$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft File: 4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json) Hash identifier: isZcUeg9G6DMRVeLOEqG9RCuHpOvSqtPcKNEvW2c6rA= Subject key identifier: E8:87:F6:FC:05:31:E8:08:7A:86:48:41:C2:E1:D0:ED:72:3B:89:CC Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 Certificate issuer: /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Certificate serial: 091A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft Manifest number: 090B Signing time: Sat 18 Oct 2025 21:25:31 +0000 Manifest this update: Sat 18 Oct 2025 21:25:31 +0000 Manifest next update: Sat 25 Oct 2025 21:25:31 +0000 Files and hashes: 1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: 8vGzPb5TZM8ps7Nyiw7QKMvb84LmiEjUrCykkb2Vei0=) 2: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: hfrhHFCjm9A1IZZ68jj/fGY3wp72/JwweOhEQKmJp+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2330 (0x91a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Validity Not Before: Oct 18 21:25:31 2025 GMT Not After : Oct 25 21:25:31 2025 GMT Subject: CN=68f405cb-42bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:36:b9:e7:2d:bd:a4:48:62:f2:5e:2a:e3:54: 47:be:76:f5:fc:03:1a:9a:cb:9f:d4:f8:34:a2:9f: 48:ef:0e:7c:61:73:63:ef:a3:df:8f:a1:e1:4d:70: 59:9e:13:50:14:be:93:ba:b2:92:de:1f:63:e0:71: cc:d2:6a:f8:e9:06:65:88:ef:56:ab:3b:2e:7e:a8: 30:86:44:e7:1a:3a:56:eb:b6:cd:af:58:ff:8e:35: 2e:15:af:1b:7b:60:cf:52:2d:35:bd:8d:8f:0a:9e: ec:6a:2a:2f:18:9e:05:56:18:c7:e9:5c:41:ab:15: f3:7d:c5:11:c5:14:53:21:b0:f5:19:db:39:2f:f9: f4:e7:cc:26:7a:da:ec:42:a8:7d:4c:75:8f:bf:23: b8:30:5e:51:36:27:60:c8:27:97:d3:9a:42:fb:2f: 76:2b:d4:f1:a8:0e:96:31:45:ee:4f:04:ed:e1:62: 35:d3:7b:26:01:2e:cb:21:db:15:1d:66:db:6b:e0: ec:f7:58:40:c2:4b:18:3c:8c:0c:85:d2:5a:dd:49: 10:a3:95:57:58:15:d1:7b:cb:48:9f:09:12:ad:47: 90:5d:cc:3d:71:40:02:ea:c9:8a:71:d1:81:df:d7: f1:c8:20:67:f8:0a:b2:42:68:c4:e3:7e:e0:ac:c7: d8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:87:F6:FC:05:31:E8:08:7A:86:48:41:C2:E1:D0:ED:72:3B:89:CC X509v3 Authority Key Identifier: keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:30:6b:4a:b2:7d:82:75:c5:25:63:56:8c:c3:dc:f3:2a:c1: 08:b4:5f:9f:39:4f:5d:d4:f5:37:6f:9c:5c:ad:3b:70:14:32: 7f:c0:5d:0d:c1:c5:b0:f4:17:b3:5f:9e:65:b2:e6:e1:bd:f3: 87:0c:1a:6c:ba:1f:38:82:a8:01:64:6f:94:3e:50:ac:f8:3e: 8c:5c:b5:61:27:5f:de:fd:2e:49:3d:cb:84:85:d3:7a:fc:d8: 21:b4:f9:18:8c:71:3c:8a:e7:aa:ec:00:00:53:51:82:ac:2b: b9:d9:61:68:e0:d3:a6:8a:06:43:23:6d:a4:24:e9:6a:f1:25: 08:0f:9e:c8:83:88:29:24:0d:48:bd:f0:4c:64:34:84:1b:28: 4c:b3:f9:dd:be:74:ca:93:a1:5e:6c:7d:ca:bb:42:81:08:42: 57:fc:3c:75:44:c9:8e:07:ad:bb:0f:7a:99:da:7a:e8:30:2c: 09:ed:31:71:29:73:09:56:22:1e:02:1a:b2:49:39:56:de:ed: fc:14:75:36:95:1e:4a:8e:8b:cf:48:de:a5:f0:cb:c5:52:67: d5:1a:ca:2d:f9:03:99:61:ee:93:12:d7:24:b0:7d:97:81:1c: f9:24:2e:0c:3b:dd:d9:94:e2:52:e0:32:39:25:08:fb:68:73: 0d:c7:78:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRDNkIxMTAvBgNVBAUTKEUyNjg3M0I0NUY4OEQxRjVEODgzQzE3RTRDQ0Y3MEEy NDUxNjIxNDIwHhcNMjUxMDE4MjEyNTMxWhcNMjUxMDI1MjEyNTMxWjAYMRYwFAYD VQQDEw02OGY0MDVjYi00MmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDa55y29pEhi8l4q41RHvnb1/AMamsuf1Pg0op9I7w58YXNj76Pfj6HhTXBZ nhNQFL6TurKS3h9j4HHM0mr46QZliO9WqzsufqgwhkTnGjpW67bNr1j/jjUuFa8b e2DPUi01vY2PCp7saiovGJ4FVhjH6VxBqxXzfcURxRRTIbD1Gds5L/n058wmetrs Qqh9THWPvyO4MF5RNidgyCeX05pC+y92K9TxqA6WMUXuTwTt4WI103smAS7LIdsV HWbba+Ds91hAwksYPIwMhdJa3UkQo5VXWBXRe8tInwkSrUeQXcw9cUAC6smKcdGB 39fxyCBn+AqyQmjE437grMfYXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiH9vwF MegIeoZIQcLh0O1yO4nMMB8GA1UdIwQYMBaAFOJoc7RfiNH12IPBfkzPcKJFFiFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEM2Qi8yNzhBQTNFNEI1 MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBmWFlnOEYtVE05d29rVVdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRtaHp0Ri1JMGZYWWc4Ri1UTTl3b2tVV0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEM2Qi8yNzhBQTNFNEI1MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBm WFlnOEYtVE05d29rVVdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEMGtKsn2CdcUlY1aMw9zzKsEItF+fOU9d1PU3b5xcrTtwFDJ/wF0N wcWw9BezX55lsubhvfOHDBpsuh84gqgBZG+UPlCs+D6MXLVhJ1/e/S5JPcuEhdN6 /NghtPkYjHE8iueq7AAAU1GCrCu52WFo4NOmigZDI22kJOlq8SUID57Ig4gpJA1I vfBMZDSEGyhMs/ndvnTKk6FebH3Ku0KBCEJX/Dx1RMmOB627D3qZ2nroMCwJ7TFx KXMJViIeAhqySTlW3u38FHU2lR5KjovPSN6l8MvFUmfVGsot+QOZYe6TEtcksH2X gRz5JC4MO93ZlOJS4DI5JQj7aHMNx3g8 -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:29 2025 by rpki-client