$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json) Hash identifier: 0W687+beNOZcogpSiBnyDG2JNDONc9SizWO1PPDjT1w= Subject key identifier: B6:3E:F5:9A:AE:05:D5:71:0A:AA:96:CB:DA:DE:63:10:5E:59:89:A3 Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft Manifest number: 4C Signing time: Sun 19 Oct 2025 10:45:39 +0000 Manifest this update: Sun 19 Oct 2025 10:45:38 +0000 Manifest next update: Sun 26 Oct 2025 10:45:38 +0000 Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: yS7Mv1FW5QZ0ffUv2FMNkKQSOpUhK5qQuvJGs9ZvICQ=) 2: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: iR9RmJIaK9kKAtKzjMGd269EeycB0OEwfaUigxvrCq4=) 3: F88154843B9D11F091B39D67C4F9AE02.roa (hash: nNxkYkRl2gKLDvZBsXppHYQmBwtDL7vgL/l44dOoypk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Validity Not Before: Oct 19 10:45:38 2025 GMT Not After : Oct 26 10:45:38 2025 GMT Subject: CN=68f4c153-2f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2b:c7:27:97:aa:b2:e3:aa:58:9e:08:39:47: 7f:32:30:4f:5f:3d:0c:b3:af:13:85:7f:0a:21:32: 11:c2:f3:51:c2:c4:8c:97:17:d2:fd:8f:25:a7:3c: 9c:07:ff:c7:1f:b7:cc:8b:38:db:27:99:84:07:ef: aa:48:9c:89:61:68:f6:57:ff:f4:1b:73:b4:09:7d: 98:6f:aa:65:74:f2:f3:b2:f8:8c:97:ef:07:11:b5: 70:a7:1c:64:64:fd:46:85:fd:d1:bf:cb:f3:2c:51: 8b:41:2b:70:ff:6b:72:28:9c:43:58:74:0e:74:54: c1:22:b9:b6:52:4c:51:ff:d5:fc:fd:ff:c4:89:51: e1:19:31:25:71:04:12:da:a6:9f:76:7b:a1:f6:ff: 32:c9:85:29:40:04:cc:cc:73:09:19:0e:93:02:ad: ec:8b:e0:4d:1e:4c:bd:a5:2d:e7:73:8e:e4:45:93: 61:dd:19:d4:0b:52:64:a8:77:d1:80:54:22:3e:09: 5c:02:37:9d:ab:09:41:90:4d:c7:72:d2:cf:54:43: 89:fe:53:b9:f9:6c:a3:94:f7:11:8b:ce:3d:0a:35: aa:3a:20:9a:cb:8f:8a:2a:a7:08:eb:dd:03:33:89: 34:c4:d2:cc:a4:bd:8f:17:22:87:93:e9:4d:4f:82: 78:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3E:F5:9A:AE:05:D5:71:0A:AA:96:CB:DA:DE:63:10:5E:59:89:A3 X509v3 Authority Key Identifier: keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4f:6f:50:16:73:68:c0:ca:34:02:b6:18:67:e4:4e:3a:e2: 2e:de:d4:7b:6f:c4:7c:74:f1:ea:7c:a6:d4:74:20:19:ce:3b: 0d:38:3b:f8:ea:85:3a:25:c8:a0:32:c8:a7:d2:88:3f:92:e7: ab:b8:bb:de:a9:ea:c5:69:b4:26:8e:00:da:26:d3:2a:c4:c5: a8:62:33:f2:f6:32:cd:07:86:45:e3:fd:a1:21:70:a8:17:d6: 78:25:e9:a1:f1:d8:ad:6e:59:77:c6:67:07:4f:49:2c:52:69: e2:b2:64:f0:22:3e:25:4e:45:61:18:fb:ed:d0:3e:fa:16:95: 8d:0e:37:0e:75:b9:2c:b4:df:1d:5c:a8:c8:e0:b0:ad:55:9c: 18:66:fc:d7:b6:63:e8:8d:1b:21:20:c4:d8:75:4b:8b:8a:54: e2:14:12:63:4c:e4:39:81:22:05:7b:c5:39:a0:58:06:11:08: 93:31:a9:ef:3a:59:ef:ec:b9:f5:c5:ee:2b:c6:16:5c:4d:38: ed:42:ef:3b:3b:19:b4:09:dc:eb:fc:ec:b4:30:b3:06:79:11: 2e:be:69:64:7d:fc:91:bd:95:51:e9:1c:1b:70:c4:87:9f:67: c6:e2:f4:f1:c3:42:20:8b:23:6f:fc:ab:5b:a6:ba:8e:ed:0d: e9:27:75:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NkMxMDExMC8GA1UEBRMoRTJCMERGQTY5MEQyQzdFQUM0MzYzNjc1NkU0MzdCN0My NjI2RjRCQjAeFw0yNTEwMTkxMDQ1MzhaFw0yNTEwMjYxMDQ1MzhaMBgxFjAUBgNV BAMTDTY4ZjRjMTUzLTJmNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9K8cnl6qy46pYngg5R38yME9fPQyzrxOFfwohMhHC81HCxIyXF9L9jyWnPJwH /8cft8yLONsnmYQH76pInIlhaPZX//Qbc7QJfZhvqmV08vOy+IyX7wcRtXCnHGRk /UaF/dG/y/MsUYtBK3D/a3IonENYdA50VMEiubZSTFH/1fz9/8SJUeEZMSVxBBLa pp92e6H2/zLJhSlABMzMcwkZDpMCreyL4E0eTL2lLedzjuRFk2HdGdQLUmSod9GA VCI+CVwCN52rCUGQTcdy0s9UQ4n+U7n5bKOU9xGLzj0KNao6IJrLj4oqpwjr3QMz iTTE0sykvY8XIoeT6U1PgngTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtj71mq4F 1XEKqpbL2t5jEF5ZiaMwHwYDVR0jBBgwFoAU4rDfppDSx+rENjZ1bkN7fCYm9Lsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2QzEwLzBFOTQwNUJBM0I5 RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlM cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNHJEZnBwRFN4LXJFTmpaMWJrTjdmQ1ltOUxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2 QzEwLzBFOTQwNUJBM0I5RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1y RU5qWjFia043ZkNZbTlMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH9Pb1AWc2jAyjQCthhn5E464i7e1HtvxHx08ep8ptR0IBnOOw04O/jq hTolyKAyyKfSiD+S56u4u96p6sVptCaOANom0yrExahiM/L2Ms0HhkXj/aEhcKgX 1ngl6aHx2K1uWXfGZwdPSSxSaeKyZPAiPiVORWEY++3QPvoWlY0ONw51uSy03x1c qMjgsK1VnBhm/Ne2Y+iNGyEgxNh1S4uKVOIUEmNM5DmBIgV7xTmgWAYRCJMxqe86 We/sufXF7ivGFlxNOO1C7zs7GbQJ3Ov87LQwswZ5ES6+aWR9/JG9lVHpHBtwxIef Z8bi9PHDQiCLI2/8q1umuo7tDekndT4= -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:43 2025 by rpki-client