$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft File: F4SvaM922Ze5n3dAY3gNspm1SpM.mft (raw, json) Hash identifier: mD4Gg/73jR0K9TTSR9zeb8Y4DFGFdwyXvw1Z+3GnWUs= Subject key identifier: 41:FD:B9:7B:AC:41:8D:AE:A5:8B:21:52:FC:F8:8C:25:7C:6F:08:DB Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 Certificate issuer: /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft Manifest number: 52 Signing time: Sun 19 Oct 2025 10:39:39 +0000 Manifest this update: Sun 19 Oct 2025 10:39:38 +0000 Manifest next update: Sun 26 Oct 2025 10:39:38 +0000 Files and hashes: 1: F4SvaM922Ze5n3dAY3gNspm1SpM.crl (hash: uT1X099Z7Klr2CGYKego22zzgJqNXr7gFRXgD3h/pk0=) 2: 00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa (hash: S6XJldwVWEMnmvJiGl/r0iO9V7JTGSk9MMM8z1zA1+0=) 3: 7B6FCB36340B11F0B358096BC4F9AE02.roa (hash: KBbDfS3aaIsenqMIDTBfa9Z6EFC3wO32oIY+laKdQAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Validity Not Before: Oct 19 10:39:38 2025 GMT Not After : Oct 26 10:39:38 2025 GMT Subject: CN=68f4bfea-fb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ae:ed:1e:26:e0:48:88:a2:9e:be:c3:d8:b1: d4:16:c2:11:dc:a4:d8:17:b2:bd:d9:bc:7d:23:8f: 64:86:89:ed:da:dc:3b:3d:2a:a3:e1:a2:e6:85:59: db:36:bd:c6:77:29:98:8d:ea:6a:5c:7a:d6:60:1e: 62:87:7b:9f:fd:0e:7b:d0:c9:74:29:62:b8:3f:c5: 52:cc:e9:18:72:37:4c:75:fa:ae:67:b7:87:9d:fe: bd:41:80:2f:79:8e:99:70:ce:6e:05:14:fe:aa:c8: 1d:ea:cd:cb:79:d0:62:56:c9:d5:69:b3:65:64:6a: 72:63:24:fc:a7:22:e8:59:ae:92:a3:d5:bc:48:ff: 01:1e:03:53:0a:7f:e7:86:97:53:12:09:0f:94:35: 27:25:4c:b7:f4:4b:a2:f7:2d:5b:4e:b0:73:b2:17: 9d:af:66:30:3d:03:d1:e9:42:37:bb:ae:a7:7e:bb: 4e:af:36:e6:1d:0c:2b:18:a4:5d:24:e7:6e:07:78: b9:39:c0:c8:61:3c:f4:d2:56:49:a9:d1:6c:48:10: ec:a7:88:6e:86:38:a7:46:a0:0a:c0:b3:db:40:c6: f2:44:75:47:85:87:b3:a0:ff:b6:85:ad:13:18:57: e3:2f:5c:23:19:46:57:db:67:82:92:f2:3b:3e:5f: 12:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FD:B9:7B:AC:41:8D:AE:A5:8B:21:52:FC:F8:8C:25:7C:6F:08:DB X509v3 Authority Key Identifier: keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:88:00:5e:e5:c1:65:37:68:00:0e:3b:8e:9b:9a:b2:fb:e6: fe:78:1e:e5:92:87:85:26:5a:6a:d1:45:79:dc:9b:b1:ad:c7: 28:68:c5:05:69:6d:6e:7e:ef:b2:3c:0b:ed:dd:97:c5:cf:3a: 8b:db:a1:c0:1a:97:95:95:89:f9:a6:cc:8e:71:54:b0:56:a1: 31:7c:ef:cf:d8:09:04:44:9c:50:ce:ec:0c:a5:34:20:d9:c9: 46:3c:71:87:65:ad:cc:82:90:b8:ad:b3:6c:bb:3f:a1:f4:ab: 20:2e:fa:b6:72:5b:31:21:f4:c7:c4:e4:1d:35:62:ad:e7:ed: 9a:ff:ea:52:4b:d0:b7:91:25:0a:bf:42:ef:43:19:3d:88:3e: 33:d0:7b:d3:97:78:fd:8f:b6:23:88:98:b5:8a:d3:cc:09:54: f1:da:47:c9:b9:8b:68:8d:45:eb:ae:9a:3a:27:a5:24:4c:ea: 94:72:c9:1f:d7:8b:ed:52:81:52:13:35:de:51:4e:26:11:4c: 93:b5:5b:b3:1d:07:ce:b9:40:99:28:09:93:7d:10:82:98:a0: 74:2a:ec:f3:cf:b7:3f:6b:af:1d:85:73:4d:91:77:93:26:c4: 8b:fe:fc:19:df:65:09:ae:4c:20:85:72:e7:e3:42:86:9c:54: d2:b5:04:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoMTc4NEFGNjhDRjc2RDk5N0I5OUY3NzQwNjM3ODBEQjI5 OUI1NEE5MzAeFw0yNTEwMTkxMDM5MzhaFw0yNTEwMjYxMDM5MzhaMBgxFjAUBgNV BAMTDTY4ZjRiZmVhLWZiNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvru0eJuBIiKKevsPYsdQWwhHcpNgXsr3ZvH0jj2SGie3a3Ds9KqPhouaFWds2 vcZ3KZiN6mpcetZgHmKHe5/9DnvQyXQpYrg/xVLM6RhyN0x1+q5nt4ed/r1BgC95 jplwzm4FFP6qyB3qzct50GJWydVps2VkanJjJPynIuhZrpKj1bxI/wEeA1MKf+eG l1MSCQ+UNSclTLf0S6L3LVtOsHOyF52vZjA9A9HpQje7rqd+u06vNuYdDCsYpF0k 524HeLk5wMhhPPTSVkmp0WxIEOyniG6GOKdGoArAs9tAxvJEdUeFh7Og/7aFrRMY V+MvXCMZRlfbZ4KS8js+XxJRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQf25e6xB ja6liyFS/PiMJXxvCNswHwYDVR0jBBgwFoAUF4SvaM922Ze5n3dAY3gNspm1SpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5LzE0QTdCMjYyMzNG RjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlplNW4zZEFZM2dOc3BtMVNw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjRTdmFNOTIyWmU1bjNkQVkzZ05zcG0xU3BNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD M0M5LzE0QTdCMjYyMzNGRjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlpl NW4zZEFZM2dOc3BtMVNwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIeIAF7lwWU3aAAOO46bmrL75v54HuWSh4UmWmrRRXncm7GtxyhoxQVp bW5+77I8C+3dl8XPOovbocAal5WVifmmzI5xVLBWoTF878/YCQREnFDO7AylNCDZ yUY8cYdlrcyCkLits2y7P6H0qyAu+rZyWzEh9MfE5B01Yq3n7Zr/6lJL0LeRJQq/ Qu9DGT2IPjPQe9OXeP2PtiOImLWK08wJVPHaR8m5i2iNReuumjonpSRM6pRyyR/X i+1SgVITNd5RTiYRTJO1W7MdB865QJkoCZN9EIKYoHQq7PPPtz9rrx2Fc02Rd5Mm xIv+/BnfZQmuTCCFcufjQoacVNK1BNM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:39:26 2025 by rpki-client