$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft File: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft (raw, json) Hash identifier: O15IvgrAqOYOx1I+xhGdEa6Z1bqMKr8tfU8YOphVQtI= Subject key identifier: 9D:7D:12:E5:D2:2C:72:D4:B9:AA:B3:62:07:98:04:00:84:2E:DC:8B Authority key identifier: 99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA Certificate issuer: /CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Certificate serial: 0B0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft Manifest number: 0B04 Signing time: Sat 18 Oct 2025 20:16:33 +0000 Manifest this update: Sat 18 Oct 2025 20:16:32 +0000 Manifest next update: Sat 25 Oct 2025 20:16:32 +0000 Files and hashes: 1: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl (hash: ZgbDHN6SMwKKNbA6W258Y7aPlx6BekQvmLPqUiAkex4=) 2: EF44A44E51EB11EABC11800DC4F9AE02.roa (hash: wVjOHBRTAFBzywxmlgqw2C8A1H3crVXb96hs+TBB5RU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2831 (0xb0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD378, serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Validity Not Before: Oct 18 20:16:32 2025 GMT Not After : Oct 25 20:16:32 2025 GMT Subject: CN=68f3f5a0-fa14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a3:7b:71:c2:68:c5:17:d9:29:30:f3:32:e2: 84:9b:ec:0a:d5:da:d8:08:84:43:39:ee:85:6c:5e: 0b:3a:c5:1a:7b:2b:3e:98:42:87:36:24:dc:81:ea: 60:2d:af:82:fa:a9:1c:c8:7b:c9:33:de:21:e6:f6: 18:de:b1:f4:e4:2f:d2:04:4e:5d:78:0b:bd:6f:98: 30:03:ee:b8:dc:43:02:7c:2a:71:2d:4b:5b:b8:ef: a0:49:5a:7a:d3:be:fb:9d:5c:b8:9f:b6:6d:97:40: f9:bd:65:96:0b:81:4d:5e:3a:d0:a3:3f:df:59:4a: cd:7f:dd:be:25:cf:6a:50:3c:54:b5:e6:4c:d1:09: e4:01:ce:7a:2a:b7:1c:df:4f:aa:80:31:47:ef:71: 21:d0:cb:7c:78:1b:a9:7b:15:22:dd:b4:24:84:ec: 2c:57:4a:5d:ff:33:0d:c2:02:a8:24:f3:a8:19:57: 6f:11:38:d5:b2:5d:84:d1:29:bb:43:f2:db:81:0b: 47:26:06:c4:94:fa:6d:67:fb:6b:9b:24:66:ca:95: 37:e1:48:38:83:8d:37:13:4c:92:77:02:1d:3c:86: be:59:06:94:87:ef:cb:ea:4f:7a:f9:0e:d0:1a:9f: 84:49:55:dd:4e:b3:35:66:b1:a0:d2:89:e3:5d:92: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7D:12:E5:D2:2C:72:D4:B9:AA:B3:62:07:98:04:00:84:2E:DC:8B X509v3 Authority Key Identifier: keyid:99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:6e:0a:18:bb:a1:89:26:d4:88:79:2c:64:3c:b8:15:bd:24: cc:9c:1b:63:d8:12:a5:62:42:8f:2d:2a:c8:cd:c5:25:28:53: ea:1c:aa:32:81:f3:c6:d3:07:50:21:6b:8a:09:4b:e8:17:a9: 2f:72:a2:a1:61:3f:62:d0:d6:7b:2d:ab:c6:8b:d9:e5:f4:1d: 9b:f6:4b:c0:8c:e7:db:f8:3c:20:73:8c:45:73:b0:c4:84:4e: 96:6c:d0:df:45:3b:5d:f6:e6:53:e9:74:56:d6:55:d7:07:be: 30:59:c3:01:a3:c2:d4:f9:a6:01:87:14:3a:d7:71:97:5c:e7: b5:13:91:a4:ed:48:33:6f:f0:29:05:4d:02:e6:34:26:26:0e: 96:d5:f4:95:c2:69:dd:2f:a3:01:c8:ed:55:49:04:ed:44:d4: a7:cc:00:64:86:90:1e:17:f5:0f:a3:55:e4:b5:39:6e:27:ee: d8:a8:fa:e1:cc:f7:16:39:ed:b9:12:48:be:46:88:ad:1e:f0: f3:7b:a3:e9:ea:55:29:d1:f3:68:64:4d:ab:5b:bc:0b:cc:fd: c4:cc:40:4b:ad:88:a1:da:12:7c:c2:4c:5c:77:70:70:66:91: 13:6a:f9:70:b8:f7:be:7d:f2:31:ee:db:63:fb:b4:09:91:99: ba:ca:bc:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzNzgxMTAvBgNVBAUTKDk5QkUwODVEMUM2OTZDQkMyMUI2NzhGOTE4OEVDQ0U1 REJDREQ0Q0EwHhcNMjUxMDE4MjAxNjMyWhcNMjUxMDI1MjAxNjMyWjAYMRYwFAYD VQQDEw02OGYzZjVhMC1mYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl6N7ccJoxRfZKTDzMuKEm+wK1drYCIRDOe6FbF4LOsUaeys+mEKHNiTcgepg La+C+qkcyHvJM94h5vYY3rH05C/SBE5deAu9b5gwA+643EMCfCpxLUtbuO+gSVp6 0777nVy4n7Ztl0D5vWWWC4FNXjrQoz/fWUrNf92+Jc9qUDxUteZM0QnkAc56Krcc 30+qgDFH73Eh0Mt8eBupexUi3bQkhOwsV0pd/zMNwgKoJPOoGVdvETjVsl2E0Sm7 Q/LbgQtHJgbElPptZ/trmyRmypU34Ug4g403E0ySdwIdPIa+WQaUh+/L6k96+Q7Q Gp+ESVXdTrM1ZrGg0onjXZKoNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ19EuXS LHLUuaqzYgeYBACELtyLMB8GA1UdIwQYMBaAFJm+CF0caWy8IbZ4+RiOzOXbzdTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM3OC82MzJGQThDRTUx RUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJMd2h0bmo1R0k3TTVkdk4x TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21iNElYUnhwYkx3aHRuajVHSTdNNWR2TjFNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM3OC82MzJGQThDRTUxRUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJM d2h0bmo1R0k3TTVkdk4xTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTbgoYu6GJJtSIeSxkPLgVvSTMnBtj2BKlYkKPLSrIzcUlKFPqHKoy gfPG0wdQIWuKCUvoF6kvcqKhYT9i0NZ7LavGi9nl9B2b9kvAjOfb+Dwgc4xFc7DE hE6WbNDfRTtd9uZT6XRW1lXXB74wWcMBo8LU+aYBhxQ613GXXOe1E5Gk7Ugzb/Ap BU0C5jQmJg6W1fSVwmndL6MByO1VSQTtRNSnzABkhpAeF/UPo1XktTluJ+7YqPrh zPcWOe25Eki+RoitHvDze6Pp6lUp0fNoZE2rW7wLzP3EzEBLrYih2hJ8wkxcd3Bw ZpETavlwuPe+ffIx7ttj+7QJkZm6yrz9 -----END CERTIFICATE-----Generated at Mon Oct 20 04:20:25 2025 by rpki-client