$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft File: A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json) Hash identifier: PHgtXGZaK7TIS4Xp1QEuKzb2eCtAZefHlvSIbx5TYgo= Subject key identifier: 3F:1B:0D:23:14:6F:7C:F9:F3:1F:1C:4E:B9:4C:D9:9E:D8:7B:46:43 Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63 Certificate issuer: /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263 Certificate serial: 0C3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft Manifest number: 0C26 Signing time: Mon 20 Oct 2025 19:21:51 +0000 Manifest this update: Mon 20 Oct 2025 19:21:51 +0000 Manifest next update: Mon 27 Oct 2025 19:21:51 +0000 Files and hashes: 1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: wqzd3EhFmKJ6VdQK5LeOABY68C9s3gMpejornvz+qEY=) 2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: If6A0dtzlgPVB4CBNXQ4TMiF5xMEzeKvLljq5QFI3bk=) 3: 398848523A0011EFB7007939C4F9AE02.roa (hash: Zlhwy82VHpRYLPT4enDdRaV9Hjue+wnu8x2KNE0lTzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3131 (0xc3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4003, serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263 Validity Not Before: Oct 20 19:21:51 2025 GMT Not After : Oct 27 19:21:51 2025 GMT Subject: CN=68f68bcf-5afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:e7:dc:7a:bc:45:e5:9a:30:16:15:bc:70: b1:04:5c:f0:f2:fb:0d:e7:8e:25:8a:fc:8f:a1:9a: a2:0e:15:dc:70:0b:a5:2f:5b:37:fa:6d:78:e8:a8: 42:0a:f0:b1:b1:a8:34:c4:21:bc:8d:b5:52:75:08: 7e:f0:98:f2:2a:0d:e6:4a:6d:ed:9a:a0:f6:23:1a: 9f:b5:ee:6b:76:5d:d1:12:c9:e0:97:76:5f:5c:74: 84:29:18:65:12:5c:ed:aa:a5:7f:25:08:fd:e4:98: 10:64:b7:20:29:a9:b0:98:1b:bc:e8:d4:a9:c6:e5: 42:0e:bf:00:f1:6c:1f:e2:8a:8d:52:b7:e2:04:b3: 50:38:9e:1e:3c:a5:28:91:a1:b3:44:4c:c8:23:d4: da:10:08:96:f3:9b:d7:0a:28:a6:76:4f:57:68:3d: 92:d6:6f:17:7e:b1:44:a8:0e:93:ab:e0:1a:04:52: 33:33:f5:1b:28:ce:6f:56:d4:25:1d:e0:8f:1c:fc: 3d:88:35:9c:61:87:bd:3f:d4:2c:fc:83:e2:32:4a: 39:c2:fd:58:de:09:06:73:8b:1a:74:62:c3:95:c0: 03:fb:41:80:93:8d:d1:c8:20:d8:ef:b5:a5:1c:a6: 8b:42:b0:36:7d:b6:34:12:c7:44:30:db:b7:f9:3a: 57:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1B:0D:23:14:6F:7C:F9:F3:1F:1C:4E:B9:4C:D9:9E:D8:7B:46:43 X509v3 Authority Key Identifier: keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:c9:d7:96:c5:3c:fd:d0:d5:f7:ec:20:0a:3b:98:de:bd:5e: 14:50:21:21:03:66:5d:c4:bf:0e:5e:1b:b0:7f:f6:0c:fc:88: 89:bd:e7:41:ea:9d:c1:34:cf:05:4b:44:87:86:2d:06:03:74: 67:49:5a:6a:7d:b0:cc:5b:99:84:44:e9:01:4b:59:78:97:8b: 40:3f:d6:8b:5e:06:e3:ab:89:6a:9d:c4:b2:5f:cb:ac:00:6e: 70:21:c7:a6:78:75:d0:67:aa:3b:ad:94:90:e6:3d:6e:d3:15: e0:70:c4:23:0d:ce:ea:f3:bc:d3:bc:15:8e:ae:14:a9:7f:58: d0:d4:8f:e0:04:26:72:14:30:8e:76:29:53:eb:cb:02:74:3d: 1d:1a:b8:b8:61:a5:03:d3:6a:9d:a7:bd:6b:8f:1d:97:07:f5: 63:44:10:95:53:60:87:9f:4f:14:92:44:83:cd:4b:ac:83:1b: d3:3e:ed:ee:85:fc:77:9b:89:b6:e6:c5:1c:fe:b1:3a:65:ef: ce:03:37:95:17:57:5b:1c:48:c9:08:8b:d1:80:44:00:14:d6: 72:bd:6b:a9:c2:0b:07:ac:d4:29:80:47:1c:d8:f2:6d:d1:3a: ce:be:7a:c0:5e:b1:3d:42:a7:2c:f4:2e:7d:6c:50:29:eb:f4: 62:3d:b6:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwMDMxMTAvBgNVBAUTKDAzOEE4NkYzNjJCMjU1N0Y5NEJFNzcyRUUwQzVGRDMx ODQ1RkUyNjMwHhcNMjUxMDIwMTkyMTUxWhcNMjUxMDI3MTkyMTUxWjAYMRYwFAYD VQQDEw02OGY2OGJjZi01YWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1Dn3Hq8ReWaMBYVvHCxBFzw8vsN544livyPoZqiDhXccAulL1s3+m146KhC CvCxsag0xCG8jbVSdQh+8JjyKg3mSm3tmqD2Ixqfte5rdl3REsngl3ZfXHSEKRhl ElztqqV/JQj95JgQZLcgKamwmBu86NSpxuVCDr8A8Wwf4oqNUrfiBLNQOJ4ePKUo kaGzREzII9TaEAiW85vXCiimdk9XaD2S1m8XfrFEqA6Tq+AaBFIzM/UbKM5vVtQl HeCPHPw9iDWcYYe9P9Qs/IPiMko5wv1Y3gkGc4sadGLDlcAD+0GAk43RyCDY77Wl HKaLQrA2fbY0EsdEMNu3+TpX9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8bDSMU b3z58x8cTrlM2Z7Ye0ZDMB8GA1UdIwQYMBaAFAOKhvNislV/lL53LuDF/TGEX+Jj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDAwMy9COEU4QUQ3MjFB RDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZYLVV2bmN1NE1YOU1ZUmY0 bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0cUc4Mkt5VlgtVXZuY3U0TVg5TVlSZjRtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDAwMy9COEU4QUQ3MjFBRDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZY LVV2bmN1NE1YOU1ZUmY0bU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTydeWxTz90NX37CAKO5jevV4UUCEhA2ZdxL8OXhuwf/YM/IiJvedB 6p3BNM8FS0SHhi0GA3RnSVpqfbDMW5mEROkBS1l4l4tAP9aLXgbjq4lqncSyX8us AG5wIcemeHXQZ6o7rZSQ5j1u0xXgcMQjDc7q87zTvBWOrhSpf1jQ1I/gBCZyFDCO dilT68sCdD0dGri4YaUD02qdp71rjx2XB/VjRBCVU2CHn08UkkSDzUusgxvTPu3u hfx3m4m25sUc/rE6Ze/OAzeVF1dbHEjJCIvRgEQAFNZyvWupwgsHrNQpgEcc2PJt 0TrOvnrAXrE9Qqcs9C59bFAp6/RiPbZL -----END CERTIFICATE-----Generated at Tue Oct 21 03:04:19 2025 by rpki-client