$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft File: 4CEd1HfFtNoX56IChgOs2OcWZrU.mft (raw, json) Hash identifier: UCNTk7UVJmvucph+lm8jSWrF89ot69vWp25M09NPz/o= Subject key identifier: 18:15:6E:57:C8:EC:FE:2D:08:02:68:B6:5F:11:26:E5:28:79:68:F5 Authority key identifier: E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 Certificate issuer: /CN=A91EB1BE/serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Certificate serial: 131D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft Manifest number: 130C Signing time: Sat 18 Oct 2025 17:31:56 +0000 Manifest this update: Sat 18 Oct 2025 17:31:55 +0000 Manifest next update: Sat 25 Oct 2025 17:31:55 +0000 Files and hashes: 1: 4CEd1HfFtNoX56IChgOs2OcWZrU.crl (hash: F5jqGrROZsljzgV7qOIAbuih4OFYxJQEFyhdMvDNAnw=) 2: 31E1DE72B04B11EE9F3B384BC4F9AE02.roa (hash: SUqha04b2ntyDAUGFXYiqHZijUV69AXBCBCtIkXQ4as=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4893 (0x131d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB1BE, serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Validity Not Before: Oct 18 17:31:55 2025 GMT Not After : Oct 25 17:31:55 2025 GMT Subject: CN=68f3cf0b-a31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3d:79:63:d8:9e:71:e0:3a:8a:5c:8b:89:8e: 9b:0c:1a:53:61:74:55:06:15:ef:99:93:41:a1:ff: ea:2c:d6:8c:6a:5d:70:29:5f:c7:f3:36:08:52:58: d1:06:24:7d:ae:0e:55:39:e8:2e:93:05:24:2d:80: ba:d1:f6:0d:60:a4:62:4b:ff:1a:3b:b3:7d:a5:fe: ac:db:49:dc:5b:d8:19:7e:3f:a4:b4:d7:bc:47:b1: 53:84:f9:ea:a6:c4:f7:8b:e4:ba:aa:1b:e8:a5:b3: 0d:85:d7:1e:33:49:36:a2:a2:86:61:89:a1:67:f3: ec:b7:10:e0:9d:b5:e3:55:dd:74:c1:f4:ca:44:8b: 83:88:b5:c9:f1:27:91:f5:bd:62:cf:43:49:9c:6e: 75:e6:87:69:cd:b1:31:87:7d:74:6e:71:d6:48:c1: 46:28:0f:63:be:4d:2c:48:69:78:7c:bf:53:7a:55: cc:8a:a1:24:fe:b9:79:a1:46:a7:d8:6a:59:ea:8e: 3a:f5:2f:cd:2e:9f:db:1a:7f:f7:7f:51:e3:94:1d: bf:d7:6e:60:9a:6c:a7:d9:2a:eb:45:23:7f:ba:a4: 37:cf:03:4f:27:67:0d:33:e2:6b:b4:ff:d0:fa:ed: 01:0c:ee:27:ff:30:7a:64:35:68:10:4b:68:5f:2b: 16:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:15:6E:57:C8:EC:FE:2D:08:02:68:B6:5F:11:26:E5:28:79:68:F5 X509v3 Authority Key Identifier: keyid:E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:71:be:8b:0c:09:f0:1b:72:a5:8a:7f:b4:f1:61:0f:3c:5c: 8f:8b:f3:56:19:54:54:4e:d8:98:95:e8:d4:be:78:28:12:38: e6:84:7f:27:b5:82:98:15:4f:6d:42:ed:ed:d1:1e:a1:04:54: fc:4a:ac:98:5c:3e:e6:39:63:69:91:4c:6e:f2:4c:5c:ac:07: 0f:d7:5d:69:56:85:46:e6:1d:a0:24:8b:1f:49:24:68:81:64: 22:63:8d:ce:d3:3d:6f:d4:67:21:46:9a:c9:04:03:5f:8c:48: ac:b7:15:ca:ca:4d:f4:ba:e9:91:72:53:89:8e:c0:1f:eb:aa: d8:4e:96:04:1c:f5:fd:11:98:e7:96:2c:1c:cc:a1:62:9d:6d: 8b:e6:62:18:fb:27:7a:96:b2:b3:fb:07:d5:34:a1:8d:7e:cd: 4e:99:82:d1:7b:49:70:e0:d5:03:c9:06:39:5d:bf:7d:e3:ee: d9:f4:f4:72:4b:50:c5:4a:bb:3f:ab:08:67:e6:8c:e8:0d:2e: bd:70:4e:d6:11:40:24:85:d8:f5:3e:8f:55:62:34:67:49:9a: 79:5e:f8:4f:fb:fd:af:f7:a5:97:68:52:f2:36:17:76:a3:69: c1:25:77:95:7e:b8:6e:35:19:b8:79:b2:39:6e:8c:95:e2:f3: 62:68:99:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIxQkUxMTAvBgNVBAUTKEUwMjExREQ0NzdDNUI0REExN0U3QTIwMjg2MDNBQ0Q4 RTcxNjY2QjUwHhcNMjUxMDE4MTczMTU1WhcNMjUxMDI1MTczMTU1WjAYMRYwFAYD VQQDEw02OGYzY2YwYi1hMzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5D15Y9ieceA6ilyLiY6bDBpTYXRVBhXvmZNBof/qLNaMal1wKV/H8zYIUljR BiR9rg5VOegukwUkLYC60fYNYKRiS/8aO7N9pf6s20ncW9gZfj+ktNe8R7FThPnq psT3i+S6qhvopbMNhdceM0k2oqKGYYmhZ/PstxDgnbXjVd10wfTKRIuDiLXJ8SeR 9b1iz0NJnG515odpzbExh310bnHWSMFGKA9jvk0sSGl4fL9TelXMiqEk/rl5oUan 2GpZ6o469S/NLp/bGn/3f1HjlB2/125gmmyn2SrrRSN/uqQ3zwNPJ2cNM+JrtP/Q +u0BDO4n/zB6ZDVoEEtoXysWywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgVblfI 7P4tCAJotl8RJuUoeWj1MB8GA1UdIwQYMBaAFOAhHdR3xbTaF+eiAoYDrNjnFma1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjFCRS81QTU3Nzg2Q0Mw QzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnROb1g1NklDaGdPczJPY1da clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDRWQxSGZGdE5vWDU2SUNoZ09zMk9jV1pyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjFCRS81QTU3Nzg2Q0MwQzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnRO b1g1NklDaGdPczJPY1daclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrcb6LDAnwG3Klin+08WEPPFyPi/NWGVRUTtiYlejUvngoEjjmhH8n tYKYFU9tQu3t0R6hBFT8SqyYXD7mOWNpkUxu8kxcrAcP111pVoVG5h2gJIsfSSRo gWQiY43O0z1v1GchRprJBANfjEistxXKyk30uumRclOJjsAf66rYTpYEHPX9EZjn liwczKFinW2L5mIY+yd6lrKz+wfVNKGNfs1OmYLRe0lw4NUDyQY5Xb994+7Z9PRy S1DFSrs/qwhn5ozoDS69cE7WEUAkhdj1Po9VYjRnSZp5XvhP+/2v96WXaFLyNhd2 o2nBJXeVfrhuNRm4ebI5boyV4vNiaJl/ -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:39 2025 by rpki-client