$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft File: 4_fO9uelaeRrLZA5MitpdVMcJWY.mft (raw, json) Hash identifier: u0Y6ArWO5ycONvA9TPmQLcSKpZJKqTUDs9R3iegyBI4= Subject key identifier: 43:12:B8:76:BD:2B:60:EA:A1:73:A6:98:84:5F:2F:39:4C:28:5A:F6 Authority key identifier: E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 Certificate issuer: /CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft Manifest number: 0218 Signing time: Wed 05 Nov 2025 02:17:30 +0000 Manifest this update: Wed 05 Nov 2025 02:17:29 +0000 Manifest next update: Wed 12 Nov 2025 02:17:29 +0000 Files and hashes: 1: 4_fO9uelaeRrLZA5MitpdVMcJWY.crl (hash: fpYu7YKPXNxDE5nYAG8UKOTSSCBeKE4KEf5wzoxYaMI=) 2: 24F87CC2810611EDA756F886C4F9AE02.roa (hash: FG8mZ0xSMI661bwpz8jXY8dYE+DuRrKVmBGsSUwXpCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0077, serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Validity Not Before: Nov 5 02:17:29 2025 GMT Not After : Nov 12 02:17:29 2025 GMT Subject: CN=690ab3b9-e08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:55:16:de:bb:ed:a2:9c:2b:46:39:3b:7b:4c: 21:53:95:01:ea:f7:80:fd:99:45:b8:e7:81:a0:47: 04:2c:6d:cb:c8:95:bd:19:f5:62:48:c0:4c:c1:25: 40:bd:a4:f3:58:f0:cc:43:1d:04:0f:57:c6:88:42: ae:7e:39:d2:a0:be:91:84:b4:f0:a6:1d:27:ff:67: 6c:6a:26:e2:a6:9c:05:fc:01:a3:3f:a9:5b:5e:8b: cd:c3:4a:08:3e:c3:bb:52:d7:0d:ae:b8:55:28:84: 08:fc:3b:0f:4c:a6:38:f2:72:c4:3d:e3:f3:e5:29: 1a:76:b7:03:97:ce:eb:03:65:61:36:c9:b6:f1:56: b4:50:75:d6:45:74:8b:a5:18:b2:c3:aa:6d:c5:2a: f4:af:7c:10:58:e2:b7:1b:e4:4f:f2:51:23:fd:21: 90:82:fb:0a:40:c0:9e:f5:e5:20:15:6d:f5:3c:db: 67:1b:42:f2:9d:c6:c7:13:af:6e:38:4e:a2:96:63: 11:7d:d7:0b:42:aa:83:8b:5b:2f:73:ba:e5:90:82: 55:c3:f7:c8:2a:eb:62:fa:fe:91:de:df:a7:54:51: 92:4d:cb:6b:ed:bf:78:d7:9a:20:99:03:04:f3:96: 87:40:12:0f:be:7e:26:e7:3f:fa:f0:7b:20:14:2a: 75:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:12:B8:76:BD:2B:60:EA:A1:73:A6:98:84:5F:2F:39:4C:28:5A:F6 X509v3 Authority Key Identifier: keyid:E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:33:0d:bb:4c:74:d3:3d:79:62:e5:dc:75:cf:b4:da:10:7c: b9:c5:e2:3a:18:a1:f1:52:3d:f2:7a:89:5d:b6:88:fe:c7:f7: 1e:cd:b2:cf:31:d4:62:e6:5c:a2:25:cb:cf:bf:d9:73:af:f1: 81:eb:98:a5:02:98:9b:ff:4c:ad:76:10:83:57:1f:4e:7e:97: 01:cf:00:9d:bf:53:d8:92:7e:a8:56:ec:f5:20:de:37:c6:b6: 9d:3b:c6:f0:d6:97:90:0f:d5:e6:e8:f9:71:b1:5e:91:bf:62: 38:d8:5a:7d:bf:a8:15:00:fc:eb:a7:3e:bc:a5:ac:14:8f:ba: 7d:5e:cd:db:62:78:fe:91:0f:21:f8:78:97:d0:93:02:98:db: 58:29:39:77:d6:3b:87:94:33:36:50:b0:72:7f:b5:87:29:f4: bf:e8:bc:7e:ae:ff:74:ad:91:30:65:f4:60:c7:cf:75:a2:b4: 97:a2:45:5f:2a:ce:fa:f0:d6:c0:0d:19:7b:e3:23:c3:68:fc: f0:f3:25:98:85:e2:1e:de:fd:cf:09:9a:9e:13:16:00:8d:4f: 99:03:26:64:38:87:dc:0d:8c:f7:65:13:9a:e8:49:38:ad:fc: 84:84:86:56:16:2b:9a:61:00:00:a5:1c:0e:f2:6f:a5:b6:a3: 5d:82:b9:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAwNzcxMTAvBgNVBAUTKEUzRjdDRUY2RTdBNTY5RTQ2QjJEOTAzOTMyMkI2OTc1 NTMxQzI1NjYwHhcNMjUxMTA1MDIxNzI5WhcNMjUxMTEyMDIxNzI5WjAYMRYwFAYD VQQDEw02OTBhYjNiOS1lMDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9lUW3rvtopwrRjk7e0whU5UB6veA/ZlFuOeBoEcELG3LyJW9GfViSMBMwSVA vaTzWPDMQx0ED1fGiEKufjnSoL6RhLTwph0n/2dsaibippwF/AGjP6lbXovNw0oI PsO7UtcNrrhVKIQI/DsPTKY48nLEPePz5SkadrcDl87rA2VhNsm28Va0UHXWRXSL pRiyw6ptxSr0r3wQWOK3G+RP8lEj/SGQgvsKQMCe9eUgFW31PNtnG0LyncbHE69u OE6ilmMRfdcLQqqDi1svc7rlkIJVw/fIKuti+v6R3t+nVFGSTctr7b9415ogmQME 85aHQBIPvn4m5z/68HsgFCp1MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMSuHa9 K2DqoXOmmIRfLzlMKFr2MB8GA1UdIwQYMBaAFOP3zvbnpWnkay2QOTIraXVTHCVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDA3Ny81MDZBRTIzMDgx MDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFlUnJMWkE1TWl0cGRWTWNK V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfZk85dWVsYWVSckxaQTVNaXRwZFZNY0pXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDA3Ny81MDZBRTIzMDgxMDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFl UnJMWkE1TWl0cGRWTWNKV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNMw27THTTPXli5dx1z7TaEHy5xeI6GKHxUj3yeoldtoj+x/cezbLP MdRi5lyiJcvPv9lzr/GB65ilApib/0ytdhCDVx9OfpcBzwCdv1PYkn6oVuz1IN43 xradO8bw1peQD9Xm6PlxsV6Rv2I42Fp9v6gVAPzrpz68pawUj7p9Xs3bYnj+kQ8h +HiX0JMCmNtYKTl31juHlDM2ULByf7WHKfS/6Lx+rv90rZEwZfRgx891orSXokVf Ks768NbADRl74yPDaPzw8yWYheIe3v3PCZqeExYAjU+ZAyZkOIfcDYz3ZROa6Ek4 rfyEhIZWFiuaYQAApRwO8m+ltqNdgrlV -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:47 2025 by rpki-client