$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft File: 4ISfBUORggKxeEROX_IviZ-eMg4.mft (raw, json) Hash identifier: fDs996EHaWCsZ2LUMeq0y0ajYc4jOJSM07FvEvkPWRY= Subject key identifier: 70:BF:E4:F9:36:CD:9A:39:CF:80:F5:0B:DE:EA:A8:8A:2F:55:F6:E3 Authority key identifier: E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E Certificate issuer: /CN=A91F7DBA/serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Certificate serial: 04E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft Manifest number: 04DB Signing time: Thu 07 Aug 2025 00:15:45 +0000 Manifest this update: Thu 07 Aug 2025 00:15:45 +0000 Manifest next update: Thu 14 Aug 2025 00:15:45 +0000 Files and hashes: 1: 4ISfBUORggKxeEROX_IviZ-eMg4.crl (hash: DZCaIlhN6Zl0DQU9nktV2vQgDQYUn6/GBvAZiCF1mkw=) 2: 145F8B6434D211EEA9BD8F64C4F9AE02.roa (hash: MOCtEXuSWTSIWA+J+aTGfRvUWTN01u8L13mcqeEHJ4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1248 (0x4e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DBA, serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Validity Not Before: Aug 7 00:15:45 2025 GMT Not After : Aug 14 00:15:45 2025 GMT Subject: CN=6893f031-2c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:65:f3:0b:de:6f:e9:3b:64:8e:53:b9:4c:f1: e3:2b:e7:84:6a:33:64:9f:9b:b2:e5:82:22:1f:40: f3:60:bb:bb:27:89:a2:7c:c8:b8:0c:8a:18:a5:65: eb:46:cb:3a:07:c8:04:9a:ed:2d:a9:2a:0f:cd:03: 8e:f3:eb:84:ad:f7:6c:33:bb:a6:24:75:0b:83:21: 17:be:af:e0:3e:6c:5c:e8:a9:32:ff:d7:65:2e:24: ed:79:27:0b:1f:5a:40:a2:a9:84:96:c0:b1:76:3f: 9a:59:bc:a9:7f:21:b1:9e:9f:46:47:90:e4:f3:d0: ba:46:a8:9a:0a:cd:59:ac:8a:b9:7d:45:ac:9d:9a: ae:5d:17:20:f1:f2:2b:92:60:9b:69:cc:5a:d3:9b: 42:c4:2e:e9:6a:38:8a:8e:3b:c9:78:76:ad:7f:80: 72:20:bd:46:28:b6:6f:41:10:c8:af:c0:50:ef:d3: 65:44:5d:8d:43:42:d8:48:89:9c:cc:df:6b:23:cc: b4:ef:7e:ec:d6:71:e8:95:af:7a:4c:b9:6d:9d:cd: 24:08:f3:ba:79:85:a9:4b:08:8b:fc:3c:40:10:c8: d8:f4:87:6d:e6:d2:c6:31:d5:da:30:c7:58:b4:6e: a3:a4:34:e3:74:51:30:e4:a9:ef:5c:96:94:80:0a: 50:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BF:E4:F9:36:CD:9A:39:CF:80:F5:0B:DE:EA:A8:8A:2F:55:F6:E3 X509v3 Authority Key Identifier: keyid:E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2d:bb:ab:9e:4b:92:c4:b1:e5:74:6f:89:d7:c9:2e:e6:cb: 3d:1d:a5:a5:68:9e:b5:67:36:6b:bd:b7:ba:67:89:d2:d4:e9: 76:e0:f7:97:a5:13:37:27:8b:15:7a:bf:8c:ea:2c:c2:5a:9f: ba:13:61:b7:1c:94:2d:65:eb:d4:c9:14:e1:5a:75:be:46:eb: 6f:6a:7d:c6:7f:a5:83:b7:88:a9:4a:23:d8:bf:60:f0:81:13: a9:3f:c4:fc:68:e5:39:61:7e:92:44:e2:68:4b:42:a7:42:51: eb:4e:15:36:39:98:41:7a:cf:74:34:24:3e:15:bc:b9:8d:81: db:de:c4:1d:b9:da:23:46:b7:7b:ff:0a:31:bc:d6:21:42:ed: 51:93:58:db:df:fc:45:7a:ba:72:62:6c:fc:8d:a7:65:c1:7d: 0c:d0:1a:cd:95:8c:e1:e9:8e:f2:1d:49:6b:7a:dd:06:98:24: f2:f2:0d:31:55:01:d4:77:64:92:b1:a8:ea:db:66:1b:52:b0: fc:0f:9f:31:94:4c:15:17:8d:ee:92:d8:ba:f7:32:12:2f:c0: 07:fc:b7:75:e8:09:c8:06:c5:11:33:f1:a1:4e:08:52:1c:7e: b6:c4:04:9a:9f:2d:12:bb:8c:6b:41:3c:b1:87:04:9f:24:23: 6e:1d:e6:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQkExMTAvBgNVBAUTKEUwODQ5RjA1NDM5MTgyMDJCMTc4NDQ0RTVGRjIyRjg5 OUY5RTMyMEUwHhcNMjUwODA3MDAxNTQ1WhcNMjUwODE0MDAxNTQ1WjAYMRYwFAYD VQQDEw02ODkzZjAzMS0yYzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGXzC95v6TtkjlO5TPHjK+eEajNkn5uy5YIiH0DzYLu7J4mifMi4DIoYpWXr Rss6B8gEmu0tqSoPzQOO8+uErfdsM7umJHULgyEXvq/gPmxc6Kky/9dlLiTteScL H1pAoqmElsCxdj+aWbypfyGxnp9GR5Dk89C6RqiaCs1ZrIq5fUWsnZquXRcg8fIr kmCbacxa05tCxC7pajiKjjvJeHatf4ByIL1GKLZvQRDIr8BQ79NlRF2NQ0LYSImc zN9rI8y0737s1nHola96TLltnc0kCPO6eYWpSwiL/DxAEMjY9Idt5tLGMdXaMMdY tG6jpDTjdFEw5KnvXJaUgApQ0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHC/5Pk2 zZo5z4D1C97qqIovVfbjMB8GA1UdIwQYMBaAFOCEnwVDkYICsXhETl/yL4mfnjIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RCQS8yOEVCNzE0NjJC RDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdnS3hlRVJPWF9JdmlaLWVN ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJU2ZCVU9SZ2dLeGVFUk9YX0l2aVotZU1nNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RCQS8yOEVCNzE0NjJCRDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdn S3hlRVJPWF9JdmlaLWVNZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/LburnkuSxLHldG+J18ku5ss9HaWlaJ61ZzZrvbe6Z4nS1Ol24PeX pRM3J4sVer+M6izCWp+6E2G3HJQtZevUyRThWnW+Rutvan3Gf6WDt4ipSiPYv2Dw gROpP8T8aOU5YX6SROJoS0KnQlHrThU2OZhBes90NCQ+Fby5jYHb3sQdudojRrd7 /woxvNYhQu1Rk1jb3/xFerpyYmz8jadlwX0M0BrNlYzh6Y7yHUlret0GmCTy8g0x VQHUd2SSsajq22YbUrD8D58xlEwVF43ukti69zISL8AH/Ld16AnIBsURM/GhTghS HH62xASany0Su4xrQTyxhwSfJCNuHebx -----END CERTIFICATE-----Generated at Fri Aug 8 10:20:51 2025 by rpki-client