$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft File: 4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json) Hash identifier: Frbe51QUNQA2WzJ9urbwnCcstnUKbX5I3bMUSgCAHF4= Subject key identifier: EA:C8:50:74:B0:C9:B1:B4:7C:E4:B7:48:90:5E:65:EA:AD:AA:7D:66 Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Certificate serial: 0B63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft Manifest number: 0B5B Signing time: Sun 02 Nov 2025 19:07:05 +0000 Manifest this update: Sun 02 Nov 2025 19:07:04 +0000 Manifest next update: Sun 09 Nov 2025 19:07:04 +0000 Files and hashes: 1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: fL5TKxVhg/wTPSzMBbaOIPZf+GD7d2rIsIwEMYBx/qc=) 2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: NcQf930jPATr+5XDKM18U6rSGEkKZ2yaCI8MgpUcALY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2915 (0xb63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Validity Not Before: Nov 2 19:07:04 2025 GMT Not After : Nov 9 19:07:04 2025 GMT Subject: CN=6907abd8-45a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:19:44:4f:db:6b:fa:a0:35:39:bf:a4:46:f1: c6:79:f6:99:98:38:f4:12:c6:cf:2e:27:d8:51:ea: f0:0f:9e:8a:9e:5e:e2:96:8d:01:dd:0a:65:c1:75: d4:4e:5a:41:37:1e:27:af:1b:1a:7f:a2:53:70:4c: 06:b7:4c:3a:b5:17:73:27:9d:aa:30:27:92:5c:4c: 4d:d2:16:9c:e4:e0:9a:cd:9d:2e:8b:41:55:54:45: 89:56:05:5d:34:70:86:83:f6:55:c4:19:b7:f2:dd: 16:1f:f3:47:10:f7:c5:18:0d:c7:75:67:b1:84:98: d2:98:6d:5d:a0:24:29:09:67:14:15:5a:b3:4a:15: e5:1b:68:85:65:a1:02:d4:28:ec:44:00:1b:6b:3e: ce:ee:dd:f9:37:be:31:58:57:e2:0e:5c:f7:3d:38: ed:04:ed:d2:ee:55:b7:bc:e7:2e:93:2e:e5:82:ba: 1c:bf:b0:87:94:11:18:19:2a:62:cc:d6:9c:63:b0: 44:15:f5:a3:ce:43:90:48:3e:8d:93:87:d8:c6:c5: 98:03:bf:71:cc:58:6e:54:87:0e:5e:89:31:33:22: c1:5b:e7:85:00:c6:1a:5b:37:4d:cc:54:ea:11:fe: 38:55:be:d3:9e:7e:53:ab:91:75:f0:52:af:76:54: 21:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C8:50:74:B0:C9:B1:B4:7C:E4:B7:48:90:5E:65:EA:AD:AA:7D:66 X509v3 Authority Key Identifier: keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:fc:87:4d:72:37:e6:23:50:86:4f:0d:be:d4:14:6c:a3:da: 38:74:16:24:7e:d2:53:2e:79:b3:4c:db:3e:c0:39:39:cc:b4: 89:a1:62:e0:b0:6f:b1:c7:3c:7b:b5:36:43:cd:87:52:be:3b: b4:6a:b3:ce:be:4d:e8:ef:8c:bd:51:a2:a9:e6:33:8b:b6:c8: cc:88:07:21:31:9e:25:7c:85:04:89:4c:62:ca:9e:76:f5:bb: f0:87:af:1d:48:44:fe:ed:2c:11:fe:10:ae:9b:50:27:e6:66: f7:2c:01:1f:2a:95:b1:f7:49:ec:ee:44:d5:df:fb:0c:f0:89: ed:51:6d:3a:16:72:50:fd:06:bc:15:61:ce:26:a7:fc:6c:0e: 99:5f:a4:1e:29:71:07:ad:3c:5c:7a:e8:8f:3e:86:dc:7b:a7: 54:dc:06:5c:ef:91:b3:5f:37:8f:f0:00:f0:b6:b8:fb:58:40: 5d:dd:f7:15:2f:04:92:f3:c8:c4:85:fa:13:af:53:b2:c5:58: cd:3f:64:71:23:45:c9:ac:38:a8:7d:f6:e2:00:1f:01:a0:c9: 35:b1:3e:09:a2:37:8b:bd:f4:c5:9b:57:77:a0:e3:ea:06:5f: b5:ce:31:ed:06:36:31:69:3e:af:5d:92:3e:d8:10:aa:55:25: a3:4b:19:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFNDkxMTAvBgNVBAUTKEUwOTIzQjBBNUY3RDVDNjhCQUVBQ0U0MTQxNUY0MkE1 MjBENzRCMkEwHhcNMjUxMTAyMTkwNzA0WhcNMjUxMTA5MTkwNzA0WjAYMRYwFAYD VQQDEw02OTA3YWJkOC00NWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxlET9tr+qA1Ob+kRvHGefaZmDj0EsbPLifYUerwD56Knl7ilo0B3QplwXXU TlpBNx4nrxsaf6JTcEwGt0w6tRdzJ52qMCeSXExN0hac5OCazZ0ui0FVVEWJVgVd NHCGg/ZVxBm38t0WH/NHEPfFGA3HdWexhJjSmG1doCQpCWcUFVqzShXlG2iFZaEC 1CjsRAAbaz7O7t35N74xWFfiDlz3PTjtBO3S7lW3vOcuky7lgrocv7CHlBEYGSpi zNacY7BEFfWjzkOQSD6Nk4fYxsWYA79xzFhuVIcOXokxMyLBW+eFAMYaWzdNzFTq Ef44Vb7Tnn5Tq5F18FKvdlQhCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrIUHSw ybG0fOS3SJBeZeqtqn1mMB8GA1UdIwQYMBaAFOCSOwpffVxouurOQUFfQqUg10sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUU0OS8wNDA0OUQwODQx QTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhHaTY2czVCUVY5Q3BTRFhT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKSTdDbDk5WEdpNjZzNUJRVjlDcFNEWFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUU0OS8wNDA0OUQwODQxQTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhH aTY2czVCUVY5Q3BTRFhTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQ/IdNcjfmI1CGTw2+1BRso9o4dBYkftJTLnmzTNs+wDk5zLSJoWLg sG+xxzx7tTZDzYdSvju0arPOvk3o74y9UaKp5jOLtsjMiAchMZ4lfIUEiUxiyp52 9bvwh68dSET+7SwR/hCum1An5mb3LAEfKpWx90ns7kTV3/sM8IntUW06FnJQ/Qa8 FWHOJqf8bA6ZX6QeKXEHrTxceuiPPobce6dU3AZc75GzXzeP8ADwtrj7WEBd3fcV LwSS88jEhfoTr1OyxVjNP2RxI0XJrDioffbiAB8BoMk1sT4JojeLvfTFm1d3oOPq Bl+1zjHtBjYxaT6vXZI+2BCqVSWjSxnY -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:19 2025 by rpki-client