$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft File: 4RvPp2LU9ssvatCdA6lA4P6qAfg.mft (raw, json) Hash identifier: KQoD0gnQVEvE0uFN6yc/o5s4uYEyy4hB6S7kLhAKS+s= Subject key identifier: BA:76:E5:43:32:22:FE:41:F6:B4:4D:B1:A0:BB:C5:42:58:6C:E0:81 Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 Certificate issuer: /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Certificate serial: 1F0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft Manifest number: 1F03 Signing time: Fri 22 Aug 2025 16:05:23 +0000 Manifest this update: Fri 22 Aug 2025 16:05:22 +0000 Manifest next update: Fri 29 Aug 2025 16:05:22 +0000 Files and hashes: 1: 4RvPp2LU9ssvatCdA6lA4P6qAfg.crl (hash: JBF1uWY6TISZlRVeN3v3WBoadsnxClpuT0SegQkUTVc=) 2: DB92DE200AEF11ECB7243C0FC4F9AE02.roa (hash: jUBoH/NsE+2KO1Z4hcom5Ddnhv0XpfeG1RJbEdRDm9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7946 (0x1f0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Validity Not Before: Aug 22 16:05:22 2025 GMT Not After : Aug 29 16:05:22 2025 GMT Subject: CN=68a89543-719e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:03:b1:90:6f:34:b1:8f:89:10:c5:7f:9c:99: 95:c1:48:f3:89:bc:14:a0:40:1d:f7:6a:45:39:56: fd:fa:d3:5a:b7:8c:ca:e5:00:f3:f1:26:2b:03:7e: f2:2c:ac:2f:05:12:4e:cc:8d:d8:e8:8f:53:74:94: e5:1c:bb:5e:92:1d:8f:01:d7:ab:97:95:bb:d8:a9: 4c:46:6e:7a:b2:89:02:a3:50:92:e7:d5:43:8b:42: e7:52:8a:c1:38:a4:ac:93:34:35:90:7b:c7:c3:d4: 92:41:3a:29:c4:e7:24:e3:11:4a:9a:11:fd:8f:98: 81:97:da:dc:e1:d0:ef:ae:b3:4c:83:35:23:6c:a0: 66:40:d4:cc:3d:68:e9:57:03:36:28:aa:5f:ba:9d: 9b:cc:6f:4d:3b:8e:c3:8d:87:2a:e5:3b:a7:ed:38: 3a:90:93:40:ad:53:11:0b:9c:6f:39:d7:a2:1d:ae: a1:24:cf:26:f6:1c:e5:f9:eb:74:c3:d1:57:a7:93: 18:f9:db:6e:32:5e:91:f8:b4:d4:f1:51:17:5e:87: 22:ec:6e:f5:f4:7d:73:49:6c:5c:06:4e:21:42:11: 48:81:da:24:97:00:51:c6:f1:9e:4a:8a:23:a9:36: 21:2e:eb:58:aa:9c:67:0e:ac:8d:22:06:66:c2:09: a7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:76:E5:43:32:22:FE:41:F6:B4:4D:B1:A0:BB:C5:42:58:6C:E0:81 X509v3 Authority Key Identifier: keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:0e:66:f6:ca:23:4f:0d:55:cd:a1:bf:26:20:aa:d1:c6:b9: 72:a2:24:fa:1a:30:9d:aa:91:89:66:32:44:e9:90:81:74:97: 44:a4:92:43:37:9f:51:d6:a9:45:61:20:26:28:fa:80:90:6d: 4c:18:27:a4:7e:c0:18:37:9a:21:85:76:08:11:0e:8c:37:b3: 71:40:42:3a:a6:33:7b:2a:07:3a:dd:e0:b5:8b:c3:4b:40:4e: 75:84:db:ac:80:43:9f:bb:ea:af:f8:24:fd:b8:91:ac:80:a3: c9:63:97:3f:63:b3:bd:7f:e5:24:5b:84:94:df:f5:bf:a1:ea: 24:95:6a:6d:d2:64:2a:81:21:e8:ca:65:9d:7d:0f:ea:98:28: fc:d4:43:24:1c:37:7f:ec:0d:cd:9a:e9:67:70:dd:65:39:da: bf:f7:8c:5e:e3:7f:be:ac:31:70:3d:e0:91:b6:c3:79:92:f7: 3e:01:d8:07:be:04:4d:8a:2f:b8:53:8c:49:00:f0:4a:15:c5: d1:2d:f2:b2:88:62:fa:0f:2e:ce:b1:98:de:62:98:ee:10:e2: c5:f2:ce:3d:44:a3:5d:c9:88:ce:1c:3e:c9:16:c3:71:62:1e: 6c:76:41:af:09:2f:08:45:60:29:70:9a:b5:07:be:fb:35:8b: b8:c0:1d:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAwRjUxMTAvBgNVBAUTKEUxMUJDRkE3NjJENEY2Q0IyRjZBRDA5RDAzQTk0MEUw RkVBQTAxRjgwHhcNMjUwODIyMTYwNTIyWhcNMjUwODI5MTYwNTIyWjAYMRYwFAYD VQQDEw02OGE4OTU0My03MTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgOxkG80sY+JEMV/nJmVwUjzibwUoEAd92pFOVb9+tNat4zK5QDz8SYrA37y LKwvBRJOzI3Y6I9TdJTlHLtekh2PAderl5W72KlMRm56sokCo1CS59VDi0LnUorB OKSskzQ1kHvHw9SSQTopxOck4xFKmhH9j5iBl9rc4dDvrrNMgzUjbKBmQNTMPWjp VwM2KKpfup2bzG9NO47DjYcq5Tun7Tg6kJNArVMRC5xvOdeiHa6hJM8m9hzl+et0 w9FXp5MY+dtuMl6R+LTU8VEXXoci7G719H1zSWxcBk4hQhFIgdoklwBRxvGeSooj qTYhLutYqpxnDqyNIgZmwgmnRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLp25UMy Iv5B9rRNsaC7xUJYbOCBMB8GA1UdIwQYMBaAFOEbz6di1PbLL2rQnQOpQOD+qgH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDBGNS9EOUU5NTJGNDVF RjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlzc3ZhdENkQTZsQTRQNnFB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSdlBwMkxVOXNzdmF0Q2RBNmxBNFA2cUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDBGNS9EOUU5NTJGNDVFRjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlz c3ZhdENkQTZsQTRQNnFBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3Dmb2yiNPDVXNob8mIKrRxrlyoiT6GjCdqpGJZjJE6ZCBdJdEpJJD N59R1qlFYSAmKPqAkG1MGCekfsAYN5ohhXYIEQ6MN7NxQEI6pjN7Kgc63eC1i8NL QE51hNusgEOfu+qv+CT9uJGsgKPJY5c/Y7O9f+UkW4SU3/W/oeoklWpt0mQqgSHo ymWdfQ/qmCj81EMkHDd/7A3NmulncN1lOdq/94xe43++rDFwPeCRtsN5kvc+AdgH vgRNii+4U4xJAPBKFcXRLfKyiGL6Dy7OsZjeYpjuEOLF8s49RKNdyYjOHD7JFsNx Yh5sdkGvCS8IRWApcJq1B777NYu4wB0R -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:45 2025 by rpki-client