$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft File: 4190GdVyqG920uv3gpq22dA0CQU.mft (raw, json) Hash identifier: hGPM4rcEDPCRcOLba9YfJdmcG1d62wpo9PtfydDdJRQ= Subject key identifier: 35:64:7E:5D:C7:70:3C:6B:9C:70:5B:19:7F:E7:EF:8A:B9:F5:3A:BD Authority key identifier: E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05 Certificate issuer: /CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft Manifest number: 01A2 Signing time: Sun 19 Oct 2025 05:49:43 +0000 Manifest this update: Sun 19 Oct 2025 05:49:42 +0000 Manifest next update: Sun 26 Oct 2025 05:49:42 +0000 Files and hashes: 1: 4190GdVyqG920uv3gpq22dA0CQU.crl (hash: 4ntLb69xiz10a5qQBDltynwk06O4XE99CxVYYiJb7CA=) 2: 9985244A2D1411EEAA9EA45DC4F9AE02.roa (hash: gPmbtMjtLenMFEAnNmFzzGl8ckVYYI4uHTkTnXpU64U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8AF5, serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905 Validity Not Before: Oct 19 05:49:42 2025 GMT Not After : Oct 26 05:49:42 2025 GMT Subject: CN=68f47bf7-ea61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ef:19:f4:49:40:87:e2:dd:9b:39:f1:b0:8a: 9a:0f:e5:94:fa:de:0f:8c:a8:c2:6f:e2:99:bb:48: 5f:4d:d4:5f:f0:c3:99:5c:68:91:67:97:d8:32:0c: 58:fd:58:86:7c:2c:fd:ac:a0:ca:83:a3:d1:e5:9e: 1f:56:8b:96:2e:cd:24:7c:83:3d:69:5b:8e:aa:cc: 15:2c:34:88:5c:4b:70:0f:3c:c1:18:dc:fc:51:23: 14:10:b1:1f:97:2f:40:c8:0f:e4:b3:98:c2:d2:d0: e6:58:41:06:78:77:f1:e4:89:17:ee:b2:0a:45:fd: 07:ce:d4:1d:4b:7e:2b:7d:c9:c0:bc:6d:1d:06:36: 68:47:2a:b0:c7:6f:ba:d5:d8:20:d1:ea:15:3f:61: de:fe:6c:5a:b0:8b:39:29:15:fd:32:ce:71:6c:98: a5:e0:2a:a3:8d:4d:e6:ee:13:53:c6:c3:cf:a2:bf: b8:a3:a9:c7:35:a7:7a:f4:ef:79:00:9f:54:a4:22: ba:1b:00:64:7b:ea:5c:ff:be:14:72:98:40:65:f0: 61:c4:f5:8c:2c:c9:86:be:9c:f1:90:9d:0b:73:97: ca:dd:2a:cb:50:88:b4:b6:af:ee:24:ea:b0:68:61: 64:61:ab:eb:4d:ea:5a:9a:31:78:19:07:f2:4c:b5: be:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:64:7E:5D:C7:70:3C:6B:9C:70:5B:19:7F:E7:EF:8A:B9:F5:3A:BD X509v3 Authority Key Identifier: keyid:E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:45:94:83:ea:87:f0:f9:63:57:20:96:84:4a:f1:a5:64:87: 4e:2a:05:b8:bc:9a:ab:53:3e:b5:39:0b:b1:6a:9c:af:1a:45: 8a:b7:4a:29:7e:a9:51:b1:27:1c:93:b3:77:5d:51:d1:44:6a: 43:bc:1b:59:45:f6:88:a2:31:3b:fd:83:9c:98:2f:09:6f:b1: 5e:49:e3:86:ce:4d:53:a2:95:4e:e3:65:e5:c8:2d:e2:ca:f4: 9e:c5:c5:80:c1:d6:47:3b:2f:2f:58:e2:f1:7a:94:f4:be:16: b8:6f:40:e3:b4:58:75:42:e3:d5:36:35:c2:a0:ab:03:55:7e: e2:e4:c8:40:b2:86:36:df:96:8e:16:0e:f0:e0:9d:31:b9:b0: 65:10:6c:44:a3:3e:bc:37:66:08:1b:1c:d6:60:40:0b:bc:ad: 1b:27:1b:11:41:d2:89:7a:2a:e9:c8:26:52:6e:2d:15:c6:60: fa:81:1c:88:a7:46:6f:1b:e8:71:9e:da:e6:59:63:19:82:98: 96:ef:4f:4d:c3:91:77:1c:77:a9:f4:f2:8c:32:e6:71:78:1a: ec:bb:13:3b:e7:eb:45:c1:e8:9f:f4:c2:40:c3:7b:b2:9c:93: 03:a9:11:8b:ad:90:17:7c:18:da:c4:ca:25:9e:3c:95:43:05: 40:2a:6f:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThBRjUxMTAvBgNVBAUTKEUzNUY3NDE5RDU3MkE4NkY3NkQyRUJGNzgyOUFCNkQ5 RDAzNDA5MDUwHhcNMjUxMDE5MDU0OTQyWhcNMjUxMDI2MDU0OTQyWjAYMRYwFAYD VQQDEw02OGY0N2JmNy1lYTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+8Z9ElAh+LdmznxsIqaD+WU+t4PjKjCb+KZu0hfTdRf8MOZXGiRZ5fYMgxY /ViGfCz9rKDKg6PR5Z4fVouWLs0kfIM9aVuOqswVLDSIXEtwDzzBGNz8USMUELEf ly9AyA/ks5jC0tDmWEEGeHfx5IkX7rIKRf0HztQdS34rfcnAvG0dBjZoRyqwx2+6 1dgg0eoVP2He/mxasIs5KRX9Ms5xbJil4CqjjU3m7hNTxsPPor+4o6nHNad69O95 AJ9UpCK6GwBke+pc/74UcphAZfBhxPWMLMmGvpzxkJ0Lc5fK3SrLUIi0tq/uJOqw aGFkYavrTepamjF4GQfyTLW+ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVkfl3H cDxrnHBbGX/n74q59Tq9MB8GA1UdIwQYMBaAFONfdBnVcqhvdtLr94KattnQNAkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEFGNS8zM0Y3MjU4NjJE MTExMUVFOTk2Q0M2MTBDNEY5QUUwMi80MTkwR2RWeXFHOTIwdXYzZ3BxMjJkQTBD UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQxOTBHZFZ5cUc5MjB1djNncHEyMmRBMENRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEFGNS8zM0Y3MjU4NjJEMTExMUVFOTk2Q0M2MTBDNEY5QUUwMi80MTkwR2RWeXFH OTIwdXYzZ3BxMjJkQTBDUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRRZSD6ofw+WNXIJaESvGlZIdOKgW4vJqrUz61OQuxapyvGkWKt0op fqlRsScck7N3XVHRRGpDvBtZRfaIojE7/YOcmC8Jb7FeSeOGzk1TopVO42XlyC3i yvSexcWAwdZHOy8vWOLxepT0vha4b0DjtFh1QuPVNjXCoKsDVX7i5MhAsoY235aO Fg7w4J0xubBlEGxEoz68N2YIGxzWYEALvK0bJxsRQdKJeirpyCZSbi0VxmD6gRyI p0ZvG+hxntrmWWMZgpiW709Nw5F3HHep9PKMMuZxeBrsuxM75+tFweif9MJAw3uy nJMDqRGLrZAXfBjaxMolnjyVQwVAKm94 -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:52 2025 by rpki-client