$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft File: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft (raw, json) Hash identifier: 5iBsmuVmP9B5JcoY+EIkVgR8uJxZwHD0Q/fSMv3NK4A= Subject key identifier: 08:C7:89:B9:9C:00:64:FC:49:9B:2F:15:59:93:8E:97:87:30:A3:65 Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A Certificate issuer: /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft Manifest number: 01E2 Signing time: Sat 23 Aug 2025 02:46:15 +0000 Manifest this update: Sat 23 Aug 2025 02:46:15 +0000 Manifest next update: Sat 30 Aug 2025 02:46:15 +0000 Files and hashes: 1: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl (hash: uz+lDTqyXqZwLkpkm0KFxP0FjrPwlufeA1aEQ3ehMfg=) 2: 38702E769AF611ED8D41985BC4F9AE02.roa (hash: ZhWBxmhvIB+43KRBVHlsXZ7qRlNDQ90SpnXAY8rEx0A=) 3: D076B1A49F2911ED937CF05AC4F9AE02.roa (hash: DMBYC+/NRUlRPJuHXxC2cxoOT1tZHI2lI1sjea+2JhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A Validity Not Before: Aug 23 02:46:15 2025 GMT Not After : Aug 30 02:46:15 2025 GMT Subject: CN=68a92b77-1deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:14:fe:06:4b:91:f2:a4:6e:91:cd:e7:30: 62:4b:69:2f:b2:8a:4b:d8:6b:ee:49:2d:cd:ed:6c: 58:60:d4:f2:63:3b:35:c1:76:be:54:1b:1a:07:19: 33:7f:c9:d3:29:4c:a6:78:53:54:16:c0:4a:11:b9: 4d:c7:0a:39:1a:ef:07:6c:40:b9:ab:4d:ed:1b:36: d7:b5:77:cf:08:05:96:b9:b6:c6:72:87:b2:eb:49: cf:f3:4f:93:bf:3c:74:02:39:ca:e7:87:dd:0d:ac: 1a:a5:cd:33:e5:6a:6d:94:83:88:1f:86:7f:67:d9: f5:fb:79:38:dd:ad:a7:87:d5:ab:08:aa:38:bb:80: ae:67:ca:f5:57:9a:2a:34:a3:84:13:08:30:1d:30: 68:57:df:23:44:84:39:a8:20:9d:4a:65:5c:50:9c: 95:88:26:13:b1:46:06:57:db:72:b6:62:2c:bf:d7: e0:13:2f:eb:6b:59:cf:07:97:1a:76:13:91:9f:85: ef:23:ef:81:a4:16:70:36:ad:c2:96:9e:ba:4c:99: ae:a1:59:dc:dd:e4:a1:08:24:69:a5:3b:1a:b0:ad: d1:41:7b:56:7d:2a:74:60:4c:a6:df:38:23:2e:06: 2e:66:c8:64:5f:49:a3:7b:17:98:87:fc:d4:14:79: 8e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C7:89:B9:9C:00:64:FC:49:9B:2F:15:59:93:8E:97:87:30:A3:65 X509v3 Authority Key Identifier: keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:d4:95:b6:d2:a8:b0:f6:56:bc:8c:50:07:f1:cd:22:58:d6: d7:49:e6:05:28:2a:25:54:59:b6:e8:66:3d:98:d6:46:05:58: 17:2a:15:5c:95:1e:db:cf:f6:5b:d7:ec:ac:3d:4b:47:26:cb: 3c:09:5e:43:c6:be:fe:7a:b3:31:c0:7a:18:78:76:2f:93:fc: 0d:f9:af:7b:77:3e:19:1d:03:1b:5d:08:24:c1:69:90:33:45: 01:14:22:38:f1:e6:d4:06:aa:a4:00:af:a9:15:c0:bf:29:85: f0:7d:25:35:fd:36:a0:10:f2:d7:b8:44:30:70:84:00:f2:ef: 82:f1:f3:ad:b1:f9:fd:57:6e:9d:8e:68:e7:2b:8e:8e:04:66: 8c:41:bb:ac:1a:b7:d7:d0:ef:23:94:1d:48:de:58:17:84:e9: 8d:3e:65:d6:ce:73:61:e5:4d:31:a9:88:f6:99:24:fb:c7:77: 42:90:66:b5:c1:6c:dd:b7:d2:e2:38:e2:03:57:f9:1a:e0:b9: 20:71:e9:8e:f5:d0:3f:1c:1c:5d:9a:52:cb:48:37:77:13:c0: 9a:da:a1:af:75:c6:bc:68:1c:45:92:18:72:38:29:a8:f7:2b: 03:14:46:d6:f0:e7:ce:ac:40:41:c7:23:a7:f8:f3:4e:0d:6d: 6d:a7:2e:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzRkMxMTAvBgNVBAUTKEUxQzFDNzJCNjc5M0E5MDNCQTNERTAzMTAyNzUxOUI0 MzAyMTc1NkEwHhcNMjUwODIzMDI0NjE1WhcNMjUwODMwMDI0NjE1WjAYMRYwFAYD VQQDEw02OGE5MmI3Ny0xZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxoU/gZLkfKkbpHN5zBiS2kvsopL2GvuSS3N7WxYYNTyYzs1wXa+VBsaBxkz f8nTKUymeFNUFsBKEblNxwo5Gu8HbEC5q03tGzbXtXfPCAWWubbGcoey60nP80+T vzx0AjnK54fdDawapc0z5WptlIOIH4Z/Z9n1+3k43a2nh9WrCKo4u4CuZ8r1V5oq NKOEEwgwHTBoV98jRIQ5qCCdSmVcUJyViCYTsUYGV9tytmIsv9fgEy/ra1nPB5ca dhORn4XvI++BpBZwNq3Clp66TJmuoVnc3eShCCRppTsasK3RQXtWfSp0YEym3zgj LgYuZshkX0mjexeYh/zUFHmO1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjHibmc AGT8SZsvFVmTjpeHMKNlMB8GA1UdIwQYMBaAFOHBxytnk6kDuj3gMQJ1GbQwIXVq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNGQy9BOTZGNEI3ODlB RjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFRTzZQZUF4QW5VWnREQWhk V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjSEhLMmVUcVFPNlBlQXhBblVadERBaGRXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNGQy9BOTZGNEI3ODlBRjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFR TzZQZUF4QW5VWnREQWhkV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC1JW20qiw9la8jFAH8c0iWNbXSeYFKColVFm26GY9mNZGBVgXKhVc lR7bz/Zb1+ysPUtHJss8CV5Dxr7+erMxwHoYeHYvk/wN+a97dz4ZHQMbXQgkwWmQ M0UBFCI48ebUBqqkAK+pFcC/KYXwfSU1/TagEPLXuEQwcIQA8u+C8fOtsfn9V26d jmjnK46OBGaMQbusGrfX0O8jlB1I3lgXhOmNPmXWznNh5U0xqYj2mST7x3dCkGa1 wWzdt9LiOOIDV/ka4LkgcemO9dA/HBxdmlLLSDd3E8Ca2qGvdca8aBxFkhhyOCmo 9ysDFEbW8OfOrEBBxyOn+PNODW1tpy5r -----END CERTIFICATE-----Generated at Sat Aug 23 19:06:23 2025 by rpki-client