$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft File: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft (raw, json) Hash identifier: f7N+khPrDHujrbsqQuJ8s4YRO31222VvnJWiaN9YPnE= Subject key identifier: 81:81:4C:3A:6E:DD:56:F2:51:DE:56:63:1F:DE:26:0D:EC:06:D0:29 Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 Certificate issuer: /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Certificate serial: 03C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft Manifest number: 03C5 Signing time: Wed 05 Nov 2025 00:43:59 +0000 Manifest this update: Wed 05 Nov 2025 00:43:58 +0000 Manifest next update: Wed 12 Nov 2025 00:43:58 +0000 Files and hashes: 1: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl (hash: WVIrs51/KHc2hDFTuWg0DWX3WCrjs7ibfrVb9tbVlbg=) 2: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (hash: +7SXGk64WdhbzbBHPQcKc3z8KwO03i6JIK3eFusKvxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 969 (0x3c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE1C, serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Validity Not Before: Nov 5 00:43:58 2025 GMT Not After : Nov 12 00:43:58 2025 GMT Subject: CN=690a9dcf-34e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:21:6c:98:ee:51:46:d1:39:0e:a0:32:11:7a: a3:7c:ac:cd:b5:af:9a:ca:c8:81:40:78:f5:e9:b5: a4:89:cc:9f:3d:6a:67:74:c9:41:6e:11:47:3d:25: 76:53:a5:98:d4:8e:b4:7c:ed:55:43:e8:15:f4:18: 5d:9b:6f:a1:a8:9a:21:9f:f6:18:1c:5e:18:4d:dd: 72:34:9c:95:88:a2:97:84:d8:6a:44:16:9a:9b:6c: 06:29:d3:00:d0:32:4c:b3:59:92:b7:ca:f3:35:92: 43:aa:67:c2:2a:86:8c:1b:cd:50:34:d5:c9:b2:24: 88:29:23:69:50:04:0a:38:c0:72:0c:14:6a:f6:67: e0:f3:90:48:f9:af:8d:cc:83:39:40:dd:a1:33:16: 27:f5:35:95:09:81:97:78:1c:8a:f3:59:7f:3d:31: e1:36:a3:89:ce:02:85:1d:8e:b2:75:93:8b:8a:a2: 63:87:00:26:ea:aa:fe:1f:dc:35:f0:99:63:f2:8f: a1:71:7a:f5:e9:39:ca:49:63:d3:54:62:36:91:39: 7a:ed:b5:a4:55:ad:79:92:77:e3:51:d4:23:3b:77: c6:e3:34:33:09:fa:45:ca:92:fb:7b:33:5c:41:ae: 4d:32:f1:69:40:65:08:4c:c2:db:d9:40:35:80:13: ac:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:81:4C:3A:6E:DD:56:F2:51:DE:56:63:1F:DE:26:0D:EC:06:D0:29 X509v3 Authority Key Identifier: keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:a7:ad:62:ea:f2:b4:32:93:a9:64:b3:c0:1b:c2:e2:39:3b: 8c:6e:14:65:8b:c9:c2:31:47:73:66:6d:58:ee:8d:be:42:dd: 72:b8:43:3c:e9:59:c3:27:e6:61:93:67:4e:b4:c3:f0:5f:bd: 2a:e7:f2:3a:fb:59:3a:64:65:80:08:f5:1b:7f:ba:db:a9:4c: a7:ac:84:8a:ef:b0:ca:e4:af:ca:1b:c8:d0:ca:d2:25:9c:0e: f6:b7:df:d1:ba:0a:34:81:02:a3:68:17:0f:5d:1c:36:b1:92: d6:a7:0c:d7:a3:62:77:56:76:81:6c:6b:27:c9:a4:38:b2:e3: eb:28:46:9a:b8:ca:59:f6:18:a3:32:0b:0e:b0:09:fe:6d:05: 6b:40:76:69:fb:fa:e5:c5:22:74:b1:18:61:76:8c:a9:a2:88: 99:35:b8:a3:04:f8:08:7e:dc:a1:b3:1a:25:53:37:ee:0c:37: 34:f5:b9:ce:ee:4e:02:6c:e7:4f:1e:4b:38:f9:d7:90:71:a1: 28:3a:f8:0c:c2:9f:ed:ae:8c:bd:60:89:dd:4c:66:92:cb:ce: 43:66:88:da:83:e1:05:af:a8:55:ba:fb:2d:5a:6d:f1:e6:c6: 64:99:46:17:56:51:03:6c:2c:35:fc:d1:28:41:46:1a:38:ba: 48:f8:96:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMUMxMTAvBgNVBAUTKEUyRTA0M0E5MzJFQ0UwNDM5RTJBOEVGMURDNDA2NEQz MjE0QzI3RTYwHhcNMjUxMTA1MDA0MzU4WhcNMjUxMTEyMDA0MzU4WjAYMRYwFAYD VQQDEw02OTBhOWRjZi0zNGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SFsmO5RRtE5DqAyEXqjfKzNta+aysiBQHj16bWkicyfPWpndMlBbhFHPSV2 U6WY1I60fO1VQ+gV9Bhdm2+hqJohn/YYHF4YTd1yNJyViKKXhNhqRBaam2wGKdMA 0DJMs1mSt8rzNZJDqmfCKoaMG81QNNXJsiSIKSNpUAQKOMByDBRq9mfg85BI+a+N zIM5QN2hMxYn9TWVCYGXeByK81l/PTHhNqOJzgKFHY6ydZOLiqJjhwAm6qr+H9w1 8Jlj8o+hcXr16TnKSWPTVGI2kTl67bWkVa15knfjUdQjO3fG4zQzCfpFypL7ezNc Qa5NMvFpQGUITMLb2UA1gBOszQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGBTDpu 3VbyUd5WYx/eJg3sBtApMB8GA1UdIwQYMBaAFOLgQ6ky7OBDniqO8dxAZNMhTCfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxQy9GMDc0NzNBRUFB NjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRFT2VLbzd4M0VCazB5Rk1K LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1QkRxVExzNEVPZUtvN3gzRUJrMHlGTUotWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUxQy9GMDc0NzNBRUFBNjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRF T2VLbzd4M0VCazB5Rk1KLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJp61i6vK0MpOpZLPAG8LiOTuMbhRli8nCMUdzZm1Y7o2+Qt1yuEM8 6VnDJ+Zhk2dOtMPwX70q5/I6+1k6ZGWACPUbf7rbqUynrISK77DK5K/KG8jQytIl nA72t9/Rugo0gQKjaBcPXRw2sZLWpwzXo2J3VnaBbGsnyaQ4suPrKEaauMpZ9hij MgsOsAn+bQVrQHZp+/rlxSJ0sRhhdoypooiZNbijBPgIftyhsxolUzfuDDc09bnO 7k4CbOdPHks4+deQcaEoOvgMwp/troy9YIndTGaSy85DZojag+EFr6hVuvstWm3x 5sZkmUYXVlEDbCw1/NEoQUYaOLpI+JbY -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:34 2025 by rpki-client