$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft File: 4ISfBUORggKxeEROX_IviZ-eMg4.mft (raw, json) Hash identifier: JBWuJlOVT0GIN9DZKDnkokBQdQETfKg7Q8o/f50S1zk= Subject key identifier: 2C:BD:2B:53:66:EC:5E:4C:C4:0B:95:5B:AC:34:67:A9:2E:29:FD:8F Authority key identifier: E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E Certificate issuer: /CN=A91F7DBA/serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Certificate serial: 050F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft Manifest number: 0509 Signing time: Sun 02 Nov 2025 23:35:48 +0000 Manifest this update: Sun 02 Nov 2025 23:35:47 +0000 Manifest next update: Sun 09 Nov 2025 23:35:47 +0000 Files and hashes: 1: 4ISfBUORggKxeEROX_IviZ-eMg4.crl (hash: I5mKw5nh+uBEI4BRLrN0yWRpEe6HwWiRIWKaNZiJmGo=) 2: 145F8B6434D211EEA9BD8F64C4F9AE02.roa (hash: LIC3UjwuX1L1kGuepSck3yzfK3nMMe4EkNAzNmI2D14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DBA, serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Validity Not Before: Nov 2 23:35:47 2025 GMT Not After : Nov 9 23:35:47 2025 GMT Subject: CN=6907ead3-e682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:ff:9a:a7:03:2f:a1:aa:c4:a1:38:e0:3c: 93:6b:4d:b2:68:26:c6:7c:4f:35:ea:54:46:de:b5: 19:99:3b:33:09:1a:9a:d4:02:ac:8c:20:03:66:dd: 34:b4:f1:76:09:1f:99:ad:cc:80:f4:4b:aa:b3:d6: da:13:34:e6:72:de:c4:88:f0:e4:36:a7:37:3c:6c: d8:71:2c:a8:cc:aa:65:17:a3:bc:7a:88:86:35:8e: a8:48:bd:89:d6:5e:43:7d:b4:bf:ed:ba:aa:59:74: 08:05:30:66:44:5a:69:e6:12:dd:2a:2a:39:2d:4b: 9f:5a:7b:6b:ee:ed:26:a4:64:3c:14:f7:2b:7b:e7: f3:81:24:89:2f:3b:81:89:4e:8c:31:57:db:8a:b8: 96:3e:c6:d1:38:6a:58:82:f1:77:b1:c8:7f:0e:70: 2d:97:7b:7b:1a:a1:38:ee:1c:2c:12:b4:19:58:5f: 4d:92:f0:7b:f4:d0:56:e0:b9:5d:c7:78:44:a7:77: c9:4f:d2:92:0f:71:f1:fa:60:b7:df:ca:ee:ab:16: 7a:ec:8d:b4:51:b5:bd:ed:de:3a:eb:05:7b:4e:8d: 2f:c2:ad:7a:d4:b5:4a:14:c4:78:60:ff:2e:ff:f5: 44:d7:ab:9a:d2:f6:d9:1f:18:60:e3:36:72:d6:3c: 77:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BD:2B:53:66:EC:5E:4C:C4:0B:95:5B:AC:34:67:A9:2E:29:FD:8F X509v3 Authority Key Identifier: keyid:E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ff:1c:e9:a2:e3:69:ed:08:66:80:8e:22:1e:75:3f:aa:e3: 9e:06:70:23:b9:85:8b:3d:3e:e5:32:ce:37:52:32:43:73:77: d3:2c:3a:de:6f:62:a0:40:e1:0f:da:9a:06:b4:33:fd:7f:5f: ba:c2:d1:1b:40:5b:88:d6:94:7e:28:f8:de:d2:0c:84:e8:45: c4:8e:b7:c1:0b:62:c8:5c:40:db:1e:d0:b1:fd:23:78:e4:1c: e7:9a:9f:40:1b:93:fe:10:94:e1:3d:c2:5b:9e:53:03:86:7f: 58:cc:23:b0:9c:83:bc:36:44:67:b3:ca:3a:d2:4e:47:6c:eb: b9:9e:d4:07:34:c5:65:ea:9f:99:a1:64:18:82:9c:83:91:a4: 59:da:7a:f0:a0:d4:aa:6e:c3:eb:01:2f:b9:5b:82:ec:20:2a: 38:e6:df:f6:31:a3:a1:e7:b1:d4:90:9d:27:2f:d0:7a:61:8e: 46:a2:83:8e:64:22:7a:fb:c7:dc:59:fc:b4:97:49:06:fd:1f: 82:d9:75:a2:5d:ac:70:7b:32:dd:77:de:39:4d:68:25:60:49: 4a:e2:32:34:81:dd:8e:75:7f:3e:00:25:f5:8a:e6:91:d9:46: a0:4d:9e:f0:88:0e:51:6b:84:c8:ba:3e:dd:06:92:9c:fa:f1: 8e:1f:65:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQkExMTAvBgNVBAUTKEUwODQ5RjA1NDM5MTgyMDJCMTc4NDQ0RTVGRjIyRjg5 OUY5RTMyMEUwHhcNMjUxMTAyMjMzNTQ3WhcNMjUxMTA5MjMzNTQ3WjAYMRYwFAYD VQQDEw02OTA3ZWFkMy1lNjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXP/mqcDL6GqxKE44DyTa02yaCbGfE816lRG3rUZmTszCRqa1AKsjCADZt00 tPF2CR+ZrcyA9Euqs9baEzTmct7EiPDkNqc3PGzYcSyozKplF6O8eoiGNY6oSL2J 1l5DfbS/7bqqWXQIBTBmRFpp5hLdKio5LUufWntr7u0mpGQ8FPcre+fzgSSJLzuB iU6MMVfbiriWPsbROGpYgvF3sch/DnAtl3t7GqE47hwsErQZWF9NkvB79NBW4Lld x3hEp3fJT9KSD3Hx+mC338ruqxZ67I20UbW97d466wV7To0vwq161LVKFMR4YP8u //VE16ua0vbZHxhg4zZy1jx3/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCy9K1Nm 7F5MxAuVW6w0Z6kuKf2PMB8GA1UdIwQYMBaAFOCEnwVDkYICsXhETl/yL4mfnjIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RCQS8yOEVCNzE0NjJC RDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdnS3hlRVJPWF9JdmlaLWVN ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJU2ZCVU9SZ2dLeGVFUk9YX0l2aVotZU1nNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RCQS8yOEVCNzE0NjJCRDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdn S3hlRVJPWF9JdmlaLWVNZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM/xzpouNp7QhmgI4iHnU/quOeBnAjuYWLPT7lMs43UjJDc3fTLDre b2KgQOEP2poGtDP9f1+6wtEbQFuI1pR+KPje0gyE6EXEjrfBC2LIXEDbHtCx/SN4 5Bznmp9AG5P+EJThPcJbnlMDhn9YzCOwnIO8NkRns8o60k5HbOu5ntQHNMVl6p+Z oWQYgpyDkaRZ2nrwoNSqbsPrAS+5W4LsICo45t/2MaOh57HUkJ0nL9B6YY5GooOO ZCJ6+8fcWfy0l0kG/R+C2XWiXaxwezLdd945TWglYElK4jI0gd2OdX8+ACX1iuaR 2UagTZ7wiA5Ra4TIuj7dBpKc+vGOH2VC -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:16 2025 by rpki-client