$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft File: 4ISfBUORggKxeEROX_IviZ-eMg4.mft (raw, json) Hash identifier: kqZrrQM8JJGMWM9nEso+ZQumXsFJS4MH2yVmeksmzXY= Subject key identifier: 10:6C:42:45:EA:25:B6:D9:03:AC:FD:AB:B0:B9:34:4C:0C:1B:10:A0 Authority key identifier: E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E Certificate issuer: /CN=A91F7DBA/serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Certificate serial: 04E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft Manifest number: 04E3 Signing time: Fri 22 Aug 2025 23:56:26 +0000 Manifest this update: Fri 22 Aug 2025 23:56:26 +0000 Manifest next update: Fri 29 Aug 2025 23:56:26 +0000 Files and hashes: 1: 4ISfBUORggKxeEROX_IviZ-eMg4.crl (hash: RgMusTCWGbhgGAYzD5lIcqSFdABAc5N7fsjAY88TbfM=) 2: 145F8B6434D211EEA9BD8F64C4F9AE02.roa (hash: MOCtEXuSWTSIWA+J+aTGfRvUWTN01u8L13mcqeEHJ4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DBA, serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Validity Not Before: Aug 22 23:56:26 2025 GMT Not After : Aug 29 23:56:26 2025 GMT Subject: CN=68a903aa-76b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:bf:b7:d9:65:5b:5b:67:61:de:a5:90:5d: 0b:fc:1d:98:dd:e7:2d:5f:89:2b:c2:45:df:14:76: 67:80:98:69:e9:a4:d6:bd:06:45:b7:6b:94:7c:74: 51:14:60:4b:30:8d:0f:3e:61:fc:32:ef:1d:5f:7a: 0d:27:f5:f9:8f:e7:97:97:e2:28:cb:6b:9d:6b:6b: ca:62:28:ea:f7:fb:67:7c:b0:7d:1a:bd:a5:e4:7f: 5a:40:d9:25:5d:c7:dc:30:d5:fb:57:9d:bb:b6:be: 90:a5:20:0b:9b:6e:6e:b9:6f:1d:11:fc:7a:22:2c: cb:98:f9:66:7e:70:8d:79:78:fe:09:b8:a5:02:1d: 39:cd:4b:62:91:4b:7d:e4:d8:41:92:ee:e7:52:2c: ba:03:f8:50:22:7b:af:b0:9c:2b:23:6f:c7:c6:5f: 18:31:62:5d:2d:97:45:5c:b5:59:1a:40:45:77:89: ca:13:f1:c3:ae:2e:9e:52:a6:12:8b:ef:99:1c:9b: 5e:f4:f3:3e:34:e9:8d:64:1f:21:b8:bb:9e:ea:c3: f6:b6:56:ba:d4:72:3a:45:a9:54:9d:82:2e:11:1e: e5:fe:03:5c:9b:67:72:69:92:dd:80:b9:0e:89:3a: df:3a:3c:25:79:4b:bb:df:58:cb:32:96:ca:4a:ff: 14:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6C:42:45:EA:25:B6:D9:03:AC:FD:AB:B0:B9:34:4C:0C:1B:10:A0 X509v3 Authority Key Identifier: keyid:E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f7:59:fd:c7:e2:3f:ff:f1:25:72:df:af:6b:4c:2e:e2:49: 3f:34:60:c5:46:cf:35:a6:02:2c:81:44:fd:e4:61:8f:20:30: e3:77:c3:c7:cd:10:4e:d5:32:67:41:12:db:bf:fa:b9:8d:d1: 34:3d:63:0a:3d:1b:48:85:17:36:61:9f:fa:de:62:40:e4:aa: b3:68:2e:5d:ee:e2:61:9a:d7:71:e0:c3:d7:8d:ba:e4:ef:5d: 12:90:f3:02:53:5c:46:34:8a:7d:27:19:4e:bf:6d:94:5c:1e: 1c:bb:32:da:e8:4a:78:0f:52:1a:08:bf:4c:cf:d6:62:e1:63: 79:f8:da:5a:80:94:94:cd:fd:6c:2f:07:88:d2:c5:e3:a8:68: 47:81:c2:8f:fa:7e:69:48:3f:57:75:bf:e5:b8:2f:66:e0:20: 1c:29:40:64:d4:18:d6:30:ef:48:3f:cc:33:50:8d:4f:44:5e: f2:af:2f:45:91:dd:5c:14:7c:34:c5:60:9b:b4:c5:81:b2:33: f1:99:1a:54:18:ad:12:10:cd:2e:5e:33:4d:7f:42:43:ff:9a: 42:68:0e:8a:c5:0c:d3:38:27:7a:96:1d:f2:75:bd:5d:ed:fd: ea:f9:7c:66:d6:bc:13:b8:73:fe:08:36:06:a6:d0:29:13:9e: 2c:4b:00:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQkExMTAvBgNVBAUTKEUwODQ5RjA1NDM5MTgyMDJCMTc4NDQ0RTVGRjIyRjg5 OUY5RTMyMEUwHhcNMjUwODIyMjM1NjI2WhcNMjUwODI5MjM1NjI2WjAYMRYwFAYD VQQDEw02OGE5MDNhYS03NmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlpS/t9llW1tnYd6lkF0L/B2Y3ectX4krwkXfFHZngJhp6aTWvQZFt2uUfHRR FGBLMI0PPmH8Mu8dX3oNJ/X5j+eXl+Ioy2uda2vKYijq9/tnfLB9Gr2l5H9aQNkl XcfcMNX7V527tr6QpSALm25uuW8dEfx6IizLmPlmfnCNeXj+CbilAh05zUtikUt9 5NhBku7nUiy6A/hQInuvsJwrI2/Hxl8YMWJdLZdFXLVZGkBFd4nKE/HDri6eUqYS i++ZHJte9PM+NOmNZB8huLue6sP2tla61HI6RalUnYIuER7l/gNcm2dyaZLdgLkO iTrfOjwleUu731jLMpbKSv8UAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBsQkXq JbbZA6z9q7C5NEwMGxCgMB8GA1UdIwQYMBaAFOCEnwVDkYICsXhETl/yL4mfnjIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RCQS8yOEVCNzE0NjJC RDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdnS3hlRVJPWF9JdmlaLWVN ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJU2ZCVU9SZ2dLeGVFUk9YX0l2aVotZU1nNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RCQS8yOEVCNzE0NjJCRDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdn S3hlRVJPWF9JdmlaLWVNZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN91n9x+I///Elct+va0wu4kk/NGDFRs81pgIsgUT95GGPIDDjd8PH zRBO1TJnQRLbv/q5jdE0PWMKPRtIhRc2YZ/63mJA5KqzaC5d7uJhmtdx4MPXjbrk 710SkPMCU1xGNIp9JxlOv22UXB4cuzLa6Ep4D1IaCL9Mz9Zi4WN5+NpagJSUzf1s LweI0sXjqGhHgcKP+n5pSD9Xdb/luC9m4CAcKUBk1BjWMO9IP8wzUI1PRF7yry9F kd1cFHw0xWCbtMWBsjPxmRpUGK0SEM0uXjNNf0JD/5pCaA6KxQzTOCd6lh3ydb1d 7f3q+Xxm1rwTuHP+CDYGptApE54sSwAR -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:52 2025 by rpki-client