$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft File: 4UpZOzEqmIVz16Xd-uB_kSaTyII.mft (raw, json) Hash identifier: J1TNmm/D4DffxPQm80TTlhl8Cn3seZ+rJR4MY+RYWg8= Subject key identifier: 9D:24:CD:A3:DB:49:54:65:C9:D4:49:68:1A:07:96:FB:C0:DD:AC:CF Authority key identifier: E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 Certificate issuer: /CN=A91D4ACD/serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft Manifest number: D0 Signing time: Sun 19 Oct 2025 08:49:31 +0000 Manifest this update: Sun 19 Oct 2025 08:49:30 +0000 Manifest next update: Sun 26 Oct 2025 08:49:30 +0000 Files and hashes: 1: 4UpZOzEqmIVz16Xd-uB_kSaTyII.crl (hash: aufq7ztQM3pl9W3FS+x2/9wv0hioaGL+RROl/atVPDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4ACD, serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Validity Not Before: Oct 19 08:49:30 2025 GMT Not After : Oct 26 08:49:30 2025 GMT Subject: CN=68f4a61a-218e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1b:99:36:0a:d6:f5:b3:16:a2:b6:13:73:21: f7:54:13:7c:28:a7:1f:e1:44:d3:44:c0:8a:92:a8: 10:6a:be:11:a5:f1:02:16:5a:f6:35:6b:5b:02:14: a3:1d:01:fb:01:64:dc:dc:74:7f:43:2c:f9:94:68: 1c:75:f2:af:6c:a9:27:d4:2b:c5:2f:39:42:d2:2c: 70:2e:b4:e7:89:31:08:24:5d:2a:ae:9f:26:c9:44: c1:41:92:e9:41:b7:ee:43:71:4b:72:96:a6:4a:13: 77:1c:ab:12:03:16:75:44:12:29:96:31:16:cc:1b: 9b:5c:61:fd:f4:08:1e:8e:0d:17:df:6f:a7:9b:e5: e4:99:34:3e:62:81:5a:c6:91:9a:b5:85:3e:27:d0: ab:8b:98:04:cc:d4:c6:21:b5:3d:a0:90:3d:cb:bb: 22:65:81:db:8d:92:d3:b9:80:6c:a6:f8:7e:69:dd: 95:b5:ef:74:94:8b:9a:89:45:dd:2a:1f:7a:c0:7e: 58:84:13:7a:1c:40:06:98:d1:f9:f2:6a:d7:27:de: ad:c8:11:71:0e:2b:50:21:c3:52:fb:60:94:8f:6a: 3a:1b:e6:d5:ed:40:8b:d1:32:72:a8:a9:55:02:ce: 53:44:4d:ab:8e:4d:61:ac:c7:42:27:f4:d9:91:04: fc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:24:CD:A3:DB:49:54:65:C9:D4:49:68:1A:07:96:FB:C0:DD:AC:CF X509v3 Authority Key Identifier: keyid:E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:75:1c:bd:66:c3:cc:3c:3e:63:0c:3f:4f:6c:56:b4:86:da: 38:4b:90:19:26:d5:d1:53:49:52:b5:9f:19:27:4b:da:5c:e1: ed:05:bd:02:2e:2f:af:e9:73:e0:dc:8e:24:bd:24:b4:78:27: 69:fc:c2:1d:48:9f:72:8a:3d:86:49:5d:30:08:96:a3:a3:96: 6b:d5:e9:9d:43:df:f1:38:ec:ec:87:e8:9a:e0:57:c2:0b:c9: 99:a9:76:4a:0a:ea:c9:08:27:53:ff:24:cf:f8:62:58:0a:59: f9:61:c2:e5:06:3d:de:e8:18:11:3b:0b:9b:b5:0d:b4:f7:54: b0:65:22:eb:d1:ad:a2:a4:7b:f3:9e:0a:ec:84:6b:08:2a:bd: c0:1a:c6:79:d9:b0:04:59:11:5a:99:11:23:39:66:e6:3d:bd: 39:4c:9a:fc:8d:c4:92:20:0c:22:b7:2b:96:e0:e0:cd:0a:cd: 8a:a6:f1:c5:d4:9f:97:10:bb:77:15:0a:52:0d:56:38:7d:03: 73:3c:13:03:1d:22:37:b8:d9:2a:cf:01:f3:f8:c6:0b:f7:a2: ad:38:7b:7d:f0:c4:ad:9f:72:6d:38:ee:70:c5:99:bf:c6:de: fa:5f:e7:79:75:b1:9a:bc:42:ea:56:d6:dd:66:09:76:38:a0: 81:86:f2:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBQ0QxMTAvBgNVBAUTKEUxNEE1OTNCMzEyQTk4ODU3M0Q3QTVEREZBRTA3Rjkx MjY5M0M4ODIwHhcNMjUxMDE5MDg0OTMwWhcNMjUxMDI2MDg0OTMwWjAYMRYwFAYD VQQDEw02OGY0YTYxYS0yMThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BuZNgrW9bMWorYTcyH3VBN8KKcf4UTTRMCKkqgQar4RpfECFlr2NWtbAhSj HQH7AWTc3HR/Qyz5lGgcdfKvbKkn1CvFLzlC0ixwLrTniTEIJF0qrp8myUTBQZLp QbfuQ3FLcpamShN3HKsSAxZ1RBIpljEWzBubXGH99Agejg0X32+nm+XkmTQ+YoFa xpGatYU+J9Cri5gEzNTGIbU9oJA9y7siZYHbjZLTuYBspvh+ad2Vte90lIuaiUXd Kh96wH5YhBN6HEAGmNH58mrXJ96tyBFxDitQIcNS+2CUj2o6G+bV7UCL0TJyqKlV As5TRE2rjk1hrMdCJ/TZkQT8HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0kzaPb SVRlydRJaBoHlvvA3azPMB8GA1UdIwQYMBaAFOFKWTsxKpiFc9el3frgf5Emk8iC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEFDRC8yOTAzMUEzQTc1 NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi80VXBaT3pFcW1JVnoxNlhkLXVCX2tTYVR5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVcFpPekVxbUlWejE2WGQtdUJfa1NhVHlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEFDRC8yOTAzMUEzQTc1NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi80VXBaT3pFcW1J VnoxNlhkLXVCX2tTYVR5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/dRy9ZsPMPD5jDD9PbFa0hto4S5AZJtXRU0lStZ8ZJ0vaXOHtBb0C Li+v6XPg3I4kvSS0eCdp/MIdSJ9yij2GSV0wCJajo5Zr1emdQ9/xOOzsh+ia4FfC C8mZqXZKCurJCCdT/yTP+GJYCln5YcLlBj3e6BgROwubtQ2091SwZSLr0a2ipHvz ngrshGsIKr3AGsZ52bAEWRFamREjOWbmPb05TJr8jcSSIAwityuW4ODNCs2KpvHF 1J+XELt3FQpSDVY4fQNzPBMDHSI3uNkqzwHz+MYL96KtOHt98MStn3JtOO5wxZm/ xt76X+d5dbGavELqVtbdZgl2OKCBhvLt -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:05 2025 by rpki-client