$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json) Hash identifier: UPWGJHvQUjCH/rNq3sR5uq1yirT9bC5h5A4DMBMmlsI= Subject key identifier: D0:66:3F:2F:A8:69:CF:9F:5E:38:99:F1:AF:86:67:7B:95:7A:78:40 Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft Manifest number: 0133 Signing time: Mon 27 Oct 2025 06:39:22 +0000 Manifest this update: Mon 27 Oct 2025 06:39:22 +0000 Manifest next update: Mon 03 Nov 2025 06:39:22 +0000 Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: Mocm6n+GigU3ZUI8hZZnaFPo7dkZcFrgd9stHMpn8H8=) 2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: Sbd7uixAB+aEWkmSGOrUVMGizlHems1ClmWbyRlTiKs=) 3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: dfJCTgGMLuVcX+tEuN4HdomKZZyzPfpEj+AQkrGQApI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 06:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Validity Not Before: Oct 27 06:39:22 2025 GMT Not After : Nov 3 06:39:22 2025 GMT Subject: CN=68ff139a-deaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c8:20:27:9b:35:e5:f5:89:9d:67:01:81:b6: f3:09:75:a9:08:dc:ee:e2:21:cd:9b:8d:84:83:ff: 31:e3:04:09:13:d3:0a:3d:a9:cd:22:90:8f:fa:68: f6:c9:33:e2:fb:b1:a4:95:08:46:33:ac:fe:d0:8a: 90:81:cd:d6:ec:ea:df:1e:02:36:2a:21:58:91:3f: a0:c0:d3:cc:8b:ab:fb:8b:73:18:a1:ea:86:86:f7: 70:a1:49:6d:65:7c:65:15:68:ed:ab:ad:2a:be:00: 4d:a1:9d:4b:cf:07:a4:38:f0:bc:71:62:73:57:df: 74:98:96:30:ad:d0:ff:8a:37:29:ca:64:6c:b5:ee: ff:a4:70:e7:5b:98:ba:03:bb:1b:01:f1:da:9d:a1: 7e:14:f7:de:17:5f:cd:66:c1:47:25:02:21:6e:b4: 7c:eb:4f:61:5d:9a:cf:aa:26:1e:55:42:c7:97:8c: d2:6f:b0:f6:79:6a:d6:33:a1:36:3a:47:85:09:5f: d1:0f:e1:cf:03:ca:3d:35:9c:54:c3:66:92:c3:75: 92:b7:c2:c7:47:11:a6:e8:e8:f6:15:9f:1d:62:cf: 49:29:90:c9:84:bd:fb:ab:c1:04:2a:52:9b:c3:2a: 39:fd:27:92:11:84:0a:50:59:94:94:95:9e:3d:81: 9d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:66:3F:2F:A8:69:CF:9F:5E:38:99:F1:AF:86:67:7B:95:7A:78:40 X509v3 Authority Key Identifier: keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:4c:5f:2f:a4:44:3f:a1:f9:8f:f9:28:6a:ca:6a:2a:62:79: a9:dd:33:7a:56:35:90:60:5a:d8:a3:6e:eb:21:13:ff:12:4b: 4b:59:2e:f8:a1:9b:96:7b:83:a8:e9:e9:40:2b:4c:b6:d1:00: 6b:e4:37:8d:f5:49:ef:cb:a2:4c:f8:ff:a4:c4:a6:49:73:06: 3a:b6:a1:29:ae:5e:79:25:37:9b:57:4c:20:fc:c0:65:26:55: 34:07:79:25:94:63:84:87:4d:32:fc:e8:08:f7:11:0c:b1:c5: 83:b7:62:0d:73:81:89:85:31:79:d2:68:7a:4f:78:b6:84:8a: 66:35:07:b0:b6:5d:40:3b:e4:7b:8d:d5:65:1e:5e:d2:1f:c1: 87:ef:29:9a:e7:65:85:3c:9f:04:59:a4:84:d9:54:1f:bf:c2: a7:e1:1e:71:e8:8c:75:4d:82:e7:95:04:34:31:ba:c3:2f:e7: 44:6b:e4:4c:12:88:9d:6a:ed:e2:b9:39:69:76:6b:34:7d:9b: cf:7e:c7:df:8f:84:e4:cc:a3:08:bd:0a:d7:21:02:08:19:78: 65:eb:5a:d4:66:ad:9f:0f:f4:88:9a:50:d7:41:ea:73:a8:c9: c9:84:47:1c:3f:c6:b3:cc:ef:2d:62:94:e1:6d:1f:f0:1e:33: cf:2c:af:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ4QkUxMTAvBgNVBAUTKEUzRjE4RDQxMjAyNkYzMUJBNDQzRUEzM0Y1NjcwNkZG QjJGMEYxNjIwHhcNMjUxMDI3MDYzOTIyWhcNMjUxMTAzMDYzOTIyWjAYMRYwFAYD VQQDEw02OGZmMTM5YS1kZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusggJ5s15fWJnWcBgbbzCXWpCNzu4iHNm42Eg/8x4wQJE9MKPanNIpCP+mj2 yTPi+7GklQhGM6z+0IqQgc3W7OrfHgI2KiFYkT+gwNPMi6v7i3MYoeqGhvdwoUlt ZXxlFWjtq60qvgBNoZ1LzwekOPC8cWJzV990mJYwrdD/ijcpymRste7/pHDnW5i6 A7sbAfHanaF+FPfeF1/NZsFHJQIhbrR8609hXZrPqiYeVULHl4zSb7D2eWrWM6E2 OkeFCV/RD+HPA8o9NZxUw2aSw3WSt8LHRxGm6Oj2FZ8dYs9JKZDJhL37q8EEKlKb wyo5/SeSEYQKUFmUlJWePYGdSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBmPy+o ac+fXjiZ8a+GZ3uVenhAMB8GA1UdIwQYMBaAFOPxjUEgJvMbpEPqM/VnBv+y8PFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDhCRS9DNjhFRkY5RUU1 RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4dWtRLW96OVdjR183THc4 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDhCRS9DNjhFRkY5RUU1RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4 dWtRLW96OVdjR183THc4V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVTF8vpEQ/ofmP+ShqymoqYnmp3TN6VjWQYFrYo27rIRP/EktLWS74 oZuWe4Oo6elAK0y20QBr5DeN9Unvy6JM+P+kxKZJcwY6tqEprl55JTebV0wg/MBl JlU0B3kllGOEh00y/OgI9xEMscWDt2INc4GJhTF50mh6T3i2hIpmNQewtl1AO+R7 jdVlHl7SH8GH7yma52WFPJ8EWaSE2VQfv8Kn4R5x6Ix1TYLnlQQ0MbrDL+dEa+RM Eoidau3iuTlpdms0fZvPfsffj4TkzKMIvQrXIQIIGXhl61rUZq2fD/SImlDXQepz qMnJhEccP8azzO8tYpThbR/wHjPPLK/1 -----END CERTIFICATE-----Generated at Wed Oct 29 00:57:13 2025 by rpki-client