2D:16:8A:20:62:A8:6E:45:26:72:1D:AA:46:5A:87:04:50:72:F5 Authority key identifier: 72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8 Certificate issuer: /CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft Manifest number: 0247 Signing time: Mon 03 Nov 2025 01:42:19 +0000 Manifest this update: Mon 03 Nov 2025 01:42:19 +0000 Manifest next update: Mon 10 Nov 2025 01:42:19 +0000 Files and hashes: 1: ck4fZGxFGwGeHNo21DRq25tf2_g.crl (hash: y+fjFoyfBrA8vxx8dziRFzxzreXOFaAs/qbpTM4A0lM=) 2: A6789038400211ED808CCF0DC4F9AE02.roa (hash: tO/Vg+1jM6TnaROUPSYxvRElxqw/2z5ZN8ZDcSK7tnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E38, serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8 Validity Not Before: Nov 3 01:42:19 2025 GMT Not After : Nov 10 01:42:19 2025 GMT Subject: CN=6908087b-2a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c2:79:26:58:72:4c:de:4a:74:fa:e8:d0:65: b1:95:0d:be:0f:a8:25:19:b3:96:8e:6a:68:15:47: c9:83:11:81:7e:49:2b:50:9c:69:bb:ea:90:4b:71: 1f:2f:25:bc:91:5f:f3:ca:8c:bc:8c:43:ef:35:0b: 4e:09:e2:a5:d4:b2:47:9b:4f:cb:88:7b:69:3d:46: e5:4b:49:de:d5:9b:de:de:25:8d:b2:9c:53:ac:33: 5d:69:33:bf:50:3c:8c:53:78:aa:6e:32:b0:94:69: 89:ae:c6:20:46:e8:42:8f:ce:ca:81:f9:54:36:1a: 4e:5a:74:76:22:7d:26:df:12:55:40:1d:4e:e4:b6: 98:de:d9:f8:f3:c8:cc:74:5d:cb:a9:f9:02:d4:91: 2c:71:f7:4c:a8:96:25:93:c8:36:07:5b:70:b0:f5: 07:b9:ba:04:16:be:04:86:b6:00:16:47:21:9d:72: 3c:69:2c:d6:7a:35:b3:71:05:c3:b0:f9:1e:26:cc: 5c:f4:37:53:76:27:26:82:6a:0e:8d:41:d4:c9:e3: 36:a8:5f:e9:86:17:c9:e4:7a:b0:6b:4c:99:0a:1f: 57:d0:06:17:02:c6:22:3d:14:85:d9:bb:2c:54:4c: 14:ec:d6:a2:bb:91:12:a1:07:5b:93:32:88:67:6b: 77:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2D:16:8A:20:62:A8:6E:45:26:72:1D:AA:46:5A:87:04:50:72:F5 X509v3 Authority Key Identifier: keyid:72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:8c:d8:87:39:f1:3e:9b:73:78:0f:b7:a9:66:be:16:16:4c: 80:55:3b:ad:c6:bf:30:a7:03:22:92:4c:d0:2f:6b:67:4b:bb: 04:5a:c2:7a:1a:b2:aa:a9:e0:1a:95:f8:65:68:ec:c7:85:2b: d8:1a:49:0d:7e:5a:a7:51:e2:07:07:29:8b:e4:fa:f6:2b:12: 67:ca:9d:5b:98:39:b4:66:39:7b:1d:b1:4e:30:d8:9a:52:a8: 82:ba:a0:21:c1:85:8e:3c:f0:5c:36:7b:27:4b:83:c9:2f:6f: 4b:63:e6:f5:41:83:d8:86:1f:e1:48:98:35:91:fe:c7:1d:23: 8e:2f:33:dc:7d:34:af:ec:ff:0e:04:db:71:19:7d:d2:82:12: df:5f:04:a8:6b:79:40:36:08:e1:1a:65:88:33:90:83:a8:52: 42:3e:9e:d6:0a:35:c0:91:d2:27:3d:7d:73:6f:ad:49:bf:79: bc:d9:4d:47:50:47:7e:dd:4f:81:98:d0:36:ae:97:27:cf:cb: fb:b3:76:fe:32:40:94:cd:41:d6:b1:5f:26:d6:42:10:93:2a: 11:57:29:77:a5:30:5c:d6:9b:0e:4e:64:00:2b:15:3e:d5:f6: 99:d0:26:5a:76:2a:68:52:ef:05:47:c1:f4:0d:b1:94:78:2a: 50:ec:45:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFMzgxMTAvBgNVBAUTKDcyNEUxRjY0NkM0NTFCMDE5RTFDREEzNkQ0MzQ2QURC OUI1RkRCRjgwHhcNMjUxMTAzMDE0MjE5WhcNMjUxMTEwMDE0MjE5WjAYMRYwFAYD VQQDEw02OTA4MDg3Yi0yYTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcJ5JlhyTN5KdPro0GWxlQ2+D6glGbOWjmpoFUfJgxGBfkkrUJxpu+qQS3Ef LyW8kV/zyoy8jEPvNQtOCeKl1LJHm0/LiHtpPUblS0ne1Zve3iWNspxTrDNdaTO/ UDyMU3iqbjKwlGmJrsYgRuhCj87KgflUNhpOWnR2In0m3xJVQB1O5LaY3tn488jM dF3LqfkC1JEscfdMqJYlk8g2B1twsPUHuboEFr4EhrYAFkchnXI8aSzWejWzcQXD sPkeJsxc9DdTdicmgmoOjUHUyeM2qF/phhfJ5Hqwa0yZCh9X0AYXAsYiPRSF2bss VEwU7Naiu5ESoQdbkzKIZ2t3OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAtFoog YqhuRSZyHapGWocEUHL1MB8GA1UdIwQYMBaAFHJOH2RsRRsBnhzaNtQ0atubX9v4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEUzOC81MUYwREIzQzNG RkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3R2VITm8yMURScTI1dGYy X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrNGZaR3hGR3dHZUhObzIxRFJxMjV0ZjJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEUzOC81MUYwREIzQzNGRkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3 R2VITm8yMURScTI1dGYyX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEjNiHOfE+m3N4D7epZr4WFkyAVTutxr8wpwMikkzQL2tnS7sEWsJ6 GrKqqeAalfhlaOzHhSvYGkkNflqnUeIHBymL5Pr2KxJnyp1bmDm0Zjl7HbFOMNia UqiCuqAhwYWOPPBcNnsnS4PJL29LY+b1QYPYhh/hSJg1kf7HHSOOLzPcfTSv7P8O BNtxGX3SghLfXwSoa3lANgjhGmWIM5CDqFJCPp7WCjXAkdInPX1zb61Jv3m82U1H UEd+3U+BmNA2rpcnz8v7s3b+MkCUzUHWsV8m1kIQkyoRVyl3pTBc1psOTmQAKxU+ 1faZ0CZadipoUu8FR8H0DbGUeCpQ7EU5 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:15 2025 by rpki-client