$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft File: 4_fO9uelaeRrLZA5MitpdVMcJWY.mft (raw, json) Hash identifier: 3rNwUvjehBeoNofol0IInlBrF+ij6gFVR95ebmfRBLs= Subject key identifier: E0:09:3E:A2:7E:59:4F:24:35:4C:5E:3F:A1:26:E2:E4:17:D5:F7:ED Authority key identifier: E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 Certificate issuer: /CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft Manifest number: 020E Signing time: Sun 19 Oct 2025 04:32:31 +0000 Manifest this update: Sun 19 Oct 2025 04:32:31 +0000 Manifest next update: Sun 26 Oct 2025 04:32:31 +0000 Files and hashes: 1: 4_fO9uelaeRrLZA5MitpdVMcJWY.crl (hash: UosUM67EI8sXib3OKZ95+jaWbInoBWJzGH6u5Tq4R2g=) 2: 24F87CC2810611EDA756F886C4F9AE02.roa (hash: 8hmKlSyIYm+hEMbljQN7ZPJxD7JA/JzX6lz/de7dJIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0077, serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Validity Not Before: Oct 19 04:32:31 2025 GMT Not After : Oct 26 04:32:31 2025 GMT Subject: CN=68f469df-54c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:b0:e3:bd:d1:83:52:ac:a6:5f:f1:e0:1b: f1:bb:74:0c:77:59:87:66:87:12:b2:f9:6b:95:24: b2:b1:5a:a7:da:fd:18:a9:de:ec:b6:ef:7c:f9:25: 79:13:6f:de:3b:df:49:50:f2:6e:d0:0b:d5:e9:4a: e7:37:d9:57:c0:eb:a0:10:db:4c:96:51:5d:82:79: 0c:dc:2b:95:5c:47:99:93:00:2c:80:21:f8:39:47: e4:0e:b4:0c:d9:1a:f5:55:ae:dc:95:69:12:fa:c4: e8:f3:9a:81:0b:f0:8f:98:43:2d:62:e8:72:a4:96: 22:85:05:8f:8e:6f:c4:c1:bf:1a:4e:0e:ad:50:54: 8c:b8:59:dc:c4:d8:4a:4f:59:cb:d2:2a:cc:1b:c8: c4:55:25:17:61:60:b3:fc:a3:1e:66:70:ef:ec:47: db:02:2f:0f:e3:06:91:56:d9:6f:d2:d7:83:64:0c: ff:27:a5:dc:46:db:0c:ad:f9:35:b8:a7:af:a9:32: 16:a1:ed:44:c9:e5:58:d1:16:55:0a:ec:6b:e4:8b: 38:30:d7:74:40:58:be:0b:a8:fc:80:2c:ea:44:2b: 2f:4e:59:b3:4e:10:62:31:dc:c7:34:d3:95:0d:d1: e8:d1:5a:d3:76:8f:b7:e0:28:d0:ca:f0:49:49:03: 37:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:09:3E:A2:7E:59:4F:24:35:4C:5E:3F:A1:26:E2:E4:17:D5:F7:ED X509v3 Authority Key Identifier: keyid:E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:3f:8b:09:0b:57:12:9d:e0:17:d4:28:3e:b8:53:b1:7f:54: b0:a7:dc:a7:3a:81:06:e3:15:ca:05:b5:27:aa:a5:fa:ba:c1: 9d:5f:32:ca:dd:61:8b:e4:95:f6:d3:69:7d:2c:e5:fd:ed:24: e9:98:e0:53:d6:01:80:57:bd:28:52:7f:cf:b1:fb:6a:9a:4b: 27:58:1a:87:79:56:e6:78:41:39:29:e0:44:8f:51:77:e0:05: 24:02:69:d7:c2:32:bf:72:3e:a7:32:3e:57:81:ba:b9:e9:aa: 4b:bf:21:1a:f6:00:15:34:d0:90:97:16:3b:e4:e9:8e:7a:49: 05:43:2d:20:5c:d7:87:71:a3:be:d5:a2:dc:b4:b9:8e:64:5e: ae:17:36:f1:b7:48:56:72:0b:c1:86:38:6a:a8:f4:ee:a2:b5: 4d:3b:45:6a:46:56:62:86:16:35:6e:d1:aa:65:0b:5c:0e:2d: fc:9b:0c:29:5a:71:6e:fe:79:0d:2b:d3:57:47:29:19:dd:65: 94:0c:d9:d7:36:0a:05:c6:39:46:a0:07:2a:33:ef:92:57:6b: dc:0b:11:28:0c:ff:5e:cf:59:eb:7c:24:ad:55:63:73:7e:91: 13:de:de:19:0b:ea:88:3b:59:fb:26:8c:37:c6:55:5c:ec:90: 43:7d:95:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAwNzcxMTAvBgNVBAUTKEUzRjdDRUY2RTdBNTY5RTQ2QjJEOTAzOTMyMkI2OTc1 NTMxQzI1NjYwHhcNMjUxMDE5MDQzMjMxWhcNMjUxMDI2MDQzMjMxWjAYMRYwFAYD VQQDEw02OGY0NjlkZi01NGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1iw473Rg1Kspl/x4Bvxu3QMd1mHZocSsvlrlSSysVqn2v0Yqd7stu98+SV5 E2/eO99JUPJu0AvV6UrnN9lXwOugENtMllFdgnkM3CuVXEeZkwAsgCH4OUfkDrQM 2Rr1Va7clWkS+sTo85qBC/CPmEMtYuhypJYihQWPjm/Ewb8aTg6tUFSMuFncxNhK T1nL0irMG8jEVSUXYWCz/KMeZnDv7EfbAi8P4waRVtlv0teDZAz/J6XcRtsMrfk1 uKevqTIWoe1EyeVY0RZVCuxr5Is4MNd0QFi+C6j8gCzqRCsvTlmzThBiMdzHNNOV DdHo0VrTdo+34CjQyvBJSQM35QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAJPqJ+ WU8kNUxeP6Em4uQX1fftMB8GA1UdIwQYMBaAFOP3zvbnpWnkay2QOTIraXVTHCVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDA3Ny81MDZBRTIzMDgx MDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFlUnJMWkE1TWl0cGRWTWNK V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfZk85dWVsYWVSckxaQTVNaXRwZFZNY0pXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDA3Ny81MDZBRTIzMDgxMDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFl UnJMWkE1TWl0cGRWTWNKV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWP4sJC1cSneAX1Cg+uFOxf1Swp9ynOoEG4xXKBbUnqqX6usGdXzLK 3WGL5JX202l9LOX97STpmOBT1gGAV70oUn/PsftqmksnWBqHeVbmeEE5KeBEj1F3 4AUkAmnXwjK/cj6nMj5Xgbq56apLvyEa9gAVNNCQlxY75OmOekkFQy0gXNeHcaO+ 1aLctLmOZF6uFzbxt0hWcgvBhjhqqPTuorVNO0VqRlZihhY1btGqZQtcDi38mwwp WnFu/nkNK9NXRykZ3WWUDNnXNgoFxjlGoAcqM++SV2vcCxEoDP9ez1nrfCStVWNz fpET3t4ZC+qIO1n7Jow3xlVc7JBDfZXm -----END CERTIFICATE-----Generated at Tue Oct 21 03:05:06 2025 by rpki-client