$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft File: 4RvPp2LU9ssvatCdA6lA4P6qAfg.mft (raw, json) Hash identifier: PVoEKf0hCUxicnUROupB8hIoGpKNo11odmdxvaGflRU= Subject key identifier: E5:0D:33:9A:78:71:95:62:61:C9:6E:94:E9:52:CB:9A:C7:D7:E0:B4 Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 Certificate issuer: /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Certificate serial: 1F28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft Manifest number: 1F21 Signing time: Mon 20 Oct 2025 16:16:26 +0000 Manifest this update: Mon 20 Oct 2025 16:16:25 +0000 Manifest next update: Mon 27 Oct 2025 16:16:25 +0000 Files and hashes: 1: 4RvPp2LU9ssvatCdA6lA4P6qAfg.crl (hash: fcEr++kiVsTwwBPdZQHCxJLtjvfLj3PoictGXobVnLg=) 2: DB92DE200AEF11ECB7243C0FC4F9AE02.roa (hash: jUBoH/NsE+2KO1Z4hcom5Ddnhv0XpfeG1RJbEdRDm9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7976 (0x1f28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Validity Not Before: Oct 20 16:16:25 2025 GMT Not After : Oct 27 16:16:25 2025 GMT Subject: CN=68f6605a-57d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:38:2f:0c:71:1d:f9:cb:96:29:e8:a5:45:75: fa:ab:80:83:82:83:85:e2:d4:86:2d:2d:86:5c:7e: 8b:90:5c:80:84:54:c5:97:bd:1b:56:2f:81:82:3d: 4c:e3:08:71:5a:48:eb:b0:cd:ce:84:7b:3b:45:0a: 79:c7:6c:d7:74:d2:9d:7d:1b:c6:01:0e:58:3d:aa: c3:bb:3c:2a:00:51:e6:0f:51:37:36:a1:b6:32:24: 88:49:5f:61:c1:05:6d:29:44:7b:fa:42:73:ba:51: a4:e8:5d:ed:0d:84:d6:bc:12:07:27:71:42:f2:30: d5:e2:18:59:93:d1:e7:21:ea:cf:9d:94:20:3b:fd: 21:18:f9:d3:09:39:ff:72:b7:a5:f1:9f:70:b4:b0: 08:c9:54:f9:37:2f:a4:58:97:62:ef:4c:54:f4:84: 75:4b:2a:09:d7:ad:6b:f2:d5:ee:7a:97:d1:14:76: 63:67:2d:82:38:67:62:78:9b:42:2d:6a:b1:2e:3c: 7a:a3:54:55:27:f2:f7:b2:fa:01:21:f1:42:06:ea: fc:13:4d:46:db:60:15:00:f8:e2:ee:03:ef:4a:72: 52:9b:11:4a:bd:2a:fe:a1:71:9b:9d:e6:01:3d:45: 26:f7:8b:b3:4a:e8:37:01:b7:f2:fe:8a:a6:83:6f: bd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0D:33:9A:78:71:95:62:61:C9:6E:94:E9:52:CB:9A:C7:D7:E0:B4 X509v3 Authority Key Identifier: keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:6c:cd:f9:5b:cd:6c:c6:b7:ae:84:88:b7:14:51:69:35:46: cf:de:df:1f:aa:47:96:8e:61:a8:f7:1b:6e:42:bb:59:3e:9c: 53:ea:62:a6:da:b4:96:b8:47:28:07:32:a3:aa:5a:70:ac:09: 2e:b2:83:14:72:3a:9c:a7:26:ea:eb:2a:a1:1a:e8:a1:97:6e: 9f:a3:89:e3:a6:97:c7:a4:25:a9:84:f5:ff:ab:65:3d:8f:a4: 98:40:a0:ff:06:b8:ca:8f:10:37:99:ed:16:ba:4d:52:7c:e0: f2:5b:9b:3e:49:28:e9:cf:2d:3f:83:55:78:c2:d9:a7:0c:43: 00:69:72:ab:da:ad:bb:0a:4d:2b:4c:5f:71:0d:1c:a8:9a:79: 91:a0:06:65:f1:f8:2e:bd:7f:09:be:d3:9d:dd:77:98:25:89: 54:2d:98:0c:e5:d1:48:ce:68:b1:20:5c:d3:11:5f:33:04:43: 1f:2c:a0:14:89:26:49:39:6e:68:a7:ac:8c:ce:a4:fc:a9:e7: ce:74:c2:dc:f6:43:3b:7a:02:58:47:18:a7:4c:ea:78:f0:22: 53:6e:43:8a:9e:f7:f4:51:60:ff:2f:fd:5d:f3:e3:d4:28:19: d4:4c:77:72:23:07:04:be:c5:da:b4:60:bc:fe:31:da:0a:15: 83:62:62:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAwRjUxMTAvBgNVBAUTKEUxMUJDRkE3NjJENEY2Q0IyRjZBRDA5RDAzQTk0MEUw RkVBQTAxRjgwHhcNMjUxMDIwMTYxNjI1WhcNMjUxMDI3MTYxNjI1WjAYMRYwFAYD VQQDEw02OGY2NjA1YS01N2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzgvDHEd+cuWKeilRXX6q4CDgoOF4tSGLS2GXH6LkFyAhFTFl70bVi+Bgj1M 4whxWkjrsM3OhHs7RQp5x2zXdNKdfRvGAQ5YParDuzwqAFHmD1E3NqG2MiSISV9h wQVtKUR7+kJzulGk6F3tDYTWvBIHJ3FC8jDV4hhZk9HnIerPnZQgO/0hGPnTCTn/ crel8Z9wtLAIyVT5Ny+kWJdi70xU9IR1SyoJ161r8tXuepfRFHZjZy2COGdieJtC LWqxLjx6o1RVJ/L3svoBIfFCBur8E01G22AVAPji7gPvSnJSmxFKvSr+oXGbneYB PUUm94uzSug3Abfy/oqmg2+9kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUNM5p4 cZViYclulOlSy5rH1+C0MB8GA1UdIwQYMBaAFOEbz6di1PbLL2rQnQOpQOD+qgH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDBGNS9EOUU5NTJGNDVF RjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlzc3ZhdENkQTZsQTRQNnFB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSdlBwMkxVOXNzdmF0Q2RBNmxBNFA2cUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDBGNS9EOUU5NTJGNDVFRjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlz c3ZhdENkQTZsQTRQNnFBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUbM35W81sxreuhIi3FFFpNUbP3t8fqkeWjmGo9xtuQrtZPpxT6mKm 2rSWuEcoBzKjqlpwrAkusoMUcjqcpybq6yqhGuihl26fo4njppfHpCWphPX/q2U9 j6SYQKD/BrjKjxA3me0Wuk1SfODyW5s+SSjpzy0/g1V4wtmnDEMAaXKr2q27Ck0r TF9xDRyomnmRoAZl8fguvX8JvtOd3XeYJYlULZgM5dFIzmixIFzTEV8zBEMfLKAU iSZJOW5op6yMzqT8qefOdMLc9kM7egJYRxinTOp48CJTbkOKnvf0UWD/L/1d8+PU KBnUTHdyIwcEvsXatGC8/jHaChWDYmL3 -----END CERTIFICATE-----Generated at Mon Oct 20 19:12:24 2025 by rpki-client