$ rpki-client -vvf rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft File: g4n9Rv74flk96Bz_3N8guiynYB4.mft (raw, json) Hash identifier: JZLVIf5uaia32+7qiqRnwguRLoyPhSu2rYtQ3KEB9vU= Subject key identifier: 7D:B6:3A:76:5A:26:10:AF:85:4A:E4:F1:91:17:1E:BF:4B:97:9D:3F Authority key identifier: 83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E Certificate issuer: /CN=A91475BA/serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Certificate serial: 085B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft Manifest number: 0856 Signing time: Sat 18 Oct 2025 21:49:40 +0000 Manifest this update: Sat 18 Oct 2025 21:49:39 +0000 Manifest next update: Sat 25 Oct 2025 21:49:38 +0000 Files and hashes: 1: g4n9Rv74flk96Bz_3N8guiynYB4.crl (hash: /yjtjvKt2TWVmMlo1R+YsvZXnfOYhwWdIIZUxDD181A=) 2: 1E1D32C22FF311EC9220256BC4F9AE02.roa (hash: pTjj2b7GgJwyDNJuxZHgCMBFpwcbCF/p1EbBwHpmEQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2139 (0x85b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475BA, serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Validity Not Before: Oct 18 21:49:39 2025 GMT Not After : Oct 25 21:49:38 2025 GMT Subject: CN=68f40b73-c1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:16:5d:39:fa:e3:85:24:d4:31:1f:19:0e: 40:96:23:af:bb:4c:e8:1f:9c:d8:83:95:d0:ee:bb: ac:ff:e4:a2:65:eb:ab:ac:bf:70:b0:be:c7:55:2b: 06:ee:3f:22:04:a3:2c:bb:68:b8:92:92:43:0b:54: 08:c9:2e:c9:ac:b7:03:a1:a9:d9:9a:66:29:a4:5a: 85:47:04:60:18:66:59:08:2e:cd:a8:eb:7a:de:72: c5:d3:1c:48:97:1a:8b:52:31:60:c8:70:97:a5:18: 51:a8:7b:1b:6c:4b:a0:9c:e2:18:b8:f5:30:71:95: 52:31:7f:4b:de:6c:4e:98:4b:be:f1:08:20:b2:c1: 3e:2d:3b:c8:39:ca:15:e6:16:8f:86:0e:0a:70:85: ba:bf:cb:ec:f0:23:73:a7:e3:88:c6:9e:63:9c:7b: 18:6f:25:e9:4f:2e:64:5d:e8:87:1e:ee:27:01:8d: 42:24:6d:7b:da:27:0e:0b:b5:a2:8c:9b:b5:8d:7c: ba:2e:23:f1:1b:68:f9:8b:21:21:25:3c:b6:8d:81: 87:e5:de:b9:d2:1b:86:d3:c7:81:82:95:71:d0:e0: 62:bd:bf:16:70:21:5d:ad:5f:e4:b3:ae:70:a5:f2: c5:f5:e5:3f:d0:1d:26:ba:3e:09:b7:12:b8:ac:4d: f8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B6:3A:76:5A:26:10:AF:85:4A:E4:F1:91:17:1E:BF:4B:97:9D:3F X509v3 Authority Key Identifier: keyid:83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e8:5b:c9:8f:33:07:93:d2:29:d4:7c:d2:2d:07:35:80:44: 04:f5:18:ee:c0:f4:21:cb:3e:00:fe:80:ff:ab:5b:71:6f:2e: 39:29:aa:e7:5c:99:05:64:f4:19:1f:d1:67:68:20:f3:85:80: 9a:12:c4:fc:15:1d:41:fe:64:79:fb:2d:c7:f2:ee:a0:9f:17: 4d:ce:93:d1:50:c4:be:08:29:67:49:49:18:56:e3:bd:99:08: e4:8d:fe:df:ff:fd:ad:c2:da:8b:ce:3d:73:78:4b:38:b1:e3: 5f:c5:25:99:68:12:62:9b:6c:31:ab:d7:7a:3c:76:18:1f:69: 9b:0e:a2:ce:db:89:45:59:bd:64:b9:28:a5:1d:cb:cb:ef:cd: 5d:92:8c:ae:66:61:c6:cb:70:f2:a7:32:ab:f2:b4:a7:3e:8e: a0:c5:eb:12:0e:46:72:1c:09:5a:fe:89:40:60:54:ff:c5:d8: 47:cb:2a:08:5d:89:d1:e9:1f:3f:1c:96:cd:e5:04:58:af:b6: 11:cf:8d:9f:6d:49:be:bf:0e:20:ea:3d:df:17:14:f9:6c:8e: de:19:85:86:83:cd:76:ca:15:2d:1c:70:9b:33:6c:0d:5a:d2: 5a:c3:a3:60:c0:78:e3:c8:22:e2:8a:79:2f:ae:3d:dc:33:26: 5b:d1:1a:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QkExMTAvBgNVBAUTKDgzODlGRDQ2RkVGODdFNTkzREU4MUNGRkRDREYyMEJB MkNBNzYwMUUwHhcNMjUxMDE4MjE0OTM5WhcNMjUxMDI1MjE0OTM4WjAYMRYwFAYD VQQDEw02OGY0MGI3My1jMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvygWXTn644Uk1DEfGQ5AliOvu0zoH5zYg5XQ7rus/+SiZeurrL9wsL7HVSsG 7j8iBKMsu2i4kpJDC1QIyS7JrLcDoanZmmYppFqFRwRgGGZZCC7NqOt63nLF0xxI lxqLUjFgyHCXpRhRqHsbbEugnOIYuPUwcZVSMX9L3mxOmEu+8QggssE+LTvIOcoV 5haPhg4KcIW6v8vs8CNzp+OIxp5jnHsYbyXpTy5kXeiHHu4nAY1CJG172icOC7Wi jJu1jXy6LiPxG2j5iyEhJTy2jYGH5d650huG08eBgpVx0OBivb8WcCFdrV/ks65w pfLF9eU/0B0muj4JtxK4rE346QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH22OnZa JhCvhUrk8ZEXHr9Ll50/MB8GA1UdIwQYMBaAFIOJ/Ub++H5ZPegc/9zfILosp2Ae MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVCQS9ENEYwOEVFNkRB RTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZsazk2QnpfM044Z3VpeW5Z QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0bjlSdjc0ZmxrOTZCel8zTjhndWl5bllCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVCQS9ENEYwOEVFNkRBRTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZs azk2QnpfM044Z3VpeW5ZQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE6FvJjzMHk9Ip1HzSLQc1gEQE9RjuwPQhyz4A/oD/q1txby45Karn XJkFZPQZH9FnaCDzhYCaEsT8FR1B/mR5+y3H8u6gnxdNzpPRUMS+CClnSUkYVuO9 mQjkjf7f//2twtqLzj1zeEs4seNfxSWZaBJim2wxq9d6PHYYH2mbDqLO24lFWb1k uSilHcvL781dkoyuZmHGy3DypzKr8rSnPo6gxesSDkZyHAla/olAYFT/xdhHyyoI XYnR6R8/HJbN5QRYr7YRz42fbUm+vw4g6j3fFxT5bI7eGYWGg812yhUtHHCbM2wN WtJaw6NgwHjjyCLiinkvrj3cMyZb0Rou -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:45 2025 by rpki-client