$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft File: 4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json) Hash identifier: 3PObi+49jYrdIP06d1CQFr2cRrDPOL93Ienp2Zw0EjY= Subject key identifier: FE:3B:CC:16:97:0C:46:1A:BF:F0:7D:74:8B:D0:67:6A:15:A6:82:A6 Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 Certificate issuer: /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft Manifest number: C1 Signing time: Sun 19 Oct 2025 08:59:46 +0000 Manifest this update: Sun 19 Oct 2025 08:59:46 +0000 Manifest next update: Sun 26 Oct 2025 08:59:46 +0000 Files and hashes: 1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: cYcYLqcaLCOgy5UvSIgXMIRq+SPS3uoPSuIMBXexdNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Validity Not Before: Oct 19 08:59:46 2025 GMT Not After : Oct 26 08:59:46 2025 GMT Subject: CN=68f4a882-a73f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e4:61:aa:bd:b8:b0:10:ef:74:07:43:72:76: bd:af:2b:1c:80:fa:15:ea:92:40:0c:2d:01:ce:7e: 5f:0c:22:f0:18:f6:74:dc:17:2a:14:7f:21:33:21: ab:b7:9c:83:56:61:56:a3:34:78:31:d8:cc:71:c9: 76:57:04:6b:6d:95:04:3f:1e:a2:10:d1:82:46:62: 45:93:ed:86:9d:b0:1f:d1:74:7b:31:92:ce:6f:e8: 10:f7:75:fe:29:aa:a6:b0:48:03:5c:50:a5:bd:04: 45:bb:cd:ce:55:ae:1f:9a:4c:4b:c2:04:50:14:67: c9:58:7f:28:20:e1:32:29:a4:51:4a:9b:d3:0e:a6: ab:ba:cf:2d:3b:b8:3b:3c:ec:a8:f2:3d:44:6c:26: fa:8c:df:7b:6f:63:8d:a7:db:a5:36:d1:29:a9:8d: 31:42:03:b9:36:53:88:e9:a6:c2:29:02:a8:1e:5e: d6:4f:5f:05:ad:5b:73:d4:dc:d5:b7:4d:de:0c:99: d9:99:8d:e7:9f:0c:da:ae:3a:26:15:19:2b:32:d7: c3:13:c6:7f:16:ff:a2:1e:51:a8:0c:6c:5f:3b:7e: 24:ec:ef:6f:43:85:d7:95:57:a7:2e:8f:b9:21:11: ae:f1:22:b7:0a:ee:a8:17:01:42:2d:60:5c:82:93: 96:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3B:CC:16:97:0C:46:1A:BF:F0:7D:74:8B:D0:67:6A:15:A6:82:A6 X509v3 Authority Key Identifier: keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:f8:25:ab:8c:45:d9:a4:d8:0b:bb:d0:91:22:70:2c:5c:b3: d5:66:77:7b:cb:6b:3a:0e:6b:e6:2d:69:ce:4d:52:4d:fa:f5: b1:d3:ad:02:d3:ec:22:87:52:e7:41:9f:f2:32:e5:00:62:58: 6d:6f:47:0f:57:db:fc:88:c4:b6:05:18:5b:db:b3:23:4e:a5: b9:ee:2a:a3:15:da:d6:24:8e:eb:27:2a:70:68:19:93:3d:52: 74:f4:8e:60:3f:27:1f:de:c0:6f:64:01:c4:57:9a:6d:c0:58: dc:54:6c:b0:2d:7c:e3:ec:a4:fa:ad:88:4c:3c:27:5f:01:8b: 5b:72:67:34:b6:b5:c0:77:8c:68:3e:bb:da:39:96:43:f2:53: f5:c0:2a:a3:a1:b5:bc:71:55:d2:5b:ba:a9:27:9f:f9:32:f5: 19:23:66:0a:e2:0e:83:c7:0b:a7:bf:10:18:8e:77:4d:27:17: d8:c6:19:e7:13:f0:68:e3:d6:89:07:59:42:13:80:3f:89:d4: f4:8f:66:3a:e6:2f:21:45:e0:5f:c8:cf:c4:0f:15:46:c4:80: 3c:63:f0:e2:51:70:55:e3:47:e9:fb:dc:72:a3:61:e8:38:c2: 9e:e9:af:97:b9:4e:86:d5:7f:55:45:d6:b9:36:b6:75:dd:50: d8:5f:27:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKEUwREM2Q0I3MDlFRUIxMUJDMjA3NUYzNTJFQjZFRDRF ODE4QUU3MDUwHhcNMjUxMDE5MDg1OTQ2WhcNMjUxMDI2MDg1OTQ2WjAYMRYwFAYD VQQDEw02OGY0YTg4Mi1hNzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ORhqr24sBDvdAdDcna9ryscgPoV6pJADC0Bzn5fDCLwGPZ03BcqFH8hMyGr t5yDVmFWozR4MdjMccl2VwRrbZUEPx6iENGCRmJFk+2GnbAf0XR7MZLOb+gQ93X+ KaqmsEgDXFClvQRFu83OVa4fmkxLwgRQFGfJWH8oIOEyKaRRSpvTDqarus8tO7g7 POyo8j1EbCb6jN97b2ONp9ulNtEpqY0xQgO5NlOI6abCKQKoHl7WT18FrVtz1NzV t03eDJnZmY3nnwzarjomFRkrMtfDE8Z/Fv+iHlGoDGxfO34k7O9vQ4XXlVenLo+5 IRGu8SK3Cu6oFwFCLWBcgpOW8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP47zBaX DEYav/B9dIvQZ2oVpoKmMB8GA1UdIwQYMBaAFODcbLcJ7rEbwgdfNS627U6BiucF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy80MkE5QkI1NDg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNSdkNCMTgxTHJidFRvR0s1 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROeHN0d251c1J2Q0IxODFMcmJ0VG9HSzV3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy80MkE5QkI1NDg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNS dkNCMTgxTHJidFRvR0s1d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj+CWrjEXZpNgLu9CRInAsXLPVZnd7y2s6DmvmLWnOTVJN+vWx060C 0+wih1LnQZ/yMuUAYlhtb0cPV9v8iMS2BRhb27MjTqW57iqjFdrWJI7rJypwaBmT PVJ09I5gPycf3sBvZAHEV5ptwFjcVGywLXzj7KT6rYhMPCdfAYtbcmc0trXAd4xo PrvaOZZD8lP1wCqjobW8cVXSW7qpJ5/5MvUZI2YK4g6DxwunvxAYjndNJxfYxhnn E/Bo49aJB1lCE4A/idT0j2Y65i8hReBfyM/EDxVGxIA8Y/DiUXBV40fp+9xyo2Ho OMKe6a+XuU6G1X9VRda5NrZ13VDYXycq -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:43 2025 by rpki-client