$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json) Hash identifier: V8oK6o2guhSt9ip6P3s5jilAfMR5yz+vaRa+9zITk98= Subject key identifier: 8D:B1:E7:EC:B8:52:61:33:45:42:D9:15:10:7D:2B:1D:64:36:DF:65 Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft Manifest number: 18 Signing time: Sat 23 Aug 2025 08:13:10 +0000 Manifest this update: Sat 23 Aug 2025 08:13:09 +0000 Manifest next update: Sat 30 Aug 2025 08:13:09 +0000 Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: Qi4OkEvk0AzqnoHa4GLMEJimUtStazrsgIVRnUmaIc8=) 2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: SdgAZZ52cjGHFYLx6r6iySsbR8aD22mEVfk3u39V65w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Validity Not Before: Aug 23 08:13:09 2025 GMT Not After : Aug 30 08:13:09 2025 GMT Subject: CN=68a97815-6b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e8:f3:0d:d9:45:8a:d2:60:d0:51:64:b2:0b: 82:fb:c4:2d:09:51:92:1c:1b:88:ee:a3:cb:95:f1: d1:e3:57:10:94:1f:39:6e:1f:4e:fc:12:05:31:03: 07:71:c0:50:eb:10:7e:83:03:c3:ea:57:3f:90:a8: 53:9e:cb:f3:83:0b:71:58:13:aa:98:09:60:0c:6f: 0e:c3:c2:7f:2d:ea:36:ee:41:e3:d4:71:ca:4a:36: 0a:fa:c5:15:62:c7:2a:33:52:4b:e2:cc:b7:a1:e2: 57:fe:c5:3b:52:d6:10:75:98:88:90:9c:91:2d:3c: c6:a3:bf:12:1a:55:3e:19:3d:85:a0:3f:bd:af:74: 10:10:f2:95:a4:b4:ea:22:45:ee:6e:ed:99:d5:5a: df:af:64:d8:d0:d4:62:0f:09:66:01:ca:46:4a:1d: a0:01:8e:d9:b9:8f:e8:ef:a0:6e:58:a9:05:b4:70: 88:2e:c8:3c:65:51:91:dc:df:13:87:7b:cc:75:0d: e4:57:72:fb:f5:97:0e:f6:d1:bb:24:b3:1f:00:92: 3f:bc:0c:c8:4d:2e:eb:8a:ad:63:2b:af:bf:31:a2: 0a:bd:af:c9:ae:40:95:16:0b:ea:b5:9a:d1:ab:3a: 4b:b8:63:6e:8d:48:84:3d:0f:b9:f0:58:bd:8e:2a: ba:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B1:E7:EC:B8:52:61:33:45:42:D9:15:10:7D:2B:1D:64:36:DF:65 X509v3 Authority Key Identifier: keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:d6:d1:b7:1a:23:92:79:ff:3b:5e:f3:bf:01:74:0a:76:63: 0b:52:21:48:57:51:6a:0c:7b:c9:83:ba:b7:c3:40:75:47:bc: f6:57:ff:d8:10:64:49:6e:c0:a9:d6:66:8c:55:0d:18:9d:e3: 0a:aa:c6:7d:05:2b:a5:a5:b7:2b:2c:a3:64:94:01:51:ba:38: 84:77:18:50:13:03:59:c9:84:49:96:ae:25:20:0d:67:9e:b8: c7:63:fd:91:70:23:42:5a:d2:6a:56:c0:b4:ea:fd:8d:3b:7e: a3:c0:f8:95:7c:a7:eb:33:33:a7:9f:23:9c:32:67:01:84:09: 6d:af:df:d0:1c:a0:a0:fa:e0:87:11:81:5f:e9:45:9b:18:a0: 15:54:17:9f:72:36:39:98:28:55:3d:dc:cc:78:bc:bc:d6:a1: 51:d8:b9:76:2c:99:ba:01:ce:46:de:7e:0a:42:f5:cc:81:23: 43:4c:f4:37:52:13:7a:55:1d:99:42:0f:92:96:59:98:01:82: 87:ba:a1:52:30:71:31:d8:cb:c1:d1:b4:44:d3:b6:b9:c5:92: af:35:b7:17:4e:15:a1:85:ba:c4:08:41:a3:88:fa:91:ee:18: 95:1c:bf:69:85:c8:7e:3a:7e:2c:ac:aa:a2:48:8c:fb:2e:8f: c9:b2:20:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTFERTExMC8GA1UEBRMoNkI4Mjk2QTU4MTU0MzAyNzhFQzMxMUI1RTlDQkVCN0ZG MEE5MERDNjAeFw0yNTA4MjMwODEzMDlaFw0yNTA4MzAwODEzMDlaMBgxFjAUBgNV BAMTDTY4YTk3ODE1LTZiOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa6PMN2UWK0mDQUWSyC4L7xC0JUZIcG4juo8uV8dHjVxCUHzluH078EgUxAwdx wFDrEH6DA8PqVz+QqFOey/ODC3FYE6qYCWAMbw7Dwn8t6jbuQePUccpKNgr6xRVi xyozUkvizLeh4lf+xTtS1hB1mIiQnJEtPMajvxIaVT4ZPYWgP72vdBAQ8pWktOoi Re5u7ZnVWt+vZNjQ1GIPCWYBykZKHaABjtm5j+jvoG5YqQW0cIguyDxlUZHc3xOH e8x1DeRXcvv1lw720bsksx8Akj+8DMhNLuuKrWMrr78xogq9r8muQJUWC+q1mtGr Oku4Y26NSIQ9D7nwWL2OKrpBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjbHn7LhS YTNFQtkVEH0rHWQ232UwHwYDVR0jBBgwFoAUa4KWpYFUMCeOwxG16cvrf/CpDcYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1MURFLzg3MUZEQTM2NjBC NDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNlT3d4RzE2Y3ZyZl9DcERj WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYTRLV3BZRlVNQ2VPd3hHMTZjdnJmX0NwRGNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 MURFLzg3MUZEQTM2NjBCNDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNl T3d4RzE2Y3ZyZl9DcERjWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGHW0bcaI5J5/zte878BdAp2YwtSIUhXUWoMe8mDurfDQHVHvPZX/9gQ ZEluwKnWZoxVDRid4wqqxn0FK6Wltysso2SUAVG6OIR3GFATA1nJhEmWriUgDWee uMdj/ZFwI0Ja0mpWwLTq/Y07fqPA+JV8p+szM6efI5wyZwGECW2v39AcoKD64IcR gV/pRZsYoBVUF59yNjmYKFU93Mx4vLzWoVHYuXYsmboBzkbefgpC9cyBI0NM9DdS E3pVHZlCD5KWWZgBgoe6oVIwcTHYy8HRtETTtrnFkq81txdOFaGFusQIQaOI+pHu GJUcv2mFyH46fiysqqJIjPsuj8myIHg= -----END CERTIFICATE-----Generated at Sat Aug 23 10:54:40 2025 by rpki-client