$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft File: 4ISfBUORggKxeEROX_IviZ-eMg4.mft (raw, json) Hash identifier: pdtyBdOUKJJ1sC33iIAaTEL4Vw1UH7GPXjd2F8M3OVk= Subject key identifier: DC:94:30:60:52:77:64:FE:C5:54:86:D1:37:D9:FF:32:42:5D:7F:12 Authority key identifier: E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E Certificate issuer: /CN=A91F7DBA/serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Certificate serial: 0508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft Manifest number: 0502 Signing time: Sun 19 Oct 2025 01:24:59 +0000 Manifest this update: Sun 19 Oct 2025 01:24:59 +0000 Manifest next update: Sun 26 Oct 2025 01:24:59 +0000 Files and hashes: 1: 4ISfBUORggKxeEROX_IviZ-eMg4.crl (hash: 5FpA04Ox/QRiWb4CmrAbI5yEEjVvHO9w9n+U8rmVhfI=) 2: 145F8B6434D211EEA9BD8F64C4F9AE02.roa (hash: LIC3UjwuX1L1kGuepSck3yzfK3nMMe4EkNAzNmI2D14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1288 (0x508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DBA, serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Validity Not Before: Oct 19 01:24:59 2025 GMT Not After : Oct 26 01:24:59 2025 GMT Subject: CN=68f43deb-c119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ab:84:b0:ee:cf:aa:07:00:14:26:bd:c3:f5: 31:90:3a:00:39:9d:2f:d3:52:f8:7c:71:54:2a:df: 6c:57:2e:ba:86:8e:c4:4b:cf:e8:40:f7:9d:6e:de: 39:4f:b5:90:de:25:97:24:ea:c0:a2:fd:b1:2c:d2: a8:69:ba:b8:47:b9:73:01:a0:f5:44:52:48:00:2d: 12:a9:ed:e7:4f:c2:d7:aa:25:05:3e:a0:08:f9:1f: b4:90:39:c0:26:9e:d0:a0:0b:dc:9d:fe:a0:5e:01: 56:84:ef:ff:ba:a3:e8:08:6d:5f:85:17:ea:35:47: 30:b5:80:b4:c8:b7:17:84:e7:c0:c4:e2:78:6b:7f: 82:2b:e5:ef:75:55:6d:ef:db:7a:3e:61:7b:ab:41: f3:5c:20:34:d1:f3:77:30:fd:09:73:cd:d3:a1:f2: 2b:5b:e9:1f:57:ae:13:1f:f0:e1:bf:8d:92:0d:09: 9b:69:c0:cd:a8:e6:ac:bc:8e:af:fb:8b:ae:f8:33: cb:e5:4d:da:97:3e:1d:54:31:15:e9:98:74:cd:a2: 70:0b:81:a4:63:39:be:05:37:ca:3f:52:85:a8:7a: 03:c8:9d:58:b3:db:31:a3:af:06:14:9e:13:0f:38: 67:ea:ba:68:e0:0c:63:e7:d2:9d:b6:b8:46:48:c0: 1a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:94:30:60:52:77:64:FE:C5:54:86:D1:37:D9:FF:32:42:5D:7F:12 X509v3 Authority Key Identifier: keyid:E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:08:e8:76:ab:25:ff:60:ec:2a:66:e7:1e:ee:52:51:e6:15: 16:f9:28:26:09:41:7c:72:2c:41:1e:2e:76:33:f2:e3:f0:47: 79:0e:1e:b4:83:4a:a6:a0:95:71:2f:38:8c:c4:1e:70:5a:d4: 9d:50:0b:4f:b5:35:70:48:01:e7:79:e9:1c:8d:62:f5:aa:17: c6:f6:84:9f:5b:3d:e3:29:e6:9c:70:e8:cd:4e:44:70:f1:28: a2:48:fb:62:17:e5:97:31:f7:7b:77:b1:63:7f:44:54:65:ae: c7:95:3e:a8:ef:d4:5a:51:c4:a0:15:bc:76:cd:fe:ea:38:a2: 5d:bf:9a:12:47:b8:95:43:2a:df:64:23:a5:7d:e7:84:b6:e1: 9d:85:2d:7c:81:81:e3:90:40:c2:58:e9:35:6d:2d:9c:0e:79: 6f:a6:8f:22:05:7e:ff:f5:4d:4b:39:39:97:8d:c2:99:73:29: 22:d8:67:6b:f3:01:69:a5:f4:8e:b6:1f:bf:c2:fb:80:ae:05: dd:c7:d8:6a:bd:25:b9:c6:60:a2:24:fe:b9:79:af:45:74:6a: 66:fd:24:75:3e:e6:4c:5b:86:44:65:88:40:42:17:5e:ba:ae: cc:35:08:16:4d:80:ab:e5:38:b5:93:1d:1c:4e:da:e3:43:56: 40:a3:ae:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQkExMTAvBgNVBAUTKEUwODQ5RjA1NDM5MTgyMDJCMTc4NDQ0RTVGRjIyRjg5 OUY5RTMyMEUwHhcNMjUxMDE5MDEyNDU5WhcNMjUxMDI2MDEyNDU5WjAYMRYwFAYD VQQDEw02OGY0M2RlYi1jMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKuEsO7PqgcAFCa9w/UxkDoAOZ0v01L4fHFUKt9sVy66ho7ES8/oQPedbt45 T7WQ3iWXJOrAov2xLNKoabq4R7lzAaD1RFJIAC0Sqe3nT8LXqiUFPqAI+R+0kDnA Jp7QoAvcnf6gXgFWhO//uqPoCG1fhRfqNUcwtYC0yLcXhOfAxOJ4a3+CK+XvdVVt 79t6PmF7q0HzXCA00fN3MP0Jc83TofIrW+kfV64TH/Dhv42SDQmbacDNqOasvI6v +4uu+DPL5U3alz4dVDEV6Zh0zaJwC4GkYzm+BTfKP1KFqHoDyJ1Ys9sxo68GFJ4T Dzhn6rpo4Axj59KdtrhGSMAanQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyUMGBS d2T+xVSG0TfZ/zJCXX8SMB8GA1UdIwQYMBaAFOCEnwVDkYICsXhETl/yL4mfnjIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RCQS8yOEVCNzE0NjJC RDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdnS3hlRVJPWF9JdmlaLWVN ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJU2ZCVU9SZ2dLeGVFUk9YX0l2aVotZU1nNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RCQS8yOEVCNzE0NjJCRDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdn S3hlRVJPWF9JdmlaLWVNZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArCOh2qyX/YOwqZuce7lJR5hUW+SgmCUF8cixBHi52M/Lj8Ed5Dh60 g0qmoJVxLziMxB5wWtSdUAtPtTVwSAHneekcjWL1qhfG9oSfWz3jKeaccOjNTkRw 8SiiSPtiF+WXMfd7d7Fjf0RUZa7HlT6o79RaUcSgFbx2zf7qOKJdv5oSR7iVQyrf ZCOlfeeEtuGdhS18gYHjkEDCWOk1bS2cDnlvpo8iBX7/9U1LOTmXjcKZcyki2Gdr 8wFppfSOth+/wvuArgXdx9hqvSW5xmCiJP65ea9FdGpm/SR1PuZMW4ZEZYhAQhde uq7MNQgWTYCr5Ti1kx0cTtrjQ1ZAo66l -----END CERTIFICATE-----Generated at Mon Oct 20 10:14:43 2025 by rpki-client