$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json) Hash identifier: c2VDjQXxQM8Tb/2F91qOfKB7ko2E2EFB6VSTNOMUBSk= Subject key identifier: D7:73:75:C1:AC:35:4D:E2:F4:50:D2:06:A5:17:24:76:30:8C:E0:4E Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft Manifest number: 35 Signing time: Sun 19 Oct 2025 11:05:51 +0000 Manifest this update: Sun 19 Oct 2025 11:05:50 +0000 Manifest next update: Sun 26 Oct 2025 11:05:50 +0000 Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: zWjtGUqKCMCO0yGhiKBGompN8sCyc/m509z4ySC3xlU=) 2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: SdgAZZ52cjGHFYLx6r6iySsbR8aD22mEVfk3u39V65w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Validity Not Before: Oct 19 11:05:50 2025 GMT Not After : Oct 26 11:05:50 2025 GMT Subject: CN=68f4c60e-c2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:76:7e:e8:8e:6f:b3:14:ce:7c:09:76:8d:25: 21:2c:01:0f:a4:09:2b:53:67:b6:98:96:0e:13:f1: 01:f0:8a:56:90:c1:48:aa:27:4b:f0:cf:f6:d3:81: f7:ce:0e:13:75:1a:c6:ba:55:fe:90:33:21:46:36: 4b:ba:f1:0c:d3:de:25:b7:47:88:94:e8:4b:d6:33: 51:6a:ab:12:be:93:3d:34:4d:a4:bb:c2:5d:f2:57: e3:cb:87:a8:ce:40:17:10:aa:cb:9f:34:61:dc:5c: 45:84:48:fb:84:2f:54:5f:cd:ab:fc:e0:5d:ef:50: d5:e2:db:f7:e2:91:0d:db:69:42:69:eb:69:c6:50: 90:15:e0:a8:33:5f:ba:1d:14:42:b0:47:45:e8:be: f4:e0:14:6a:1f:89:2e:66:99:ca:23:20:34:1e:57: d9:03:d2:73:1e:cc:35:74:79:0f:1f:cb:98:43:3c: 53:25:f7:1e:f1:a5:6a:99:ad:5c:13:cb:9b:dc:02: 06:1a:d2:da:8b:b7:8e:63:7d:89:49:18:4d:04:aa: 37:bf:08:21:e4:9a:73:00:86:15:a8:6b:5f:e6:1e: e3:82:ca:54:07:15:87:ad:81:f7:fd:cd:c1:cc:1a: a5:b5:4c:c0:79:b5:8b:27:f6:76:3e:ab:04:7c:37: 22:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:73:75:C1:AC:35:4D:E2:F4:50:D2:06:A5:17:24:76:30:8C:E0:4E X509v3 Authority Key Identifier: keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:4b:07:91:70:d4:41:b4:a9:3a:34:db:4f:61:bb:eb:c3:f3: be:f7:09:0a:c7:20:73:be:c6:3d:73:9b:06:22:63:1a:99:fa: 2b:8b:5c:2c:b6:92:e3:26:49:27:bf:dc:9f:1b:af:1c:ac:0d: 14:06:8b:82:e0:ca:fa:e3:64:b4:bf:56:14:aa:2b:cc:db:b9: 6c:83:08:b7:9a:a6:7a:62:99:88:26:92:01:ff:ad:05:d2:39: b7:ab:49:be:1c:40:08:64:24:1d:83:37:8c:0f:c2:f4:f6:45: 14:dd:59:db:d4:e1:9d:70:85:6b:e0:b9:1c:3a:31:fc:3a:e8: 67:27:5a:d0:8c:94:12:de:81:23:b9:d9:18:76:40:1a:89:69: 41:7a:67:9e:10:f8:5c:c9:a8:47:ca:e0:ad:58:3d:3c:13:ee: d7:63:da:57:4c:59:76:88:36:cb:be:88:09:25:31:60:db:43: ef:03:e9:2c:71:d5:8a:78:b2:10:f5:29:f2:8b:29:8d:d2:b9: e5:10:83:73:c8:48:45:f0:5e:08:c3:ea:a0:ae:66:fd:67:8a: 2a:cf:dc:62:e9:2c:ae:e3:c1:98:31:06:1c:12:54:1f:9a:57: 02:e1:18:44:3e:9f:08:9e:a2:c4:38:23:2e:1e:00:b1:1c:57: e9:4f:02:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTFERTExMC8GA1UEBRMoNkI4Mjk2QTU4MTU0MzAyNzhFQzMxMUI1RTlDQkVCN0ZG MEE5MERDNjAeFw0yNTEwMTkxMTA1NTBaFw0yNTEwMjYxMTA1NTBaMBgxFjAUBgNV BAMTDTY4ZjRjNjBlLWMyY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCudn7ojm+zFM58CXaNJSEsAQ+kCStTZ7aYlg4T8QHwilaQwUiqJ0vwz/bTgffO DhN1Gsa6Vf6QMyFGNku68QzT3iW3R4iU6EvWM1FqqxK+kz00TaS7wl3yV+PLh6jO QBcQqsufNGHcXEWESPuEL1Rfzav84F3vUNXi2/fikQ3baUJp62nGUJAV4KgzX7od FEKwR0XovvTgFGofiS5mmcojIDQeV9kD0nMezDV0eQ8fy5hDPFMl9x7xpWqZrVwT y5vcAgYa0tqLt45jfYlJGE0Eqje/CCHkmnMAhhWoa1/mHuOCylQHFYetgff9zcHM GqW1TMB5tYsn9nY+qwR8NyJZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU13N1waw1 TeL0UNIGpRckdjCM4E4wHwYDVR0jBBgwFoAUa4KWpYFUMCeOwxG16cvrf/CpDcYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1MURFLzg3MUZEQTM2NjBC NDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNlT3d4RzE2Y3ZyZl9DcERj WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYTRLV3BZRlVNQ2VPd3hHMTZjdnJmX0NwRGNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 MURFLzg3MUZEQTM2NjBCNDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNl T3d4RzE2Y3ZyZl9DcERjWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJhLB5Fw1EG0qTo0209hu+vD8773CQrHIHO+xj1zmwYiYxqZ+iuLXCy2 kuMmSSe/3J8brxysDRQGi4LgyvrjZLS/VhSqK8zbuWyDCLeapnpimYgmkgH/rQXS OberSb4cQAhkJB2DN4wPwvT2RRTdWdvU4Z1whWvguRw6Mfw66GcnWtCMlBLegSO5 2Rh2QBqJaUF6Z54Q+FzJqEfK4K1YPTwT7tdj2ldMWXaINsu+iAklMWDbQ+8D6Sxx 1Yp4shD1KfKLKY3SueUQg3PISEXwXgjD6qCuZv1niirP3GLpLK7jwZgxBhwSVB+a VwLhGEQ+nwieosQ4Iy4eALEcV+lPAks= -----END CERTIFICATE-----Generated at Tue Oct 21 10:28:13 2025 by rpki-client