$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft File: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft (raw, json) Hash identifier: H9CipvwKaqWdwta0TLPRGZoJ5sWpn3MmB2sLxDUW9h0= Subject key identifier: EC:9B:42:CE:B1:1F:F9:E5:61:69:99:FA:E5:93:60:4F:59:ED:19:11 Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 Certificate issuer: /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft Manifest number: 03BD Signing time: Sun 19 Oct 2025 02:39:09 +0000 Manifest this update: Sun 19 Oct 2025 02:39:08 +0000 Manifest next update: Sun 26 Oct 2025 02:39:08 +0000 Files and hashes: 1: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl (hash: ypXDzU3Q6Usyr07Ezl+pJtB1grGU5a/pozp8rmPfF7c=) 2: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (hash: +7SXGk64WdhbzbBHPQcKc3z8KwO03i6JIK3eFusKvxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE1C, serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Validity Not Before: Oct 19 02:39:08 2025 GMT Not After : Oct 26 02:39:08 2025 GMT Subject: CN=68f44f4c-0e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:f4:ff:43:e4:72:10:8d:ca:e2:24:a6:93: 70:ff:90:5c:ad:77:1e:f3:ea:10:25:97:cc:fe:e8: d7:33:5c:64:a4:67:ab:31:ee:2e:d1:ae:ba:6c:05: d7:1f:07:6a:c6:a5:aa:b7:4c:dc:92:bd:7d:ce:46: 63:74:82:b4:f3:50:e1:9e:cc:8e:76:15:5b:dd:78: 4c:fa:32:99:da:c8:6a:d6:91:0f:de:c6:4c:5f:ad: 97:45:75:ca:cf:b0:7d:d4:74:96:c2:f1:88:b8:d7: 7e:a8:36:ad:93:c6:78:b9:2f:d7:e0:dd:aa:55:0b: 49:af:c6:2a:9e:de:22:3b:b5:28:fa:81:b6:aa:7e: 45:b8:d9:cc:6c:1b:71:33:69:84:c0:7a:6e:a0:15: 36:be:fe:30:65:bb:2e:0d:48:1b:c0:67:6b:2b:2f: 97:ba:b6:6b:b4:ca:b9:7e:0f:94:10:be:56:46:07: b2:a5:a6:09:ef:12:a0:74:be:63:77:b2:d0:59:e7: 37:84:3e:3d:2f:7b:9b:0d:8c:cc:db:9b:f1:38:95: f8:36:d0:80:b4:50:e1:7b:0e:47:92:8d:3e:b2:5c: 6e:8b:c6:35:96:b3:ea:89:47:7c:b8:10:55:9d:49: 19:b7:b7:ba:02:96:85:cc:4d:29:07:29:20:d1:33: ec:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9B:42:CE:B1:1F:F9:E5:61:69:99:FA:E5:93:60:4F:59:ED:19:11 X509v3 Authority Key Identifier: keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:b5:dc:8a:b2:fc:0b:8b:e5:8c:3c:9a:61:d5:b1:81:8e:e5: 7f:d7:01:d6:b7:7a:aa:53:dc:9a:bf:d8:fb:d2:6c:3a:6a:a6: 8c:58:f0:f3:5d:da:2d:23:7d:94:0b:3c:52:51:37:8f:f8:84: 92:51:c7:b3:2c:9d:ba:43:a7:1d:2c:ef:26:47:bd:c7:a4:bc: b7:4f:9d:51:02:dc:10:2b:fc:ed:8d:a8:4e:f4:16:83:e6:26: 7a:31:35:09:8f:9d:a1:2b:bf:ef:94:fd:7e:2d:0e:b8:45:fe: 2e:99:bd:da:23:2b:51:f6:b6:bd:74:df:61:85:56:1e:ae:c9: 36:c2:5c:14:dc:88:d3:4b:61:52:f5:c9:6c:e7:5b:e4:37:21: 18:b7:40:cd:58:7d:40:15:fc:fc:ba:2d:d9:b1:a2:8c:15:02: c9:47:fd:d3:17:f0:bb:98:e0:8a:80:c4:27:fa:02:d5:63:a8: 0f:28:41:11:cd:ff:83:ad:e8:a7:b5:13:7e:83:f8:d4:fa:2b: 30:1b:cb:e9:3e:5a:2d:a9:8a:f9:03:f6:1b:c7:97:48:16:a0: af:b0:c7:99:de:bc:93:03:19:42:43:fc:39:18:a8:bd:06:0a: 30:b7:0d:59:66:d1:99:00:f1:db:31:6d:45:98:1f:10:27:9f: 59:b8:75:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMUMxMTAvBgNVBAUTKEUyRTA0M0E5MzJFQ0UwNDM5RTJBOEVGMURDNDA2NEQz MjE0QzI3RTYwHhcNMjUxMDE5MDIzOTA4WhcNMjUxMDI2MDIzOTA4WjAYMRYwFAYD VQQDEw02OGY0NGY0Yy0wZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAut/0/0PkchCNyuIkppNw/5BcrXce8+oQJZfM/ujXM1xkpGerMe4u0a66bAXX HwdqxqWqt0zckr19zkZjdIK081DhnsyOdhVb3XhM+jKZ2shq1pEP3sZMX62XRXXK z7B91HSWwvGIuNd+qDatk8Z4uS/X4N2qVQtJr8Yqnt4iO7Uo+oG2qn5FuNnMbBtx M2mEwHpuoBU2vv4wZbsuDUgbwGdrKy+XurZrtMq5fg+UEL5WRgeypaYJ7xKgdL5j d7LQWec3hD49L3ubDYzM25vxOJX4NtCAtFDhew5Hko0+slxui8Y1lrPqiUd8uBBV nUkZt7e6ApaFzE0pBykg0TPsJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOybQs6x H/nlYWmZ+uWTYE9Z7RkRMB8GA1UdIwQYMBaAFOLgQ6ky7OBDniqO8dxAZNMhTCfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxQy9GMDc0NzNBRUFB NjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRFT2VLbzd4M0VCazB5Rk1K LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1QkRxVExzNEVPZUtvN3gzRUJrMHlGTUotWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUxQy9GMDc0NzNBRUFBNjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRF T2VLbzd4M0VCazB5Rk1KLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUtdyKsvwLi+WMPJph1bGBjuV/1wHWt3qqU9yav9j70mw6aqaMWPDz XdotI32UCzxSUTeP+ISSUcezLJ26Q6cdLO8mR73HpLy3T51RAtwQK/ztjahO9BaD 5iZ6MTUJj52hK7/vlP1+LQ64Rf4umb3aIytR9ra9dN9hhVYersk2wlwU3IjTS2FS 9cls51vkNyEYt0DNWH1AFfz8ui3ZsaKMFQLJR/3TF/C7mOCKgMQn+gLVY6gPKEER zf+DreintRN+g/jU+iswG8vpPlotqYr5A/Ybx5dIFqCvsMeZ3ryTAxlCQ/w5GKi9 Bgowtw1ZZtGZAPHbMW1FmB8QJ59ZuHWE -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:17 2025 by rpki-client