$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft File: 4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json) Hash identifier: Pq1dB1zFTSMxRU5uouf9yXyHPbG+ElEgwICblSZg+fs= Subject key identifier: 8A:B8:35:74:82:96:39:C3:71:7C:76:71:86:9E:78:D5:C8:2A:75:5E Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 Certificate issuer: /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft Manifest number: 0214 Signing time: Sun 19 Oct 2025 04:31:27 +0000 Manifest this update: Sun 19 Oct 2025 04:31:27 +0000 Manifest next update: Sun 26 Oct 2025 04:31:27 +0000 Files and hashes: 1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: lEa9L0yxkQQmS+6/2xAVqTzUm0MFnj4I268j6nAX/0Y=) 2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: Hy6T8zhOl3f+SHukkt0PutGPxcTAN5g9mi9bO48HFgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7F6A, serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Validity Not Before: Oct 19 04:31:27 2025 GMT Not After : Oct 26 04:31:27 2025 GMT Subject: CN=68f4699f-99ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:53:a7:62:ad:6f:d6:2c:b3:24:39:39:51:5a: b2:69:f1:e2:23:5b:aa:92:c9:70:27:0b:a3:eb:08: de:5a:22:fa:88:5c:77:f6:6e:62:f1:29:7a:de:66: e1:2d:af:a5:82:61:f3:78:52:cd:a4:f9:c4:07:fe: 10:25:26:6b:aa:da:4b:8f:25:20:7d:a4:d6:3e:0a: 1c:e4:52:31:d5:ca:be:db:5b:6e:63:c9:09:30:e2: 5d:bc:de:36:31:c2:4e:9b:b0:90:69:84:36:a4:7c: 80:d0:5b:d8:5f:b6:bb:ad:f3:59:c1:d3:d8:2e:0f: 52:bf:34:85:db:1c:25:d5:be:89:20:04:84:b0:55: 33:b5:0f:73:86:de:cc:30:16:a4:bf:24:98:6c:6c: 43:ac:d0:7b:1c:9d:1c:23:8e:60:fd:14:d9:6d:72: 1c:af:02:09:13:3a:60:40:8e:d5:d6:5d:c8:04:2a: 91:1f:ef:19:d9:28:cb:6a:eb:e7:5e:60:2c:ff:aa: 12:32:b9:46:03:f5:95:b9:f2:c8:16:90:42:d9:79: d8:ff:be:06:6f:66:46:a5:8b:9f:69:98:25:50:51: 93:23:ae:38:f4:8b:e1:5b:97:2e:b2:3c:05:3f:de: 8f:35:71:92:c0:cb:94:7f:79:9c:21:65:90:e5:4e: 34:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B8:35:74:82:96:39:C3:71:7C:76:71:86:9E:78:D5:C8:2A:75:5E X509v3 Authority Key Identifier: keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1e:74:b2:af:3c:63:d3:49:b5:d7:e2:10:c1:a6:65:e0:12: cf:b7:78:79:35:33:d9:b7:4c:9a:43:75:f0:aa:47:52:f4:ef: d2:2d:60:61:74:a4:e2:c8:09:c2:b7:5f:96:17:10:89:bd:10: d4:07:c9:c1:85:ee:e9:a8:95:54:63:c2:8e:97:33:eb:57:41: 48:2c:b8:9a:ab:a5:e2:3c:fe:e6:8a:7d:d5:61:e7:a8:af:1f: fc:76:5c:3f:ef:22:12:83:81:40:c5:ff:86:a6:9b:e1:9a:b6: 20:b6:ba:f9:a7:69:ff:2d:58:92:34:f5:7b:a1:e1:c0:ea:3d: 02:56:59:0f:95:c1:54:30:b9:a8:b4:1a:52:1d:e0:35:d8:13: 9e:f1:98:de:3b:81:ab:95:1d:8b:6b:9b:5f:95:52:3e:9b:ec: 54:c1:2b:14:b1:90:67:04:91:cf:92:93:a8:75:80:42:3a:60: 25:81:70:ee:b7:08:05:d6:ea:70:69:3a:5d:13:65:68:01:d4: b7:09:3f:1b:25:e0:a3:cf:a6:63:26:fe:58:80:46:f0:e1:a5: e3:88:bc:fb:ae:18:74:6f:f0:95:71:33:85:3a:5c:f4:22:fd: 07:b4:42:b2:11:4c:8f:6b:c9:c6:dd:17:c2:22:30:bc:bf:12: c2:6e:24:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdGNkExMTAvBgNVBAUTKEUzM0RCNzkzQkJFRkU0NkNCQ0Y3NURCMzRFNzA5NDI3 QTcyRUYwRjMwHhcNMjUxMDE5MDQzMTI3WhcNMjUxMDI2MDQzMTI3WjAYMRYwFAYD VQQDEw02OGY0Njk5Zi05OWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1OnYq1v1iyzJDk5UVqyafHiI1uqkslwJwuj6wjeWiL6iFx39m5i8Sl63mbh La+lgmHzeFLNpPnEB/4QJSZrqtpLjyUgfaTWPgoc5FIx1cq+21tuY8kJMOJdvN42 McJOm7CQaYQ2pHyA0FvYX7a7rfNZwdPYLg9SvzSF2xwl1b6JIASEsFUztQ9zht7M MBakvySYbGxDrNB7HJ0cI45g/RTZbXIcrwIJEzpgQI7V1l3IBCqRH+8Z2SjLauvn XmAs/6oSMrlGA/WVufLIFpBC2XnY/74Gb2ZGpYufaZglUFGTI6449IvhW5cusjwF P96PNXGSwMuUf3mcIWWQ5U40iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIq4NXSC ljnDcXx2cYaeeNXIKnVeMB8GA1UdIwQYMBaAFOM9t5O77+RsvPdds05wlCenLvDz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0Y2QS8wNjc5MjUwMDdG NDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVHeTg5MTJ6VG5DVUo2Y3U4 UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzR6MjNrN3Z2NUd5ODkxMnpUbkNVSjZjdThQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0Y2QS8wNjc5MjUwMDdGNDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVH eTg5MTJ6VG5DVUo2Y3U4UE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSHnSyrzxj00m11+IQwaZl4BLPt3h5NTPZt0yaQ3XwqkdS9O/SLWBh dKTiyAnCt1+WFxCJvRDUB8nBhe7pqJVUY8KOlzPrV0FILLiaq6XiPP7min3VYeeo rx/8dlw/7yISg4FAxf+GppvhmrYgtrr5p2n/LViSNPV7oeHA6j0CVlkPlcFUMLmo tBpSHeA12BOe8ZjeO4GrlR2La5tflVI+m+xUwSsUsZBnBJHPkpOodYBCOmAlgXDu twgF1upwaTpdE2VoAdS3CT8bJeCjz6ZjJv5YgEbw4aXjiLz7rhh0b/CVcTOFOlz0 Iv0HtEKyEUyPa8nG3RfCIjC8vxLCbiQj -----END CERTIFICATE-----Generated at Mon Oct 20 22:06:18 2025 by rpki-client