$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft File: a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json) Hash identifier: ZxTZxuidudjSux/bPiyYIzx/+TPYu6Ux2vdGIqWed5k= Subject key identifier: 3E:23:70:29:84:13:69:4C:6D:4F:04:8D:FD:EE:C2:95:A9:64:A6:5F Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Certificate serial: 1B9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft Manifest number: 1B90 Signing time: Sun 02 Nov 2025 16:16:10 +0000 Manifest this update: Sun 02 Nov 2025 16:16:09 +0000 Manifest next update: Sun 09 Nov 2025 16:16:09 +0000 Files and hashes: 1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: /tj7nV4Lbcz+VMYkWurnzSnwjwKY5FlfuFeH04BQtiI=) 2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: ZmGMH4g7cGfub9A5Ucup2yr3pAIXwRpZ1v4yX9SvAOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7069 (0x1b9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAD6F, serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Validity Not Before: Nov 2 16:16:09 2025 GMT Not After : Nov 9 16:16:09 2025 GMT Subject: CN=690783ca-a9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:f7:43:7d:23:39:9e:86:2c:17:b6:2d:31: 5a:58:8c:86:66:89:a2:90:d2:16:5b:55:b6:89:29: 4b:83:f3:cf:c7:a7:a5:7f:f6:59:b3:77:fa:51:e6: b2:b4:4e:18:54:22:03:e8:7c:18:b1:36:fe:06:9f: a9:1b:76:25:3d:dd:86:5e:af:68:8c:d9:0b:34:60: b4:69:f2:c8:b7:48:39:ec:15:33:43:b1:7e:11:4e: d7:67:cb:35:e7:f1:df:ee:f0:e6:94:08:06:7b:c1: 0c:cb:f5:76:85:06:33:55:33:d7:fa:63:0e:a3:3f: fa:2a:a3:9b:20:95:1e:92:40:de:09:d0:61:f9:e0: f3:66:b6:f9:88:01:29:a4:27:58:6c:c3:8b:61:df: 23:5d:5f:ed:18:7c:86:25:7a:47:6d:19:9d:df:40: 91:66:6f:bd:60:8a:cb:c5:88:a7:3b:11:4a:8b:9c: 3e:eb:d1:a2:d8:04:6f:bd:b7:97:9e:af:af:62:f5: 30:1c:a3:99:42:00:20:56:84:6c:1c:d9:09:62:41: 26:39:24:d5:d6:df:e1:55:d3:54:95:b9:38:55:c1: 40:bb:2f:97:29:64:d1:fc:47:54:0a:2d:a7:55:c2: ac:44:78:0d:8b:bc:20:e5:20:dc:18:51:cd:65:3c: a0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:23:70:29:84:13:69:4C:6D:4F:04:8D:FD:EE:C2:95:A9:64:A6:5F X509v3 Authority Key Identifier: keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f0:7f:73:c8:a1:98:ea:1e:79:4d:35:f2:26:57:3a:38:90: b7:7b:ad:f2:42:fb:07:3b:9e:23:c6:c8:2d:f5:0e:d8:5c:f3: 5b:1b:ca:7b:d8:2b:d3:61:89:d2:96:87:73:a4:79:1e:43:73: 3d:62:72:0c:31:10:c5:80:c1:7e:2c:42:03:d6:1a:65:33:75: 70:51:4f:40:84:78:64:2b:20:e2:3e:e6:f8:a2:84:04:90:0d: c8:a8:63:2d:ee:91:b7:e2:0a:09:4d:f3:64:e5:ad:9b:08:05: 2a:46:b5:24:49:91:c7:d7:16:b6:8e:58:a3:6e:22:6f:e1:1b: 52:66:c5:ea:88:60:d7:e4:82:c7:fe:de:31:2b:52:f5:20:09: dd:4d:43:0d:28:c1:cb:3b:63:c4:91:3f:8e:c4:68:b2:08:1b: fe:61:1c:f0:9d:97:f5:e5:6b:92:b5:6d:b1:6f:d2:ea:57:01: b0:a8:60:fc:c1:0b:e8:06:77:3b:1c:f5:6b:a4:c2:9a:2a:43: d6:37:40:a8:15:6a:25:22:54:08:46:d5:60:85:6b:75:20:69: 00:b8:f7:54:dd:50:c7:5b:68:85:f7:cf:34:57:aa:45:ee:e0: ff:ee:a6:cd:c1:dc:01:13:65:3d:71:6d:d7:d1:ec:52:9b:2a: 83:b4:bd:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFENkYxMTAvBgNVBAUTKDZCODY0MjQxREYwMTJGMjM5MjdBMDFDMEUzODZFMDdB QUI0OUM1MjIwHhcNMjUxMTAyMTYxNjA5WhcNMjUxMTA5MTYxNjA5WjAYMRYwFAYD VQQDEw02OTA3ODNjYS1hOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoP3Q30jOZ6GLBe2LTFaWIyGZomikNIWW1W2iSlLg/PPx6elf/ZZs3f6Ueay tE4YVCID6HwYsTb+Bp+pG3YlPd2GXq9ojNkLNGC0afLIt0g57BUzQ7F+EU7XZ8s1 5/Hf7vDmlAgGe8EMy/V2hQYzVTPX+mMOoz/6KqObIJUekkDeCdBh+eDzZrb5iAEp pCdYbMOLYd8jXV/tGHyGJXpHbRmd30CRZm+9YIrLxYinOxFKi5w+69Gi2ARvvbeX nq+vYvUwHKOZQgAgVoRsHNkJYkEmOSTV1t/hVdNUlbk4VcFAuy+XKWTR/EdUCi2n VcKsRHgNi7wg5SDcGFHNZTygZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4jcCmE E2lMbU8Ejf3uwpWpZKZfMB8GA1UdIwQYMBaAFGuGQkHfAS8jknoBwOOG4HqrScUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUQ2Ri80NkM5NDA5NDE0 NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5T1NlZ0hBNDRiZ2VxdEp4 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0WkNRZDhCTHlPU2VnSEE0NGJnZXF0SnhTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUQ2Ri80NkM5NDA5NDE0NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5 T1NlZ0hBNDRiZ2VxdEp4U0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB8H9zyKGY6h55TTXyJlc6OJC3e63yQvsHO54jxsgt9Q7YXPNbG8p7 2CvTYYnSlodzpHkeQ3M9YnIMMRDFgMF+LEID1hplM3VwUU9AhHhkKyDiPub4ooQE kA3IqGMt7pG34goJTfNk5a2bCAUqRrUkSZHH1xa2jlijbiJv4RtSZsXqiGDX5ILH /t4xK1L1IAndTUMNKMHLO2PEkT+OxGiyCBv+YRzwnZf15WuStW2xb9LqVwGwqGD8 wQvoBnc7HPVrpMKaKkPWN0CoFWolIlQIRtVghWt1IGkAuPdU3VDHW2iF9880V6pF 7uD/7qbNwdwBE2U9cW3X0exSmyqDtL2J -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:04 2025 by rpki-client