$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft File: 4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json) Hash identifier: ROJpeUHodWO5JG7bDlmhDvSqlFLd5YD7vjlKnRZxJ4E= Subject key identifier: 29:CB:B9:1C:A6:03:DE:44:71:9D:2B:E7:BB:6F:5F:9D:95:92:E4:50 Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Certificate serial: 0B5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft Manifest number: 0B52 Signing time: Sat 18 Oct 2025 20:02:19 +0000 Manifest this update: Sat 18 Oct 2025 20:02:18 +0000 Manifest next update: Sat 25 Oct 2025 20:02:18 +0000 Files and hashes: 1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: Ue8CgWRKRAIwQPiwSedBGk1v/nSTZ9b7bwqskA4b71Q=) 2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: NcQf930jPATr+5XDKM18U6rSGEkKZ2yaCI8MgpUcALY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2906 (0xb5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Validity Not Before: Oct 18 20:02:18 2025 GMT Not After : Oct 25 20:02:18 2025 GMT Subject: CN=68f3f24b-4492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:55:91:02:29:a9:a8:c4:ec:d7:cb:fe:19:ab: bc:e9:42:e5:ea:95:f4:00:cd:ce:5f:e2:2f:63:33: 6c:4d:ee:a7:82:3b:ee:45:55:1a:0e:29:0d:18:55: 29:48:23:28:af:12:cf:f4:7b:69:da:b8:aa:54:d6: 25:8f:89:d9:28:43:14:5e:40:80:db:ca:58:0f:a5: 3e:eb:29:ae:e7:ce:db:bb:6b:44:85:1a:e3:bc:25: c3:cc:85:29:1d:ae:6d:cc:20:57:00:b1:27:c7:69: c4:5e:c6:f8:d2:51:44:15:4d:8e:bc:2b:2d:74:b0: 58:36:4e:7f:82:61:67:78:f7:0b:38:43:79:dc:3a: 16:04:fa:81:58:be:83:6f:8d:c4:92:f4:4b:e1:0d: 7a:cc:b5:49:6e:6c:48:93:48:1d:a7:9c:23:8f:0f: e3:39:3b:7b:a1:09:a9:d7:7d:a7:26:52:65:90:2c: 7b:e8:a9:b9:13:58:05:02:fd:82:5f:30:3c:49:4a: 96:bc:78:f5:18:e7:c5:f6:a2:cd:9d:84:43:12:e0: 3e:dd:61:f0:17:97:39:ca:02:51:aa:bd:51:9a:b5: b0:93:68:69:6e:98:95:67:25:69:6a:5e:79:82:9f: 83:b8:fe:a1:43:26:1c:6d:57:8e:a5:15:39:c4:85: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CB:B9:1C:A6:03:DE:44:71:9D:2B:E7:BB:6F:5F:9D:95:92:E4:50 X509v3 Authority Key Identifier: keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f2:d6:a7:b1:33:75:b6:99:61:72:61:04:cd:d4:7e:be:e1: 99:99:56:d7:79:72:23:8e:a1:5c:7d:ce:b6:7d:35:b7:30:a8: dc:71:49:84:bb:30:c5:6c:3c:fe:91:48:25:44:bb:82:44:79: 28:e1:b4:fd:fc:a0:6f:96:7d:6a:87:82:b1:6e:b9:d7:e3:5c: 1a:ca:9c:d1:b8:c3:01:2e:c0:20:a8:4d:30:85:f3:e1:76:41: 1d:60:2e:c5:3e:19:53:e1:37:ef:a7:cc:65:e1:70:f0:38:1a: c0:e0:24:16:86:ec:28:64:e6:b1:c9:19:1c:b3:d0:63:79:e0: f5:81:b3:f6:df:b0:db:63:b2:44:d0:f0:5a:18:d3:0a:0d:a1: 19:1b:10:0c:dc:0b:c5:c9:96:db:5d:af:43:04:28:b7:5a:03: 55:ef:d4:d3:d6:1c:17:0f:e4:93:26:93:a4:74:99:06:8d:68: 00:f4:b2:09:6e:83:07:8a:78:5e:94:fb:d9:d2:e8:d4:34:6d: c3:51:c7:dc:0d:66:18:04:6d:77:06:cb:9b:5c:cc:66:a3:fa: 18:a0:fb:c8:05:d3:08:11:ff:f3:ce:e6:eb:e2:30:a5:fa:37: 27:fb:47:ba:5a:05:0c:76:d2:8b:15:08:ba:64:04:ff:20:1e: f0:19:76:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFNDkxMTAvBgNVBAUTKEUwOTIzQjBBNUY3RDVDNjhCQUVBQ0U0MTQxNUY0MkE1 MjBENzRCMkEwHhcNMjUxMDE4MjAwMjE4WhcNMjUxMDI1MjAwMjE4WjAYMRYwFAYD VQQDEw02OGYzZjI0Yi00NDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8FWRAimpqMTs18v+Gau86ULl6pX0AM3OX+IvYzNsTe6ngjvuRVUaDikNGFUp SCMorxLP9Htp2riqVNYlj4nZKEMUXkCA28pYD6U+6ymu587bu2tEhRrjvCXDzIUp Ha5tzCBXALEnx2nEXsb40lFEFU2OvCstdLBYNk5/gmFnePcLOEN53DoWBPqBWL6D b43EkvRL4Q16zLVJbmxIk0gdp5wjjw/jOTt7oQmp132nJlJlkCx76Km5E1gFAv2C XzA8SUqWvHj1GOfF9qLNnYRDEuA+3WHwF5c5ygJRqr1RmrWwk2hpbpiVZyVpal55 gp+DuP6hQyYcbVeOpRU5xIX4qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnLuRym A95EcZ0r57tvX52VkuRQMB8GA1UdIwQYMBaAFOCSOwpffVxouurOQUFfQqUg10sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUU0OS8wNDA0OUQwODQx QTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhHaTY2czVCUVY5Q3BTRFhT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKSTdDbDk5WEdpNjZzNUJRVjlDcFNEWFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUU0OS8wNDA0OUQwODQxQTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhH aTY2czVCUVY5Q3BTRFhTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA58tansTN1tplhcmEEzdR+vuGZmVbXeXIjjqFcfc62fTW3MKjccUmE uzDFbDz+kUglRLuCRHko4bT9/KBvln1qh4KxbrnX41waypzRuMMBLsAgqE0whfPh dkEdYC7FPhlT4Tfvp8xl4XDwOBrA4CQWhuwoZOaxyRkcs9BjeeD1gbP237DbY7JE 0PBaGNMKDaEZGxAM3AvFyZbbXa9DBCi3WgNV79TT1hwXD+STJpOkdJkGjWgA9LIJ boMHinhelPvZ0ujUNG3DUcfcDWYYBG13BsubXMxmo/oYoPvIBdMIEf/zzubr4jCl +jcn+0e6WgUMdtKLFQi6ZAT/IB7wGXaL -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:46 2025 by rpki-client