$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft File: 4vB0KtgKnbsodRhO4N1elN11eEs.mft (raw, json) Hash identifier: iKwIpmkoIURTfq2NE+EiX8Gxfj5rPQ2jZ6RoU9NK7LA= Subject key identifier: 1C:86:7C:92:8B:C0:3E:09:F5:E8:64:B0:D8:EA:CD:14:0F:C0:11:8A Authority key identifier: E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B Certificate issuer: /CN=A91C23FE/serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Certificate serial: 1C31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft Manifest number: 1C26 Signing time: Sun 02 Nov 2025 16:13:39 +0000 Manifest this update: Sun 02 Nov 2025 16:13:38 +0000 Manifest next update: Sun 09 Nov 2025 16:13:38 +0000 Files and hashes: 1: 4vB0KtgKnbsodRhO4N1elN11eEs.crl (hash: jk/tAS9AHkw8FtPiQvSqqtUiy6xsiEZweTCnU21LRKo=) 2: A88F22ECCC7011ED931BD15FC4F9AE02.roa (hash: aaU8k3sERlfvKSQaecOupsx6VnfFfPN20mE41wQjI/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7217 (0x1c31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23FE, serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Validity Not Before: Nov 2 16:13:38 2025 GMT Not After : Nov 9 16:13:38 2025 GMT Subject: CN=69078333-e32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:38:d9:66:2a:21:5d:5d:da:b6:56:a7:4e:35: 49:5d:b4:a5:09:20:b1:f5:fb:ae:f2:cd:c5:08:34: ca:c5:07:94:65:c8:90:b2:51:9c:78:c2:e7:fb:bf: f6:b2:dc:b7:ea:9b:3d:f6:7a:9b:82:06:78:14:47: b9:ff:2a:06:c9:98:68:b4:3e:bc:0a:2f:a4:01:b2: 69:5b:fc:f4:35:e8:80:fe:cb:b7:93:c6:54:d9:2b: 45:57:d6:23:70:b6:bf:48:07:07:6b:7d:ff:26:c7: 7d:48:2b:df:93:dd:37:7d:02:87:de:9e:8a:cc:e0: fe:fc:6a:18:45:ff:9e:d5:ac:29:45:dc:33:3b:c9: 54:aa:ad:85:5c:83:67:62:09:a2:b6:81:95:6b:01: b2:8f:56:c5:0d:f8:0b:27:4b:38:01:0d:3c:0b:0a: 41:0f:a3:16:9b:a6:a4:bc:8e:48:4c:ad:bc:1c:b8: c8:41:ee:39:29:ac:35:f7:51:49:1d:cd:18:41:b0: 48:00:45:6e:c0:87:db:5a:61:37:ba:39:21:47:d8: 92:ec:55:f2:a4:32:2c:02:fc:ca:bb:f8:44:7a:87: e7:dd:c4:e4:17:98:83:77:3f:be:a0:31:21:79:d1: 3d:dd:ff:ee:a0:70:cb:bc:af:e6:d9:7f:89:dc:3e: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:86:7C:92:8B:C0:3E:09:F5:E8:64:B0:D8:EA:CD:14:0F:C0:11:8A X509v3 Authority Key Identifier: keyid:E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:1d:6d:3c:9a:80:d0:82:9a:41:df:10:a2:9e:b2:68:55:1d: c0:ef:66:48:0a:e7:b3:d6:46:e0:c8:8f:f7:8d:9a:28:1c:47: b7:e7:cf:cb:01:d2:25:a6:73:02:5b:c7:79:ac:4c:23:aa:82: 91:3a:ea:3e:78:a9:96:50:c9:c9:e1:6c:28:48:e9:dd:4d:b6: d1:13:1b:00:7e:94:e9:4c:e2:84:93:05:1b:31:ea:d4:3d:d9: 19:22:88:68:88:28:b4:d8:d1:26:b1:82:ae:73:9b:f3:17:70: 75:ac:50:13:0f:b8:cc:f2:78:ac:82:db:ea:cb:1d:0d:d9:c0: 09:4a:32:d1:9c:8e:80:34:3e:d3:03:92:a6:f1:ff:68:05:f9: 67:87:52:08:16:27:39:77:6e:c4:cd:4d:04:72:2d:ee:08:f3: b6:1f:34:ad:48:12:99:56:89:d5:b0:87:8a:de:60:53:f6:b8: a4:27:d1:00:93:5d:69:44:ad:35:39:51:95:ac:b7:27:cc:06: e5:b3:76:e1:32:c4:b0:75:88:ca:8a:fb:c4:25:3c:d4:9c:48: 13:9b:4e:d1:eb:73:d3:67:a0:62:e3:40:db:61:40:c0:e4:b8: 81:ec:96:22:f4:52:6a:bd:ec:76:a0:b7:89:31:a9:4e:57:31: d7:00:63:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzRkUxMTAvBgNVBAUTKEUyRjA3NDJBRDgwQTlEQkIyODc1MTg0RUUwREQ1RTk0 REQ3NTc4NEIwHhcNMjUxMTAyMTYxMzM4WhcNMjUxMTA5MTYxMzM4WjAYMRYwFAYD VQQDEw02OTA3ODMzMy1lMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTjZZiohXV3atlanTjVJXbSlCSCx9fuu8s3FCDTKxQeUZciQslGceMLn+7/2 sty36ps99nqbggZ4FEe5/yoGyZhotD68Ci+kAbJpW/z0NeiA/su3k8ZU2StFV9Yj cLa/SAcHa33/Jsd9SCvfk903fQKH3p6KzOD+/GoYRf+e1awpRdwzO8lUqq2FXINn YgmitoGVawGyj1bFDfgLJ0s4AQ08CwpBD6MWm6akvI5ITK28HLjIQe45Kaw191FJ Hc0YQbBIAEVuwIfbWmE3ujkhR9iS7FXypDIsAvzKu/hEeofn3cTkF5iDdz++oDEh edE93f/uoHDLvK/m2X+J3D4e1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByGfJKL wD4J9ehksNjqzRQPwBGKMB8GA1UdIwQYMBaAFOLwdCrYCp27KHUYTuDdXpTddXhL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNGRS84MjVDRTlBQUY5 RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25ic29kUmhPNE4xZWxOMTFl RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR2QjBLdGdLbmJzb2RSaE80TjFlbE4xMWVFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNGRS84MjVDRTlBQUY5RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25i c29kUmhPNE4xZWxOMTFlRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcHW08moDQgppB3xCinrJoVR3A72ZICuez1kbgyI/3jZooHEe358/L AdIlpnMCW8d5rEwjqoKROuo+eKmWUMnJ4WwoSOndTbbRExsAfpTpTOKEkwUbMerU PdkZIohoiCi02NEmsYKuc5vzF3B1rFATD7jM8nisgtvqyx0N2cAJSjLRnI6AND7T A5Km8f9oBflnh1IIFic5d27EzU0Eci3uCPO2HzStSBKZVonVsIeK3mBT9rikJ9EA k11pRK01OVGVrLcnzAbls3bhMsSwdYjKivvEJTzUnEgTm07R63PTZ6Bi40DbYUDA 5LiB7JYi9FJqvex2oLeJMalOVzHXAGMR -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:08 2025 by rpki-client