$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: aaB10eAi6wPwx1ugdNS4MbbC4qFPevBgeDl5LyOzZD4= Subject key identifier: 9E:6D:A9:98:28:95:62:45:D3:DF:7F:B4:DE:35:4C:A8:79:52:41:9F Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 0224 Signing time: Sat 25 Oct 2025 05:14:58 +0000 Manifest this update: Sat 25 Oct 2025 05:14:58 +0000 Manifest next update: Sat 01 Nov 2025 05:14:58 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: LyFVzpS3NrEYYT2kHPnExenYRivzuSLuhHQ1oeP74Ys=) 2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: Ple4OYydaAojanyJwx7ZWPyKox9DD4lFfc6gQi2CwTI=) 3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: iBZ0Vc5oqFw84Bi0mykH6jGLVo3+N0cmUjqo5T+vIIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 05:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: Oct 25 05:14:58 2025 GMT Not After : Nov 1 05:14:58 2025 GMT Subject: CN=68fc5cd2-ad82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8c:aa:05:7f:2a:9a:a7:68:fd:9b:ed:96:43: f3:f4:c8:87:66:d1:7a:55:46:85:42:5f:e0:95:3a: 31:52:52:e7:8e:51:b5:df:35:b0:99:55:22:57:b6: df:0e:d8:76:45:7b:d2:ff:f1:90:fd:a9:a8:16:6f: 6b:7a:b2:43:fe:93:9a:c5:73:ea:b2:65:ec:10:39: 23:b3:fa:e5:02:ac:81:db:fe:fa:8b:42:3c:93:96: 19:c1:a7:ca:f3:0f:53:ed:49:4f:1c:46:4d:1b:1d: 43:f8:60:8e:75:4a:ca:b8:a3:80:e1:b3:f9:be:53: 8e:8d:8e:d8:f3:84:f4:64:de:e4:7c:9e:e1:06:69: 2a:03:63:80:ab:50:f2:df:04:cf:7e:4b:35:d4:0c: f6:69:c6:10:a2:60:fe:66:4d:55:57:d3:b7:60:72: 60:bb:a5:b5:51:05:c4:02:b2:ca:55:39:94:9e:cb: 6a:24:b4:8e:ac:d3:aa:65:41:6a:c1:b9:36:fa:22: 4e:d7:39:4a:2f:16:df:6c:ad:3b:78:8c:ee:1a:f0: 73:91:f6:1f:f9:aa:b6:a1:c4:14:75:2e:f0:ac:be: 40:cf:55:f5:c4:7a:ef:a7:90:08:f1:92:bb:11:df: 47:46:98:ef:d7:1d:78:1c:27:7d:f2:eb:0e:f0:f9: 51:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6D:A9:98:28:95:62:45:D3:DF:7F:B4:DE:35:4C:A8:79:52:41:9F X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2d:e0:c9:6e:5e:24:02:4b:99:6c:a3:62:35:4b:ad:d2:0c: b2:6d:02:2f:ef:8e:f5:a1:4c:f2:44:90:52:93:9d:cf:79:e5: 18:72:37:c6:63:5b:87:dc:90:d1:a4:28:45:f4:cb:fe:11:cc: 87:ac:8e:a9:d2:f2:2a:ec:fc:b4:c5:6c:be:a3:fe:03:4e:6b: 0f:0e:53:48:ce:af:b8:62:5a:97:1f:4e:ff:7a:25:57:fd:09: bd:8b:29:0a:53:44:e4:b3:3a:04:ac:14:a9:c1:47:7d:80:a2: 1f:dc:a6:7e:5e:ef:2f:6d:33:3c:1e:bd:9d:83:ae:aa:ba:3c: 03:76:91:79:2b:12:04:20:6a:35:95:5e:04:cd:d4:2b:79:6e: a8:9a:ee:71:51:54:b9:fd:ab:1d:f7:ab:b5:bb:bb:38:b0:fc: 44:78:bc:c1:b0:33:e2:67:e9:a8:8f:fc:30:62:4d:4f:67:06: 3f:0d:dd:ec:1f:a6:83:03:81:80:df:bf:58:e5:b1:ed:5d:76: 52:98:7c:39:7d:29:c2:f8:e7:3d:6a:75:84:78:49:34:b2:c4: d5:bd:16:c2:71:5e:98:94:95:59:aa:ad:e1:4d:f1:b9:b2:6b: 39:fb:3d:52:29:86:37:5e:08:3d:c8:1d:9d:5e:8b:4c:85:ad: 62:89:81:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjUxMDI1MDUxNDU4WhcNMjUxMTAxMDUxNDU4WjAYMRYwFAYD VQQDEw02OGZjNWNkMi1hZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4yqBX8qmqdo/ZvtlkPz9MiHZtF6VUaFQl/glToxUlLnjlG13zWwmVUiV7bf Dth2RXvS//GQ/amoFm9rerJD/pOaxXPqsmXsEDkjs/rlAqyB2/76i0I8k5YZwafK 8w9T7UlPHEZNGx1D+GCOdUrKuKOA4bP5vlOOjY7Y84T0ZN7kfJ7hBmkqA2OAq1Dy 3wTPfks11Az2acYQomD+Zk1VV9O3YHJgu6W1UQXEArLKVTmUnstqJLSOrNOqZUFq wbk2+iJO1zlKLxbfbK07eIzuGvBzkfYf+aq2ocQUdS7wrL5Az1X1xHrvp5AI8ZK7 Ed9HRpjv1x14HCd98usO8PlRDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5tqZgo lWJF099/tN41TKh5UkGfMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLLeDJbl4kAkuZbKNiNUut0gyybQIv7471oUzyRJBSk53PeeUYcjfG Y1uH3JDRpChF9Mv+EcyHrI6p0vIq7Py0xWy+o/4DTmsPDlNIzq+4YlqXH07/eiVX /Qm9iykKU0TkszoErBSpwUd9gKIf3KZ+Xu8vbTM8Hr2dg66qujwDdpF5KxIEIGo1 lV4EzdQreW6omu5xUVS5/asd96u1u7s4sPxEeLzBsDPiZ+moj/wwYk1PZwY/Dd3s H6aDA4GA379Y5bHtXXZSmHw5fSnC+Oc9anWEeEk0ssTVvRbCcV6YlJVZqq3hTfG5 sms5+z1SKYY3Xgg9yB2dXotMha1iiYGb -----END CERTIFICATE-----Generated at Sat Oct 25 17:43:33 2025 by rpki-client