$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft File: 4RvPp2LU9ssvatCdA6lA4P6qAfg.mft (raw, json) Hash identifier: 6/6m5saCiJg6J3GmYRBA0aaNrXsOx6N5vXXsXFfYWDE= Subject key identifier: 58:36:8E:B1:DB:1B:E3:39:98:AF:E0:58:A4:17:D2:50:01:20:98:7C Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 Certificate issuer: /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Certificate serial: 1F2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft Manifest number: 1F28 Signing time: Sun 02 Nov 2025 16:02:15 +0000 Manifest this update: Sun 02 Nov 2025 16:02:14 +0000 Manifest next update: Sun 09 Nov 2025 16:02:14 +0000 Files and hashes: 1: 4RvPp2LU9ssvatCdA6lA4P6qAfg.crl (hash: 7L3xFC4ulUo2i8bxh7vVeMsGqQKV8emMY8ITXjkPzTs=) 2: DB92DE200AEF11ECB7243C0FC4F9AE02.roa (hash: jUBoH/NsE+2KO1Z4hcom5Ddnhv0XpfeG1RJbEdRDm9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7983 (0x1f2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Validity Not Before: Nov 2 16:02:14 2025 GMT Not After : Nov 9 16:02:14 2025 GMT Subject: CN=69078086-ba57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:eb:10:7b:a3:78:81:88:be:4d:26:f8:6c:85: 19:1f:9c:5a:7b:11:40:9b:a0:fa:48:3c:b4:09:4c: bd:73:70:da:6f:a4:20:1e:46:ff:9f:26:ee:3b:54: cd:e9:b5:8c:58:06:6e:41:44:a9:f4:32:8d:34:20: f6:be:aa:8d:74:fc:da:4b:53:ce:ac:be:b2:b7:a1: 3e:64:b0:88:93:7f:5b:4a:a6:82:cf:f6:06:67:a9: 71:dc:c0:f0:83:04:00:d4:1a:ae:81:3f:d5:fb:e3: 07:80:98:a1:64:77:ff:f2:dd:ef:3b:f2:b2:a0:74: 3b:ed:34:07:c2:18:61:1b:b5:f6:2d:d5:c5:3c:f1: 6d:e3:0d:4c:67:f2:be:70:cf:ed:67:75:60:3a:5f: 70:00:85:9b:78:7d:a2:c3:99:e7:15:09:dd:95:3c: 58:b2:87:b0:39:36:6a:77:3f:85:00:f4:31:df:54: 18:f3:21:c5:02:9f:f6:c2:4f:6c:64:30:fa:4d:77: b2:17:db:89:41:06:b9:04:f0:08:03:c1:b2:dc:3f: fa:c6:7c:5e:05:03:e7:64:4f:e7:78:2b:76:7c:1d: c0:b6:fe:b3:79:d4:cb:57:f8:e2:2d:68:b8:05:8c: 63:ed:d6:50:0c:d2:78:d0:ff:e6:51:e9:69:75:40: 70:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:36:8E:B1:DB:1B:E3:39:98:AF:E0:58:A4:17:D2:50:01:20:98:7C X509v3 Authority Key Identifier: keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:2f:a0:dd:8f:ad:4b:2f:d0:c8:54:2c:71:6b:a6:fd:cd:27: 0a:e2:2b:2c:58:77:4d:ee:91:44:c2:68:41:11:81:06:68:e8: e3:cf:8e:d5:04:fb:1b:bb:6a:03:62:b0:93:59:78:9f:18:46: 0b:a3:19:7a:8e:12:47:bb:11:85:06:7e:27:cd:bb:0c:69:e4: 6c:6d:03:a2:bb:35:b1:5f:40:89:31:e6:52:b8:75:17:0d:ee: 21:ad:c6:a5:99:05:e3:e6:dd:8a:6e:66:59:c0:be:e8:72:37: bc:70:35:33:b6:37:df:91:6b:41:90:e7:e1:dc:96:f0:a5:6c: f9:35:b9:95:3b:15:43:e6:ee:db:87:7a:4d:58:fc:af:b8:6c: 10:d8:0b:06:a6:24:70:3a:39:2b:7b:19:97:da:09:9e:f7:f9: 13:87:b3:6b:5c:44:ea:78:49:c2:8f:8f:fc:d1:63:c5:f3:69: b0:51:21:c1:4c:91:ed:be:93:11:8f:68:77:e8:70:8e:b2:c6: 45:80:c5:ae:9d:12:c3:ca:9a:00:4a:91:19:09:82:15:49:44: cf:c3:c8:75:35:97:3d:26:79:fd:b4:f9:65:44:ee:cb:7c:27: 55:e3:7f:6d:2f:17:ea:d0:f5:4f:8c:e3:d7:5c:8c:a6:3c:ec: f8:bc:0e:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAwRjUxMTAvBgNVBAUTKEUxMUJDRkE3NjJENEY2Q0IyRjZBRDA5RDAzQTk0MEUw RkVBQTAxRjgwHhcNMjUxMTAyMTYwMjE0WhcNMjUxMTA5MTYwMjE0WjAYMRYwFAYD VQQDEw02OTA3ODA4Ni1iYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnusQe6N4gYi+TSb4bIUZH5xaexFAm6D6SDy0CUy9c3Dab6QgHkb/nybuO1TN 6bWMWAZuQUSp9DKNNCD2vqqNdPzaS1POrL6yt6E+ZLCIk39bSqaCz/YGZ6lx3MDw gwQA1BqugT/V++MHgJihZHf/8t3vO/KyoHQ77TQHwhhhG7X2LdXFPPFt4w1MZ/K+ cM/tZ3VgOl9wAIWbeH2iw5nnFQndlTxYsoewOTZqdz+FAPQx31QY8yHFAp/2wk9s ZDD6TXeyF9uJQQa5BPAIA8Gy3D/6xnxeBQPnZE/neCt2fB3Atv6zedTLV/jiLWi4 BYxj7dZQDNJ40P/mUelpdUBwZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFg2jrHb G+M5mK/gWKQX0lABIJh8MB8GA1UdIwQYMBaAFOEbz6di1PbLL2rQnQOpQOD+qgH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDBGNS9EOUU5NTJGNDVF RjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlzc3ZhdENkQTZsQTRQNnFB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSdlBwMkxVOXNzdmF0Q2RBNmxBNFA2cUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDBGNS9EOUU5NTJGNDVFRjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlz c3ZhdENkQTZsQTRQNnFBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3L6Ddj61LL9DIVCxxa6b9zScK4issWHdN7pFEwmhBEYEGaOjjz47V BPsbu2oDYrCTWXifGEYLoxl6jhJHuxGFBn4nzbsMaeRsbQOiuzWxX0CJMeZSuHUX De4hrcalmQXj5t2KbmZZwL7ocje8cDUztjffkWtBkOfh3JbwpWz5NbmVOxVD5u7b h3pNWPyvuGwQ2AsGpiRwOjkrexmX2gme9/kTh7NrXETqeEnCj4/80WPF82mwUSHB TJHtvpMRj2h36HCOssZFgMWunRLDypoASpEZCYIVSUTPw8h1NZc9Jnn9tPllRO7L fCdV439tLxfq0PVPjOPXXIymPOz4vA5P -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:53 2025 by rpki-client