$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft File: 4ggepNPNtZniYIYCcE_bNYbUj1c.mft (raw, json) Hash identifier: KS1t9bR2JHxp0x3eQNp0JppnRTwWLqPkd22i7JAosss= Subject key identifier: 2C:88:11:15:90:92:D2:D8:C7:5D:54:9E:24:3D:E5:1A:C5:D0:03:D4 Authority key identifier: E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 Certificate issuer: /CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Certificate serial: 0BE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft Manifest number: 0BE0 Signing time: Sat 18 Oct 2025 19:42:49 +0000 Manifest this update: Sat 18 Oct 2025 19:42:48 +0000 Manifest next update: Sat 25 Oct 2025 19:42:48 +0000 Files and hashes: 1: 4ggepNPNtZniYIYCcE_bNYbUj1c.crl (hash: aguW8Wms/XOIfT3pG/e2ZFOh53szXSn3dXQexSfEg7I=) 2: 277BE15035CD11EAA2366620C4F9AE02.roa (hash: hJTBnRNb+rBuco3pui7GARCwhnSPV6pCkk0fRFtrHKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3046 (0xbe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF1C, serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Validity Not Before: Oct 18 19:42:48 2025 GMT Not After : Oct 25 19:42:48 2025 GMT Subject: CN=68f3edb8-48f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5a:bd:c4:90:31:a7:d7:d3:d0:70:e7:d9:2a: 9c:8a:71:dd:42:22:ed:95:f7:27:b5:52:00:db:20: 91:ab:20:c4:44:89:72:95:9d:8a:e0:d7:9d:2c:68: 2f:f9:fd:5c:46:3b:66:a5:11:c7:25:ff:bb:27:23: 7f:33:81:39:fe:06:90:df:b0:8a:61:ae:92:e4:0a: 2a:2c:83:66:36:3c:b0:2a:ff:be:27:35:cf:63:6b: 13:db:2c:59:f6:90:50:ca:6e:2f:f5:14:2a:d3:e1: 33:e2:8f:03:b5:38:8b:1f:83:8d:7b:0f:58:9a:39: 44:81:ae:59:ba:ee:06:e7:0e:26:4a:79:21:8e:39: 3e:ee:e0:32:b2:04:66:56:73:d4:c5:6d:12:e9:ec: 3d:3e:a9:0e:bd:23:4b:cf:1e:57:63:a0:dd:99:ec: 7b:fc:d0:16:5d:16:38:1b:10:5b:90:64:5b:49:8e: ad:81:6e:6f:11:4c:ab:a1:0b:6b:8d:0c:e4:8e:38: 94:02:9c:ff:a6:a1:cd:30:7e:e6:fc:53:88:69:c1: 16:05:5a:e8:c8:4d:c2:b4:3d:bd:85:4f:39:3f:01: 59:9c:97:af:a0:74:87:3e:26:3a:22:53:45:d3:75: f7:76:76:d7:69:02:2d:a1:f3:fd:86:f6:4e:f0:92: e4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:88:11:15:90:92:D2:D8:C7:5D:54:9E:24:3D:E5:1A:C5:D0:03:D4 X509v3 Authority Key Identifier: keyid:E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:5b:fa:cb:d7:8a:b2:65:44:d0:1b:f0:95:67:51:5c:eb:3d: c0:3e:11:f6:11:ec:eb:79:1c:bb:60:91:b8:34:74:aa:bb:44: bc:1f:90:2f:ec:0c:e2:c6:7a:a4:d5:97:82:6a:8b:dd:47:54: f3:ab:a8:09:7f:9f:91:0c:0d:9b:4d:81:25:32:ce:4f:d6:64: 46:7f:3e:16:d9:da:99:27:3e:b5:45:08:86:3a:49:18:f4:ff: f0:9c:c7:a4:10:89:91:b0:1f:20:84:f6:0b:88:ce:18:57:9f: 6d:4d:2b:fa:59:22:3f:37:f6:34:21:05:22:4d:57:c1:bf:f4: 61:12:16:15:30:56:9e:6c:e8:f8:aa:5f:87:53:57:6a:98:f7: 1a:29:3e:61:ba:c6:0c:0d:ba:b9:71:25:7d:28:e9:1e:97:c7: d3:e6:79:ee:b4:cd:02:af:b0:4a:b4:c1:12:a5:63:ce:dd:7a: 42:84:8d:e7:96:16:78:bf:b5:ac:06:7c:07:94:64:7e:72:b3: bb:15:f3:b4:da:49:5f:b3:dd:2e:96:41:6c:88:3c:7f:e5:9a: 2d:07:20:4f:16:46:c5:09:58:9a:f0:e4:3c:49:9f:c5:a2:a4: a2:68:ff:2b:ea:8c:12:c2:c8:0c:88:31:e0:01:bc:4a:b9:c9: 7a:4d:1c:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGMUMxMTAvBgNVBAUTKEUyMDgxRUE0RDNDREI1OTlFMjYwODYwMjcwNEZEQjM1 ODZENDhGNTcwHhcNMjUxMDE4MTk0MjQ4WhcNMjUxMDI1MTk0MjQ4WjAYMRYwFAYD VQQDEw02OGYzZWRiOC00OGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1q9xJAxp9fT0HDn2SqcinHdQiLtlfcntVIA2yCRqyDERIlylZ2K4NedLGgv +f1cRjtmpRHHJf+7JyN/M4E5/gaQ37CKYa6S5AoqLINmNjywKv++JzXPY2sT2yxZ 9pBQym4v9RQq0+Ez4o8DtTiLH4ONew9YmjlEga5Zuu4G5w4mSnkhjjk+7uAysgRm VnPUxW0S6ew9PqkOvSNLzx5XY6Ddmex7/NAWXRY4GxBbkGRbSY6tgW5vEUyroQtr jQzkjjiUApz/pqHNMH7m/FOIacEWBVroyE3CtD29hU85PwFZnJevoHSHPiY6IlNF 03X3dnbXaQItofP9hvZO8JLkUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyIERWQ ktLYx11UniQ95RrF0APUMB8GA1UdIwQYMBaAFOIIHqTTzbWZ4mCGAnBP2zWG1I9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREYxQy8zNkM5NjIyMDI2 M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRabmlZSVlDY0VfYk5ZYlVq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRnZ2VwTlBOdFpuaVlJWUNjRV9iTlliVWoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REYxQy8zNkM5NjIyMDI2M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRa bmlZSVlDY0VfYk5ZYlVqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1W/rL14qyZUTQG/CVZ1Fc6z3APhH2EezreRy7YJG4NHSqu0S8H5Av 7Azixnqk1ZeCaovdR1Tzq6gJf5+RDA2bTYElMs5P1mRGfz4W2dqZJz61RQiGOkkY 9P/wnMekEImRsB8ghPYLiM4YV59tTSv6WSI/N/Y0IQUiTVfBv/RhEhYVMFaebOj4 ql+HU1dqmPcaKT5husYMDbq5cSV9KOkel8fT5nnutM0Cr7BKtMESpWPO3XpChI3n lhZ4v7WsBnwHlGR+crO7FfO02klfs90ulkFsiDx/5ZotByBPFkbFCVia8OQ8SZ/F oqSiaP8r6owSwsgMiDHgAbxKucl6TRxu -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:20 2025 by rpki-client