$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft File: -L4s6ssxJNZg8w-KJzgGZIr0PIc.mft (raw, json) Hash identifier: R9JXOUTcRWksRhtVjnAB3wqfG/DxiPDpzXXlnLvxC64= Subject key identifier: 55:9A:96:FC:25:01:8A:15:30:39:23:DB:51:02:02:DA:87:CA:24:69 Authority key identifier: F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87 Certificate issuer: /CN=A91AFAAC/serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft Manifest number: 4E Signing time: Sun 19 Oct 2025 10:41:40 +0000 Manifest this update: Sun 19 Oct 2025 10:41:40 +0000 Manifest next update: Sun 26 Oct 2025 10:41:40 +0000 Files and hashes: 1: -L4s6ssxJNZg8w-KJzgGZIr0PIc.crl (hash: ZFa9perwr4W16ERUaTeemb4cEmT2ExSNswkYYCQrNDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFAAC, serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87 Validity Not Before: Oct 19 10:41:40 2025 GMT Not After : Oct 26 10:41:40 2025 GMT Subject: CN=68f4c064-8c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:75:3b:34:bf:4a:2a:7b:66:f7:be:73:ed: 8e:0c:c2:1d:06:9c:9d:f3:07:fe:04:c8:6a:e0:8c: f8:59:a3:14:c2:97:97:53:c0:7b:37:19:c7:1c:b7: 8d:5a:c4:82:03:b2:04:3c:b6:e1:70:fb:9b:03:8f: 9f:e1:fa:98:a0:98:f9:36:c6:09:a7:0b:c6:80:38: 70:c9:43:03:6f:f9:0a:80:ab:53:c6:c1:ce:62:5b: 51:03:27:d7:f4:56:63:83:0f:81:69:68:a3:cc:c8: 5c:0b:f1:3d:b0:27:ea:f0:6c:b8:19:12:49:a7:9b: 0a:55:ba:2b:68:17:df:c5:64:0e:1e:83:5d:d6:3c: a2:e7:7d:24:71:88:c4:64:8a:62:85:35:0f:f2:94: 42:98:11:bc:66:fb:da:29:d7:e8:d3:6b:15:cd:36: 97:e0:5f:24:83:6a:80:54:2f:ad:b9:a1:c9:64:9b: 1b:96:55:49:13:17:44:6b:f6:8d:48:1f:11:0a:f0: d9:97:c8:08:67:97:02:7e:ef:3a:96:03:f6:80:1c: 2b:ea:4f:a8:00:03:bc:72:e1:a4:c5:b5:9e:ef:7e: 4d:2e:37:83:ae:3c:fc:5c:42:fa:a3:2a:b7:b2:37: e6:9f:d1:e5:67:b8:4c:45:5d:e0:9e:02:00:9b:70: 79:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9A:96:FC:25:01:8A:15:30:39:23:DB:51:02:02:DA:87:CA:24:69 X509v3 Authority Key Identifier: keyid:F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:34:e4:6a:10:11:7c:24:5a:a7:cd:79:34:26:9e:33:3c:1b: bb:85:44:c6:d4:f2:0c:8d:7c:1d:23:97:8c:2c:ea:1b:8f:9b: a4:97:ed:e9:73:cb:3d:79:85:99:23:c6:7e:5a:b4:32:69:70: 8e:3d:41:49:c3:80:ed:49:4e:f8:3a:fc:b0:35:38:0d:b2:a6: 8b:fa:d2:f3:ae:22:f8:06:bd:58:75:08:fe:6c:86:a5:5e:40: 0a:d8:9b:17:e8:70:08:0b:a5:26:20:77:cf:75:f7:51:9a:e5: 88:3f:f9:7e:51:bf:68:f5:dc:58:d3:0d:e0:66:08:71:9a:8d: 92:4f:a3:6e:d3:bb:9f:f6:67:6e:47:2f:46:af:7f:d5:b9:25: 2b:77:f0:d4:59:f6:0a:9e:13:43:08:b7:72:bc:d6:ef:60:9c: d1:9f:aa:cf:c2:8b:af:f4:10:1d:d7:ad:58:72:a4:77:12:cc: 19:a0:14:37:fc:43:88:a4:3c:05:04:dc:45:a9:55:1a:ac:a3: 3c:cb:c1:bc:87:50:89:90:98:25:d6:a9:ca:7e:9b:ce:33:7c: 76:9d:41:8c:e7:e7:3b:4e:b7:ff:cb:74:e3:56:dc:42:37:19: 57:55:2a:ce:99:58:15:99:d8:c6:ec:28:2f:8d:25:86:2d:92: 84:ff:62:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkFBQzExMC8GA1UEBRMoRjhCRTJDRUFDQjMxMjRENjYwRjMwRjhBMjczODA2NjQ4 QUY0M0M4NzAeFw0yNTEwMTkxMDQxNDBaFw0yNTEwMjYxMDQxNDBaMBgxFjAUBgNV BAMTDTY4ZjRjMDY0LThjMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtfHU7NL9KKntm975z7Y4Mwh0GnJ3zB/4EyGrgjPhZoxTCl5dTwHs3Gccct41a xIIDsgQ8tuFw+5sDj5/h+pigmPk2xgmnC8aAOHDJQwNv+QqAq1PGwc5iW1EDJ9f0 VmODD4FpaKPMyFwL8T2wJ+rwbLgZEkmnmwpVuitoF9/FZA4eg13WPKLnfSRxiMRk imKFNQ/ylEKYEbxm+9op1+jTaxXNNpfgXySDaoBUL625oclkmxuWVUkTF0Rr9o1I HxEK8NmXyAhnlwJ+7zqWA/aAHCvqT6gAA7xy4aTFtZ7vfk0uN4OuPPxcQvqjKrey N+af0eVnuExFXeCeAgCbcHl3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVZqW/CUB ihUwOSPbUQIC2ofKJGkwHwYDVR0jBBgwFoAU+L4s6ssxJNZg8w+KJzgGZIr0PIcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQUFDLzUzRDU1Q0Q2MzU0 QTExRjBCQTc2NkU0Q0M0RjlBRTAyLy1MNHM2c3N4Sk5aZzh3LUtKemdHWklyMFBJ Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLUw0czZzc3hKTlpnOHctS0p6Z0daSXIwUEljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QUFDLzUzRDU1Q0Q2MzU0QTExRjBCQTc2NkU0Q0M0RjlBRTAyLy1MNHM2c3N4Sk5a Zzh3LUtKemdHWklyMFBJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA805GoQEXwkWqfNeTQmnjM8G7uFRMbU8gyNfB0jl4ws6huPm6SX7elz yz15hZkjxn5atDJpcI49QUnDgO1JTvg6/LA1OA2ypov60vOuIvgGvVh1CP5shqVe QArYmxfocAgLpSYgd89191Ga5Yg/+X5Rv2j13FjTDeBmCHGajZJPo27Tu5/2Z25H L0avf9W5JSt38NRZ9gqeE0MIt3K81u9gnNGfqs/Ci6/0EB3XrVhypHcSzBmgFDf8 Q4ikPAUE3EWpVRqsozzLwbyHUImQmCXWqcp+m84zfHadQYzn5ztOt//LdONW3EI3 GVdVKs6ZWBWZ2MbsKC+NJYYtkoT/Yvo= -----END CERTIFICATE-----Generated at Tue Oct 21 00:04:04 2025 by rpki-client