$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft File: 4BXzk-ejI8P08b_iblv-BA415VM.mft (raw, json) Hash identifier: /6mF2tA93C8A6HPuqn1ZxTve4RTKIhqbG6/9nTpcCEI= Subject key identifier: 4F:A2:6F:00:F8:9A:F8:ED:FF:12:6C:21:13:C1:CE:08:E2:A9:D1:8B Authority key identifier: E0:15:F3:93:E7:A3:23:C3:F4:F1:BF:E2:6E:5B:FE:04:0E:35:E5:53 Certificate issuer: /CN=A91C6CAF/serialNumber=E015F393E7A323C3F4F1BFE26E5BFE040E35E553 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft Manifest number: 0150 Signing time: Mon 03 Nov 2025 04:13:24 +0000 Manifest this update: Mon 03 Nov 2025 04:13:24 +0000 Manifest next update: Mon 10 Nov 2025 04:13:24 +0000 Files and hashes: 1: 4BXzk-ejI8P08b_iblv-BA415VM.crl (hash: tHQZqHFc3pQLzagYuAJrnUHf+0GgVZ6Gi6sg64qLwNU=) 2: C4C0B9160E4C11EF82F91F39C4F9AE02.roa (hash: kz0noASfcID+yNUD17+dcNzBgS2AhI7keu64pTKydZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=E015F393E7A323C3F4F1BFE26E5BFE040E35E553 Validity Not Before: Nov 3 04:13:24 2025 GMT Not After : Nov 10 04:13:24 2025 GMT Subject: CN=69082be4-16ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:af:3f:ad:34:f0:98:ff:25:a4:27:9e:e8:1d: 22:5d:f9:b7:d3:64:b9:bf:96:02:b2:79:c3:c0:54: c6:71:c8:e5:72:e2:ca:9e:66:82:18:1f:f9:39:58: d0:aa:31:f1:52:54:87:81:6c:f5:1d:7f:91:36:18: ef:e3:a5:a8:47:17:35:6a:e5:88:06:14:49:b9:b4: 2a:a9:72:b4:b5:09:aa:72:b5:49:79:1f:11:e2:ce: fc:22:2b:9f:91:14:d7:8d:47:cb:aa:d2:7e:71:c3: 76:24:a9:14:a4:9e:dd:ed:b4:a5:45:fc:09:58:49: 26:34:e4:a5:2e:46:90:ef:d2:71:15:d6:70:84:45: 86:1a:e9:07:3b:83:6e:6a:09:0e:9b:28:8a:05:88: 4a:99:83:6c:f3:b7:50:7a:e5:62:e9:9e:5d:36:93: 39:4c:69:af:44:68:a6:59:d2:39:60:65:94:c1:46: 49:33:ca:c1:0b:c5:e5:c3:f4:6d:30:98:85:6b:34: 9a:71:87:7a:4f:6b:a1:1f:d3:f7:d0:33:43:45:46: ea:59:fe:51:4d:4b:25:86:9a:52:72:fb:eb:26:ef: 44:f0:0d:c5:b4:af:17:cf:a9:bf:a7:38:97:e5:a2: 4f:ec:ad:5e:fa:7a:3e:c8:e1:f9:9c:49:14:ae:6d: 77:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A2:6F:00:F8:9A:F8:ED:FF:12:6C:21:13:C1:CE:08:E2:A9:D1:8B X509v3 Authority Key Identifier: keyid:E0:15:F3:93:E7:A3:23:C3:F4:F1:BF:E2:6E:5B:FE:04:0E:35:E5:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:63:58:87:a5:47:cc:4a:52:8e:68:b7:29:3b:83:20:2e:db: f2:12:b7:5c:45:4a:94:cc:46:1d:9e:4f:53:17:74:b3:9f:2b: bf:a0:9f:5b:61:eb:34:e4:2b:26:21:4f:24:3c:82:4a:69:e9: 22:40:08:6a:09:18:6e:96:ac:65:ad:db:04:18:28:ca:03:b0: 54:29:0e:f6:2f:2b:33:27:5f:de:49:85:49:44:3b:38:24:6d: 17:0f:83:59:e7:41:78:9b:1c:3c:3f:5b:8b:c9:91:8c:02:fd: 55:35:46:e4:c2:7e:34:ee:61:1d:29:77:92:77:39:59:aa:58: 5a:e9:b5:6d:27:5e:e7:ba:9a:d1:41:76:0d:f4:79:91:5e:ec: 75:2d:e2:46:42:80:dc:77:13:19:c2:5e:ea:4a:49:b2:9c:87: ec:4d:e6:8b:0f:40:24:03:2d:80:a1:7c:ae:75:41:bd:18:be: ab:d3:77:cb:77:53:28:c1:d3:c7:19:04:8f:06:9d:f3:ac:aa: 09:72:50:44:7d:07:86:3f:fa:db:f8:c1:fd:b3:2c:7b:cf:ba: e0:f8:de:2e:e2:c6:76:42:2f:3c:9b:7c:fb:38:e3:9e:c1:13: 0a:eb:33:70:aa:5a:93:4b:2b:c9:e7:f3:0f:9f:2b:51:e1:d3: 86:7c:d5:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKEUwMTVGMzkzRTdBMzIzQzNGNEYxQkZFMjZFNUJGRTA0 MEUzNUU1NTMwHhcNMjUxMTAzMDQxMzI0WhcNMjUxMTEwMDQxMzI0WjAYMRYwFAYD VQQDEw02OTA4MmJlNC0xNmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA568/rTTwmP8lpCee6B0iXfm302S5v5YCsnnDwFTGccjlcuLKnmaCGB/5OVjQ qjHxUlSHgWz1HX+RNhjv46WoRxc1auWIBhRJubQqqXK0tQmqcrVJeR8R4s78Iiuf kRTXjUfLqtJ+ccN2JKkUpJ7d7bSlRfwJWEkmNOSlLkaQ79JxFdZwhEWGGukHO4Nu agkOmyiKBYhKmYNs87dQeuVi6Z5dNpM5TGmvRGimWdI5YGWUwUZJM8rBC8Xlw/Rt MJiFazSacYd6T2uhH9P30DNDRUbqWf5RTUslhppScvvrJu9E8A3FtK8Xz6m/pziX 5aJP7K1e+no+yOH5nEkUrm13ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+ibwD4 mvjt/xJsIRPBzgjiqdGLMB8GA1UdIwQYMBaAFOAV85PnoyPD9PG/4m5b/gQONeVT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GRDI2REMyMkI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi80Qlh6ay1lakk4UDA4Yl9pYmx2LUJBNDE1 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCWHprLWVqSThQMDhiX2libHYtQkE0MTVWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GRDI2REMyMkI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi80Qlh6ay1lakk4 UDA4Yl9pYmx2LUJBNDE1Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBY1iHpUfMSlKOaLcpO4MgLtvyErdcRUqUzEYdnk9TF3Sznyu/oJ9b Yes05CsmIU8kPIJKaekiQAhqCRhulqxlrdsEGCjKA7BUKQ72LyszJ1/eSYVJRDs4 JG0XD4NZ50F4mxw8P1uLyZGMAv1VNUbkwn407mEdKXeSdzlZqlha6bVtJ17nuprR QXYN9HmRXux1LeJGQoDcdxMZwl7qSkmynIfsTeaLD0AkAy2AoXyudUG9GL6r03fL d1MowdPHGQSPBp3zrKoJclBEfQeGP/rb+MH9syx7z7rg+N4u4sZ2Qi88m3z7OOOe wRMK6zNwqlqTSyvJ5/MPnytR4dOGfNWp -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:17 2025 by rpki-client