$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: dZF12f0N1J6VLzS3FaaqM7sqQ5Q5Jr7fxTG/RhB3sSI= Subject key identifier: CB:B6:BD:88:1B:9D:90:8E:F5:F1:43:8D:32:A7:A6:AC:EC:67:AA:D3 Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 01A2 Signing time: Sun 19 Oct 2025 05:53:26 +0000 Manifest this update: Sun 19 Oct 2025 05:53:25 +0000 Manifest next update: Sun 26 Oct 2025 05:53:25 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: 1je95f9ZheyADWKsD733QDnf5XTnlJweFTGRj4P4F3g=) 2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: glLqt8A+PG2i48HeZjmY7dCokn6j6eyQTAGv7a4dQe4=) 3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: cXsdzPTH/yRS7sygsATYiwsQyV1n0HK8W/wMQYfB7Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: Oct 19 05:53:25 2025 GMT Not After : Oct 26 05:53:25 2025 GMT Subject: CN=68f47cd5-748c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f2:5f:08:4f:d0:7b:e7:d0:d1:0a:f5:a7:74: f4:35:f1:ca:45:32:a3:fa:b7:66:97:3b:0e:65:13: 24:f8:01:da:9e:c9:17:1e:17:15:3c:b2:7b:7a:d9: 5a:43:ac:bf:4a:f5:4d:80:db:8b:b3:08:e0:7b:ac: 5d:49:d3:e1:52:78:e7:b9:d1:a2:03:36:2c:06:33: 4b:5a:24:95:88:0f:4b:40:7c:65:c9:02:95:01:3c: 82:2d:91:0e:dc:16:91:1d:2a:d1:6c:15:96:0d:a2: ba:8d:29:d1:3f:09:f4:81:89:c0:14:cf:40:f1:1f: 7d:91:b5:d5:c0:58:11:23:e8:4a:40:65:34:e1:7a: fa:25:73:1e:25:8d:fc:ef:bc:1c:d2:64:04:84:8a: fd:94:3d:ed:cf:08:4f:44:52:05:cb:4c:df:b5:3c: 7b:04:3a:ff:00:da:b9:86:d8:90:f9:2f:4d:2f:8e: bd:4b:c8:95:4d:25:9d:0f:17:b1:e5:87:be:08:61: 79:d4:6b:2e:5f:65:8e:03:a8:96:6b:0e:8c:ea:46: de:11:76:cc:6a:95:59:d9:3d:c7:e0:a0:7a:36:9f: 8a:eb:ad:81:1d:9f:30:95:3d:3e:38:69:a0:08:b0: a2:81:4c:ee:c0:f9:b7:a9:4a:58:e4:0e:29:83:4b: 07:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B6:BD:88:1B:9D:90:8E:F5:F1:43:8D:32:A7:A6:AC:EC:67:AA:D3 X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:1d:87:02:0c:3a:b1:68:41:cc:c0:18:bb:7a:3b:38:87:df: d8:a9:c6:a8:99:32:30:0b:a5:8b:d7:6a:be:24:35:63:dc:57: b3:29:78:fb:db:93:25:38:1d:a9:d5:6d:19:4f:f7:e1:95:17: 09:af:97:61:d8:f3:12:d2:eb:1e:4a:77:fe:f1:45:a3:33:fd: 5c:a5:10:5f:93:10:71:90:e4:35:e9:d8:16:53:8c:34:8d:03: 99:10:aa:d5:e6:23:84:2c:69:49:c8:1f:fe:10:72:5c:91:cc: 7b:3e:54:77:26:56:8e:6d:64:b2:88:0d:5b:f2:0c:c7:d7:33: 53:71:4d:e4:e8:d1:37:49:f8:ba:00:5b:5e:d9:93:86:d3:31: 14:f7:b1:29:40:ef:c5:8f:1b:de:35:0b:a3:5d:e8:d9:ff:0a: 01:66:99:2f:7b:5f:46:20:7e:1e:76:b4:94:ee:49:63:01:ec: c8:32:20:9d:5d:e1:cd:78:ef:e4:6e:fa:e7:4f:30:0c:29:38: 94:42:a8:25:89:a8:ce:72:bd:a6:c1:72:2d:76:06:dc:d0:21: 25:3b:6e:70:0d:f2:c4:02:c4:da:4f:a2:67:04:69:45:e8:9b: 43:e4:82:83:cf:3a:77:1e:b9:dc:2c:89:d8:5d:e4:3e:3f:c1: bc:f3:9e:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjUxMDE5MDU1MzI1WhcNMjUxMDI2MDU1MzI1WjAYMRYwFAYD VQQDEw02OGY0N2NkNS03NDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPJfCE/Qe+fQ0Qr1p3T0NfHKRTKj+rdmlzsOZRMk+AHanskXHhcVPLJ7etla Q6y/SvVNgNuLswjge6xdSdPhUnjnudGiAzYsBjNLWiSViA9LQHxlyQKVATyCLZEO 3BaRHSrRbBWWDaK6jSnRPwn0gYnAFM9A8R99kbXVwFgRI+hKQGU04Xr6JXMeJY38 77wc0mQEhIr9lD3tzwhPRFIFy0zftTx7BDr/ANq5htiQ+S9NL469S8iVTSWdDxex 5Ye+CGF51GsuX2WOA6iWaw6M6kbeEXbMapVZ2T3H4KB6Np+K662BHZ8wlT0+OGmg CLCigUzuwPm3qUpY5A4pg0sHmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMu2vYgb nZCO9fFDjTKnpqzsZ6rTMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQHYcCDDqxaEHMwBi7ejs4h9/YqcaomTIwC6WL12q+JDVj3FezKXj7 25MlOB2p1W0ZT/fhlRcJr5dh2PMS0useSnf+8UWjM/1cpRBfkxBxkOQ16dgWU4w0 jQOZEKrV5iOELGlJyB/+EHJckcx7PlR3JlaObWSyiA1b8gzH1zNTcU3k6NE3Sfi6 AFte2ZOG0zEU97EpQO/FjxveNQujXejZ/woBZpkve19GIH4edrSU7kljAezIMiCd XeHNeO/kbvrnTzAMKTiUQqgliajOcr2mwXItdgbc0CElO25wDfLEAsTaT6JnBGlF 6JtD5IKDzzp3HrncLInYXeQ+P8G8856J -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:12 2025 by rpki-client