$ rpki-client -vvf rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft File: g4n9Rv74flk96Bz_3N8guiynYB4.mft (raw, json) Hash identifier: eQ8rbPUg4eYuHPIIwXB12WYl/ykus0IJXz5zeC9/8OM= Subject key identifier: 5F:A7:83:4A:12:43:8E:21:AE:70:86:51:0A:26:9A:1E:9B:C8:99:96 Authority key identifier: 83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E Certificate issuer: /CN=A91475BA/serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Certificate serial: 0825 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft Manifest number: 0820 Signing time: Fri 04 Jul 2025 21:09:30 +0000 Manifest this update: Fri 04 Jul 2025 21:09:30 +0000 Manifest next update: Fri 11 Jul 2025 21:09:30 +0000 Files and hashes: 1: g4n9Rv74flk96Bz_3N8guiynYB4.crl (hash: pkLXB59mYCXo8G/qB21Ls77nEE5XJX2Q9bAvWPELsks=) 2: 1E1D32C22FF311EC9220256BC4F9AE02.roa (hash: pTjj2b7GgJwyDNJuxZHgCMBFpwcbCF/p1EbBwHpmEQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2085 (0x825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475BA, serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Validity Not Before: Jul 4 21:09:30 2025 GMT Not After : Jul 11 21:09:30 2025 GMT Subject: CN=6868430a-2a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:19:17:6f:f6:22:19:24:8d:bd:e6:34:a7:25: 20:44:31:12:57:10:dc:9c:32:35:2b:53:b4:99:d7: de:ec:01:5f:47:01:eb:5f:c9:b5:68:63:1e:52:2e: d0:f2:ea:ff:fa:73:94:9d:80:ac:57:f3:33:92:fd: 2f:bf:5e:e0:68:d5:72:d5:6e:61:dc:75:4d:b3:df: 53:08:ba:e9:be:4f:ab:a6:ca:6a:f9:2e:be:e4:a4: 47:6b:13:29:fb:92:f2:74:08:ef:2e:f1:71:f5:d9: 99:21:ca:60:7f:9c:cd:8a:4d:5e:59:e5:4b:08:e7: 99:ab:30:7a:05:a6:f3:b9:a9:ca:a9:35:0a:82:9b: 77:97:e5:c5:60:35:e0:4a:22:e9:b7:89:67:d8:75: d9:c6:74:da:b4:3b:3b:6f:e5:54:09:d8:8f:f8:a6: 2e:4f:c8:8b:43:13:a6:df:ac:2d:b1:42:2e:87:62: 5d:93:6d:3d:24:56:0c:5f:aa:4e:1b:d7:81:84:62: c8:10:c4:f5:0d:8d:f6:c5:45:a9:05:df:c6:8c:60: 45:7f:e0:06:cf:72:de:33:49:6a:c0:d1:81:8f:23: a1:1a:85:4e:73:c8:5b:a8:87:15:46:b2:00:2b:ef: ec:c4:16:0b:cd:2b:39:e8:84:1c:c0:30:d5:45:2b: 59:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A7:83:4A:12:43:8E:21:AE:70:86:51:0A:26:9A:1E:9B:C8:99:96 X509v3 Authority Key Identifier: keyid:83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:ee:51:be:37:42:0b:2e:ef:3b:73:93:21:88:c1:bf:0a:27: 15:c9:2c:88:51:51:39:d2:f3:24:c0:78:da:6e:b6:ed:30:cf: ab:79:ae:75:6d:0d:c6:70:20:72:46:33:be:dc:9e:38:e7:95: 7d:0f:e8:2a:7d:a8:3c:b1:4f:f7:1a:c4:64:09:fb:b5:90:ee: 7f:35:71:7c:b0:15:3c:42:ef:c9:5b:39:62:7f:c4:0d:a6:18: 42:f8:5b:ec:af:fb:3b:2f:0b:20:3f:85:c3:58:5f:df:6a:ad: 21:fd:40:11:ca:d4:61:47:00:04:39:6f:08:c4:17:52:fb:48: 06:56:17:37:01:db:c0:80:2a:2b:55:df:f1:8c:24:14:69:61: e5:43:3c:9e:18:10:81:00:dc:44:ad:cb:82:41:f9:a7:d9:15: 57:1a:46:eb:67:0f:35:ee:33:28:df:a6:63:fc:3a:47:1a:13: 1d:31:c4:20:1d:1d:7b:2f:0e:96:03:9a:f2:f6:07:ff:ba:93: 10:4c:96:db:80:0d:6b:0f:82:59:82:2d:21:bc:b2:79:13:28: 60:24:d5:d0:2d:f0:82:95:f8:8c:60:31:56:25:63:79:f6:79: 99:13:27:8f:af:13:b0:a9:db:a2:b7:fd:8e:19:1e:8b:24:54: a2:67:73:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QkExMTAvBgNVBAUTKDgzODlGRDQ2RkVGODdFNTkzREU4MUNGRkRDREYyMEJB MkNBNzYwMUUwHhcNMjUwNzA0MjEwOTMwWhcNMjUwNzExMjEwOTMwWjAYMRYwFAYD VQQDEw02ODY4NDMwYS0yYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9xkXb/YiGSSNveY0pyUgRDESVxDcnDI1K1O0mdfe7AFfRwHrX8m1aGMeUi7Q 8ur/+nOUnYCsV/Mzkv0vv17gaNVy1W5h3HVNs99TCLrpvk+rpspq+S6+5KRHaxMp +5LydAjvLvFx9dmZIcpgf5zNik1eWeVLCOeZqzB6BabzuanKqTUKgpt3l+XFYDXg SiLpt4ln2HXZxnTatDs7b+VUCdiP+KYuT8iLQxOm36wtsUIuh2Jdk209JFYMX6pO G9eBhGLIEMT1DY32xUWpBd/GjGBFf+AGz3LeM0lqwNGBjyOhGoVOc8hbqIcVRrIA K+/sxBYLzSs56IQcwDDVRStZNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+ng0oS Q44hrnCGUQommh6byJmWMB8GA1UdIwQYMBaAFIOJ/Ub++H5ZPegc/9zfILosp2Ae MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVCQS9ENEYwOEVFNkRB RTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZsazk2QnpfM044Z3VpeW5Z QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0bjlSdjc0ZmxrOTZCel8zTjhndWl5bllCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVCQS9ENEYwOEVFNkRBRTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZs azk2QnpfM044Z3VpeW5ZQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE7lG+N0ILLu87c5MhiMG/CicVySyIUVE50vMkwHjabrbtMM+rea51 bQ3GcCByRjO+3J4455V9D+gqfag8sU/3GsRkCfu1kO5/NXF8sBU8Qu/JWzlif8QN phhC+Fvsr/s7LwsgP4XDWF/faq0h/UARytRhRwAEOW8IxBdS+0gGVhc3AdvAgCor Vd/xjCQUaWHlQzyeGBCBANxErcuCQfmn2RVXGkbrZw817jMo36Zj/DpHGhMdMcQg HR17Lw6WA5ry9gf/upMQTJbbgA1rD4JZgi0hvLJ5EyhgJNXQLfCClfiMYDFWJWN5 9nmZEyePrxOwqduit/2OGR6LJFSiZ3MC -----END CERTIFICATE-----Generated at Sun Jul 6 00:05:27 2025 by rpki-client