$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json) Hash identifier: gbNRgHkaQYw8vEnC4i39lZzBcAW2c6EHVTzmmf+f5Ww= Subject key identifier: CE:F1:CB:30:BC:C4:CE:C0:1C:DF:1E:4E:50:75:07:2E:61:B3:17:97 Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Certificate serial: 0A1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft Manifest number: 0A0C Signing time: Sat 18 Oct 2025 20:49:30 +0000 Manifest this update: Sat 18 Oct 2025 20:49:29 +0000 Manifest next update: Sat 25 Oct 2025 20:49:29 +0000 Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: G6EfvRdUp4cCEReNrKWnYgfKHRUPEz9CwbWfg0E0jzM=) 2: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: PugK/HlSlwCNhEasOZjO6B/uomD7VotHJLA2wV6jZrM=) 3: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: hvomTHOFg3fOu5UVv4a+8zSBR7jdgf3xO/+H6ZJICO8=) 4: 305312F67CA011F098F1673CC4F9AE02.roa (hash: wVxD4Ia4NFpgdZDCkPWfFk89K3NA8UH13kaAx87O4u8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2586 (0xa1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Validity Not Before: Oct 18 20:49:29 2025 GMT Not After : Oct 25 20:49:29 2025 GMT Subject: CN=68f3fd5a-3f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3c:d8:46:54:88:61:0e:4c:b4:23:d9:3f:33: a0:72:d1:ce:ac:a8:6d:01:46:bd:e4:b4:36:4f:85: 80:56:b0:16:8c:15:73:76:e0:78:04:42:4a:3a:b4: dc:98:fe:c0:69:4e:4d:02:26:1c:46:ac:db:65:3c: 5c:7f:eb:d5:33:9d:b3:d2:4a:2f:c8:b7:dc:49:79: aa:c0:45:00:d2:af:22:0c:9f:a3:ea:99:fa:d5:21: 48:b1:04:c0:59:40:cb:65:24:dc:de:0d:e3:9a:f4: a0:64:10:74:f9:4d:bd:a6:8f:5d:1e:81:84:e2:16: 3c:f9:56:71:2b:90:e6:ec:4b:48:34:1c:06:1a:46: e8:d8:0c:b6:d4:97:b4:df:86:47:19:36:3a:47:93: 95:ec:89:50:98:02:28:3b:0b:1b:d6:6f:6e:b7:78: a4:21:d1:a3:87:ba:f8:f0:6d:28:d5:b9:07:b5:81: 1b:30:b3:45:35:bd:80:3f:d7:74:59:d0:f5:ca:02: 9f:db:89:92:29:a6:2c:56:60:40:c1:39:07:ff:e7: 8b:e9:ea:68:1b:bc:fa:86:a2:ac:0c:8b:00:e3:c4: a2:c8:1c:71:7a:c7:1c:90:08:74:a3:ff:1a:54:aa: 07:2c:94:6c:c6:16:4e:da:ce:60:82:dd:4b:81:3f: 53:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F1:CB:30:BC:C4:CE:C0:1C:DF:1E:4E:50:75:07:2E:61:B3:17:97 X509v3 Authority Key Identifier: keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4a:19:9b:b5:a0:1c:06:f7:93:a7:92:85:59:b0:8c:0c:a1: e1:56:4f:ea:b1:6a:0b:b7:cc:a7:9c:c7:22:4a:b7:ce:8e:13: 73:1f:6d:76:5a:0a:ba:87:c7:12:9a:48:5a:c8:5a:b9:1a:61: c9:0b:fd:09:78:5b:62:e1:86:f4:70:87:8b:a8:1b:38:bb:ce: 5f:34:73:1a:d5:ee:ef:48:5d:b3:f5:f1:d9:87:10:3c:d7:87: 63:e7:42:f0:38:76:3e:a0:f5:48:63:2a:f8:fd:02:8c:53:ec: 67:61:3d:bf:08:01:94:e8:c2:0b:cb:50:0d:bd:c0:e9:51:ed: b7:d1:aa:8a:87:3c:e7:1f:fe:c7:2b:17:1e:cf:f1:4a:8f:5e: 52:cc:44:b3:17:4d:35:fe:45:27:ef:56:9e:66:89:81:1b:d6: 94:77:e1:bd:cd:cc:79:8b:1a:b9:9c:f4:e9:f4:f3:95:dd:b2: 95:ae:ab:0a:b1:4d:3e:3c:db:7a:04:15:d4:8b:58:50:c5:46: 9e:a3:db:5b:d6:5f:59:fc:20:c9:7f:0c:86:d5:d4:09:1d:34: 78:52:1e:c4:d9:76:e7:2e:b4:eb:d1:56:e2:d8:54:74:ed:38: b7:53:be:01:72:9c:96:7a:95:6b:4b:8e:eb:ab:0a:57:a7:52: f5:c1:9a:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBBNkMxMTAvBgNVBAUTKEE3ODdBNjNFNDlFRThFQzZGOTc1MTE2MDdGMUI3QzVC MERGMTE2NEUwHhcNMjUxMDE4MjA0OTI5WhcNMjUxMDI1MjA0OTI5WjAYMRYwFAYD VQQDEw02OGYzZmQ1YS0zZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzzYRlSIYQ5MtCPZPzOgctHOrKhtAUa95LQ2T4WAVrAWjBVzduB4BEJKOrTc mP7AaU5NAiYcRqzbZTxcf+vVM52z0kovyLfcSXmqwEUA0q8iDJ+j6pn61SFIsQTA WUDLZSTc3g3jmvSgZBB0+U29po9dHoGE4hY8+VZxK5Dm7EtINBwGGkbo2Ay21Je0 34ZHGTY6R5OV7IlQmAIoOwsb1m9ut3ikIdGjh7r48G0o1bkHtYEbMLNFNb2AP9d0 WdD1ygKf24mSKaYsVmBAwTkH/+eL6epoG7z6hqKsDIsA48SiyBxxescckAh0o/8a VKoHLJRsxhZO2s5ggt1LgT9TLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7xyzC8 xM7AHN8eTlB1By5hsxeXMB8GA1UdIwQYMBaAFKeHpj5J7o7G+XURYH8bfFsN8RZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEE2Qy9COTE2RjM4ODgy QzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpzYjVkUkZnZnh0OFd3M3hG azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0ZW1Qa251anNiNWRSRmdmeHQ4V3czeEZrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEE2Qy9COTE2RjM4ODgyQzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpz YjVkUkZnZnh0OFd3M3hGazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuShmbtaAcBveTp5KFWbCMDKHhVk/qsWoLt8ynnMciSrfOjhNzH212 Wgq6h8cSmkhayFq5GmHJC/0JeFti4Yb0cIeLqBs4u85fNHMa1e7vSF2z9fHZhxA8 14dj50LwOHY+oPVIYyr4/QKMU+xnYT2/CAGU6MILy1ANvcDpUe230aqKhzznH/7H Kxcez/FKj15SzESzF001/kUn71aeZomBG9aUd+G9zcx5ixq5nPTp9POV3bKVrqsK sU0+PNt6BBXUi1hQxUaeo9tb1l9Z/CDJfwyG1dQJHTR4Uh7E2XbnLrTr0Vbi2FR0 7Ti3U74BcpyWepVrS47rqwpXp1L1wZoC -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:37 2025 by rpki-client