$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft File: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft (raw, json) Hash identifier: JJJLktY8d6176sguwpqbiTxoA9X+WE05Hn8TmpKrIDA= Subject key identifier: EF:ED:67:16:4D:03:BA:30:98:D2:C6:85:3A:EE:DD:7E:8C:2E:A6:C1 Authority key identifier: 4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20 Certificate issuer: /CN=A91ECC52/serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620 Certificate serial: 07C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft Manifest number: 07C2 Signing time: Sat 18 Oct 2025 22:32:11 +0000 Manifest this update: Sat 18 Oct 2025 22:32:11 +0000 Manifest next update: Sat 25 Oct 2025 22:32:11 +0000 Files and hashes: 1: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl (hash: DOvX/1d6K99TrhyPc8om+UrYeuN3eP01aNat1bQv15A=) 2: 65D706B213FA11EB92A6FE61C4F9AE02.roa (hash: HDw255HT5Qq+WExObAcGQTxVC/IMJorhiCibpd+wpAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC52, serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620 Validity Not Before: Oct 18 22:32:11 2025 GMT Not After : Oct 25 22:32:11 2025 GMT Subject: CN=68f4156b-2cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:34:57:8b:5e:1d:89:79:6b:2c:32:02:ef:ec: 5b:bc:79:21:15:ba:b8:25:d4:ad:58:8b:fb:4e:82: 9f:89:30:d7:de:1e:76:da:53:62:88:0f:c7:cc:68: d5:b0:7b:0c:8f:d2:ed:fe:d7:63:94:ba:59:48:23: c2:29:bb:d2:02:b9:a1:68:95:14:35:61:07:ba:47: 04:98:57:98:b3:77:4a:f4:59:14:31:37:67:cb:69: 46:af:2b:da:b9:ca:25:e9:28:2c:50:02:b9:20:cf: fe:7c:16:18:92:d1:ea:4a:ed:d1:34:d6:4b:96:94: a5:56:8b:82:8e:43:45:e1:94:37:ee:80:80:21:45: cd:7a:2e:14:96:32:eb:5a:da:07:1d:64:1d:a9:78: 0f:0e:f2:f1:e7:2a:7a:36:85:26:5f:44:8a:f4:79: 70:80:32:21:5e:c9:02:ff:4e:5f:3c:86:5c:10:c2: 38:13:57:b6:09:0f:02:2e:b3:3e:6a:e3:a3:dc:99: ab:7a:bb:43:20:ad:79:5e:78:fc:17:5a:09:e8:29: f4:1e:ca:58:cb:9d:b3:cd:f3:d5:89:ca:b9:da:eb: e8:4f:34:48:d6:4e:8c:a5:e5:4f:c7:72:c0:d5:c8: 19:28:c1:fe:8d:5d:5c:50:22:2c:84:1c:34:d5:d1: af:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:ED:67:16:4D:03:BA:30:98:D2:C6:85:3A:EE:DD:7E:8C:2E:A6:C1 X509v3 Authority Key Identifier: keyid:4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:d1:81:6a:1b:0f:b7:45:0b:54:5c:a2:9f:c1:d3:15:4d:f1: 2b:83:d0:33:5c:ab:47:73:6f:92:65:0e:80:f4:d6:97:11:34: a8:e9:3b:a3:f1:3f:9d:f6:a7:18:35:11:e4:cc:06:89:a0:d7: 99:ea:44:27:c6:6a:3e:58:03:a9:90:0c:82:cd:57:1e:b4:11: ed:80:08:80:74:23:c9:1d:a5:af:49:6e:41:9c:21:f8:2c:39: 7f:63:a1:04:2d:49:c8:88:3b:05:5f:db:a9:4f:ba:2d:92:61: b9:6c:06:92:e1:3f:11:a7:8b:bb:3a:45:7e:d2:b8:3d:fb:ce: f4:96:98:df:10:6f:c9:02:8f:e1:c5:8b:00:04:54:a7:0c:ca: b5:a4:26:d4:ba:0c:2f:77:2d:3d:1f:24:5e:d5:34:15:59:50: 06:f0:e0:01:e4:83:ed:ca:a1:7b:f5:97:71:5f:66:4c:77:ee: 1f:af:80:ae:5e:b1:f1:cb:d8:91:88:32:bf:9d:fd:a5:2b:25: 31:a1:51:08:4a:2e:4f:d2:88:a7:f7:1f:59:f2:d0:3b:e0:88: d5:77:ab:08:31:27:a1:04:65:2e:36:00:1b:5c:87:d9:1e:90: e2:a7:52:89:da:c1:b1:ae:27:ee:a5:72:67:a0:07:63:80:94: 7e:b8:96:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDNTIxMTAvBgNVBAUTKDRCODU2N0ZCMzg3QkZENzQwNzZCNTA5NzcwMDEzMkM3 QUM4NkU2MjAwHhcNMjUxMDE4MjIzMjExWhcNMjUxMDI1MjIzMjExWjAYMRYwFAYD VQQDEw02OGY0MTU2Yi0yY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTRXi14diXlrLDIC7+xbvHkhFbq4JdStWIv7ToKfiTDX3h522lNiiA/HzGjV sHsMj9Lt/tdjlLpZSCPCKbvSArmhaJUUNWEHukcEmFeYs3dK9FkUMTdny2lGryva ucol6SgsUAK5IM/+fBYYktHqSu3RNNZLlpSlVouCjkNF4ZQ37oCAIUXNei4UljLr WtoHHWQdqXgPDvLx5yp6NoUmX0SK9HlwgDIhXskC/05fPIZcEMI4E1e2CQ8CLrM+ auOj3JmrertDIK15Xnj8F1oJ6Cn0HspYy52zzfPVicq52uvoTzRI1k6MpeVPx3LA 1cgZKMH+jV1cUCIshBw01dGvSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/tZxZN A7owmNLGhTru3X6MLqbBMB8GA1UdIwQYMBaAFEuFZ/s4e/10B2tQl3ABMseshuYg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0M1Mi82NTI4MzZFODEz OEExMUVCOTdBRUI0MjBDNEY5QUUwMi9TNFZuLXpoN19YUUhhMUNYY0FFeXg2eUc1 aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M0Vm4temg3X1hRSGExQ1hjQUV5eDZ5RzVpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0M1Mi82NTI4MzZFODEzOEExMUVCOTdBRUI0MjBDNEY5QUUwMi9TNFZuLXpoN19Y UUhhMUNYY0FFeXg2eUc1aUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH0YFqGw+3RQtUXKKfwdMVTfErg9AzXKtHc2+SZQ6A9NaXETSo6Tuj 8T+d9qcYNRHkzAaJoNeZ6kQnxmo+WAOpkAyCzVcetBHtgAiAdCPJHaWvSW5BnCH4 LDl/Y6EELUnIiDsFX9upT7otkmG5bAaS4T8Rp4u7OkV+0rg9+870lpjfEG/JAo/h xYsABFSnDMq1pCbUugwvdy09HyRe1TQVWVAG8OAB5IPtyqF79ZdxX2ZMd+4fr4Cu XrHxy9iRiDK/nf2lKyUxoVEISi5P0oin9x9Z8tA74IjVd6sIMSehBGUuNgAbXIfZ HpDip1KJ2sGxrifupXJnoAdjgJR+uJae -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:09 2025 by rpki-client