$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft File: 4V0TCwuymA4b8RwBvMt1O0loSoA.mft (raw, json) Hash identifier: I1I4w33Yo+ESCDfMHBlmEvzX36601vKGdaMYny+szkU= Subject key identifier: 10:5A:1B:76:EF:01:42:DD:0F:BB:64:B0:92:CB:86:09:72:DA:65:28 Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 Certificate issuer: /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Certificate serial: 065F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft Manifest number: 065A Signing time: Sun 02 Nov 2025 22:37:09 +0000 Manifest this update: Sun 02 Nov 2025 22:37:08 +0000 Manifest next update: Sun 09 Nov 2025 22:37:08 +0000 Files and hashes: 1: 4V0TCwuymA4b8RwBvMt1O0loSoA.crl (hash: PJAF/S75RHCv9u5JtUNczqI7bCiW/2K9c7mLQiY+D3U=) 2: 6AE1616AA3F711EBBA757063C4F9AE02.roa (hash: Om3xOjvt7/SStBWrpIGKKE+8s1rKbJeum5OSIuQByU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7BD, serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Validity Not Before: Nov 2 22:37:08 2025 GMT Not After : Nov 9 22:37:08 2025 GMT Subject: CN=6907dd15-265c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:64:df:40:07:12:48:27:2f:11:b6:cf:76:90: c2:3a:4a:a6:e0:7a:d6:ef:c9:a5:27:68:dd:c9:18: be:34:cd:b5:31:8c:b7:7b:2d:5e:7d:ed:d4:50:4b: 0c:f2:6b:31:85:bb:61:62:a8:48:55:88:ba:83:76: 86:0b:b0:ed:7e:b8:f7:ff:60:31:d3:ec:8d:e4:9f: 7a:8d:05:1d:41:22:24:d4:61:2a:bf:34:a2:7b:31: 50:77:e5:23:f0:bf:78:2a:75:b0:6a:b9:47:20:90: d4:5f:ab:fa:ae:c1:51:ec:18:b8:11:22:a8:3e:cc: 75:95:43:4f:3a:d3:f4:5b:50:26:d4:d9:d4:23:16: 5c:55:0c:74:0d:49:67:c1:0f:80:d8:c1:36:46:62: 22:db:58:53:1e:02:0a:bf:c6:64:9b:8e:0e:da:fa: c0:25:58:66:35:bf:6c:f8:f8:51:e1:8d:d6:e7:a2: 02:45:9f:f5:56:d7:2b:f5:3f:aa:f1:9b:aa:40:1e: af:7f:d3:1d:29:06:10:03:0d:78:8d:63:dd:c3:8b: fd:bf:5d:59:32:e6:4d:0f:f7:f0:3e:07:0b:0f:9c: 25:10:7c:cf:4a:c2:51:b3:9f:3d:be:dd:36:9e:9e: 09:62:08:56:61:03:f4:79:03:3b:f4:56:c6:11:de: 44:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5A:1B:76:EF:01:42:DD:0F:BB:64:B0:92:CB:86:09:72:DA:65:28 X509v3 Authority Key Identifier: keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8e:62:95:c3:54:af:76:11:56:38:01:bf:3f:a7:25:a0:3a: 19:ea:d7:38:48:78:2a:48:c5:e8:01:31:56:a4:91:24:53:f7: b1:f5:40:75:72:01:c9:a7:03:e8:d5:55:2e:a4:14:9b:05:bb: f7:d9:ed:9c:f9:56:e7:e5:ba:78:5a:8e:2c:a0:09:8f:7c:cf: 5a:66:89:2b:50:52:6a:0e:ad:13:38:72:4f:4b:af:08:33:14: 86:a6:b2:41:bb:ec:b5:b9:87:f1:42:38:be:95:03:f5:9a:77: 4a:52:15:71:f4:0f:99:3a:54:3a:54:a3:1f:cd:b5:74:16:83: 38:b6:0a:5f:ba:45:e8:80:42:3f:32:b2:37:e3:45:12:1c:56: ce:49:98:16:18:7c:7e:b0:ef:ca:dc:55:ff:c0:61:0f:a9:f5: 50:43:12:49:3f:6d:69:31:7b:14:cc:b7:a8:4a:51:39:d0:4d: 71:89:90:1f:1b:79:b8:e5:b4:3a:24:81:8e:d8:1e:1a:a1:bb: de:8d:5c:5e:f4:12:f0:b7:a2:3d:24:71:07:6e:d3:a8:6b:d0: c6:c9:e6:38:58:0f:57:a7:3b:db:8e:3f:45:8f:85:e2:cb:05: f4:7a:35:d1:89:a2:dd:b5:84:0f:1f:d1:f1:c7:25:bb:ea:c4: 8a:fc:31:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QkQxMTAvBgNVBAUTKEUxNUQxMzBCMEJCMjk4MEUxQkYxMUMwMUJDQ0I3NTNC NDk2ODRBODAwHhcNMjUxMTAyMjIzNzA4WhcNMjUxMTA5MjIzNzA4WjAYMRYwFAYD VQQDEw02OTA3ZGQxNS0yNjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl2TfQAcSSCcvEbbPdpDCOkqm4HrW78mlJ2jdyRi+NM21MYy3ey1efe3UUEsM 8msxhbthYqhIVYi6g3aGC7Dtfrj3/2Ax0+yN5J96jQUdQSIk1GEqvzSiezFQd+Uj 8L94KnWwarlHIJDUX6v6rsFR7Bi4ESKoPsx1lUNPOtP0W1Am1NnUIxZcVQx0DUln wQ+A2ME2RmIi21hTHgIKv8Zkm44O2vrAJVhmNb9s+PhR4Y3W56ICRZ/1Vtcr9T+q 8ZuqQB6vf9MdKQYQAw14jWPdw4v9v11ZMuZND/fwPgcLD5wlEHzPSsJRs589vt02 np4JYghWYQP0eQM79FbGEd5E5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBaG3bv AULdD7tksJLLhgly2mUoMB8GA1UdIwQYMBaAFOFdEwsLspgOG/EcAbzLdTtJaEqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdCRC9EMzAyNjAzNEEz RjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1BNGI4UndCdk10MU8wbG9T b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWMFRDd3V5bUE0YjhSd0J2TXQxTzBsb1NvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdCRC9EMzAyNjAzNEEzRjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1B NGI4UndCdk10MU8wbG9Tb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbjmKVw1SvdhFWOAG/P6cloDoZ6tc4SHgqSMXoATFWpJEkU/ex9UB1 cgHJpwPo1VUupBSbBbv32e2c+Vbn5bp4Wo4soAmPfM9aZokrUFJqDq0TOHJPS68I MxSGprJBu+y1uYfxQji+lQP1mndKUhVx9A+ZOlQ6VKMfzbV0FoM4tgpfukXogEI/ MrI340USHFbOSZgWGHx+sO/K3FX/wGEPqfVQQxJJP21pMXsUzLeoSlE50E1xiZAf G3m45bQ6JIGO2B4aobvejVxe9BLwt6I9JHEHbtOoa9DGyeY4WA9Xpzvbjj9Fj4Xi ywX0ejXRiaLdtYQPH9HxxyW76sSK/DFk -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:06 2025 by rpki-client