$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft File: Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft (raw, json) Hash identifier: UmqoDGiWdGqwbz3bIRBambzihyy9rlB495nW1u8Wwtg= Subject key identifier: 20:39:40:34:A0:9F:12:D4:4E:E6:F8:E5:61:92:62:C2:5F:64:70:1F Authority key identifier: 56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9 Certificate issuer: /CN=A91BB246/serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft Manifest number: 4C Signing time: Sun 19 Oct 2025 10:45:56 +0000 Manifest this update: Sun 19 Oct 2025 10:45:55 +0000 Manifest next update: Sun 26 Oct 2025 10:45:55 +0000 Files and hashes: 1: Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl (hash: lLik82Kp+OnK3y6QQ8kbCx8I4VaScztrSd0dCvggQpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB246, serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9 Validity Not Before: Oct 19 10:45:55 2025 GMT Not After : Oct 26 10:45:55 2025 GMT Subject: CN=68f4c163-12eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:ca:ce:0e:2c:2b:6b:a0:fa:b9:eb:f9:a1: d5:15:4b:d3:71:51:fb:eb:fe:60:2d:68:5d:2e:8f: 05:8d:61:40:d4:de:1e:a1:7e:32:30:14:45:85:00: cc:a9:6f:f0:6f:5c:71:c2:33:a3:0a:cb:90:d7:9e: 46:44:c1:05:e6:38:70:1a:c2:17:38:13:7d:3e:ac: 6e:2b:25:21:01:03:c8:fa:3d:d5:8a:51:08:a7:35: e2:77:f6:f2:ff:d8:0f:c3:d9:56:67:c8:62:69:81: 49:85:e4:55:30:f2:7e:34:64:ae:f7:6f:9b:b0:c1: 5a:9a:55:76:f6:56:98:3e:7a:fe:b2:e2:70:7d:de: 94:0f:45:56:3b:49:b9:c9:2b:65:12:23:1d:11:00: 31:71:ab:34:85:c0:36:e0:76:0d:17:b0:bd:08:dc: a2:05:9b:78:7a:5c:9b:c9:8d:8d:89:0d:63:12:d8: 67:35:4d:89:15:ec:c4:e3:d8:f4:08:03:12:1f:73: 60:6d:a2:0f:35:6c:f4:dd:72:7a:89:3c:dc:8c:f4: d8:d8:39:7a:09:e5:e9:ca:3e:5e:67:ca:b0:90:cb: f7:cf:10:12:8a:30:27:43:48:da:36:4c:d4:a7:18: 11:99:df:49:39:fb:9e:e7:ed:f8:60:bd:1b:b0:1d: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:39:40:34:A0:9F:12:D4:4E:E6:F8:E5:61:92:62:C2:5F:64:70:1F X509v3 Authority Key Identifier: keyid:56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:0a:0e:93:1b:24:04:c7:fa:4a:e0:ec:47:e5:15:c1:cc:06: 29:f4:ac:be:ad:75:d8:b3:ba:34:11:63:58:64:5f:d2:72:37: 03:f7:79:c1:4e:e2:1d:06:ec:61:95:fe:4a:2a:8d:3f:63:79: f5:1b:9c:33:a7:e6:2d:24:2f:72:cf:ec:d1:71:43:54:f3:16: 21:52:2d:e8:5b:28:65:77:1a:71:fd:c6:bb:b9:49:28:21:ad: 1e:6b:cf:41:3d:65:4c:ee:8e:a1:7d:fe:6d:7c:ca:b3:69:5a: ba:e9:c4:ba:b1:f2:dc:29:3e:f5:21:28:18:dd:80:d5:9a:b1: 1b:7b:b3:f4:8b:e5:d3:c4:43:25:f6:29:18:f4:00:4c:c8:b6: 25:89:46:64:79:44:bd:b6:86:9c:4c:45:b6:2e:af:83:9c:ff: 90:09:18:ea:ec:f5:b2:60:7c:6e:88:ba:f2:d4:45:ec:a5:d5: 6f:54:95:37:05:35:26:b8:13:07:ef:36:ef:09:87:86:6d:81: ab:8f:dd:0c:ee:28:49:54:18:68:c5:bf:01:ab:2e:b9:a6:c3: d6:ca:d4:46:0b:72:4c:c5:ab:09:44:13:15:ae:39:6a:ac:74: 83:28:50:f1:6c:16:74:73:1d:dd:0c:ef:65:fa:c0:f9:01:9d: 3a:a5:b2:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjI0NjExMC8GA1UEBRMoNTY3RTMyMURBRjRBRjc0NDNCMEQ3OUUzMkFDMDMwNzk3 NTI3RjFEOTAeFw0yNTEwMTkxMDQ1NTVaFw0yNTEwMjYxMDQ1NTVaMBgxFjAUBgNV BAMTDTY4ZjRjMTYzLTEyZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3rcrODiwra6D6uev5odUVS9NxUfvr/mAtaF0ujwWNYUDU3h6hfjIwFEWFAMyp b/BvXHHCM6MKy5DXnkZEwQXmOHAawhc4E30+rG4rJSEBA8j6PdWKUQinNeJ39vL/ 2A/D2VZnyGJpgUmF5FUw8n40ZK73b5uwwVqaVXb2Vpg+ev6y4nB93pQPRVY7SbnJ K2USIx0RADFxqzSFwDbgdg0XsL0I3KIFm3h6XJvJjY2JDWMS2Gc1TYkV7MTj2PQI AxIfc2Btog81bPTdcnqJPNyM9NjYOXoJ5enKPl5nyrCQy/fPEBKKMCdDSNo2TNSn GBGZ30k5+57n7fhgvRuwHe4HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIDlANKCf EtRO5vjlYZJiwl9kcB8wHwYDVR0jBBgwFoAUVn4yHa9K90Q7DXnjKsAweXUn8dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjQ2L0YxQzVDOTUyM0Mw RDExRjA5NkNDREI1RkM0RjlBRTAyL1ZuNHlIYTlLOTBRN0RYbmpLc0F3ZVhVbjhk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVm40eUhhOUs5MFE3RFhuaktzQXdlWFVuOGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MjQ2L0YxQzVDOTUyM0MwRDExRjA5NkNDREI1RkM0RjlBRTAyL1ZuNHlIYTlLOTBR N0RYbmpLc0F3ZVhVbjhkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFEKDpMbJATH+krg7EflFcHMBin0rL6tddizujQRY1hkX9JyNwP3ecFO 4h0G7GGV/koqjT9jefUbnDOn5i0kL3LP7NFxQ1TzFiFSLehbKGV3GnH9xru5SSgh rR5rz0E9ZUzujqF9/m18yrNpWrrpxLqx8twpPvUhKBjdgNWasRt7s/SL5dPEQyX2 KRj0AEzItiWJRmR5RL22hpxMRbYur4Oc/5AJGOrs9bJgfG6IuvLUReyl1W9UlTcF NSa4EwfvNu8Jh4ZtgauP3QzuKElUGGjFvwGrLrmmw9bK1EYLckzFqwlEExWuOWqs dIMoUPFsFnRzHd0M72X6wPkBnTqlshk= -----END CERTIFICATE-----Generated at Mon Oct 20 20:43:22 2025 by rpki-client