$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft File: F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json) Hash identifier: DVj1/DO2Ei72cnSM8D45ToAP9Oj5KuBTywYefs9oR48= Subject key identifier: 38:5C:02:73:CC:35:17:A2:55:FE:08:67:F3:A3:85:59:0E:00:84:8A Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 Certificate issuer: /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft Manifest number: 4D Signing time: Sat 18 Oct 2025 21:52:23 +0000 Manifest this update: Sat 18 Oct 2025 21:52:22 +0000 Manifest next update: Sat 25 Oct 2025 21:52:22 +0000 Files and hashes: 1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: wdLyvO3wRbUD6FUVn2tNjQMGXBUrLskNaJqXlC/xhms=) 2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: 8eHBf/IW6Kdn5rzP/J/PseLHB5iblvBzJEKUGKo/wC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Validity Not Before: Oct 18 21:52:22 2025 GMT Not After : Oct 25 21:52:22 2025 GMT Subject: CN=68f40c17-2355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:7f:94:e5:0a:ea:d1:78:02:17:b7:0a:12: 70:2a:2e:ac:3f:5b:72:9a:3e:ad:4f:79:28:c1:25: ca:1f:4d:38:49:1a:58:55:45:cf:3c:58:3a:84:f2: 8d:bc:04:fd:6b:a0:95:ab:8a:35:28:51:4e:a4:35: 29:6e:66:c5:b6:04:ab:0f:7c:da:9b:68:d1:c5:b8: 0b:19:ee:79:d0:dc:13:99:95:72:a8:38:4a:82:9a: 02:cb:a7:da:51:88:15:86:be:82:a0:d0:aa:67:db: 98:bb:c3:c0:a1:e1:f7:2c:8b:e6:6a:10:24:7d:4a: e5:fc:f1:4b:1b:66:98:89:84:65:58:0b:3a:b9:1e: 81:d5:b4:f7:84:d7:80:d5:3e:17:e8:69:9f:02:3e: 2a:32:71:9b:2d:8c:15:f1:73:8a:ef:d8:0b:c0:f9: 65:01:21:2c:e6:af:e4:bb:c8:e6:9a:eb:61:fb:9a: e1:ef:76:b7:42:67:77:d6:18:da:de:16:b3:68:eb: 40:8e:32:30:c9:3d:a5:ca:57:da:48:fd:f7:d9:06: 3e:7b:47:85:1e:6c:30:26:00:a9:2d:00:ce:e4:d6: 6e:8d:9d:b1:13:20:11:e5:5c:e7:75:b5:cf:b3:cf: 59:77:c8:f2:c9:e9:63:2d:fa:09:07:b1:be:26:d4: d5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5C:02:73:CC:35:17:A2:55:FE:08:67:F3:A3:85:59:0E:00:84:8A X509v3 Authority Key Identifier: keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:df:42:20:b5:ca:47:79:21:3f:57:e8:e2:dc:b6:b6:86:06: 56:44:35:b7:13:f5:79:90:24:05:d9:fe:d1:c6:57:f8:a4:52: ad:03:9d:d1:8d:42:70:c0:bb:44:28:e1:64:9d:06:0c:72:8b: dc:45:10:3b:c5:86:4e:c1:90:de:35:80:ce:ba:e0:26:20:c2: d2:f8:47:4f:e5:16:f5:2e:d6:3e:3a:fb:69:8c:34:ff:f8:2d: 90:78:d3:76:35:75:bf:67:9f:b0:f8:a1:25:10:43:5f:b9:1b: 95:c7:71:7b:1f:3b:dc:f7:8b:7d:19:7b:50:e8:33:33:82:d4: f5:19:43:f9:09:61:a8:40:29:51:cb:d5:87:1a:44:dc:3d:b3: 42:cb:9c:e4:f4:a3:1b:3b:92:62:57:19:fc:31:36:bb:4e:d2: a0:97:39:47:3d:69:5e:30:aa:97:b5:ed:a9:57:d1:dc:6c:d2: d3:bb:1c:57:ac:d8:eb:87:27:c9:2a:de:8c:58:0a:e1:33:bd: a0:7b:b4:84:e1:59:60:33:cc:6a:d6:83:8b:9b:6b:70:47:0d: 09:8e:bf:de:e9:c5:bd:9b:81:9b:65:ed:0b:ea:d5:b6:66:ee: c3:10:ad:41:d6:78:c5:96:3d:1f:09:ef:4e:b0:28:a8:2d:76: 6a:b6:d7:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDU0MzExMC8GA1UEBRMoMTc4MDA5NkNDOTBBQjZBRUFGMDhENzlBQjE4QzU0QzdC NzdBNTNBMDAeFw0yNTEwMTgyMTUyMjJaFw0yNTEwMjUyMTUyMjJaMBgxFjAUBgNV BAMTDTY4ZjQwYzE3LTIzNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCza3+U5Qrq0XgCF7cKEnAqLqw/W3KaPq1PeSjBJcofTThJGlhVRc88WDqE8o28 BP1roJWrijUoUU6kNSluZsW2BKsPfNqbaNHFuAsZ7nnQ3BOZlXKoOEqCmgLLp9pR iBWGvoKg0Kpn25i7w8Ch4fcsi+ZqECR9SuX88UsbZpiJhGVYCzq5HoHVtPeE14DV PhfoaZ8CPioycZstjBXxc4rv2AvA+WUBISzmr+S7yOaa62H7muHvdrdCZ3fWGNre FrNo60COMjDJPaXKV9pI/ffZBj57R4UebDAmAKktAM7k1m6NnbETIBHlXOd1tc+z z1l3yPLJ6WMt+gkHsb4m1NXBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOFwCc8w1 F6JV/ghn86OFWQ4AhIowHwYDVR0jBBgwFoAUF4AJbMkKtq6vCNeasYxUx7d6U6Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NTQzL0FCNzE5RkNFM0I2 NTExRjA4NzQyREEzOUM0RjlBRTAyL0Y0QUpiTWtLdHE2dkNOZWFzWXhVeDdkNlU2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjRBSmJNa0t0cTZ2Q05lYXNZeFV4N2Q2VTZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 NTQzL0FCNzE5RkNFM0I2NTExRjA4NzQyREEzOUM0RjlBRTAyL0Y0QUpiTWtLdHE2 dkNOZWFzWXhVeDdkNlU2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG3fQiC1ykd5IT9X6OLctraGBlZENbcT9XmQJAXZ/tHGV/ikUq0DndGN QnDAu0Qo4WSdBgxyi9xFEDvFhk7BkN41gM664CYgwtL4R0/lFvUu1j46+2mMNP/4 LZB403Y1db9nn7D4oSUQQ1+5G5XHcXsfO9z3i30Ze1DoMzOC1PUZQ/kJYahAKVHL 1YcaRNw9s0LLnOT0oxs7kmJXGfwxNrtO0qCXOUc9aV4wqpe17alX0dxs0tO7HFes 2OuHJ8kq3oxYCuEzvaB7tIThWWAzzGrWg4uba3BHDQmOv97pxb2bgZtl7Qvq1bZm 7sMQrUHWeMWWPR8J706wKKgtdmq21+w= -----END CERTIFICATE-----Generated at Mon Oct 20 14:45:14 2025 by rpki-client