$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: kttCWSpMCaxYmDikI3hLb5SVYSfom5qkQGMGDuqV0Sg= Subject key identifier: 40:A5:9F:66:A3:9B:72:30:01:4C:1F:6F:48:C6:77:16:C7:8E:9C:71 Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 0504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 04F8 Signing time: Mon 27 Oct 2025 00:42:59 +0000 Manifest this update: Mon 27 Oct 2025 00:42:58 +0000 Manifest next update: Mon 03 Nov 2025 00:42:58 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: YUyCYpyCcpCsLv4FMN4N6x6JyADFUv3jAYx5n4RYwJY=) 2: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: 3A9tL/jcYlpnzHxxWTOseLkNdsbJRJrgjlY1s6ebsbQ=) 3: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: GWx3OJd1vwjGtC5zPk/EszjxixEUkMuQ8v31OyEYOdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1284 (0x504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Validity Not Before: Oct 27 00:42:58 2025 GMT Not After : Nov 3 00:42:58 2025 GMT Subject: CN=68fec013-1ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:8b:8e:4a:8f:53:de:28:d0:b1:2d:71:26: ec:18:85:f4:61:6e:b8:47:ff:f2:43:e3:bf:3b:ea: 70:48:a6:b5:9f:fd:b4:5e:65:3c:32:d5:9c:72:bc: 62:83:1a:2a:4b:18:eb:66:e0:95:6c:eb:5a:da:f5: 0e:95:a3:f7:cf:03:15:d8:31:37:3f:eb:6d:f6:5b: 08:3a:8f:ad:cd:bc:6c:c1:2a:5b:29:ff:e2:80:46: 1a:9e:f0:ca:75:91:e0:29:8f:e4:56:a4:c4:0f:de: d9:09:4d:12:f4:68:d2:3d:1d:5e:e2:13:a5:50:ee: 4a:60:90:e6:9f:c6:dc:bf:36:fc:05:d6:87:cb:c0: a5:93:eb:ac:1e:06:cc:a8:d0:4e:16:52:95:37:3b: 01:a1:28:3c:73:d0:29:e4:12:4b:b3:3b:07:b3:d6: 1d:5a:0d:fc:89:da:69:b2:fb:f8:4e:d4:88:f1:5e: 21:f0:ed:9c:df:0e:42:ee:7f:0b:22:cb:84:ab:72: de:a0:25:88:78:da:94:1c:13:0a:03:1d:a3:c7:bc: 04:0a:23:17:02:7e:2e:d1:4d:fd:92:75:9c:8c:0f: ae:a4:74:3e:48:6f:48:85:e7:c2:21:dd:04:9b:0c: c5:b0:b3:00:1c:26:e9:c0:6f:67:3b:60:21:80:ef: ec:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A5:9F:66:A3:9B:72:30:01:4C:1F:6F:48:C6:77:16:C7:8E:9C:71 X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:61:a7:1c:e8:11:b2:03:59:2a:20:79:3a:19:f9:6e:88:bd: 79:86:4a:2d:dd:6c:f9:08:2f:81:b1:99:6d:d8:c6:d3:fe:3a: 06:d7:0e:21:85:9b:6e:05:2b:84:15:30:97:6c:76:8c:37:cd: e6:bc:ac:44:15:2f:19:96:7c:bd:fb:5c:c5:8a:94:5d:e8:8b: dc:c4:83:f9:01:fe:63:ae:d6:ba:00:54:93:57:14:66:43:fd: 2a:5c:18:0d:ab:09:1b:4c:7b:68:3f:78:71:3e:9e:eb:2a:c7: 9b:1b:09:0d:94:65:ee:ea:39:b9:bd:42:36:58:ec:4c:cd:55: 4d:b5:7f:b1:d3:a2:cb:75:b7:04:f7:93:ec:51:7e:33:6c:67: d0:8b:72:47:c7:e1:45:c5:ad:4d:87:57:4b:ce:fe:97:33:96: 4a:d6:f1:aa:84:77:1d:9c:07:59:56:05:22:a1:88:b1:13:1c: 1c:18:fc:5c:b9:12:73:a5:fe:e5:e0:eb:9e:66:a3:a3:ff:c0: 51:66:5c:73:5e:7f:f5:d9:ef:2b:42:c7:6b:77:65:12:39:47: 6a:3e:0a:d5:2c:ba:3a:28:2f:28:34:8d:93:31:27:78:fa:ad: 3c:0a:54:5f:57:4c:12:3f:56:25:88:e9:82:c2:67:9a:5f:ee: 4b:30:cf:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjUxMDI3MDA0MjU4WhcNMjUxMTAzMDA0MjU4WjAYMRYwFAYD VQQDEw02OGZlYzAxMy0xZGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYWLjkqPU94o0LEtcSbsGIX0YW64R//yQ+O/O+pwSKa1n/20XmU8MtWccrxi gxoqSxjrZuCVbOta2vUOlaP3zwMV2DE3P+tt9lsIOo+tzbxswSpbKf/igEYanvDK dZHgKY/kVqTED97ZCU0S9GjSPR1e4hOlUO5KYJDmn8bcvzb8BdaHy8Clk+usHgbM qNBOFlKVNzsBoSg8c9Ap5BJLszsHs9YdWg38idppsvv4TtSI8V4h8O2c3w5C7n8L IsuEq3LeoCWIeNqUHBMKAx2jx7wECiMXAn4u0U39knWcjA+upHQ+SG9IhefCId0E mwzFsLMAHCbpwG9nO2AhgO/s9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECln2aj m3IwAUwfb0jGdxbHjpxxMB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNYacc6BGyA1kqIHk6GfluiL15hkot3Wz5CC+BsZlt2MbT/joG1w4h hZtuBSuEFTCXbHaMN83mvKxEFS8Zlny9+1zFipRd6IvcxIP5Af5jrta6AFSTVxRm Q/0qXBgNqwkbTHtoP3hxPp7rKsebGwkNlGXu6jm5vUI2WOxMzVVNtX+x06LLdbcE 95PsUX4zbGfQi3JHx+FFxa1Nh1dLzv6XM5ZK1vGqhHcdnAdZVgUioYixExwcGPxc uRJzpf7l4OueZqOj/8BRZlxzXn/12e8rQsdrd2USOUdqPgrVLLo6KC8oNI2TMSd4 +q08ClRfV0wSP1YliOmCwmeaX+5LMM9M -----END CERTIFICATE-----Generated at Tue Oct 28 12:53:51 2025 by rpki-client