$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft File: 4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json) Hash identifier: FO/Bsw5iHmFps3XwjTo80X0GtOusfOIlooY+3TtK6Kw= Subject key identifier: 47:9C:14:D6:96:15:14:6C:79:9A:EC:DC:63:6E:49:B9:1C:A0:57:B4 Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 Certificate issuer: /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Certificate serial: 0D40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft Manifest number: 0D34 Signing time: Tue 04 Nov 2025 18:08:12 +0000 Manifest this update: Tue 04 Nov 2025 18:08:11 +0000 Manifest next update: Tue 11 Nov 2025 18:08:11 +0000 Files and hashes: 1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: Q+5drzLHaTcf8+NIxk1BnobCY5Ab2Vh3VdKDoXYBDDU=) 2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: qxCxFSPkCJMsK7i3RHMxc9Lr9Tcp57aZA1WThFY3ZFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3392 (0xd40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC561, serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Validity Not Before: Nov 4 18:08:11 2025 GMT Not After : Nov 11 18:08:11 2025 GMT Subject: CN=690a410b-e65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ae:35:21:83:a8:8e:34:f0:9a:44:d0:ab:62: bd:1a:42:85:66:a7:ab:1e:a2:c9:e4:6d:8b:23:bf: 94:11:51:fc:dd:1b:41:1a:da:b4:34:90:92:b0:01: 09:f5:ee:5b:1f:99:b2:f2:b7:de:15:46:4c:da:38: 4d:a0:d0:25:92:14:1e:7c:29:bb:37:d2:3a:52:5a: 26:b8:1e:24:c3:78:11:a3:a4:bf:87:88:b7:89:bc: bc:23:f9:f1:77:fc:01:3b:f2:ef:79:65:ce:69:29: 39:73:c7:20:8f:94:f6:72:44:75:be:c3:6e:88:60: 08:10:8e:30:f2:5a:ac:60:a9:7f:e7:29:1d:80:c5: a9:50:c3:14:d4:ad:6d:97:6c:5e:ca:57:87:40:dc: 69:9f:7b:d1:84:e2:f1:a2:71:e6:06:e6:6f:b6:69: 40:f3:6a:b0:44:9c:4c:b2:a7:8c:62:60:4f:25:5f: b2:01:b0:31:93:e1:87:c5:96:ab:2d:33:18:12:4f: 3e:d7:60:a5:87:c0:19:94:26:04:a3:4a:91:61:97: f8:ab:19:d9:f0:4e:29:9f:ae:c8:a5:de:f6:16:c7: 5a:e3:63:b6:bf:9d:b6:dc:b0:e1:7c:fe:b3:c7:06: d8:67:90:95:6b:72:4b:23:1c:b3:b7:77:c1:e4:e6: 05:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9C:14:D6:96:15:14:6C:79:9A:EC:DC:63:6E:49:B9:1C:A0:57:B4 X509v3 Authority Key Identifier: keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f0:b5:2c:30:ed:57:1e:c0:b8:87:f3:6d:19:75:4e:75:63: f6:f5:24:b7:c5:7f:17:32:03:41:4e:ba:42:0d:4d:fd:91:2a: 8b:54:c6:51:32:07:b7:e9:b3:36:fe:8b:61:d9:d6:1f:b7:a9: 7e:c9:51:99:df:15:24:fd:e5:83:5e:e8:33:ee:9c:ff:60:de: 73:00:87:b7:ea:d6:08:2d:fc:c7:ea:08:17:cb:be:c1:da:a9: 38:d0:0d:d3:79:51:8a:45:fa:8b:3a:bf:56:89:f0:f9:ee:49: 06:f8:3f:e2:bb:2a:6f:85:7a:79:67:0e:5d:0e:73:bb:f9:62: 9d:c1:18:95:e2:b7:1d:e2:67:12:d2:d4:ca:6a:99:53:0e:2f: dd:dc:e8:04:cc:eb:00:c9:fe:83:7f:33:89:b4:a0:39:28:36: 13:22:c9:1e:31:13:c0:d1:01:a9:11:f2:f8:93:0d:81:e6:2d: 43:69:79:14:fd:a6:ab:d1:8d:1d:2a:bb:9e:2d:18:08:33:d4: fb:d0:50:5b:69:84:66:07:70:00:e6:39:9a:95:3e:87:d3:a9: 3f:6a:d9:42:09:d3:d9:42:ab:ec:42:69:9b:33:0c:2b:c6:3d: d4:09:d0:66:bb:8d:4a:90:e3:c6:89:fa:8b:db:32:69:30:11: b1:1b:3b:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjExMTAvBgNVBAUTKEUyMjc1QTg3NUE5MkNBRUIwMTA0Rjg5QzQ2RjRBNTg1 QjdBREY1QjYwHhcNMjUxMTA0MTgwODExWhcNMjUxMTExMTgwODExWjAYMRYwFAYD VQQDEw02OTBhNDEwYi1lNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6641IYOojjTwmkTQq2K9GkKFZqerHqLJ5G2LI7+UEVH83RtBGtq0NJCSsAEJ 9e5bH5my8rfeFUZM2jhNoNAlkhQefCm7N9I6UlomuB4kw3gRo6S/h4i3iby8I/nx d/wBO/LveWXOaSk5c8cgj5T2ckR1vsNuiGAIEI4w8lqsYKl/5ykdgMWpUMMU1K1t l2xeyleHQNxpn3vRhOLxonHmBuZvtmlA82qwRJxMsqeMYmBPJV+yAbAxk+GHxZar LTMYEk8+12Clh8AZlCYEo0qRYZf4qxnZ8E4pn67Ipd72Fsda42O2v5223LDhfP6z xwbYZ5CVa3JLIxyzt3fB5OYFJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEecFNaW FRRseZrs3GNuSbkcoFe0MB8GA1UdIwQYMBaAFOInWodaksrrAQT4nEb0pYW3rfW2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2MS84NkMzMDQ4MkU3 MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1c0JCUGljUnZTbGhiZXQ5 YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRpZGFoMXFTeXVzQkJQaWNSdlNsaGJldDliWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2MS84NkMzMDQ4MkU3MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1 c0JCUGljUnZTbGhiZXQ5YlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh8LUsMO1XHsC4h/NtGXVOdWP29SS3xX8XMgNBTrpCDU39kSqLVMZR Mge36bM2/oth2dYft6l+yVGZ3xUk/eWDXugz7pz/YN5zAIe36tYILfzH6ggXy77B 2qk40A3TeVGKRfqLOr9WifD57kkG+D/iuypvhXp5Zw5dDnO7+WKdwRiV4rcd4mcS 0tTKaplTDi/d3OgEzOsAyf6DfzOJtKA5KDYTIskeMRPA0QGpEfL4kw2B5i1DaXkU /aar0Y0dKrueLRgIM9T70FBbaYRmB3AA5jmalT6H06k/atlCCdPZQqvsQmmbMwwr xj3UCdBmu41KkOPGifqL2zJpMBGxGztT -----END CERTIFICATE-----Generated at Wed Nov 5 05:24:59 2025 by rpki-client