$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft File: n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json) Hash identifier: 9sCVy97Nj8yk/JoN6imkspyz/iAdxzR7QWn5BiTXXw8= Subject key identifier: A7:D4:3E:E3:C4:10:9E:E3:2A:53:2E:A0:A0:8A:6F:10:E5:6D:93:C6 Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29 Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft Manifest number: 82 Signing time: Wed 05 Nov 2025 06:54:31 +0000 Manifest this update: Wed 05 Nov 2025 06:54:31 +0000 Manifest next update: Wed 12 Nov 2025 06:54:31 +0000 Files and hashes: 1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: vp8c//t3Ht8BIRDbNwdru+PQHWaG82nOFFzLkj5GjYE=) 2: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: Q7i85RevnZqkOBdKbp0/e+tjgTQzpkBCM+sWN4N+OW0=) 3: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: mh+UCJNFemXmx1rXPNcCjaRpL6VWoi5lGRmYTA/fEi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29 Validity Not Before: Nov 5 06:54:31 2025 GMT Not After : Nov 12 06:54:31 2025 GMT Subject: CN=690af4a7-6a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:d4:e9:3b:4c:43:0e:6a:58:88:01:64:dd: 43:2d:02:ac:1a:17:31:5a:8f:07:9a:4a:52:21:77: 47:13:ef:48:9f:b1:18:77:c4:1e:7c:82:a8:f3:a9: cc:e5:16:9b:d9:4d:48:32:bd:f4:ba:19:3c:6c:e0: df:9b:fd:46:a1:a4:c0:bc:0c:2b:2c:8f:43:f6:d3: 63:8a:2a:54:78:3c:bf:4f:cd:2a:2f:54:02:b9:6e: 65:b6:0d:44:dd:c1:d0:2f:d0:e0:e1:12:3e:78:8c: fc:c3:e0:0c:94:ed:08:74:c5:f2:d3:be:38:b7:77: 2f:63:3d:c6:73:cb:01:91:5f:3f:34:9f:b4:58:24: 75:51:c6:73:3c:59:87:5c:77:b4:e1:6b:d0:90:a1: 46:fc:82:65:fd:bd:f5:1d:0c:1d:23:b9:5f:02:0e: 53:d3:e5:92:0c:b2:23:cc:9b:ac:4e:d5:23:f1:2a: 45:fd:5a:12:0f:e9:86:9a:a5:93:84:f3:52:ae:e7: 46:1d:30:73:47:04:2b:02:51:73:14:1e:c4:59:e4: 8f:da:04:7a:2d:4d:a6:a5:7b:41:a9:65:da:11:bd: fd:e4:fc:84:79:d4:ab:de:1e:08:a0:e7:d3:96:b2: 69:46:ea:18:c5:99:f6:f3:cb:b1:fb:3b:e5:fb:ea: 93:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D4:3E:E3:C4:10:9E:E3:2A:53:2E:A0:A0:8A:6F:10:E5:6D:93:C6 X509v3 Authority Key Identifier: keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e8:7f:55:e4:91:76:8b:dd:4a:f6:dc:34:41:ce:91:96:f8: dd:a2:20:11:b6:05:ac:cb:37:e9:20:e9:65:2b:1c:6a:ea:0b: cf:2f:e3:85:a8:6a:51:29:f2:30:ad:fc:86:92:cf:c7:3c:cf: e6:4f:0b:5d:f2:73:77:96:79:e8:5f:93:9b:52:09:c2:ed:6e: 39:18:33:6c:eb:3e:13:5a:41:29:7c:c1:ea:45:7b:5d:39:ff: 77:62:8d:17:b1:bf:60:f9:ab:3b:51:dd:50:f7:e7:4d:fc:7b: 70:f6:62:63:81:75:1d:ce:44:89:d1:77:f7:63:c8:16:8f:0d: 04:5d:8c:27:fe:31:b6:c0:8a:e1:49:73:9a:ae:d9:2f:90:46: 8f:c2:00:60:e1:50:b6:73:65:a9:83:ed:40:27:32:b1:e0:4d: 7c:39:1f:7e:17:13:e4:40:ac:21:99:db:7c:83:ab:e2:7e:5c: d1:d2:73:e2:a8:fe:6c:df:f7:4f:28:03:1e:61:ca:07:af:20: 4d:9e:48:a8:e4:b3:0e:bf:63:20:6c:00:6e:9a:19:c3:2e:3a: 7f:52:f7:b0:3d:73:6a:59:08:d4:fd:f5:61:81:eb:92:9a:82: ee:e5:30:d3:5d:a9:eb:c4:e2:21:f3:eb:47:0a:5b:b4:4e:74: 31:95:2c:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzRjYxMTAvBgNVBAUTKDlGODlBNjA0RjQ1Q0VCNkY2ODA0RkI1MzRFQURDMjQx NjZCRDBGMjkwHhcNMjUxMTA1MDY1NDMxWhcNMjUxMTEyMDY1NDMxWjAYMRYwFAYD VQQDEw02OTBhZjRhNy02YTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvPU6TtMQw5qWIgBZN1DLQKsGhcxWo8HmkpSIXdHE+9In7EYd8QefIKo86nM 5Rab2U1IMr30uhk8bODfm/1GoaTAvAwrLI9D9tNjiipUeDy/T80qL1QCuW5ltg1E 3cHQL9Dg4RI+eIz8w+AMlO0IdMXy0744t3cvYz3Gc8sBkV8/NJ+0WCR1UcZzPFmH XHe04WvQkKFG/IJl/b31HQwdI7lfAg5T0+WSDLIjzJusTtUj8SpF/VoSD+mGmqWT hPNSrudGHTBzRwQrAlFzFB7EWeSP2gR6LU2mpXtBqWXaEb395PyEedSr3h4IoOfT lrJpRuoYxZn288ux+zvl++qTzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfUPuPE EJ7jKlMuoKCKbxDlbZPGMB8GA1UdIwQYMBaAFJ+JpgT0XOtvaAT7U06twkFmvQ8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDNGNi8zNzE2ODFGQUY4 RDMxMUVGOTc1OEZCMEZDNEY5QUUwMi9uNG1tQlBSYzYyOW9CUHRUVHEzQ1FXYTlE eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240bW1CUFJjNjI5b0JQdFRUcTNDUVdhOUR5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDNGNi8zNzE2ODFGQUY4RDMxMUVGOTc1OEZCMEZDNEY5QUUwMi9uNG1tQlBSYzYy OW9CUHRUVHEzQ1FXYTlEeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe6H9V5JF2i91K9tw0Qc6RlvjdoiARtgWsyzfpIOllKxxq6gvPL+OF qGpRKfIwrfyGks/HPM/mTwtd8nN3lnnoX5ObUgnC7W45GDNs6z4TWkEpfMHqRXtd Of93Yo0Xsb9g+as7Ud1Q9+dN/Htw9mJjgXUdzkSJ0Xf3Y8gWjw0EXYwn/jG2wIrh SXOartkvkEaPwgBg4VC2c2Wpg+1AJzKx4E18OR9+FxPkQKwhmdt8g6viflzR0nPi qP5s3/dPKAMeYcoHryBNnkio5LMOv2MgbABumhnDLjp/UvewPXNqWQjU/fVhgeuS moLu5TDTXanrxOIh8+tHClu0TnQxlSyq -----END CERTIFICATE-----Generated at Wed Nov 5 17:52:34 2025 by rpki-client