$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json) Hash identifier: 7/BRCHOwzfZSaS30SyjpLwkazl8r3Jt5N5ltCHN/rPM= Subject key identifier: 4D:5C:F5:2B:5C:36:1F:BC:5A:59:73:6C:B3:C4:95:BA:80:64:C2:2C Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Certificate serial: 0636 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft Manifest number: 062F Signing time: Sun 02 Nov 2025 22:44:39 +0000 Manifest this update: Sun 02 Nov 2025 22:44:39 +0000 Manifest next update: Sun 09 Nov 2025 22:44:39 +0000 Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: r0teuEQ+3WB+dUrTAEEaw3yYeeHdzevWtWzwiZ+2nbU=) 2: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: LrOS5vT6G1w5nCu4oa5LHxalQDErRntPMrUYlIi++Aw=) 3: F78605D8778A11F08EDAFE28C4F9AE02.roa (hash: NMP/9h7Q+kMraIM38Dl6bwkPc4zc3AHpMdJgqonRBcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1590 (0x636) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5ECA, serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Validity Not Before: Nov 2 22:44:39 2025 GMT Not After : Nov 9 22:44:39 2025 GMT Subject: CN=6907ded7-9ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:56:3b:2b:88:8a:89:a3:46:c6:a0:58:76: b3:c3:a5:2f:ab:12:4d:40:78:f3:f0:0d:a2:79:11: e7:f8:9c:bc:e5:02:0f:b8:6d:ca:bc:df:dd:f7:43: 88:bf:43:2b:86:9d:d2:a7:5d:a7:95:a9:06:05:7a: 3a:37:e9:3d:0a:8d:39:c3:4e:af:24:ed:0a:e9:ef: 83:bc:39:83:0a:c6:fd:ab:3f:56:d9:38:8c:f4:c9: 51:c6:80:8b:80:8e:71:63:97:16:cd:80:5b:13:a1: fd:e3:d1:30:7b:d4:a8:1d:a0:e0:bb:d9:28:26:7c: 1f:db:37:a6:14:a2:15:6f:2f:3a:a5:58:a3:7a:7a: f0:75:3b:3f:0b:e1:37:f5:e5:e2:d4:88:cf:c2:ed: 61:40:28:8e:df:4a:13:10:d0:7a:e7:ab:60:11:8a: 0b:42:78:39:43:5f:9c:80:a9:8a:71:6c:e9:2c:37: ba:28:70:f3:a5:f7:82:0a:55:e5:c9:ce:8b:e1:14: d8:4d:4c:68:3e:3a:55:1c:de:40:f4:3c:3a:48:b7: 82:75:8c:15:ab:b7:c7:49:71:16:e8:a7:a1:fc:d2: 75:7c:6f:59:1e:49:b6:dd:11:18:0f:e5:cc:7d:dc: ca:31:d8:5e:4e:5d:a5:7e:a5:a1:c0:07:22:d3:e0: 92:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5C:F5:2B:5C:36:1F:BC:5A:59:73:6C:B3:C4:95:BA:80:64:C2:2C X509v3 Authority Key Identifier: keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:79:db:61:af:68:2d:16:5e:40:f2:78:74:e7:63:58:81:2d: ca:11:6c:ea:93:7d:76:2b:4d:f3:5f:11:d9:e6:32:60:d6:c4: 8c:1c:56:af:ab:30:51:f5:04:4c:4f:fb:f4:e0:fe:4a:b5:d3: cf:d4:fb:4e:54:56:91:ec:30:83:56:95:ff:4f:37:d0:db:3b: 19:e0:ce:52:cb:11:b7:7c:53:60:3c:db:69:f5:0e:d7:8f:ef: 63:4b:c9:44:5b:4b:6d:df:8f:a7:7a:6f:2d:fd:24:ce:da:d8: a0:ae:35:62:8c:92:27:cf:c9:c0:fb:20:6b:f9:46:bb:85:18: 88:17:1a:1d:66:75:07:bd:09:da:12:f4:0f:b9:97:df:59:41: 02:de:b5:11:9e:8b:05:db:29:bf:63:c1:f1:38:49:48:63:8f: bf:68:a7:e8:79:98:22:df:26:ed:08:96:cc:50:bc:78:71:5d: 4a:68:d3:1d:9a:3c:cd:d7:38:56:85:3e:09:1f:3e:05:50:dd: c5:79:6d:9b:f3:9c:0c:24:83:3b:18:c0:dc:4e:5c:ac:ef:ae: 9d:5b:4f:f2:02:f6:b0:b5:dc:5a:82:18:55:84:9e:20:59:84: 46:8c:78:85:87:47:1d:4d:52:7b:62:0e:46:36:24:fa:7c:40: 40:09:2c:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFQ0ExMTAvBgNVBAUTKEZCODA1RDUzNzlDQjA3RDUyQTQxMUVGRkZEMDQ5MUNB MzlCN0JGMjcwHhcNMjUxMTAyMjI0NDM5WhcNMjUxMTA5MjI0NDM5WjAYMRYwFAYD VQQDEw02OTA3ZGVkNy05ZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvBWOyuIiomjRsagWHazw6UvqxJNQHjz8A2ieRHn+Jy85QIPuG3KvN/d90OI v0Mrhp3Sp12nlakGBXo6N+k9Co05w06vJO0K6e+DvDmDCsb9qz9W2TiM9MlRxoCL gI5xY5cWzYBbE6H949Ewe9SoHaDgu9koJnwf2zemFKIVby86pVijenrwdTs/C+E3 9eXi1IjPwu1hQCiO30oTENB656tgEYoLQng5Q1+cgKmKcWzpLDe6KHDzpfeCClXl yc6L4RTYTUxoPjpVHN5A9Dw6SLeCdYwVq7fHSXEW6Keh/NJ1fG9ZHkm23REYD+XM fdzKMdheTl2lfqWhwAci0+CSXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1c9Stc Nh+8WllzbLPElbqAZMIsMB8GA1UdIwQYMBaAFPuAXVN5ywfVKkEe//0Ekco5t78n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUVDQS9CRkQyMzIwNkI5 MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5VXFRUjdfX1FTUnlqbTN2 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy00QmRVM25MQjlVcVFSN19fUVNSeWptM3Z5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUVDQS9CRkQyMzIwNkI5MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5 VXFRUjdfX1FTUnlqbTN2eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuedthr2gtFl5A8nh052NYgS3KEWzqk312K03zXxHZ5jJg1sSMHFav qzBR9QRMT/v04P5KtdPP1PtOVFaR7DCDVpX/TzfQ2zsZ4M5SyxG3fFNgPNtp9Q7X j+9jS8lEW0tt34+nem8t/STO2tigrjVijJInz8nA+yBr+Ua7hRiIFxodZnUHvQna EvQPuZffWUEC3rURnosF2ym/Y8HxOElIY4+/aKfoeZgi3ybtCJbMULx4cV1KaNMd mjzN1zhWhT4JHz4FUN3FeW2b85wMJIM7GMDcTlys766dW0/yAvawtdxaghhVhJ4g WYRGjHiFh0cdTVJ7Yg5GNiT6fEBACSwN -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:04 2025 by rpki-client