$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft File: 4H5XaJwnqZNhHLq6l7GU0xeWz28.mft (raw, json) Hash identifier: KBRwi5v4UlkECw1GTOazn6Un8SkNqWvuC2vyfr8VX88= Subject key identifier: 5D:AC:23:28:B9:2D:A5:45:79:86:0B:3A:CF:9E:28:C8:1F:DA:0E:57 Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F Certificate issuer: /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft Manifest number: 4B Signing time: Sun 19 Oct 2025 10:46:12 +0000 Manifest this update: Sun 19 Oct 2025 10:46:12 +0000 Manifest next update: Sun 26 Oct 2025 10:46:12 +0000 Files and hashes: 1: 4H5XaJwnqZNhHLq6l7GU0xeWz28.crl (hash: 7miY6YWZpWkbkzWX05QDtRP6BeSCCAtJEnq+DArPBgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Validity Not Before: Oct 19 10:46:12 2025 GMT Not After : Oct 26 10:46:12 2025 GMT Subject: CN=68f4c174-7389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:52:92:33:e9:ce:4b:83:1d:2a:61:4d:30: 87:1c:68:16:1f:67:10:9d:3d:93:64:80:e2:f7:35: 0b:51:b8:24:19:10:47:82:63:32:34:b6:a5:51:40: bd:67:c5:e1:fb:32:61:7a:3c:dd:8c:8b:3d:48:40: e5:01:f6:95:85:65:0c:64:66:98:20:09:8d:5c:07: bd:aa:d8:01:dc:dd:9c:c9:8e:07:54:f6:81:c4:80: f9:10:18:b4:8e:ca:67:22:3b:57:34:4d:00:d3:72: 57:46:26:47:f8:f9:e3:ec:9a:2c:6e:2c:de:41:e6: e8:51:09:17:c9:0e:98:22:2d:0e:c8:e2:3c:7a:45: 94:b2:f5:6d:8a:c6:8e:0d:50:9f:21:0f:ed:6d:af: 7c:3d:05:09:7b:fb:46:89:03:b0:6b:64:32:e6:a9: fb:76:08:29:5c:7b:62:10:47:e1:f1:34:14:87:3e: 23:6a:f6:36:7c:c9:ed:fb:91:fa:94:7e:0f:f2:ec: 88:98:82:f4:7d:11:e8:b4:99:44:8f:71:d4:f7:df: 44:82:f2:83:2c:14:ae:79:d1:e9:40:76:17:da:23: cc:c0:18:ad:83:e4:ba:89:a9:12:a8:32:2c:dc:e2: c0:8b:d5:8f:37:99:c4:21:df:ac:5a:a1:7a:4e:5f: 6b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AC:23:28:B9:2D:A5:45:79:86:0B:3A:CF:9E:28:C8:1F:DA:0E:57 X509v3 Authority Key Identifier: keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:b2:5c:e3:ba:4a:9e:34:19:3a:d9:7c:d9:5b:d6:9d:53:45: 05:fa:c0:55:e0:6f:e4:39:d2:a0:ce:f8:5c:26:89:e1:d9:9b: 38:99:e2:30:ee:7a:16:b7:56:55:39:0c:aa:c2:b8:1f:59:1c: ea:b3:29:4b:29:9c:93:3f:d4:2a:ad:90:2c:05:5c:8b:60:6c: 52:3e:bd:93:17:2e:46:2b:b3:42:f3:33:72:19:1d:f0:e8:34: 50:47:ff:25:07:78:00:9e:b5:fb:22:c3:26:d3:63:96:88:af: 27:ab:3e:64:34:3e:28:0b:bb:31:8f:78:67:b3:c7:39:e3:03: d5:95:80:f2:9a:d9:8a:77:56:b7:4d:d1:be:79:5c:4a:9f:6b: 01:84:a8:6c:8d:72:a7:a9:7f:cd:a5:44:7e:42:91:2f:73:cb: 1e:51:78:ce:f9:2f:df:ee:79:d8:9e:32:cd:79:02:ce:84:e1: 87:2d:89:ca:9e:97:c0:71:d8:d4:09:4a:a4:96:67:80:41:5e: 0a:26:43:88:a9:e0:12:84:50:39:bc:a0:9a:bc:08:c0:92:f3: 87:d8:58:32:92:85:b4:77:44:f2:94:7d:0e:88:5f:5a:49:4d: 6f:71:3a:10:af:56:df:41:03:bd:95:81:a1:17:19:64:32:77: 5b:39:30:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0U1QjExMC8GA1UEBRMoRTA3RTU3Njg5QzI3QTk5MzYxMUNCQUJBOTdCMTk0RDMx Nzk2Q0Y2RjAeFw0yNTEwMTkxMDQ2MTJaFw0yNTEwMjYxMDQ2MTJaMBgxFjAUBgNV BAMTDTY4ZjRjMTc0LTczODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC71FKSM+nOS4MdKmFNMIccaBYfZxCdPZNkgOL3NQtRuCQZEEeCYzI0tqVRQL1n xeH7MmF6PN2Miz1IQOUB9pWFZQxkZpggCY1cB72q2AHc3ZzJjgdU9oHEgPkQGLSO ymciO1c0TQDTcldGJkf4+ePsmixuLN5B5uhRCRfJDpgiLQ7I4jx6RZSy9W2Kxo4N UJ8hD+1tr3w9BQl7+0aJA7BrZDLmqft2CClce2IQR+HxNBSHPiNq9jZ8ye37kfqU fg/y7IiYgvR9Eei0mUSPcdT330SC8oMsFK550elAdhfaI8zAGK2D5LqJqRKoMizc 4sCL1Y83mcQh36xaoXpOX2uRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXawjKLkt pUV5hgs6z54oyB/aDlcwHwYDVR0jBBgwFoAU4H5XaJwnqZNhHLq6l7GU0xeWz28w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RTVCL0UxNEY3MjI0M0M2 RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpOaEhMcTZsN0dVMHhlV3oy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEg1WGFKd25xWk5oSExxNmw3R1UweGVXejI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RTVCL0UxNEY3MjI0M0M2RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpO aEhMcTZsN0dVMHhlV3oyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKuyXOO6Sp40GTrZfNlb1p1TRQX6wFXgb+Q50qDO+FwmieHZmziZ4jDu eha3VlU5DKrCuB9ZHOqzKUspnJM/1CqtkCwFXItgbFI+vZMXLkYrs0LzM3IZHfDo NFBH/yUHeACetfsiwybTY5aIryerPmQ0PigLuzGPeGezxznjA9WVgPKa2Yp3VrdN 0b55XEqfawGEqGyNcqepf82lRH5CkS9zyx5ReM75L9/uedieMs15As6E4Ycticqe l8Bx2NQJSqSWZ4BBXgomQ4ip4BKEUDm8oJq8CMCS84fYWDKShbR3RPKUfQ6IX1pJ TW9xOhCvVt9BA72VgaEXGWQyd1s5MDQ= -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:33 2025 by rpki-client