$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft File: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft (raw, json) Hash identifier: c6iaJ3DUGRAtCC9YdyfHwG74qPjHQLW0UHj6CTeICHc= Subject key identifier: D6:C1:79:65:B0:32:B1:C7:6A:52:EC:2F:B0:3B:C9:B8:F4:37:60:CC Authority key identifier: E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C Certificate issuer: /CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft Manifest number: FA Signing time: Wed 05 Nov 2025 05:20:27 +0000 Manifest this update: Wed 05 Nov 2025 05:20:27 +0000 Manifest next update: Wed 12 Nov 2025 05:20:27 +0000 Files and hashes: 1: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl (hash: mOuaMjexuYgP8qkg36Zi/qeVa5m/q7QfEZBVyX6e6mk=) 2: 0B725F44496D11EF9F7F2116C4F9AE02.roa (hash: SsTEks9DzvfjnZoXdnmZIWjNSHqbFmVLR2wVP5eTyr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1604, serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C Validity Not Before: Nov 5 05:20:27 2025 GMT Not After : Nov 12 05:20:27 2025 GMT Subject: CN=690ade9b-4657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ed:02:cf:a6:c2:73:7f:65:2a:83:6f:2f:ee: 1c:a1:84:e8:e4:c8:92:c8:b9:84:8e:16:00:35:a3: 67:a4:61:b6:b2:f0:84:22:8b:dc:ba:ab:9f:da:f0: 2d:ec:48:86:e8:c4:53:a3:5b:00:81:0e:e7:99:0d: f7:8d:18:c7:3c:0b:56:27:41:7f:e3:94:c8:a9:aa: a4:58:f6:80:34:39:17:98:3b:55:9b:3b:d7:3f:bb: c9:74:30:73:5d:0f:2c:d6:f9:ee:ea:28:8c:28:6e: c1:6d:e5:0e:e7:39:9b:a6:02:8f:00:01:e3:11:71: 89:c6:0d:38:a1:c1:42:27:b5:ba:3a:d3:e7:d9:e4: 2f:2f:79:46:f5:b6:7f:67:5c:6e:07:f8:d8:69:a8: e4:e2:52:f2:2d:92:6a:b4:3c:ef:48:fd:da:f5:e7: 94:30:11:47:aa:77:d9:13:2c:d9:94:a6:39:48:0c: 7c:66:83:38:f4:cf:db:69:63:e6:12:30:9a:b3:9f: a9:91:ef:99:77:85:6c:9c:fc:05:f2:88:2e:c4:ec: 2f:bf:aa:ff:f9:4a:88:34:5a:88:d1:6b:d2:99:b2: 5b:df:8d:a9:37:b9:c2:b9:13:34:7a:85:15:42:11: 99:16:09:b7:bf:ca:69:c2:03:d2:e2:fa:69:55:84: aa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C1:79:65:B0:32:B1:C7:6A:52:EC:2F:B0:3B:C9:B8:F4:37:60:CC X509v3 Authority Key Identifier: keyid:E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:60:c7:17:20:81:b2:69:4b:92:e6:f7:23:8a:74:1b:f7:76: 88:a3:45:fe:b3:e1:4d:4b:f9:33:ae:5c:3e:ab:8f:5e:c4:5e: 44:c2:54:00:83:69:e2:95:40:e0:89:fb:46:d9:ea:bb:63:da: b5:b4:5d:65:25:bc:ce:db:b4:ed:1e:a9:fa:93:c2:f6:2c:e3: 4f:2f:7d:f5:5a:d8:1b:75:cf:26:ba:10:27:77:8a:9b:35:16: e8:41:20:3c:19:0e:1b:ad:02:62:1a:f4:c9:69:6f:04:9a:6b: 90:80:d1:4e:d9:1f:89:29:17:21:2b:03:e3:55:c8:2b:74:3a: 00:94:24:6d:41:cd:03:b2:20:54:62:6f:90:da:b2:06:11:60: 41:46:29:d2:40:54:9c:84:fe:8a:cb:68:7c:d3:3d:a2:ed:c8: 3b:1f:bd:05:25:c6:b7:79:38:eb:26:dd:de:14:d5:56:46:41: 31:40:52:38:e7:12:ff:e8:73:ab:3f:9f:a3:ae:7d:45:81:ef: fa:3a:e2:3c:d8:67:66:9e:82:a5:f4:91:80:21:e4:28:5e:a0: 9e:6f:93:ae:89:95:eb:ee:76:ef:a3:b1:1a:68:93:da:ca:57: b8:bd:ba:6b:11:fa:2a:48:1d:87:35:4b:91:f8:dd:91:0b:ba: e1:07:42:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE2MDQxMTAvBgNVBAUTKEUyRjE3NzM3Qjg0QzFGNjc4NjlDMDNBNDdGOEM0MTlG RDQyMDAxNkMwHhcNMjUxMTA1MDUyMDI3WhcNMjUxMTEyMDUyMDI3WjAYMRYwFAYD VQQDEw02OTBhZGU5Yi00NjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5e0Cz6bCc39lKoNvL+4coYTo5MiSyLmEjhYANaNnpGG2svCEIovcuquf2vAt 7EiG6MRTo1sAgQ7nmQ33jRjHPAtWJ0F/45TIqaqkWPaANDkXmDtVmzvXP7vJdDBz XQ8s1vnu6iiMKG7BbeUO5zmbpgKPAAHjEXGJxg04ocFCJ7W6OtPn2eQvL3lG9bZ/ Z1xuB/jYaajk4lLyLZJqtDzvSP3a9eeUMBFHqnfZEyzZlKY5SAx8ZoM49M/baWPm EjCas5+pke+Zd4VsnPwF8oguxOwvv6r/+UqINFqI0WvSmbJb342pN7nCuRM0eoUV QhGZFgm3v8ppwgPS4vppVYSqeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbBeWWw MrHHalLsL7A7ybj0N2DMMB8GA1UdIwQYMBaAFOLxdze4TB9nhpwDpH+MQZ/UIAFs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTYwNC8xMjBDMkM3NDND RUIxMUVGOTRFMjRGNTlDNEY5QUUwMi80dkYzTjdoTUgyZUduQU9rZjR4Qm45UWdB V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR2RjNON2hNSDJlR25BT2tmNHhCbjlRZ0FXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTYwNC8xMjBDMkM3NDNDRUIxMUVGOTRFMjRGNTlDNEY5QUUwMi80dkYzTjdoTUgy ZUduQU9rZjR4Qm45UWdBV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxYMcXIIGyaUuS5vcjinQb93aIo0X+s+FNS/kzrlw+q49exF5EwlQA g2nilUDgiftG2eq7Y9q1tF1lJbzO27TtHqn6k8L2LONPL331Wtgbdc8muhAnd4qb NRboQSA8GQ4brQJiGvTJaW8EmmuQgNFO2R+JKRchKwPjVcgrdDoAlCRtQc0DsiBU Ym+Q2rIGEWBBRinSQFSchP6Ky2h80z2i7cg7H70FJca3eTjrJt3eFNVWRkExQFI4 5xL/6HOrP5+jrn1Fge/6OuI82GdmnoKl9JGAIeQoXqCeb5OuiZXr7nbvo7EaaJPa yle4vbprEfoqSB2HNUuR+N2RC7rhB0Lm -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:49 2025 by rpki-client