$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json) Hash identifier: 9P8qRIYDglTpmxzm/ceXyasVT8bXlz3KItDbrANlGPM= Subject key identifier: 19:7A:75:D7:D0:27:16:9B:FC:CD:66:66:BA:D6:34:1E:15:BE:19:ED Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Certificate serial: 0F56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft Manifest number: 0F45 Signing time: Sun 02 Nov 2025 17:37:10 +0000 Manifest this update: Sun 02 Nov 2025 17:37:09 +0000 Manifest next update: Sun 09 Nov 2025 17:37:09 +0000 Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: VvrUyt4lpvzvajwptD5/wU75F5e5PwYTRi2nqLkyIy4=) 2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: 4nfL4JBKGiookOgEUtMY2He+i4zGwZxLBLPzmr/3qA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3926 (0xf56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Validity Not Before: Nov 2 17:37:09 2025 GMT Not After : Nov 9 17:37:09 2025 GMT Subject: CN=690796c5-8748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:2f:30:49:c2:ea:c5:97:a5:46:88:7d:f7: 12:e8:12:1b:4f:5f:43:e4:04:2c:f5:05:67:68:c0: 69:30:a0:4b:9e:37:5e:16:d6:43:fc:db:23:e0:94: 30:e5:d6:d5:77:a8:2a:f8:15:0a:a8:99:07:95:6a: 29:71:d2:aa:40:70:0a:97:ac:34:32:f4:40:c7:ca: 69:9f:aa:8c:4b:2a:e9:7f:63:eb:c8:ad:d2:17:fc: 31:db:e1:56:aa:ed:74:fb:2c:98:25:9c:05:24:78: 59:e1:7a:41:a8:fb:60:65:78:ef:00:ff:78:14:32: 22:87:46:0f:e8:37:aa:a5:ed:81:5a:fa:6d:f0:6a: 46:e7:8b:77:5d:bc:7b:70:22:91:0e:76:38:69:9f: 05:7e:85:b7:a4:16:d5:df:5f:07:c9:bb:29:01:ea: 65:1c:c4:c6:d8:04:60:58:43:a3:f8:0b:f6:64:0e: 49:59:34:24:a6:1a:00:be:72:a3:75:e5:fb:4b:aa: e1:85:85:65:28:b8:d4:89:73:0d:9c:ff:51:84:f4: 5a:7e:40:c8:b9:80:16:28:b6:2b:a0:f9:d5:c7:50: 3a:a5:9e:86:62:df:0f:ea:f9:40:a6:48:c5:c6:89: 57:2f:dd:11:59:eb:69:0d:5d:fa:a9:db:87:88:a2: ac:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7A:75:D7:D0:27:16:9B:FC:CD:66:66:BA:D6:34:1E:15:BE:19:ED X509v3 Authority Key Identifier: keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:72:7d:09:2f:ad:04:5e:61:1d:6e:24:58:d2:ee:62:11:d3: 3e:71:5a:4a:10:ad:27:d5:e4:5a:43:00:97:1b:f1:5e:19:a7: f4:e0:2d:5b:45:aa:9a:cd:b0:3c:f0:1c:41:bd:dd:9e:d3:02: fd:50:57:a4:11:b3:c4:2e:7f:36:09:d5:dc:61:41:9c:63:15: c8:32:98:15:1e:f2:3a:42:a1:5c:f1:85:7f:73:73:fd:a3:7f: d6:c8:af:cc:53:e1:fe:e2:a4:53:2f:5c:da:bd:98:7c:a6:21: 47:1d:8d:29:4a:e9:bb:a7:9b:38:bb:c1:05:1f:cd:60:90:a4: ac:25:c0:48:18:cc:9f:4a:19:cc:9a:0e:a1:db:66:c9:33:f7: 1c:73:66:be:30:9d:e7:91:f4:71:b8:fb:d9:0c:23:77:b8:61: ac:18:cc:d9:50:25:fa:62:88:85:bf:1d:18:b6:65:2a:a9:6e: cc:2a:55:a7:fa:df:d6:15:e1:67:14:95:5a:f5:32:eb:24:1f: 9b:1a:59:fc:66:82:46:f5:5f:35:93:36:10:63:85:6e:74:ce: 74:dc:e2:04:00:ac:76:49:e3:91:d2:c4:f2:db:d6:12:dc:8d: cf:a1:77:9d:2b:f0:9b:98:ba:d3:d8:fa:90:0b:22:ef:55:41: 35:36:10:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RUMxMTAvBgNVBAUTKDczMUUyN0UxMkZCM0RCMEI2Q0NDMEIyMEYxODY4MDlC QTA4RDA5MTUwHhcNMjUxMTAyMTczNzA5WhcNMjUxMTA5MTczNzA5WjAYMRYwFAYD VQQDEw02OTA3OTZjNS04NzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEQvMEnC6sWXpUaIffcS6BIbT19D5AQs9QVnaMBpMKBLnjdeFtZD/Nsj4JQw 5dbVd6gq+BUKqJkHlWopcdKqQHAKl6w0MvRAx8ppn6qMSyrpf2PryK3SF/wx2+FW qu10+yyYJZwFJHhZ4XpBqPtgZXjvAP94FDIih0YP6Deqpe2BWvpt8GpG54t3Xbx7 cCKRDnY4aZ8FfoW3pBbV318HybspAeplHMTG2ARgWEOj+Av2ZA5JWTQkphoAvnKj deX7S6rhhYVlKLjUiXMNnP9RhPRafkDIuYAWKLYroPnVx1A6pZ6GYt8P6vlApkjF xolXL90RWetpDV36qduHiKKsPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBl6ddfQ Jxab/M1mZrrWNB4VvhntMB8GA1UdIwQYMBaAFHMeJ+Evs9sLbMwLIPGGgJugjQkV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThFQy9BRjUwQTBFODgz NjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3dHN6QXNnOFlhQW02Q05D UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NG40Uy16Mnd0c3pBc2c4WWFBbTZDTkNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThFQy9BRjUwQTBFODgzNjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3 dHN6QXNnOFlhQW02Q05DUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzcn0JL60EXmEdbiRY0u5iEdM+cVpKEK0n1eRaQwCXG/FeGaf04C1b RaqazbA88BxBvd2e0wL9UFekEbPELn82CdXcYUGcYxXIMpgVHvI6QqFc8YV/c3P9 o3/WyK/MU+H+4qRTL1zavZh8piFHHY0pSum7p5s4u8EFH81gkKSsJcBIGMyfShnM mg6h22bJM/ccc2a+MJ3nkfRxuPvZDCN3uGGsGMzZUCX6YoiFvx0YtmUqqW7MKlWn +t/WFeFnFJVa9TLrJB+bGln8ZoJG9V81kzYQY4VudM503OIEAKx2SeOR0sTy29YS 3I3PoXedK/CbmLrT2PqQCyLvVUE1NhBk -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:10 2025 by rpki-client