$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft File: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft (raw, json) Hash identifier: Gb/YKVm0U6HmaDRr6gQ5MBa9wK/wLFD666XOvYmGOpY= Subject key identifier: 83:6F:96:F1:20:58:00:82:0A:15:94:E3:57:3E:F7:1D:61:83:D6:1D Authority key identifier: E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 Certificate issuer: /CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Certificate serial: 0B0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft Manifest number: 0B07 Signing time: Tue 04 Nov 2025 19:26:27 +0000 Manifest this update: Tue 04 Nov 2025 19:26:27 +0000 Manifest next update: Tue 11 Nov 2025 19:26:27 +0000 Files and hashes: 1: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl (hash: U6uzaDRLXqELh+t1Fqu4xTRtqah3kvLCEzED3jeJab0=) 2: 29B9D5B8524111EABEF0A119C4F9AE02.roa (hash: XgnhviRQUKAkeu4itRmlPhHlV4kxqNIZcBKK2pdxl3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2830 (0xb0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CA1, serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Validity Not Before: Nov 4 19:26:27 2025 GMT Not After : Nov 11 19:26:27 2025 GMT Subject: CN=690a5363-9b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7d:9c:10:eb:63:3f:d2:6f:9a:0d:fd:35:bf: 4e:1b:ab:9b:f8:0e:8c:bb:12:72:35:c9:6a:7b:ed: e9:5a:2e:6b:b2:2f:e7:43:2e:a9:d0:75:ac:f9:4a: 37:51:fb:3f:89:de:d1:a9:13:7e:77:6a:84:a9:1c: 28:41:5b:38:e6:8d:2d:52:60:75:62:7c:f0:7b:6f: a0:d5:2b:61:15:9f:a0:a0:ec:30:9a:20:5c:b6:5a: be:0a:da:2f:08:e2:f5:29:80:f6:5f:d8:8b:2b:f3: 3b:33:1b:f9:ec:be:cb:de:e6:6b:ef:e5:1d:d4:1a: dc:09:c9:a9:7a:7b:ac:c1:61:b4:f6:4e:01:b2:cb: 7b:0b:59:92:74:1d:3d:2e:ec:86:c1:dd:af:ac:b2: e5:cb:df:a1:40:62:c7:9b:06:67:97:08:aa:76:02: 7b:77:70:ef:f1:9f:f4:ef:74:31:83:df:70:a9:db: 33:42:e8:1b:e5:a6:52:ed:67:3b:e0:1e:65:b0:a4: 8d:33:31:a2:a0:e4:07:fc:ba:46:61:ae:c6:94:db: 7d:9b:cb:8e:bb:5d:c9:8b:f1:bb:a4:50:d3:63:0c: ee:34:7c:6e:5c:cd:77:05:c4:e8:40:e7:59:5b:e0: 62:6a:51:67:99:9e:9a:3b:b9:5e:7d:e5:fa:53:2b: 43:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6F:96:F1:20:58:00:82:0A:15:94:E3:57:3E:F7:1D:61:83:D6:1D X509v3 Authority Key Identifier: keyid:E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:7f:cf:74:59:71:b7:00:8f:bf:fc:bf:b5:1b:d6:2e:8b:a1: ab:5e:ba:7e:87:4a:fb:e7:05:ee:6a:43:b9:a5:b9:81:c9:cd: 6d:2d:44:12:a2:3f:fc:c9:04:fe:07:04:84:81:aa:dd:48:49: d2:44:b9:5e:c1:af:f0:62:ca:50:d6:8d:90:ac:6d:6a:c6:33: a7:1b:46:f7:11:9c:61:37:df:72:51:da:a6:7c:7e:65:c0:86: ce:b1:e8:f0:81:81:90:66:9f:b0:51:6e:7a:38:00:17:27:52: ef:c5:d0:31:bb:32:05:cb:cc:01:b1:a8:35:b1:65:d8:f9:15: fa:a2:f7:98:9c:24:d5:cf:7c:05:03:be:e2:04:dc:af:de:65: 7f:2d:6b:2a:22:45:cc:d9:51:b4:14:56:f5:9a:19:5f:70:2e: c2:b0:d4:00:c3:8a:07:79:3d:a3:b0:f2:b4:a5:f4:38:82:11: 6c:aa:c4:54:76:f3:0c:9c:4f:68:d2:a9:84:2e:04:f4:c7:8e: 0a:ac:82:c1:c2:2d:18:ee:6f:31:fc:35:81:20:24:4c:c8:c5: b7:be:ea:8f:23:56:d3:6c:cf:73:64:f4:dc:55:74:db:d4:1e: df:bc:d6:c0:3b:b6:ed:d0:18:05:fb:f0:09:55:4a:a9:27:31: 7e:be:72:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDQTExMTAvBgNVBAUTKEUxRDk1QTNDQkREOTIwMjlBRUJFMUUxMzA4MDk5RTYy NDlDRDM2MjQwHhcNMjUxMTA0MTkyNjI3WhcNMjUxMTExMTkyNjI3WjAYMRYwFAYD VQQDEw02OTBhNTM2My05YjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnn2cEOtjP9Jvmg39Nb9OG6ub+A6MuxJyNclqe+3pWi5rsi/nQy6p0HWs+Uo3 Ufs/id7RqRN+d2qEqRwoQVs45o0tUmB1Ynzwe2+g1SthFZ+goOwwmiBctlq+Ctov COL1KYD2X9iLK/M7Mxv57L7L3uZr7+Ud1BrcCcmpenuswWG09k4Bsst7C1mSdB09 LuyGwd2vrLLly9+hQGLHmwZnlwiqdgJ7d3Dv8Z/073Qxg99wqdszQugb5aZS7Wc7 4B5lsKSNMzGioOQH/LpGYa7GlNt9m8uOu13Ji/G7pFDTYwzuNHxuXM13BcToQOdZ W+BialFnmZ6aO7lefeX6UytDwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINvlvEg WACCChWU41c+9x1hg9YdMB8GA1UdIwQYMBaAFOHZWjy92SAprr4eEwgJnmJJzTYk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS83MDYzRTQyNDUy M0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklDbXV2aDRUQ0FtZVlrbk5O aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkbGFQTDNaSUNtdXZoNFRDQW1lWWtuTk5pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENBMS83MDYzRTQyNDUyM0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklD bXV2aDRUQ0FtZVlrbk5OaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAif890WXG3AI+//L+1G9Yui6GrXrp+h0r75wXuakO5pbmByc1tLUQS oj/8yQT+BwSEgardSEnSRLlewa/wYspQ1o2QrG1qxjOnG0b3EZxhN99yUdqmfH5l wIbOsejwgYGQZp+wUW56OAAXJ1LvxdAxuzIFy8wBsag1sWXY+RX6oveYnCTVz3wF A77iBNyv3mV/LWsqIkXM2VG0FFb1mhlfcC7CsNQAw4oHeT2jsPK0pfQ4ghFsqsRU dvMMnE9o0qmELgT0x44KrILBwi0Y7m8x/DWBICRMyMW3vuqPI1bTbM9zZPTcVXTb 1B7fvNbAO7bt0BgF+/AJVUqpJzF+vnIl -----END CERTIFICATE-----Generated at Wed Nov 5 16:39:31 2025 by rpki-client