$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft File: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft (raw, json) Hash identifier: seygW6gwnEckzwMLRDHWJiX3gnVZ9ckCyYWu9g+OPqM= Subject key identifier: CA:D7:A1:3B:B1:50:C6:81:9D:60:5F:87:17:D2:C0:41:36:BC:DF:45 Authority key identifier: E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D Certificate issuer: /CN=A91F2B47/serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft Manifest number: 026D Signing time: Sun 19 Oct 2025 03:56:34 +0000 Manifest this update: Sun 19 Oct 2025 03:56:34 +0000 Manifest next update: Sun 26 Oct 2025 03:56:34 +0000 Files and hashes: 1: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl (hash: hCCNkYg6vnlbgprJgbQtvtsvArgsHn9wSQzSnmnrKR0=) 2: 909F94F070F911EDBA42F056C4F9AE02.roa (hash: J59LrtIyPPPdrZKXDpKJBMgQFNUlF3OmhLoyAq20BcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D Validity Not Before: Oct 19 03:56:34 2025 GMT Not After : Oct 26 03:56:34 2025 GMT Subject: CN=68f46172-fd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:d8:1e:dd:5c:85:28:09:2f:57:34:5d:52: e4:06:da:f3:f6:ad:aa:0a:5a:05:a8:16:2d:ec:57: 7b:fe:7f:74:3e:c4:57:48:07:c0:c6:06:60:23:77: 45:6e:a1:f9:8b:35:36:16:7c:40:72:34:ed:cc:c9: 62:21:55:ad:00:4b:91:a5:39:fa:7a:f2:b8:b0:d7: 72:5a:f7:4f:92:b2:3a:a7:32:c9:f6:69:ab:54:e4: c2:3e:de:39:ef:23:6e:c6:1d:e8:cb:03:0b:74:5e: bf:9a:dd:eb:d3:41:81:be:d2:aa:ba:96:6b:73:24: 6d:4f:cf:3a:49:b3:14:68:ce:ac:ff:bb:c7:1b:5c: 17:5a:83:9d:12:97:48:2d:df:4f:20:10:04:66:d0: b8:97:7e:77:96:83:b8:b4:34:68:d7:db:f8:eb:36: 1c:36:ac:06:61:41:12:cd:5d:78:21:3b:14:b6:0f: 27:7d:dd:55:74:fa:b5:94:a4:ab:f3:31:74:f6:a9: 50:af:2f:66:64:fb:3b:ba:ae:12:eb:45:dc:8c:c1: e2:d9:b8:ac:54:dd:e6:c4:18:e5:35:bb:c0:46:7b: c4:b1:85:11:42:a6:88:0c:53:f8:65:09:c5:af:3b: b9:2b:92:56:c6:2b:3b:d1:a5:76:9f:0a:55:0d:0c: ba:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D7:A1:3B:B1:50:C6:81:9D:60:5F:87:17:D2:C0:41:36:BC:DF:45 X509v3 Authority Key Identifier: keyid:E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:e9:8e:18:88:dc:5f:50:80:fe:a9:30:e0:d0:0d:25:e0:6c: 68:b4:88:b5:36:18:9a:41:e7:dc:08:89:43:16:80:a2:3a:c5: 95:87:ee:e1:b5:e9:8a:26:3f:a4:35:d8:c1:60:50:73:03:b1: 0c:3d:13:f9:dc:c7:f5:17:d8:8f:40:8b:4e:00:76:67:5b:3e: b4:66:2c:76:60:06:f1:0a:d8:8f:59:24:8d:33:2a:5c:79:35: c1:45:e7:3b:6b:64:c2:05:2d:fc:71:d9:20:bb:56:0a:0a:3e: 6a:db:64:8a:b1:c1:e5:37:83:23:f4:48:52:0d:f7:4a:6b:30: 2f:b4:a3:0b:6e:fc:55:d0:a8:56:a2:9e:1c:73:fd:8d:c9:56: 6d:78:54:74:19:30:1e:72:61:da:76:8e:2f:0d:aa:e1:3c:17: ce:a2:b4:f3:62:dc:59:3b:b0:04:1a:d4:94:78:8a:e5:5d:a1: 23:f7:07:03:2d:2d:4f:51:8c:87:47:ac:2d:53:56:23:8c:71: 09:04:1e:24:77:d4:a7:64:c7:0e:93:8f:da:4b:e9:ea:e4:76: f2:58:16:b4:28:d8:f5:45:72:36:2b:3c:81:22:96:77:fe:37: 8b:f9:d0:be:f1:3c:96:e1:75:3a:0c:eb:54:a3:92:64:bd:13: 95:d9:5d:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKEUxMTg5NkIwMEM5NDg2RTQzRUU3NDgwMkQyMTk2OUY4 ODhFRTRFMkQwHhcNMjUxMDE5MDM1NjM0WhcNMjUxMDI2MDM1NjM0WjAYMRYwFAYD VQQDEw02OGY0NjE3Mi1mZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDfYHt1chSgJL1c0XVLkBtrz9q2qCloFqBYt7Fd7/n90PsRXSAfAxgZgI3dF bqH5izU2FnxAcjTtzMliIVWtAEuRpTn6evK4sNdyWvdPkrI6pzLJ9mmrVOTCPt45 7yNuxh3oywMLdF6/mt3r00GBvtKqupZrcyRtT886SbMUaM6s/7vHG1wXWoOdEpdI Ld9PIBAEZtC4l353loO4tDRo19v46zYcNqwGYUESzV14ITsUtg8nfd1VdPq1lKSr 8zF09qlQry9mZPs7uq4S60XcjMHi2bisVN3mxBjlNbvARnvEsYURQqaIDFP4ZQnF rzu5K5JWxis70aV2nwpVDQy6vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrXoTux UMaBnWBfhxfSwEE2vN9FMB8GA1UdIwQYMBaAFOEYlrAMlIbkPudIAtIZafiI7k4t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9GMUZFMzJCQTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi80UmlXc0F5VWh1US01MGdDMGhscC1JanVU aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSaVdzQXlVaHVRLTUwZ0MwaGxwLUlqdVRpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9GMUZFMzJCQTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi80UmlXc0F5VWh1 US01MGdDMGhscC1JanVUaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI6Y4YiNxfUID+qTDg0A0l4GxotIi1NhiaQefcCIlDFoCiOsWVh+7h temKJj+kNdjBYFBzA7EMPRP53Mf1F9iPQItOAHZnWz60Zix2YAbxCtiPWSSNMypc eTXBRec7a2TCBS38cdkgu1YKCj5q22SKscHlN4Mj9EhSDfdKazAvtKMLbvxV0KhW op4cc/2NyVZteFR0GTAecmHado4vDarhPBfOorTzYtxZO7AEGtSUeIrlXaEj9wcD LS1PUYyHR6wtU1YjjHEJBB4kd9SnZMcOk4/aS+nq5HbyWBa0KNj1RXI2KzyBIpZ3 /jeL+dC+8TyW4XU6DOtUo5JkvROV2V0D -----END CERTIFICATE-----Generated at Mon Oct 20 21:41:28 2025 by rpki-client