$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft File: H4-gq_qNf39-fqANVuoBxwky5gc.mft (raw, json) Hash identifier: Yyp6+S0md7EGGTVezm52f8XKG1jxwyvJdbvaMw/nSUc= Subject key identifier: 92:9E:D9:A6:B1:34:35:65:3E:ED:15:F6:E0:09:64:7F:BF:00:66:80 Authority key identifier: 1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 Certificate issuer: /CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Certificate serial: 0EF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft Manifest number: 1077 Signing time: Tue 04 Nov 2025 17:43:44 +0000 Manifest this update: Tue 04 Nov 2025 17:43:44 +0000 Manifest next update: Tue 11 Nov 2025 17:43:44 +0000 Files and hashes: 1: H4-gq_qNf39-fqANVuoBxwky5gc.crl (hash: FfOkrWcpWVhM5kfT+SkZxwUDyCWe9AtF/YvIJIij/vk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3828 (0xef4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Validity Not Before: Nov 4 17:43:44 2025 GMT Not After : Nov 11 17:43:44 2025 GMT Subject: CN=690a3b50-669e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:5d:87:c4:73:42:ed:ef:cd:64:0b:6e:46: af:97:8f:31:20:1a:45:b1:b3:cb:64:96:3f:d4:05: 82:42:f0:7b:84:71:87:83:8f:b2:6b:b8:ea:8b:f9: e4:61:92:b2:0f:b2:cf:ff:95:0e:b8:e7:e7:01:58: b1:85:8e:76:8f:77:c6:5b:6e:0d:ce:62:50:03:20: f9:47:33:5f:51:06:b4:6f:93:65:e9:89:7b:89:a1: 05:3e:c1:d2:58:bf:fd:00:8f:ec:a9:57:03:c8:86: 43:0e:21:14:8c:d3:a3:ee:6b:2c:f9:bf:96:d1:de: 28:23:43:fe:0a:c6:be:01:72:2b:ab:2b:be:9f:24: 2a:fb:74:9d:69:35:e6:b3:e6:54:43:df:2c:6f:5e: d4:fd:72:51:b5:b3:12:34:02:22:f7:9b:5b:22:6d: 5e:0a:00:de:e8:64:dc:bb:b6:c2:25:62:54:5f:8a: 6d:73:f4:88:96:b6:80:78:6e:29:95:a7:dc:4e:0b: b9:5d:7b:2a:37:4c:76:1e:a8:b5:a4:9c:51:1f:ff: 6b:99:1f:86:9b:7e:a9:9d:2b:d1:4d:2e:3b:ac:53: c1:8a:c9:9f:65:79:dd:16:03:2b:9b:75:a6:c3:a7: aa:8b:39:21:3a:7f:2e:80:25:b5:81:bc:a2:a9:7d: b8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9E:D9:A6:B1:34:35:65:3E:ED:15:F6:E0:09:64:7F:BF:00:66:80 X509v3 Authority Key Identifier: keyid:1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:46:94:72:d9:b6:1e:2f:2a:11:d8:61:40:a2:68:fc:36:1c: d1:16:82:86:0a:a2:90:13:5a:b9:0d:9a:97:fb:a6:ae:fb:4c: d0:29:2c:c0:e2:94:f2:19:4c:e5:92:9d:cc:16:8c:dc:2d:db: 5a:bb:3b:a6:c9:af:86:d6:13:03:ba:70:d1:e6:1d:1c:68:e2: cd:bb:44:70:e6:88:c3:b5:af:ee:9e:d4:81:ea:1b:a1:30:2c: c8:2c:01:ef:b9:13:84:12:8b:53:2c:e1:2b:9f:02:f4:84:0c: 88:16:1b:8f:69:22:53:8a:94:98:79:f5:8c:1a:26:72:43:de: 7a:a7:91:2c:59:ae:93:df:4b:42:2e:63:49:97:17:88:b9:29: 83:e1:52:cc:90:2d:aa:fe:3f:f6:69:48:30:62:af:7f:cd:02: 22:1f:67:e6:6e:77:84:80:3c:0a:41:21:79:d9:b2:77:77:1e: fa:a1:51:a0:a4:4c:0c:fe:8e:1e:30:18:91:f7:09:ad:d0:e9: 01:f7:4b:c5:54:b8:67:8c:51:63:a8:e9:a9:c8:63:5b:70:af: 73:03:5d:d6:20:95:46:ec:35:0d:b6:5f:b6:8f:b6:ac:bb:8d: f3:39:35:1f:70:97:38:b0:51:4e:2d:a6:d0:db:f6:c5:ff:46: d2:da:6e:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKDFGOEZBMEFCRkE4RDdGN0Y3RTdFQTAwRDU2RUEwMUM3 MDkzMkU2MDcwHhcNMjUxMTA0MTc0MzQ0WhcNMjUxMTExMTc0MzQ0WjAYMRYwFAYD VQQDEw02OTBhM2I1MC02NjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJxdh8RzQu3vzWQLbkavl48xIBpFsbPLZJY/1AWCQvB7hHGHg4+ya7jqi/nk YZKyD7LP/5UOuOfnAVixhY52j3fGW24NzmJQAyD5RzNfUQa0b5Nl6Yl7iaEFPsHS WL/9AI/sqVcDyIZDDiEUjNOj7mss+b+W0d4oI0P+Csa+AXIrqyu+nyQq+3SdaTXm s+ZUQ98sb17U/XJRtbMSNAIi95tbIm1eCgDe6GTcu7bCJWJUX4ptc/SIlraAeG4p lafcTgu5XXsqN0x2Hqi1pJxRH/9rmR+Gm36pnSvRTS47rFPBismfZXndFgMrm3Wm w6eqizkhOn8ugCW1gbyiqX24YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKe2aax NDVlPu0V9uAJZH+/AGaAMB8GA1UdIwQYMBaAFB+PoKv6jX9/fn6gDVbqAccJMuYH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYzOS1mcUFOVnVvQnh3a3k1 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g0LWdxX3FOZjM5LWZxQU5WdW9CeHdreTVnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYz OS1mcUFOVnVvQnh3a3k1Z2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLRpRy2bYeLyoR2GFAomj8NhzRFoKGCqKQE1q5DZqX+6au+0zQKSzA 4pTyGUzlkp3MFozcLdtauzumya+G1hMDunDR5h0caOLNu0Rw5ojDta/untSB6huh MCzILAHvuROEEotTLOErnwL0hAyIFhuPaSJTipSYefWMGiZyQ956p5EsWa6T30tC LmNJlxeIuSmD4VLMkC2q/j/2aUgwYq9/zQIiH2fmbneEgDwKQSF52bJ3dx76oVGg pEwM/o4eMBiR9wmt0OkB90vFVLhnjFFjqOmpyGNbcK9zA13WIJVG7DUNtl+2j7as u43zOTUfcJc4sFFOLabQ2/bF/0bS2m4c -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:19 2025 by rpki-client