$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: MB1kJkXhQS9CjgZXc98H4YMuTybbMCOVvyo57UrAqic= Subject key identifier: 5B:EF:5B:C5:74:DF:52:9F:BD:BD:0C:4A:BC:5F:00:63:78:26:EE:07 Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 01A9 Signing time: Mon 03 Nov 2025 03:15:20 +0000 Manifest this update: Mon 03 Nov 2025 03:15:19 +0000 Manifest next update: Mon 10 Nov 2025 03:15:19 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: U4Pqcq9D/eTJSERxNYSqwnHD0Gviml0Vv/VsZsOsalA=) 2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: glLqt8A+PG2i48HeZjmY7dCokn6j6eyQTAGv7a4dQe4=) 3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: cXsdzPTH/yRS7sygsATYiwsQyV1n0HK8W/wMQYfB7Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: Nov 3 03:15:19 2025 GMT Not After : Nov 10 03:15:19 2025 GMT Subject: CN=69081e48-b35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0d:eb:e4:a6:12:65:85:06:df:30:8c:01:c3: 86:b6:1b:72:51:ed:9a:a7:ef:22:66:5e:8c:a4:48: 17:15:be:c1:ca:ba:35:41:e4:36:76:e1:66:dc:cc: 1e:c5:47:47:29:a2:f3:6b:12:fa:49:3f:a3:fe:cd: 90:55:49:b2:8f:f2:39:59:21:c3:af:c2:02:e5:8a: b3:cc:77:06:15:89:a3:f5:89:3e:60:c0:a3:ad:62: 96:c4:ae:37:43:9d:e0:7e:e8:3d:6d:5d:97:67:5b: f8:c4:66:4b:38:9b:69:da:c7:a8:8f:ab:97:61:44: 98:76:1c:cc:ec:78:d5:61:31:a5:32:d1:44:fa:4c: 92:9a:2d:41:c4:2f:31:00:53:d8:3f:fa:b7:e1:9f: a5:c3:ea:3e:2a:ac:d9:b5:16:b8:cd:b3:38:6c:eb: 6d:8a:f3:77:e0:71:48:07:5a:ce:b7:55:6a:57:54: 44:af:01:70:38:e5:20:9e:0e:26:9f:0a:43:4a:63: 01:03:fe:9d:52:8a:4f:5d:f7:0b:3c:82:52:a5:ff: 8c:04:34:91:01:83:3b:b5:8f:40:ab:e9:31:6f:32: d3:f9:c0:6a:f8:30:57:9b:93:e4:66:1e:18:14:1c: 75:85:06:af:28:f5:33:da:9c:c2:3b:81:6a:a7:0c: 43:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EF:5B:C5:74:DF:52:9F:BD:BD:0C:4A:BC:5F:00:63:78:26:EE:07 X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:54:a8:3e:76:e6:2e:81:ad:aa:21:cd:4a:4c:49:69:51:26: bf:b1:26:a2:1f:3d:fb:03:55:86:0c:28:f8:a8:f0:c3:f0:33: 31:c5:7f:1e:fe:a5:cc:bb:ab:3d:86:6f:dc:55:ce:3f:29:f1: 46:3d:19:7b:a2:de:f4:6b:55:33:01:10:e9:37:25:78:f5:91: 53:30:e6:65:67:34:ab:97:e8:a2:a7:76:3b:aa:bd:18:d8:33: 33:48:c9:b9:1c:04:1f:d3:83:18:b3:6d:25:90:76:be:3c:5f: 68:23:40:65:31:45:2b:9d:66:22:43:73:92:56:df:c1:a5:75: 97:de:24:11:10:00:82:f5:e3:01:8f:1f:ee:3c:84:9d:4d:9a: d4:0b:29:ca:b1:3e:39:52:c9:d3:b2:37:30:9a:01:ac:4a:db: 4f:7c:92:3a:e4:fe:60:23:db:3b:89:7b:f5:8c:2a:05:c2:81: 62:9a:59:21:29:a2:1a:d4:53:fd:01:ef:75:d6:21:b1:09:e3: 08:51:ea:6f:47:8a:6a:08:35:55:94:d0:62:8e:0f:ad:a7:96: 8a:8f:80:ff:d5:ab:43:d1:e2:ac:67:87:81:f4:94:90:0c:d6: b6:6b:b8:79:a1:38:a2:30:2a:99:01:ee:c0:87:04:2e:12:99: 40:f4:10:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjUxMTAzMDMxNTE5WhcNMjUxMTEwMDMxNTE5WjAYMRYwFAYD VQQDEw02OTA4MWU0OC1iMzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyg3r5KYSZYUG3zCMAcOGthtyUe2ap+8iZl6MpEgXFb7Byro1QeQ2duFm3Mwe xUdHKaLzaxL6ST+j/s2QVUmyj/I5WSHDr8IC5YqzzHcGFYmj9Yk+YMCjrWKWxK43 Q53gfug9bV2XZ1v4xGZLOJtp2seoj6uXYUSYdhzM7HjVYTGlMtFE+kySmi1BxC8x AFPYP/q34Z+lw+o+KqzZtRa4zbM4bOttivN34HFIB1rOt1VqV1RErwFwOOUgng4m nwpDSmMBA/6dUopPXfcLPIJSpf+MBDSRAYM7tY9Aq+kxbzLT+cBq+DBXm5PkZh4Y FBx1hQavKPUz2pzCO4FqpwxDqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvvW8V0 31Kfvb0MSrxfAGN4Ju4HMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/VKg+duYuga2qIc1KTElpUSa/sSaiHz37A1WGDCj4qPDD8DMxxX8e /qXMu6s9hm/cVc4/KfFGPRl7ot70a1UzARDpNyV49ZFTMOZlZzSrl+iip3Y7qr0Y 2DMzSMm5HAQf04MYs20lkHa+PF9oI0BlMUUrnWYiQ3OSVt/BpXWX3iQREACC9eMB jx/uPISdTZrUCynKsT45UsnTsjcwmgGsSttPfJI65P5gI9s7iXv1jCoFwoFimlkh KaIa1FP9Ae911iGxCeMIUepvR4pqCDVVlNBijg+tp5aKj4D/1atD0eKsZ4eB9JSQ DNa2a7h5oTiiMCqZAe7AhwQuEplA9BAU -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:10 2025 by rpki-client