$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft File: 4deDfrzHqaTRdRZXhgR2OivQQnI.mft (raw, json) Hash identifier: r570g4tW4x+h6TNsuw1XnnNjo9WqFRbmLhyf7BHEo40= Subject key identifier: D8:1D:60:DB:6B:25:7B:FD:93:E3:1E:CA:E1:37:AD:4F:E4:AA:5D:D8 Authority key identifier: E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 Certificate issuer: /CN=A91EE92F/serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft Manifest number: D4 Signing time: Sun 19 Oct 2025 08:48:11 +0000 Manifest this update: Sun 19 Oct 2025 08:48:10 +0000 Manifest next update: Sun 26 Oct 2025 08:48:10 +0000 Files and hashes: 1: 4deDfrzHqaTRdRZXhgR2OivQQnI.crl (hash: eWR2N8M8fJvCW+ik3KVm2P6Qa+e1yWfrmAhiXi5aELc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F, serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Validity Not Before: Oct 19 08:48:10 2025 GMT Not After : Oct 26 08:48:10 2025 GMT Subject: CN=68f4a5ca-7af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:92:6a:ab:fd:b6:ed:1b:99:ae:c1:e9:b1:8c: ed:d5:95:5f:f2:e1:69:8a:d4:d8:26:61:33:f9:2c: be:65:8b:93:e1:96:b8:4c:17:d6:d0:39:1a:56:ff: 52:c2:e2:c7:92:9d:8c:21:6d:c2:0c:9e:ab:55:f2: 71:2c:15:24:dc:92:23:fb:71:82:b1:71:3b:cb:e1: 89:4c:08:7f:a1:2c:5f:81:1e:93:a7:3c:ec:e3:de: 97:72:a8:e8:75:da:01:66:53:6d:fc:50:dd:a7:2e: 5f:c5:94:c6:67:16:7a:cf:68:5c:17:85:a7:43:1c: 6d:7b:b0:b6:7e:23:54:8e:6b:3b:23:eb:c7:2d:e3: f4:72:f5:78:22:15:31:d0:76:17:2b:af:de:cd:1e: db:3d:9a:20:c9:89:0a:be:58:15:c2:0b:69:46:b0: 4d:13:db:92:36:d4:4a:8c:4d:4e:9e:c4:cd:04:6d: 38:1f:0f:f8:56:90:07:c4:a6:80:04:47:1d:2f:95: f7:20:80:d3:77:64:7a:55:c8:16:f1:03:3e:5f:95: 58:e1:96:6b:f3:e4:c1:5d:19:ec:68:ac:9c:bb:90: 41:fe:24:b7:82:5c:59:66:99:4c:f1:6e:b6:68:5b: 3b:f7:00:a4:75:95:9d:d4:ea:83:b9:ca:f9:70:da: b8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1D:60:DB:6B:25:7B:FD:93:E3:1E:CA:E1:37:AD:4F:E4:AA:5D:D8 X509v3 Authority Key Identifier: keyid:E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:33:55:8c:c4:53:65:aa:e8:3f:c1:bd:62:fc:bf:8a:aa:71: fc:d6:f0:8d:60:48:31:a3:09:94:9d:09:75:e6:8b:4d:19:87: 2d:3b:d1:42:43:d1:5a:77:5c:d6:a0:42:c1:d3:91:bd:c2:5a: 82:7b:92:5a:71:c6:7e:57:aa:db:b5:e6:23:4f:98:ba:e3:1a: 07:66:61:78:8f:92:20:54:5f:d7:d1:7a:b8:74:48:4d:db:ed: 0f:7d:ad:86:47:d9:36:e5:e5:a5:b1:07:bc:b5:c3:fc:a9:ce: cc:13:b7:6c:30:fa:e5:35:c8:35:26:7f:9e:3f:01:92:c0:ad: 97:5d:70:9a:d9:9b:85:ff:53:60:96:9c:3c:ca:e1:09:f5:d4: e6:9c:64:bd:d6:3f:03:37:a0:56:fb:92:86:59:d1:73:b6:88: c2:3c:92:16:57:b8:22:7c:b6:ec:a2:69:82:e3:a1:25:c3:85: 15:71:e0:8e:f5:0f:37:26:c8:17:5d:36:a6:dc:1f:ee:ba:88: 2b:39:e4:11:ec:9c:56:ad:c2:0b:87:cf:fc:5b:9e:50:8f:17: 22:a7:1c:65:e2:c0:81:fe:9d:a6:79:78:39:dd:fe:4e:d8:a5: 46:48:bf:e0:1e:ed:79:a2:e1:38:96:1b:19:8d:19:c5:4d:bf: 68:af:9d:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5MkYxMTAvBgNVBAUTKEUxRDc4MzdFQkNDN0E5QTREMTc1MTY1Nzg2MDQ3NjNB MkJEMDQyNzIwHhcNMjUxMDE5MDg0ODEwWhcNMjUxMDI2MDg0ODEwWjAYMRYwFAYD VQQDEw02OGY0YTVjYS03YWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZJqq/227RuZrsHpsYzt1ZVf8uFpitTYJmEz+Sy+ZYuT4Za4TBfW0DkaVv9S wuLHkp2MIW3CDJ6rVfJxLBUk3JIj+3GCsXE7y+GJTAh/oSxfgR6Tpzzs496Xcqjo ddoBZlNt/FDdpy5fxZTGZxZ6z2hcF4WnQxxte7C2fiNUjms7I+vHLeP0cvV4IhUx 0HYXK6/ezR7bPZogyYkKvlgVwgtpRrBNE9uSNtRKjE1OnsTNBG04Hw/4VpAHxKaA BEcdL5X3IIDTd2R6VcgW8QM+X5VY4ZZr8+TBXRnsaKycu5BB/iS3glxZZplM8W62 aFs79wCkdZWd1OqDucr5cNq4tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgdYNtr JXv9k+MeyuE3rU/kql3YMB8GA1UdIwQYMBaAFOHXg368x6mk0XUWV4YEdjor0EJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTkyRi8xQjI5MEI1RTc0 MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi80ZGVEZnJ6SHFhVFJkUlpYaGdSMk9pdlFR bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkZURmcnpIcWFUUmRSWlhoZ1IyT2l2UVFuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTkyRi8xQjI5MEI1RTc0MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi80ZGVEZnJ6SHFh VFJkUlpYaGdSMk9pdlFRbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKM1WMxFNlqug/wb1i/L+KqnH81vCNYEgxowmUnQl15otNGYctO9FC Q9Fad1zWoELB05G9wlqCe5JaccZ+V6rbteYjT5i64xoHZmF4j5IgVF/X0Xq4dEhN 2+0Pfa2GR9k25eWlsQe8tcP8qc7ME7dsMPrlNcg1Jn+ePwGSwK2XXXCa2ZuF/1Ng lpw8yuEJ9dTmnGS91j8DN6BW+5KGWdFztojCPJIWV7gifLbsommC46Elw4UVceCO 9Q83JsgXXTam3B/uuogrOeQR7JxWrcILh8/8W55Qjxcipxxl4sCB/p2meXg53f5O 2KVGSL/gHu15ouE4lhsZjRnFTb9or52j -----END CERTIFICATE-----Generated at Mon Oct 20 04:11:15 2025 by rpki-client