$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft File: 4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json) Hash identifier: Dh9SIXZ70yyfNiOrH6yKNz+4giYlgbfL+vRbqrDELd0= Subject key identifier: 56:86:EC:2F:F6:34:7A:B1:0D:2C:D6:45:48:CA:4A:4D:EC:65:D6:92 Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Certificate serial: 02C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft Manifest number: 02C2 Signing time: Sun 19 Oct 2025 03:34:01 +0000 Manifest this update: Sun 19 Oct 2025 03:34:00 +0000 Manifest next update: Sun 26 Oct 2025 03:34:00 +0000 Files and hashes: 1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: 75jzIF02LRcrYywnjpykhHrIbcn2OL+0XGai75V630c=) 2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: h+ue+R5DGdF0uaqUXBTnmoh/DYvzHxp90t2bN+4sANk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 710 (0x2c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Validity Not Before: Oct 19 03:34:00 2025 GMT Not After : Oct 26 03:34:00 2025 GMT Subject: CN=68f45c29-2a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:93:5a:3b:e7:d1:7c:2f:27:d3:b8:a4:1e:4e: f3:bb:80:ec:05:de:ca:5a:9e:c7:9e:bf:4d:52:c6: 70:03:c8:39:9f:28:59:bf:f0:bf:be:15:e6:e0:27: 2c:b2:c2:1d:45:22:65:b4:6e:47:b1:07:06:70:c9: f3:ef:6b:79:90:aa:8b:19:6b:00:dd:06:38:ca:4b: 97:24:c2:cf:68:f4:b5:8b:b0:c3:37:cc:40:96:f7: ba:6e:97:6d:7c:5b:2a:86:01:c2:09:33:66:df:a1: 24:5c:98:f8:a3:aa:6c:a8:58:ef:37:3f:85:c6:12: 52:6a:a7:99:48:7a:0c:6b:0d:b6:68:d6:f8:37:1d: d2:d3:a4:b4:73:b9:16:2e:38:47:6c:eb:f6:fe:03: b1:9d:06:68:33:2b:28:d7:0f:c9:26:e1:f6:3d:1d: db:5f:71:cd:72:e2:dc:dd:6f:fc:36:fe:44:ff:dd: 01:75:b6:71:38:00:8f:c0:ae:17:b8:7a:8c:e2:c0: 31:75:ae:d3:ab:6b:3e:48:1f:9d:e1:69:8c:08:7a: 51:ef:48:c4:96:3d:d3:49:f9:6d:c0:56:0c:e0:72: c2:97:da:f2:41:9b:a8:b6:a3:eb:91:1d:e1:20:cf: 14:03:d9:46:de:4b:10:5e:16:d9:3b:cb:8e:44:6c: 14:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:86:EC:2F:F6:34:7A:B1:0D:2C:D6:45:48:CA:4A:4D:EC:65:D6:92 X509v3 Authority Key Identifier: keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d5:f5:49:f0:62:90:a9:07:a5:b4:96:78:d6:c8:1e:ac:55: 75:0d:fd:8a:a1:45:1c:4c:f4:e5:f9:7d:ad:de:d3:42:5f:ff: be:be:3b:c7:2e:34:2a:52:20:b2:73:c1:14:10:4c:48:fe:5d: 34:bb:90:97:d2:8c:a5:63:d7:7c:f5:21:60:88:a6:4a:07:e9: 00:53:58:13:81:b3:53:b9:50:b0:56:84:40:55:d3:87:53:f3: f4:3f:55:05:ee:5a:f1:20:a0:71:de:b2:30:75:bc:28:60:78: c2:ae:d9:e4:5a:b2:33:fe:3b:9d:24:0b:2b:a2:26:dc:e2:ca: 39:b8:48:7e:84:64:40:85:7d:75:96:75:24:37:3b:38:0f:06: 98:22:09:39:ae:d3:52:d0:00:5c:59:05:7b:00:14:d9:c0:ff: c9:35:8c:f7:05:a9:01:74:fe:36:b8:ec:38:41:46:3e:d6:2f: 38:4c:98:01:79:20:53:7c:a0:62:b2:e1:7a:93:c3:a1:1b:79: 0f:e5:63:9b:c3:6f:4f:25:20:47:96:9c:7d:41:7d:e9:f9:90: 7e:00:1c:27:d5:2f:af:fb:64:2b:15:20:57:01:09:c7:c6:51: e1:c6:be:e3:49:2e:6d:ba:e9:2b:84:0c:79:a6:81:01:03:b0: b0:a3:83:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1RDkxMTAvBgNVBAUTKEUzMUU2N0NBMEU1QkVEQjI0OEY5N0E2NTdERUZGNjJF Qzg2RjUyNEIwHhcNMjUxMDE5MDMzNDAwWhcNMjUxMDI2MDMzNDAwWjAYMRYwFAYD VQQDEw02OGY0NWMyOS0yYTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JNaO+fRfC8n07ikHk7zu4DsBd7KWp7Hnr9NUsZwA8g5nyhZv/C/vhXm4Ccs ssIdRSJltG5HsQcGcMnz72t5kKqLGWsA3QY4ykuXJMLPaPS1i7DDN8xAlve6bpdt fFsqhgHCCTNm36EkXJj4o6psqFjvNz+FxhJSaqeZSHoMaw22aNb4Nx3S06S0c7kW LjhHbOv2/gOxnQZoMyso1w/JJuH2PR3bX3HNcuLc3W/8Nv5E/90BdbZxOACPwK4X uHqM4sAxda7Tq2s+SB+d4WmMCHpR70jElj3TSfltwFYM4HLCl9ryQZuotqPrkR3h IM8UA9lG3ksQXhbZO8uORGwUOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaG7C/2 NHqxDSzWRUjKSk3sZdaSMB8GA1UdIwQYMBaAFOMeZ8oOW+2ySPl6ZX3v9i7Ib1JL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDVEOS84OUU4N0ZFMDBD QzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1YjdiSkktWHBsZmVfMkxzaHZV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4NW55ZzViN2JKSS1YcGxmZV8yTHNodlVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDVEOS84OUU4N0ZFMDBDQzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1Yjdi SkktWHBsZmVfMkxzaHZVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW1fVJ8GKQqQeltJZ41sgerFV1Df2KoUUcTPTl+X2t3tNCX/++vjvH LjQqUiCyc8EUEExI/l00u5CX0oylY9d89SFgiKZKB+kAU1gTgbNTuVCwVoRAVdOH U/P0P1UF7lrxIKBx3rIwdbwoYHjCrtnkWrIz/judJAsroibc4so5uEh+hGRAhX11 lnUkNzs4DwaYIgk5rtNS0ABcWQV7ABTZwP/JNYz3BakBdP42uOw4QUY+1i84TJgB eSBTfKBisuF6k8OhG3kP5WObw29PJSBHlpx9QX3p+ZB+ABwn1S+v+2QrFSBXAQnH xlHhxr7jSS5tuukrhAx5poEBA7Cwo4MJ -----END CERTIFICATE-----Generated at Mon Oct 20 14:45:13 2025 by rpki-client