$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json) Hash identifier: CwkYp5EDu4F3UzB+f1ZHUcbOwHg+UrJZQvhAWAvJLO4= Subject key identifier: FA:59:C4:FD:1D:07:96:52:B8:E4:60:28:FF:EF:5E:ED:BF:A6:D6:A8 Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 156C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft Manifest number: 1520 Signing time: Tue 04 Nov 2025 16:56:20 +0000 Manifest this update: Tue 04 Nov 2025 16:56:19 +0000 Manifest next update: Tue 11 Nov 2025 16:56:19 +0000 Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: GQdy4D8kh4lgHQICPBBIGkgrvsGJ9yU47GLMJwZd5Ls=) 2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: YK6Hmo3PllZtdE5hm6A8K6SCgV+te0dB3ba976/6MCY=) 3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: 3SKd7JKNbo4VQv7IRdQ4lKTCd0NxnhIdEQAdsmvLftg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5484 (0x156c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Nov 4 16:56:19 2025 GMT Not After : Nov 11 16:56:19 2025 GMT Subject: CN=690a3034-a3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:9e:4d:1f:fa:86:a9:5d:42:7b:ea:b8:e8: 38:58:c4:99:c7:89:77:64:b9:3e:a5:94:ce:43:95: 53:61:89:36:8a:91:f8:03:23:62:b6:81:30:17:0d: 3c:77:f6:c9:29:2d:96:30:cf:f1:86:f4:6e:bf:3e: ea:d0:81:b4:40:a5:34:87:c0:f4:1a:3d:57:17:b2: c8:a3:00:64:51:7b:b8:f1:08:35:01:fd:02:eb:b1: 9d:44:39:a8:df:d9:27:bc:bd:a9:f9:c8:a3:85:89: d3:a3:6d:13:fa:57:57:32:07:a2:ec:98:c2:d5:8c: d1:49:3e:04:8d:07:0d:f7:86:19:13:80:c5:71:9f: 8f:97:59:ef:bf:e0:78:b3:74:15:9e:f5:68:d5:82: 5c:25:73:80:e9:a1:e4:44:ba:d6:ef:3a:52:96:4e: 54:ca:e2:ef:33:8e:fb:44:73:92:ff:2b:76:f8:0d: 22:a3:b0:91:28:c9:d4:b8:9a:76:81:5a:96:1b:40: c1:4c:50:64:fe:82:78:df:ba:a1:76:1b:1c:7a:ab: 31:e9:f8:c8:a1:14:46:78:33:8f:99:7d:40:45:3b: 92:22:4f:8a:b6:fb:98:16:38:32:52:25:b6:75:a8: 33:71:13:47:2a:ee:da:cd:02:ab:d1:68:ba:76:39: 2e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:59:C4:FD:1D:07:96:52:B8:E4:60:28:FF:EF:5E:ED:BF:A6:D6:A8 X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:1f:50:e0:b3:f5:ad:19:94:bc:f9:ff:1d:2a:64:e4:2e:98: 92:bf:dd:bb:76:14:b1:4d:07:10:4b:c9:7c:26:d8:e5:1d:23: 8f:b4:4c:33:0f:ee:c4:a1:71:58:11:d5:8f:6f:2e:d5:9f:3c: 8a:29:a2:6c:ec:4b:41:1a:29:3d:cc:fd:e7:f9:04:90:47:93: bc:67:19:4c:31:0d:bd:9e:48:68:cf:f8:d6:10:53:ce:3a:23: 5d:e6:53:ab:53:ed:a9:d7:e8:92:64:6e:06:11:7e:67:53:9a: ce:84:ec:2c:23:e5:bb:8a:ee:85:ce:35:89:55:e2:0a:c3:6c: 4c:6f:76:a5:a5:de:1b:e2:72:f4:81:f9:4a:46:24:69:c3:2b: 1f:e8:c3:de:55:e2:29:73:2d:fe:4b:4d:a5:36:b8:6f:95:a8: 09:0e:cf:bc:10:4c:2e:65:88:14:eb:21:30:78:0b:2f:82:65: e6:ce:a7:a7:8a:3f:b1:45:ff:e5:9d:5a:1d:d7:65:26:1f:6c: 52:6b:8e:b4:08:ae:a2:ed:55:1f:e5:0c:39:f0:bf:36:ca:b3: 61:e2:0d:3f:87:76:78:af:fd:7c:c0:58:a5:ef:55:6a:41:95: f5:aa:d7:56:09:1b:de:9c:0b:53:e9:72:a9:62:32:05:5c:ec: 6a:b0:d8:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjUxMTA0MTY1NjE5WhcNMjUxMTExMTY1NjE5WjAYMRYwFAYD VQQDEw02OTBhMzAzNC1hM2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IeeTR/6hqldQnvquOg4WMSZx4l3ZLk+pZTOQ5VTYYk2ipH4AyNitoEwFw08 d/bJKS2WMM/xhvRuvz7q0IG0QKU0h8D0Gj1XF7LIowBkUXu48Qg1Af0C67GdRDmo 39knvL2p+cijhYnTo20T+ldXMgei7JjC1YzRST4EjQcN94YZE4DFcZ+Pl1nvv+B4 s3QVnvVo1YJcJXOA6aHkRLrW7zpSlk5UyuLvM477RHOS/yt2+A0io7CRKMnUuJp2 gVqWG0DBTFBk/oJ437qhdhsceqsx6fjIoRRGeDOPmX1ARTuSIk+KtvuYFjgyUiW2 dagzcRNHKu7azQKr0Wi6djkujwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpZxP0d B5ZSuORgKP/vXu2/ptaoMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDFENS9ENEJFMDBENDYzRTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3 TmptZWNXM0NJY296ajFpMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUH1Dgs/WtGZS8+f8dKmTkLpiSv927dhSxTQcQS8l8JtjlHSOPtEwz D+7EoXFYEdWPby7VnzyKKaJs7EtBGik9zP3n+QSQR5O8ZxlMMQ29nkhoz/jWEFPO OiNd5lOrU+2p1+iSZG4GEX5nU5rOhOwsI+W7iu6FzjWJVeIKw2xMb3alpd4b4nL0 gflKRiRpwysf6MPeVeIpcy3+S02lNrhvlagJDs+8EEwuZYgU6yEweAsvgmXmzqen ij+xRf/lnVod12UmH2xSa460CK6i7VUf5Qw58L82yrNh4g0/h3Z4r/18wFil71Vq QZX1qtdWCRvenAtT6XKpYjIFXOxqsNi5 -----END CERTIFICATE-----Generated at Wed Nov 5 01:24:35 2025 by rpki-client