$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft File: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft (raw, json) Hash identifier: ZMgcs1kgyxW2F0AgrO3DHpMJ5Ki/W0Vyac6deCH9A4M= Subject key identifier: 1B:89:C1:7B:59:DC:CA:A3:71:37:07:B1:D4:93:8A:CB:33:42:82:3A Authority key identifier: E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A Certificate issuer: /CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A Certificate serial: 0DE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft Manifest number: 0DDE Signing time: Sat 18 Oct 2025 18:31:47 +0000 Manifest this update: Sat 18 Oct 2025 18:31:47 +0000 Manifest next update: Sat 25 Oct 2025 18:31:47 +0000 Files and hashes: 1: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl (hash: XP/bOC+ek+6Jrx0/cUsB/XMMwI+KxNIGK0CVmUpeV0s=) 2: 7321413EC22511E99FB7F225C4F9AE02.roa (hash: H10nxhyS/VwDB93m2/HXj3BoCowkULE1EpiVOf28AL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3557 (0xde5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0367, serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A Validity Not Before: Oct 18 18:31:47 2025 GMT Not After : Oct 25 18:31:47 2025 GMT Subject: CN=68f3dd13-de3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:70:f1:40:7a:07:c5:02:a2:d9:0b:78:d4: ae:4e:8c:87:63:75:11:82:f7:14:87:9b:6d:a2:bd: 86:74:10:63:0d:23:e2:f3:06:08:f8:bc:d1:62:62: b6:84:06:eb:73:ad:f7:6c:8a:85:03:ff:86:35:a7: bb:6e:81:12:4e:62:67:9c:5b:ad:10:97:87:ce:0a: f9:3e:e3:ec:06:ed:05:14:d2:5f:24:7b:b2:71:13: c7:4a:86:7c:9e:f7:fc:1c:bd:90:0f:2c:df:11:29: f1:2e:d4:bb:b5:f1:5d:eb:c7:81:8a:c7:37:7a:04: a0:8d:8e:1c:9a:d0:8d:bc:f2:19:e3:ce:ef:55:5f: 7d:49:03:2d:60:54:6e:09:3e:1c:6b:4e:7d:c3:70: df:0e:e9:b6:cf:3a:36:46:6a:29:1f:d4:bf:eb:b3: d6:2a:81:0d:04:14:d0:3d:ab:78:38:65:d4:6a:06: 37:be:44:28:e9:56:aa:ef:f4:0a:c6:c7:37:ab:5e: c5:5f:03:a7:77:3e:00:9d:c0:db:9a:c5:6e:27:12: c0:d3:03:e6:a0:f4:27:01:21:29:ef:b5:1c:7f:d3: 70:81:3a:0b:e3:2b:5a:b7:1b:e6:d3:38:e3:b3:d3: 8a:b2:8d:20:d9:a8:6a:ba:cd:f6:96:c4:e8:46:b6: 20:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:89:C1:7B:59:DC:CA:A3:71:37:07:B1:D4:93:8A:CB:33:42:82:3A X509v3 Authority Key Identifier: keyid:E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f4:1b:23:55:4f:43:9c:88:54:cb:8e:7b:54:2d:a2:a8:5d: ec:d0:43:dd:75:b3:bc:6d:d2:8d:8a:65:81:73:27:e9:4d:fb: 4a:83:17:f6:60:f5:c8:ea:13:b8:af:28:5f:65:83:b4:4d:c5: 81:a5:08:79:cb:03:44:bf:f0:d6:0c:45:c2:cb:48:a7:39:c3: 99:41:47:d0:7c:d2:e4:58:6f:c8:9a:57:80:c2:8d:9b:48:2c: 8f:3b:35:21:88:1c:85:8c:42:fc:ad:7b:01:6c:1e:16:07:ed: bd:20:c9:21:13:49:c1:fa:6c:b8:12:1f:8d:19:6b:c5:af:c0: 37:f3:02:d6:b9:b0:fa:61:09:aa:b9:6d:03:a6:49:40:d5:bb: 6f:63:91:53:5c:c8:8d:9f:48:3d:bd:3d:70:48:09:44:0b:0d: 6a:b9:cf:c5:06:48:8c:d0:ca:f1:37:ab:ec:65:11:fe:e4:d4: 53:a8:32:19:57:84:31:ec:ed:b9:84:1e:e7:1c:d1:a1:1a:4f: fe:70:6d:fe:5f:b1:66:4f:b3:74:fd:d3:27:c3:18:cb:3b:ce: 54:6e:4a:b9:92:ea:de:37:59:cf:52:49:0b:21:d2:b2:02:80: 79:0f:3a:82:6b:e3:d5:78:9c:67:2c:2e:18:e9:69:5e:6d:34: 38:b1:88:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNjcxMTAvBgNVBAUTKEUxNUEzNjAzNzJEREFGMUM1QjIxOEU4QzRDRjY5RjZG OEJEN0Y1OUEwHhcNMjUxMDE4MTgzMTQ3WhcNMjUxMDI1MTgzMTQ3WjAYMRYwFAYD VQQDEw02OGYzZGQxMy1kZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFpw8UB6B8UCotkLeNSuToyHY3URgvcUh5ttor2GdBBjDSPi8wYI+LzRYmK2 hAbrc633bIqFA/+GNae7boESTmJnnFutEJeHzgr5PuPsBu0FFNJfJHuycRPHSoZ8 nvf8HL2QDyzfESnxLtS7tfFd68eBisc3egSgjY4cmtCNvPIZ487vVV99SQMtYFRu CT4ca059w3DfDum2zzo2RmopH9S/67PWKoENBBTQPat4OGXUagY3vkQo6Vaq7/QK xsc3q17FXwOndz4AncDbmsVuJxLA0wPmoPQnASEp77Ucf9NwgToL4ytatxvm0zjj s9OKso0g2ahqus32lsToRrYgBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuJwXtZ 3MqjcTcHsdSTisszQoI6MB8GA1UdIwQYMBaAFOFaNgNy3a8cWyGOjEz2n2+L1/Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2Ny8wOEMzRDI4RUMy MjUxMUU5QTM2N0QzMjVDNEY5QUUwMi80Vm8yQTNMZHJ4eGJJWTZNVFBhZmI0dlg5 Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWbzJBM0xkcnh4YklZNk1UUGFmYjR2WDlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2Ny8wOEMzRDI4RUMyMjUxMUU5QTM2N0QzMjVDNEY5QUUwMi80Vm8yQTNMZHJ4 eGJJWTZNVFBhZmI0dlg5Wm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK9BsjVU9DnIhUy457VC2iqF3s0EPddbO8bdKNimWBcyfpTftKgxf2 YPXI6hO4ryhfZYO0TcWBpQh5ywNEv/DWDEXCy0inOcOZQUfQfNLkWG/ImleAwo2b SCyPOzUhiByFjEL8rXsBbB4WB+29IMkhE0nB+my4Eh+NGWvFr8A38wLWubD6YQmq uW0DpklA1btvY5FTXMiNn0g9vT1wSAlECw1quc/FBkiM0MrxN6vsZRH+5NRTqDIZ V4Qx7O25hB7nHNGhGk/+cG3+X7FmT7N0/dMnwxjLO85Ubkq5kureN1nPUkkLIdKy AoB5DzqCa+PVeJxnLC4Y6WlebTQ4sYgk -----END CERTIFICATE-----Generated at Mon Oct 20 13:40:26 2025 by rpki-client