$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft File: MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json) Hash identifier: 6KD2RZI4IuopiWOq+Aroso0yXWk2IR8/41BLRYU38r0= Subject key identifier: 4A:8B:8D:44:48:D3:0C:50:C4:72:5A:64:6F:8F:24:02:FF:C0:27:EA Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Certificate serial: 1264 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft Manifest number: 125C Signing time: Tue 04 Nov 2025 17:12:11 +0000 Manifest this update: Tue 04 Nov 2025 17:12:10 +0000 Manifest next update: Tue 11 Nov 2025 17:12:10 +0000 Files and hashes: 1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: 8bX2AHYlzfXOx3Nus6zd1OIbEBGoVmaFX7ZpjK+loJo=) 2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: jn5qhVbEoategN8Wb9SpBQEDedH4bKopl8YHB2oNVaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4708 (0x1264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E84A9, serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Validity Not Before: Nov 4 17:12:10 2025 GMT Not After : Nov 11 17:12:10 2025 GMT Subject: CN=690a33eb-ee93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9a:60:7c:b7:87:44:d3:96:cb:cf:83:f3:c2: 04:cf:28:77:ae:f4:81:b7:c0:d9:78:d4:00:e5:1e: 30:bd:4f:29:b2:9e:fd:30:11:b9:1e:2e:99:b2:c7: 6c:0c:b4:aa:2c:e4:08:0b:a4:23:46:f7:1a:2f:9e: c2:a6:1b:a0:b1:c6:39:e1:d5:91:3e:6e:4a:bf:94: 37:21:f7:90:03:f8:9d:d6:f0:a9:e1:c0:69:2c:06: 91:cc:31:9c:f3:0d:94:e9:ac:d3:d5:25:69:85:d2: a6:39:13:34:f8:df:c5:3b:37:1d:07:1b:14:da:64: 64:c4:15:e9:71:20:0f:6b:cd:92:a7:8c:bc:e3:11: 13:89:be:74:d5:ca:15:b9:5e:17:6e:a5:1b:ae:84: 0f:d9:6a:9d:63:ad:29:ab:51:43:e6:2a:fb:38:5c: ad:b5:23:ef:ab:f6:53:31:67:a5:b7:ea:9f:65:f9: 8e:c7:58:01:07:3f:85:27:c0:f8:28:8c:72:b5:d4: 62:96:1c:5b:65:e7:6a:a3:e4:b5:b1:04:1f:05:e0: b2:65:f7:fd:c5:16:11:9b:1d:f5:2e:23:66:b0:8c: 12:60:e5:4b:4e:e9:e3:70:c3:65:23:7e:fc:ec:63: 53:07:93:07:c6:85:ff:c4:a7:ad:04:62:6e:dd:73: 57:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8B:8D:44:48:D3:0C:50:C4:72:5A:64:6F:8F:24:02:FF:C0:27:EA X509v3 Authority Key Identifier: keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:d0:98:55:a9:c0:95:47:e2:30:27:40:e6:57:e3:7c:9f:86: 80:c6:82:2b:b7:ff:ad:46:8e:5f:55:4c:a1:6f:eb:6d:32:e9: 93:b4:75:1e:22:95:b2:56:2f:f2:d2:62:44:c7:3f:e5:11:67: 4b:b8:ed:33:8a:67:c4:89:97:97:63:59:2f:4e:63:17:1b:b6: 32:45:79:23:bc:7f:0e:32:c7:44:fc:ec:46:e4:d7:97:9b:62: a6:c0:e7:21:6f:4d:d3:c4:5b:83:18:bf:f9:a2:59:e4:6b:d6: 9e:c8:45:5c:32:ac:75:58:83:69:5d:46:20:68:67:cc:cf:f7: 73:bf:07:bf:d6:59:c5:02:33:30:8d:89:ca:8b:cf:c0:ef:ce: 75:43:d1:39:a8:59:66:ff:c0:cf:c7:16:fa:be:e3:4d:17:79: 21:6b:2e:9f:40:5f:aa:7e:84:4d:15:c8:4e:8f:7d:5f:c4:40: ab:f4:12:b6:f1:1a:20:8a:d8:85:9b:f9:11:ff:54:5e:ca:64: 5f:5d:7b:3d:f5:64:16:4b:32:53:63:ee:5c:ab:49:46:0f:56: 49:ce:27:42:53:c7:57:76:5d:fe:49:ea:02:0b:3d:b9:23:a8: ae:41:16:0c:10:cf:e8:6d:81:b9:15:79:10:f3:7b:cb:49:48: 52:07:2f:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0QTkxMTAvBgNVBAUTKDMwOTkzODcwRTkxMkNEMTkxRDgwQUNFRjMwMzU3QTU0 RkYzNEY4MkUwHhcNMjUxMTA0MTcxMjEwWhcNMjUxMTExMTcxMjEwWjAYMRYwFAYD VQQDEw02OTBhMzNlYi1lZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JpgfLeHRNOWy8+D88IEzyh3rvSBt8DZeNQA5R4wvU8psp79MBG5Hi6Zssds DLSqLOQIC6QjRvcaL57CphugscY54dWRPm5Kv5Q3IfeQA/id1vCp4cBpLAaRzDGc 8w2U6azT1SVphdKmORM0+N/FOzcdBxsU2mRkxBXpcSAPa82Sp4y84xETib501coV uV4XbqUbroQP2WqdY60pq1FD5ir7OFyttSPvq/ZTMWelt+qfZfmOx1gBBz+FJ8D4 KIxytdRilhxbZedqo+S1sQQfBeCyZff9xRYRmx31LiNmsIwSYOVLTunjcMNlI378 7GNTB5MHxoX/xKetBGJu3XNXEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqLjURI 0wxQxHJaZG+PJAL/wCfqMB8GA1UdIwQYMBaAFDCZOHDpEs0ZHYCs7zA1elT/NPgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODRBOS82QTkwQTlDMEUx OTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pSa2RnS3p2TURWNlZQODAt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KazRjT2tTelJrZGdLenZNRFY2VlA4MC1DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODRBOS82QTkwQTlDMEUxOTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pS a2RnS3p2TURWNlZQODAtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo0JhVqcCVR+IwJ0DmV+N8n4aAxoIrt/+tRo5fVUyhb+ttMumTtHUe IpWyVi/y0mJExz/lEWdLuO0zimfEiZeXY1kvTmMXG7YyRXkjvH8OMsdE/OxG5NeX m2KmwOchb03TxFuDGL/5olnka9aeyEVcMqx1WINpXUYgaGfMz/dzvwe/1lnFAjMw jYnKi8/A7851Q9E5qFlm/8DPxxb6vuNNF3khay6fQF+qfoRNFchOj31fxECr9BK2 8RogitiFm/kR/1ReymRfXXs99WQWSzJTY+5cq0lGD1ZJzidCU8dXdl3+SeoCCz25 I6iuQRYMEM/obYG5FXkQ83vLSUhSBy9t -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:18 2025 by rpki-client