$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft File: 4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json) Hash identifier: R4qZKipxrTo7NYWYW+f7LuIR77KR0f4f24eAwNjpyQU= Subject key identifier: 43:18:3B:3B:D5:B4:35:C0:B6:D7:A9:3B:3E:28:C7:E9:17:E7:A0:BC Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 Certificate issuer: /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft Manifest number: 0215 Signing time: Thu 23 Oct 2025 03:42:23 +0000 Manifest this update: Thu 23 Oct 2025 03:42:23 +0000 Manifest next update: Thu 30 Oct 2025 03:42:23 +0000 Files and hashes: 1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: GQozyUNNTvYxcN2F0Yfs/gYbIbkf0jbP4kxv/LL2Z5g=) 2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: Hy6T8zhOl3f+SHukkt0PutGPxcTAN5g9mi9bO48HFgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7F6A, serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Validity Not Before: Oct 23 03:42:23 2025 GMT Not After : Oct 30 03:42:23 2025 GMT Subject: CN=68f9a41f-82dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ea:60:1a:62:ec:e6:ba:60:78:4e:1e:2c:34: 3d:d0:bf:8c:3e:92:ec:b3:94:12:59:b4:d1:90:2e: ee:4f:19:cc:d1:eb:e7:45:62:d6:24:13:4a:ce:b8: be:bc:33:c6:44:c1:38:67:c6:56:de:4b:ac:c3:f4: f2:55:72:1b:6e:07:38:98:8a:44:52:cb:e4:fe:ba: 49:45:0a:81:68:1d:66:43:b0:99:53:7e:e0:d0:ba: db:ad:cb:cf:d4:a4:78:45:61:44:40:c2:fe:9f:b9: 9e:3d:c2:d0:4d:d3:9b:ad:81:6d:c4:ce:a2:29:71: f0:d5:24:9d:b4:0d:e2:3c:90:8f:fc:f1:f5:4d:a7: 44:07:6e:9e:01:e4:91:58:cc:4f:db:1a:8b:14:51: a5:5f:79:67:fc:79:98:a1:88:a3:a7:c0:5f:d5:9e: 11:b8:5a:76:4e:dc:4b:37:ef:cc:97:2e:50:55:69: 2e:3d:34:f1:e7:a9:ac:c3:e3:23:83:6f:52:06:3e: c3:94:5c:ee:62:35:ec:a0:37:af:4c:e3:64:d2:9c: 66:49:a3:38:75:86:b1:c6:72:f5:a6:41:96:83:99: 3c:3d:7e:38:83:24:cd:3c:d8:83:82:ab:7c:66:e6: 13:87:99:59:a6:89:8a:b7:8a:fa:23:1d:04:11:36: f6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:18:3B:3B:D5:B4:35:C0:B6:D7:A9:3B:3E:28:C7:E9:17:E7:A0:BC X509v3 Authority Key Identifier: keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ac:bf:0a:d6:58:4d:cf:a0:41:b6:5c:85:8f:cb:13:5b:5c: 22:01:12:88:5a:e0:b8:5c:8e:37:ee:80:42:c0:7e:63:9b:19: 31:f0:85:a5:73:6a:6e:4d:7e:f9:60:3a:dc:d9:4b:f8:5b:96: 33:0a:43:4d:8d:22:1a:89:64:57:99:b2:d0:47:17:8e:4e:1d: 54:2a:ea:6d:59:c5:70:f6:93:d5:04:2b:75:30:bf:f3:c6:2d: 1e:84:73:c1:27:9e:55:3f:72:9a:d4:ae:95:a2:1a:9b:ef:41: 84:17:f9:a7:06:21:b3:c5:38:9c:82:d3:9d:1b:63:97:f4:92: f5:74:b3:74:48:cf:a2:2b:6e:93:94:8e:7e:39:a8:1e:ea:56: e7:94:ac:ef:24:3b:c9:56:5c:a9:b4:0f:7f:60:95:56:89:c2: 6f:c6:13:78:7e:13:85:72:f0:a1:6f:d2:c8:06:05:a0:d5:38: 66:11:62:d1:f7:f3:f4:34:35:5b:be:17:c9:cb:04:4e:9f:a0: 93:58:04:f4:f7:9c:4a:57:8b:eb:e3:5e:99:e9:b8:9e:af:34: 6d:11:af:7a:7c:4a:cc:f3:9b:90:79:9e:c8:25:e8:fe:04:19: 41:35:f0:e9:75:f4:2f:31:3c:1f:72:50:9c:57:ea:e1:4a:d9: 83:46:88:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdGNkExMTAvBgNVBAUTKEUzM0RCNzkzQkJFRkU0NkNCQ0Y3NURCMzRFNzA5NDI3 QTcyRUYwRjMwHhcNMjUxMDIzMDM0MjIzWhcNMjUxMDMwMDM0MjIzWjAYMRYwFAYD VQQDEw02OGY5YTQxZi04MmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+pgGmLs5rpgeE4eLDQ90L+MPpLss5QSWbTRkC7uTxnM0evnRWLWJBNKzri+ vDPGRME4Z8ZW3kusw/TyVXIbbgc4mIpEUsvk/rpJRQqBaB1mQ7CZU37g0LrbrcvP 1KR4RWFEQML+n7mePcLQTdObrYFtxM6iKXHw1SSdtA3iPJCP/PH1TadEB26eAeSR WMxP2xqLFFGlX3ln/HmYoYijp8Bf1Z4RuFp2TtxLN+/Mly5QVWkuPTTx56msw+Mj g29SBj7DlFzuYjXsoDevTONk0pxmSaM4dYaxxnL1pkGWg5k8PX44gyTNPNiDgqt8 ZuYTh5lZpomKt4r6Ix0EETb2vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMYOzvV tDXAttepOz4ox+kX56C8MB8GA1UdIwQYMBaAFOM9t5O77+RsvPdds05wlCenLvDz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0Y2QS8wNjc5MjUwMDdG NDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVHeTg5MTJ6VG5DVUo2Y3U4 UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzR6MjNrN3Z2NUd5ODkxMnpUbkNVSjZjdThQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0Y2QS8wNjc5MjUwMDdGNDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVH eTg5MTJ6VG5DVUo2Y3U4UE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjrL8K1lhNz6BBtlyFj8sTW1wiARKIWuC4XI437oBCwH5jmxkx8IWl c2puTX75YDrc2Uv4W5YzCkNNjSIaiWRXmbLQRxeOTh1UKuptWcVw9pPVBCt1ML/z xi0ehHPBJ55VP3Ka1K6Vohqb70GEF/mnBiGzxTicgtOdG2OX9JL1dLN0SM+iK26T lI5+Oage6lbnlKzvJDvJVlyptA9/YJVWicJvxhN4fhOFcvChb9LIBgWg1ThmEWLR 9/P0NDVbvhfJywROn6CTWAT095xKV4vr416Z6bierzRtEa96fErM85uQeZ7IJej+ BBlBNfDpdfQvMTwfclCcV+rhStmDRojE -----END CERTIFICATE-----Generated at Thu Oct 23 20:01:29 2025 by rpki-client