$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft File: a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json) Hash identifier: nFTH6AmZQQ4Vxg+xERyhkrG0CyjgcvWu+uRaIzeX+PM= Subject key identifier: B9:97:D0:AE:7C:32:2F:6D:73:27:94:C9:48:DB:68:F7:FA:E1:8C:3B Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Certificate serial: 1B95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft Manifest number: 1B88 Signing time: Sat 18 Oct 2025 16:35:36 +0000 Manifest this update: Sat 18 Oct 2025 16:35:35 +0000 Manifest next update: Sat 25 Oct 2025 16:35:35 +0000 Files and hashes: 1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: tW15CxwYat50LywU2XvlQOHJwqgfI12hqX7Mac9JXRw=) 2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: ZmGMH4g7cGfub9A5Ucup2yr3pAIXwRpZ1v4yX9SvAOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7061 (0x1b95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAD6F, serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Validity Not Before: Oct 18 16:35:35 2025 GMT Not After : Oct 25 16:35:35 2025 GMT Subject: CN=68f3c1d7-34bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:f0:d1:43:e6:92:e2:04:23:f1:c6:6e:54: 47:a6:79:42:f5:14:09:47:51:73:15:cb:6f:1f:5a: 29:2d:77:df:45:fe:ec:c9:c0:98:7d:59:ec:a9:ed: b8:10:48:02:f0:9f:85:da:26:7d:7e:45:c4:ff:28: 2e:cf:4b:09:20:5d:3d:fd:0e:59:9d:ca:6d:fa:b2: 2b:b0:16:33:7d:c7:1d:73:c1:a1:fd:bb:42:53:7c: ea:c3:e6:4d:28:9a:57:e1:2a:d3:a9:59:90:a3:b8: 50:da:62:42:ba:f9:5a:4b:1e:6a:15:c3:26:79:79: 8d:61:36:cd:4c:85:9f:f2:3c:a7:4f:d4:84:41:a2: a1:49:c3:10:13:ea:10:b4:30:d1:cf:9f:57:0e:35: 78:0e:e8:3d:39:55:53:76:8d:a5:cb:cf:b9:55:12: 34:8b:b5:b2:b6:2b:70:0f:36:d8:2a:13:45:25:43: 6f:ac:9d:91:54:e9:16:d2:4e:f1:4b:c4:33:c9:b8: 82:35:a1:20:48:90:b6:58:be:22:bf:bd:dd:e3:e4: e2:0c:b4:b5:2d:05:68:12:e4:11:b9:fc:df:6d:60: 17:70:88:b3:c7:7a:32:c0:b7:28:28:cb:73:fb:51: 7a:69:aa:a4:6f:3d:90:be:57:1e:a2:f1:2f:24:38: 69:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:97:D0:AE:7C:32:2F:6D:73:27:94:C9:48:DB:68:F7:FA:E1:8C:3B X509v3 Authority Key Identifier: keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:aa:c1:15:b3:60:f9:4c:fe:9e:71:c0:b0:49:25:9e:aa:83: 71:5d:8a:03:c1:e9:8e:77:f1:a2:1f:ab:a6:b1:71:da:34:39: ca:c8:1c:9b:ca:b3:fb:50:54:3e:d1:2f:50:8c:51:77:f4:1a: c6:fd:22:55:d0:54:32:ee:6c:e5:fe:c4:8b:e6:2e:05:86:da: 31:95:ed:15:13:99:6f:62:41:2d:34:f5:da:fe:49:6d:a3:48: dd:e6:fc:c6:10:cb:ce:80:7e:45:a4:92:dd:12:d2:b6:69:01: c5:db:50:cd:c4:e4:68:a8:d9:77:7f:ee:0e:bc:8c:49:5c:e0: 94:b5:a6:aa:c8:15:69:a1:29:6f:71:33:6c:be:60:da:d1:97: de:de:d9:4a:41:20:89:d4:b9:02:99:7d:6f:31:0d:bb:b9:2b: d1:32:a8:50:6c:c8:d3:25:a6:09:d6:d3:59:0d:2a:d2:84:1a: 58:10:72:61:31:77:84:2e:09:8a:86:ae:76:2a:db:76:26:8f: 8f:4d:4f:1d:d5:73:f8:32:de:57:47:fc:6c:90:1b:91:f9:e4: 51:33:7b:61:73:4e:a9:9e:ae:ec:0e:e7:0b:e6:93:b0:79:11: 5c:4a:77:75:92:68:6f:53:b2:88:7b:1d:c3:1e:8f:ba:d9:37: 5c:6e:fc:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFENkYxMTAvBgNVBAUTKDZCODY0MjQxREYwMTJGMjM5MjdBMDFDMEUzODZFMDdB QUI0OUM1MjIwHhcNMjUxMDE4MTYzNTM1WhcNMjUxMDI1MTYzNTM1WjAYMRYwFAYD VQQDEw02OGYzYzFkNy0zNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuLw0UPmkuIEI/HGblRHpnlC9RQJR1FzFctvH1opLXffRf7sycCYfVnsqe24 EEgC8J+F2iZ9fkXE/yguz0sJIF09/Q5Zncpt+rIrsBYzfccdc8Gh/btCU3zqw+ZN KJpX4SrTqVmQo7hQ2mJCuvlaSx5qFcMmeXmNYTbNTIWf8jynT9SEQaKhScMQE+oQ tDDRz59XDjV4Dug9OVVTdo2ly8+5VRI0i7WytitwDzbYKhNFJUNvrJ2RVOkW0k7x S8QzybiCNaEgSJC2WL4iv73d4+TiDLS1LQVoEuQRufzfbWAXcIizx3oywLcoKMtz +1F6aaqkbz2QvlceovEvJDhpIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmX0K58 Mi9tcyeUyUjbaPf64Yw7MB8GA1UdIwQYMBaAFGuGQkHfAS8jknoBwOOG4HqrScUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUQ2Ri80NkM5NDA5NDE0 NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5T1NlZ0hBNDRiZ2VxdEp4 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0WkNRZDhCTHlPU2VnSEE0NGJnZXF0SnhTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUQ2Ri80NkM5NDA5NDE0NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5 T1NlZ0hBNDRiZ2VxdEp4U0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3qsEVs2D5TP6eccCwSSWeqoNxXYoDwemOd/GiH6umsXHaNDnKyByb yrP7UFQ+0S9QjFF39BrG/SJV0FQy7mzl/sSL5i4Fhtoxle0VE5lvYkEtNPXa/klt o0jd5vzGEMvOgH5FpJLdEtK2aQHF21DNxORoqNl3f+4OvIxJXOCUtaaqyBVpoSlv cTNsvmDa0Zfe3tlKQSCJ1LkCmX1vMQ27uSvRMqhQbMjTJaYJ1tNZDSrShBpYEHJh MXeELgmKhq52Ktt2Jo+PTU8d1XP4Mt5XR/xskBuR+eRRM3thc06pnq7sDucL5pOw eRFcSnd1kmhvU7KIex3DHo+62Tdcbvx4 -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:12 2025 by rpki-client