$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft File: bz4CYgDVU58n4POqUNMgokUo1X0.mft (raw, json) Hash identifier: FZOzg0N7+MT75A/0Z13UneZCI4VONOhUsMCC2GISnTo= Subject key identifier: 0E:7D:05:9E:F8:E6:F8:88:9A:EE:86:53:F8:D1:75:4E:75:11:37:21 Authority key identifier: 6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D Certificate issuer: /CN=A91B732A/serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft Manifest number: A4 Signing time: Sun 19 Oct 2025 09:30:56 +0000 Manifest this update: Sun 19 Oct 2025 09:30:55 +0000 Manifest next update: Sun 26 Oct 2025 09:30:55 +0000 Files and hashes: 1: bz4CYgDVU58n4POqUNMgokUo1X0.crl (hash: 9rlCjwePC7pExl48O9etqhHpaNoGKu0ubO61GTJWiD0=) 2: 31EC2E5CBAAB11EFA97B2C66C4F9AE02.roa (hash: QpBoEt1C2EBI43s0+/uUFeo0zNr6mDnCWlKa7GcSILU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B732A, serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D Validity Not Before: Oct 19 09:30:55 2025 GMT Not After : Oct 26 09:30:55 2025 GMT Subject: CN=68f4afd0-1029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:40:79:3a:29:e1:a4:46:93:10:66:26:20:9c: f6:9e:19:a5:be:a3:6d:fd:47:c5:eb:4f:7a:65:2a: cc:55:0f:55:0f:e1:2d:a0:6e:14:cf:d0:7f:f5:99: 33:d4:3e:dc:b5:44:61:3b:6b:12:17:ae:17:f1:79: b4:56:fc:ae:7a:55:56:9b:85:df:e5:0d:e0:0e:89: 37:12:7e:05:ab:68:c9:8e:7f:14:0f:2f:08:ce:cc: f7:73:e2:84:5c:74:d8:ea:f2:96:ed:a6:46:71:b9: 33:6f:fe:c9:d2:7c:bf:66:81:d9:3d:3c:f5:e6:28: c7:95:4d:18:ee:fb:10:cd:12:a1:c2:b9:20:ef:ae: 3b:56:f5:52:55:90:d1:36:fa:a3:11:46:9d:60:5c: a9:60:21:29:30:e0:ec:86:06:77:ef:b2:44:97:d6: 47:04:ac:8a:37:52:51:1d:e0:f4:b9:16:3b:56:43: df:48:27:89:2c:95:b5:1c:e1:c6:93:05:5b:cb:b7: 49:7b:0d:5c:c2:c8:c7:8f:09:db:4f:98:71:05:36: ed:14:ff:7f:39:41:11:3a:ba:67:30:31:bf:3a:b1: a6:46:19:c2:2f:0f:f4:82:97:68:0e:25:d4:8c:4e: d8:6e:14:63:b1:1a:25:90:86:92:97:65:88:60:a8: 35:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7D:05:9E:F8:E6:F8:88:9A:EE:86:53:F8:D1:75:4E:75:11:37:21 X509v3 Authority Key Identifier: keyid:6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:b6:59:4d:fa:ca:b1:5d:84:a6:e1:7c:0c:43:c5:ce:f5:ba: b5:1b:8d:2e:4a:8c:e5:1a:97:2f:68:99:e9:2c:af:57:8f:a5: 45:a0:5d:19:8e:8b:14:d9:66:42:50:f2:a8:50:b8:b4:a3:f2: 03:4e:33:99:c0:1f:d7:bf:2f:60:c8:c7:6a:84:bf:a9:a8:ad: ba:9c:41:48:d6:ea:92:7a:a3:33:35:b5:43:b4:c9:83:a3:22: 06:e5:62:31:3c:2d:e5:00:a8:a9:e1:b0:3b:6b:82:98:d6:f9: fe:0f:d3:e2:c7:10:9c:a4:40:87:ba:ff:a8:75:7f:44:c9:b6: 81:2f:67:8b:bb:7a:5d:2b:67:02:a2:f6:66:4c:4e:f3:2a:e2: 83:27:f4:c6:cd:8f:0a:81:7a:b5:ee:b4:e0:94:8b:47:7b:28: 3a:41:c1:6e:2a:e3:eb:81:b0:55:cd:28:8d:a6:1e:08:a1:1f: 3a:d1:74:09:cc:64:c5:8d:a4:38:2d:9e:fa:66:9b:82:61:52: 93:08:8b:28:f6:57:8d:9c:d7:67:18:cc:6e:05:10:86:a4:a2: d1:af:a7:a9:2b:69:d0:47:15:62:0d:41:61:8a:bd:69:cc:ad: 76:34:b4:a4:ce:7a:9b:01:8c:65:35:d9:ae:8f:43:1b:6d:98: 13:01:ac:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjczMkExMTAvBgNVBAUTKDZGM0UwMjYyMDBENTUzOUYyN0UwRjNBQTUwRDMyMEEy NDUyOEQ1N0QwHhcNMjUxMDE5MDkzMDU1WhcNMjUxMDI2MDkzMDU1WjAYMRYwFAYD VQQDEw02OGY0YWZkMC0xMDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0B5OinhpEaTEGYmIJz2nhmlvqNt/UfF6096ZSrMVQ9VD+EtoG4Uz9B/9Zkz 1D7ctURhO2sSF64X8Xm0VvyuelVWm4Xf5Q3gDok3En4Fq2jJjn8UDy8Izsz3c+KE XHTY6vKW7aZGcbkzb/7J0ny/ZoHZPTz15ijHlU0Y7vsQzRKhwrkg7647VvVSVZDR NvqjEUadYFypYCEpMODshgZ377JEl9ZHBKyKN1JRHeD0uRY7VkPfSCeJLJW1HOHG kwVby7dJew1cwsjHjwnbT5hxBTbtFP9/OUEROrpnMDG/OrGmRhnCLw/0gpdoDiXU jE7YbhRjsRolkIaSl2WIYKg1xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA59BZ74 5viImu6GU/jRdU51ETchMB8GA1UdIwQYMBaAFG8+AmIA1VOfJ+DzqlDTIKJFKNV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzMyQS9GRkYyRTZBOEI2 MzAxMUVGQTJEN0ZCNjNDNEY5QUUwMi9iejRDWWdEVlU1OG40UE9xVU5NZ29rVW8x WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2J6NENZZ0RWVTU4bjRQT3FVTk1nb2tVbzFYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzMyQS9GRkYyRTZBOEI2MzAxMUVGQTJEN0ZCNjNDNEY5QUUwMi9iejRDWWdEVlU1 OG40UE9xVU5NZ29rVW8xWDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDItllN+sqxXYSm4XwMQ8XO9bq1G40uSozlGpcvaJnpLK9Xj6VFoF0Z josU2WZCUPKoULi0o/IDTjOZwB/Xvy9gyMdqhL+pqK26nEFI1uqSeqMzNbVDtMmD oyIG5WIxPC3lAKip4bA7a4KY1vn+D9PixxCcpECHuv+odX9EybaBL2eLu3pdK2cC ovZmTE7zKuKDJ/TGzY8KgXq17rTglItHeyg6QcFuKuPrgbBVzSiNph4IoR860XQJ zGTFjaQ4LZ76ZpuCYVKTCIso9leNnNdnGMxuBRCGpKLRr6epK2nQRxViDUFhir1p zK12NLSkznqbAYxlNdmuj0MbbZgTAazv -----END CERTIFICATE-----Generated at Mon Oct 20 23:36:27 2025 by rpki-client