$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: Bim/8tbLBj02wyVwSShOuqabwj7mL5PcU1BWHVGOPEI= Subject key identifier: 86:09:A9:A2:18:BB:A6:38:B6:28:FA:89:86:ED:3E:03:6B:89:9E:AA Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 0509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 04FD Signing time: Tue 04 Nov 2025 23:45:45 +0000 Manifest this update: Tue 04 Nov 2025 23:45:44 +0000 Manifest next update: Tue 11 Nov 2025 23:45:44 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: d55fHdwZdDwF4k5jDT9R78u90IPsykuZGashEZ3qTFo=) 2: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: 3A9tL/jcYlpnzHxxWTOseLkNdsbJRJrgjlY1s6ebsbQ=) 3: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: GWx3OJd1vwjGtC5zPk/EszjxixEUkMuQ8v31OyEYOdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1289 (0x509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Validity Not Before: Nov 4 23:45:44 2025 GMT Not After : Nov 11 23:45:44 2025 GMT Subject: CN=690a9029-7320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:18:5f:14:3d:ea:ea:3e:e0:01:31:3a:34:8f: f0:41:d5:6e:0a:7e:a7:2a:47:b6:8e:8b:44:2b:18: e1:1d:0c:e3:ec:b1:56:75:0e:31:c4:e9:70:27:b9: 62:a6:22:52:62:44:dc:dd:ef:6f:f4:ab:bc:cc:f2: c8:92:60:4e:3c:66:a7:a7:58:e2:9e:e5:ba:c9:7d: cd:ad:2f:83:8d:0c:e7:5e:64:c3:9e:7d:ea:e5:a7: 0b:ae:88:ea:d0:a0:28:22:6c:d0:88:ab:7e:c2:95: 1c:97:9a:7c:94:8b:88:37:31:c5:93:e7:6d:08:9e: 82:57:56:7a:3b:a2:38:a2:64:da:dc:22:67:71:16: af:a0:f2:eb:dc:28:63:c6:da:76:dd:6a:02:5f:f9: 85:8f:de:a7:69:37:38:ea:2e:c6:33:71:0c:ed:4d: 8d:cd:83:4b:23:10:4c:83:25:f8:f8:ea:c0:76:41: 21:3a:b3:36:d1:33:15:32:e9:5d:ee:1f:45:51:93: 82:33:fb:3e:92:8a:8a:07:05:5b:00:f6:d2:a7:bb: aa:60:1c:b3:d1:9f:ea:77:a7:a1:c0:ea:94:1c:f9: a5:2d:0a:ee:4c:38:8b:a9:1b:a6:14:d9:05:03:9d: 4d:b7:26:c1:e8:5a:91:58:72:11:41:8a:00:9a:60: 46:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:09:A9:A2:18:BB:A6:38:B6:28:FA:89:86:ED:3E:03:6B:89:9E:AA X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:4f:97:18:61:18:50:95:38:6d:1d:51:0d:73:8b:3f:36:b5: f8:db:1d:aa:52:e9:ab:b8:12:8b:c1:51:dd:a4:78:70:eb:23: 62:41:55:b1:a2:b2:e4:e7:d2:00:e8:aa:43:52:21:9c:95:fe: 6b:1c:1d:de:08:24:25:7d:9b:38:2d:80:e5:a0:48:bb:9c:40: 10:d3:74:3c:34:12:4c:61:b6:74:ab:b3:88:2d:47:ce:64:66: e6:a2:cf:d1:8d:bb:ea:db:2e:7b:22:38:f6:14:27:7b:a5:18: 96:99:97:0d:5a:01:07:0b:61:12:a9:1b:96:72:be:a8:a3:76: b2:9f:7b:7d:f9:e2:1b:55:ea:d8:70:e8:73:8c:bf:61:80:61: a4:6b:0f:74:7b:0e:2d:e6:6b:7b:0b:c8:89:00:64:8d:61:43: 32:35:9b:6c:41:d7:fb:32:f5:55:d3:05:ea:a9:10:8e:7c:6d: 95:73:a6:57:dc:3d:cb:ee:ae:d4:98:36:f6:b1:6d:2e:30:aa: a4:a0:0d:71:5f:16:4b:f1:85:86:4e:0b:13:a3:64:94:66:8a: fa:e0:e8:72:83:9c:ce:0a:c3:40:09:69:2a:d7:f7:08:0b:88: c0:00:b4:8f:6a:86:0b:9c:37:a0:a1:33:9a:de:6c:0a:46:7b: 1a:f1:51:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjUxMTA0MjM0NTQ0WhcNMjUxMTExMjM0NTQ0WjAYMRYwFAYD VQQDEw02OTBhOTAyOS03MzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RhfFD3q6j7gATE6NI/wQdVuCn6nKke2jotEKxjhHQzj7LFWdQ4xxOlwJ7li piJSYkTc3e9v9Ku8zPLIkmBOPGanp1jinuW6yX3NrS+DjQznXmTDnn3q5acLrojq 0KAoImzQiKt+wpUcl5p8lIuINzHFk+dtCJ6CV1Z6O6I4omTa3CJncRavoPLr3Chj xtp23WoCX/mFj96naTc46i7GM3EM7U2NzYNLIxBMgyX4+OrAdkEhOrM20TMVMuld 7h9FUZOCM/s+koqKBwVbAPbSp7uqYByz0Z/qd6ehwOqUHPmlLQruTDiLqRumFNkF A51NtybB6FqRWHIRQYoAmmBGbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYJqaIY u6Y4tij6iYbtPgNriZ6qMB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4T5cYYRhQlThtHVENc4s/NrX42x2qUumruBKLwVHdpHhw6yNiQVWx orLk59IA6KpDUiGclf5rHB3eCCQlfZs4LYDloEi7nEAQ03Q8NBJMYbZ0q7OILUfO ZGbmos/Rjbvq2y57Ijj2FCd7pRiWmZcNWgEHC2ESqRuWcr6oo3ayn3t9+eIbVerY cOhzjL9hgGGkaw90ew4t5mt7C8iJAGSNYUMyNZtsQdf7MvVV0wXqqRCOfG2Vc6ZX 3D3L7q7UmDb2sW0uMKqkoA1xXxZL8YWGTgsTo2SUZor64Ohyg5zOCsNACWkq1/cI C4jAALSPaoYLnDegoTOa3mwKRnsa8VEA -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:23 2025 by rpki-client