$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: vhvvFgoZHYbRQy2V8sT8/x0KRtEK4+cdC8lvXziuou0= Subject key identifier: 36:77:FE:D9:C0:40:C2:17:21:30:F8:A2:A2:83:7D:03:70:17:41:ED Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 07D7 Signing time: Sat 18 Oct 2025 22:27:41 +0000 Manifest this update: Sat 18 Oct 2025 22:27:40 +0000 Manifest next update: Sat 25 Oct 2025 22:27:40 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: N2rjiNG686xfnf44X9u6jmoxZdsG1vJBc9KuiN2JIp4=) 2: 009FA5F0397C11EF9EC42850C4F9AE02.roa (hash: E4kJ9iOaWgd6kt6tetVvQMWfFOobpWfFfGNUTYY1QpA=) 3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: ULfIGDxLDtcTmx758s/wyZezobSONv5OLR5TRBpsLtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Oct 18 22:27:40 2025 GMT Not After : Oct 25 22:27:40 2025 GMT Subject: CN=68f4145d-7ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:27:8f:a2:92:2f:9c:0a:a6:73:3e:60:c0: 0f:de:25:dc:f1:04:b9:e3:7b:c3:60:be:d3:c5:68: 00:7d:ef:89:55:0e:96:41:83:33:0e:1b:0c:ca:fe: 25:e6:48:ff:84:aa:9e:1c:3d:27:5b:cb:13:97:72: 1a:80:d1:c1:3f:2c:d7:d9:c1:4b:10:31:54:0b:fb: 5b:9f:89:7c:c2:e9:88:21:9d:83:9d:f3:7e:e3:20: 15:26:a2:2d:b7:b5:74:f0:75:3f:11:92:21:d8:b8: 36:d6:7d:9b:4e:75:12:c1:73:68:19:5e:4c:ff:d9: a9:4a:1d:92:c6:3d:23:07:2a:13:f2:f7:3e:14:37: 51:1d:e6:f2:2e:fd:50:17:96:5a:b7:22:ba:34:8e: 58:94:ea:74:ab:ee:c3:be:f8:0d:bf:94:a5:3a:89: ce:56:da:4c:ac:a3:c5:01:e1:6d:df:3c:7b:1c:af: 51:ed:15:13:f2:08:50:91:1a:b2:f5:f0:23:2d:9f: 28:a9:6a:c2:63:c7:8d:eb:12:09:4b:0a:d1:d9:38: 44:7a:95:e6:25:a0:9d:04:4f:7c:16:ef:ff:71:fd: ef:68:fc:8f:4e:26:6f:1e:30:4c:df:39:82:7f:e7: 81:52:cd:e3:34:54:e5:26:6c:c2:0b:ed:c1:ac:a8: ba:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:77:FE:D9:C0:40:C2:17:21:30:F8:A2:A2:83:7D:03:70:17:41:ED X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:af:c4:87:9e:fb:66:c4:cf:4b:e0:51:11:f6:9d:be:c8:61: 72:ca:c3:31:06:89:3f:a1:4f:a2:39:e0:d9:bf:84:9d:cc:28: da:e4:27:ae:f3:a1:2d:13:f0:a7:35:a5:44:95:e6:8e:5b:9b: 4d:01:67:8f:61:0b:7b:ca:c1:9f:bb:84:c3:fe:d5:47:7d:ac: 8a:15:e4:d0:7f:23:84:be:03:c0:c1:cf:50:18:52:be:ad:4d: a7:35:15:b0:09:44:66:ee:59:af:20:b7:08:ef:d6:e3:53:0d: 54:c0:8a:d3:db:ec:c4:e3:2a:ea:df:96:61:4c:4f:27:ab:06: 60:71:f7:0b:b3:e0:05:b5:db:c0:6e:3f:cd:83:f8:f3:1c:6e: 4d:55:c7:7b:8d:be:11:4a:e6:d1:0a:11:91:1d:8f:29:60:8f: af:15:98:9a:9d:fe:26:8e:60:5d:ef:64:02:55:7b:e5:c2:ff: 2f:bb:62:e3:d9:e6:27:cb:68:3f:c4:cd:e3:32:49:fe:7e:57: b1:b5:e6:4f:da:c4:ec:de:cc:47:4b:68:a5:96:14:c9:a3:e9: 5b:ce:c5:68:40:65:6d:06:ae:b8:84:3b:72:4b:62:b9:6f:4f: f1:ea:bb:57:6a:39:84:6f:04:f1:03:ed:dd:5c:11:91:08:b2: 24:91:5d:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjUxMDE4MjIyNzQwWhcNMjUxMDI1MjIyNzQwWjAYMRYwFAYD VQQDEw02OGY0MTQ1ZC03ZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1Mnj6KSL5wKpnM+YMAP3iXc8QS543vDYL7TxWgAfe+JVQ6WQYMzDhsMyv4l 5kj/hKqeHD0nW8sTl3IagNHBPyzX2cFLEDFUC/tbn4l8wumIIZ2DnfN+4yAVJqIt t7V08HU/EZIh2Lg21n2bTnUSwXNoGV5M/9mpSh2Sxj0jByoT8vc+FDdRHebyLv1Q F5ZatyK6NI5YlOp0q+7DvvgNv5SlOonOVtpMrKPFAeFt3zx7HK9R7RUT8ghQkRqy 9fAjLZ8oqWrCY8eN6xIJSwrR2ThEepXmJaCdBE98Fu//cf3vaPyPTiZvHjBM3zmC f+eBUs3jNFTlJmzCC+3BrKi6JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZ3/tnA QMIXITD4oqKDfQNwF0HtMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2r8SHnvtmxM9L4FER9p2+yGFyysMxBok/oU+iOeDZv4SdzCja5Ceu 86EtE/CnNaVEleaOW5tNAWePYQt7ysGfu4TD/tVHfayKFeTQfyOEvgPAwc9QGFK+ rU2nNRWwCURm7lmvILcI79bjUw1UwIrT2+zE4yrq35ZhTE8nqwZgcfcLs+AFtdvA bj/Ng/jzHG5NVcd7jb4RSubRChGRHY8pYI+vFZianf4mjmBd72QCVXvlwv8vu2Lj 2eYny2g/xM3jMkn+flexteZP2sTs3sxHS2illhTJo+lbzsVoQGVtBq64hDtyS2K5 b0/x6rtXajmEbwTxA+3dXBGRCLIkkV29 -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:22 2025 by rpki-client