$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft File: 4G_oQca7SYofv2fuOqjIqcU4fQ8.mft (raw, json) Hash identifier: GYAqOdMP/tSlCo1bRDdMzv5WWnn1XN+lPx8pZSux7qM= Subject key identifier: 97:F3:0E:14:CB:46:C3:CF:38:47:14:43:51:05:BF:2B:60:0F:BB:B4 Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F Certificate issuer: /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft Manifest number: EB Signing time: Sun 19 Oct 2025 08:21:26 +0000 Manifest this update: Sun 19 Oct 2025 08:21:25 +0000 Manifest next update: Sun 26 Oct 2025 08:21:25 +0000 Files and hashes: 1: 4G_oQca7SYofv2fuOqjIqcU4fQ8.crl (hash: hi4NO62DCVMy0yCRgNiP3epS/X5htytb7/snVhNSY9M=) 2: 47C532D045B911EF93633071C4F9AE02.roa (hash: wnnmQPYTxqkM9WvnTTi4MEpEuQ7gabJzkmyVQ4uhwWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Validity Not Before: Oct 19 08:21:25 2025 GMT Not After : Oct 26 08:21:25 2025 GMT Subject: CN=68f49f85-76c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bc:b8:57:56:1f:8c:7c:51:24:ca:ac:42:f7: 66:af:67:0f:0b:10:3b:f7:70:ff:f2:72:77:31:e1: c6:ad:7a:a5:71:b7:48:e0:62:09:36:97:01:7b:0f: ec:84:e9:05:c7:cd:50:97:7b:2a:a3:4e:8b:e9:eb: 50:75:31:9c:2f:50:c0:2d:06:be:3b:c2:8e:7e:e0: f7:c8:41:0a:e4:07:03:1c:93:96:d7:57:09:32:73: 52:4a:56:c4:cb:3f:4c:27:fc:61:56:6c:5e:31:ca: bb:9a:5b:00:08:e6:53:f4:56:6c:2d:64:c1:bb:bd: a4:0a:6a:17:9d:42:4d:0f:4f:11:cc:1d:01:47:ca: 1a:27:b6:d1:0a:e7:00:82:93:df:08:66:05:de:24: 49:c8:66:8e:6d:99:16:24:b1:52:33:0c:4e:52:ab: 46:2d:d3:33:81:9e:ee:6e:9c:ea:28:c1:26:8d:61: 34:23:d8:40:81:32:22:0d:a1:c3:b4:a9:21:7a:45: 52:bb:8e:9b:b2:5a:8b:b4:3c:8f:07:5d:d5:64:5c: 99:45:69:5e:71:d3:fe:25:e5:a8:f7:c8:79:16:31: 41:f1:3b:3f:0a:1b:0b:cc:47:71:09:df:3e:be:11: 95:17:37:52:57:82:d4:f4:a4:8f:91:ba:c9:0c:82: 0a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F3:0E:14:CB:46:C3:CF:38:47:14:43:51:05:BF:2B:60:0F:BB:B4 X509v3 Authority Key Identifier: keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:01:01:13:97:7d:d8:77:80:c2:98:32:49:79:50:de:3c:92: 7c:9d:cf:0a:b8:1d:01:99:1e:31:56:50:22:05:20:9d:54:bf: 73:e1:1a:55:b0:ac:6b:0d:d3:61:c1:a1:c3:cf:9b:dd:c3:03: 0b:dd:6f:06:e2:d8:66:b9:32:73:c6:09:12:87:65:75:3e:8a: ef:1b:08:85:84:97:4f:7b:6c:6d:15:74:65:ac:dd:e3:04:bf: 9c:e6:ae:9d:9b:03:d1:a5:ca:d0:29:a8:01:1f:7c:5f:83:cc: 46:62:cc:2a:c1:17:2d:49:dc:60:9e:b5:63:df:13:8e:67:b5: 66:20:a8:97:74:5a:2f:21:48:b8:76:bc:61:7d:07:fa:2a:4a: a8:f4:1d:7d:4f:d9:e6:82:bd:df:0f:db:0e:3d:27:f9:e4:77: 59:97:28:7c:62:da:c8:ca:78:ae:be:57:e7:9a:f5:e4:06:35: 96:12:6a:6b:81:52:3d:39:d3:1e:ba:b6:04:20:30:c1:17:bd: 58:1a:e6:19:a7:d3:af:e8:92:08:1d:1e:8e:93:e3:a6:76:51: a5:17:19:83:b9:73:4c:1a:ee:00:0c:a8:50:cd:0a:7f:cc:2e: b7:81:88:4c:b1:a3:85:54:3f:9a:87:02:c9:2d:7f:67:55:10: 2d:4f:90:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM0RDAxMTAvBgNVBAUTKEUwNkZFODQxQzZCQjQ5OEExRkJGNjdFRTNBQThDOEE5 QzUzODdEMEYwHhcNMjUxMDE5MDgyMTI1WhcNMjUxMDI2MDgyMTI1WjAYMRYwFAYD VQQDEw02OGY0OWY4NS03NmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsry4V1YfjHxRJMqsQvdmr2cPCxA793D/8nJ3MeHGrXqlcbdI4GIJNpcBew/s hOkFx81Ql3sqo06L6etQdTGcL1DALQa+O8KOfuD3yEEK5AcDHJOW11cJMnNSSlbE yz9MJ/xhVmxeMcq7mlsACOZT9FZsLWTBu72kCmoXnUJND08RzB0BR8oaJ7bRCucA gpPfCGYF3iRJyGaObZkWJLFSMwxOUqtGLdMzgZ7ubpzqKMEmjWE0I9hAgTIiDaHD tKkhekVSu46bslqLtDyPB13VZFyZRWlecdP+JeWo98h5FjFB8Ts/ChsLzEdxCd8+ vhGVFzdSV4LU9KSPkbrJDIIKIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfzDhTL RsPPOEcUQ1EFvytgD7u0MB8GA1UdIwQYMBaAFOBv6EHGu0mKH79n7jqoyKnFOH0P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9FQ0Y4MEY4NjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80R19vUWNhN1NZb2Z2MmZ1T3FqSXFjVTRm UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRHX29RY2E3U1lvZnYyZnVPcWpJcWNVNGZROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9FQ0Y4MEY4NjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80R19vUWNhN1NZ b2Z2MmZ1T3FqSXFjVTRmUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxAQETl33Yd4DCmDJJeVDePJJ8nc8KuB0BmR4xVlAiBSCdVL9z4RpV sKxrDdNhwaHDz5vdwwML3W8G4thmuTJzxgkSh2V1PorvGwiFhJdPe2xtFXRlrN3j BL+c5q6dmwPRpcrQKagBH3xfg8xGYswqwRctSdxgnrVj3xOOZ7VmIKiXdFovIUi4 drxhfQf6Kkqo9B19T9nmgr3fD9sOPSf55HdZlyh8YtrIyniuvlfnmvXkBjWWEmpr gVI9OdMeurYEIDDBF71YGuYZp9Ov6JIIHR6Ok+OmdlGlFxmDuXNMGu4ADKhQzQp/ zC63gYhMsaOFVD+ahwLJLX9nVRAtT5Ci -----END CERTIFICATE-----Generated at Mon Oct 20 18:40:00 2025 by rpki-client