$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json) Hash identifier: uyC/J88cghyLmyz0ugELqs9uolxHqrp579epX5qup20= Subject key identifier: B2:D3:EB:2F:43:8B:FD:10:80:02:6B:3B:6F:AE:8C:D2:08:62:A6:C1 Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Certificate serial: 09FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft Manifest number: 09EF Signing time: Fri 22 Aug 2025 20:01:05 +0000 Manifest this update: Fri 22 Aug 2025 20:01:04 +0000 Manifest next update: Fri 29 Aug 2025 20:01:04 +0000 Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: iI9GXgMJo9AGDmBGaWV8gFnX1xWdBvUnOcs+Ri+vbTo=) 2: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: PugK/HlSlwCNhEasOZjO6B/uomD7VotHJLA2wV6jZrM=) 3: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: hvomTHOFg3fOu5UVv4a+8zSBR7jdgf3xO/+H6ZJICO8=) 4: 305312F67CA011F098F1673CC4F9AE02.roa (hash: wVxD4Ia4NFpgdZDCkPWfFk89K3NA8UH13kaAx87O4u8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2557 (0x9fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Validity Not Before: Aug 22 20:01:04 2025 GMT Not After : Aug 29 20:01:04 2025 GMT Subject: CN=68a8cc81-3571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0f:3b:af:f2:46:8a:04:20:5a:55:46:1c:d4: 74:dc:f7:48:c2:51:a4:94:f7:11:7d:50:9e:22:dd: e8:81:1e:66:6e:25:c7:2e:f3:bd:98:90:03:06:8d: b7:b1:3c:a6:ec:44:f9:6d:98:b5:11:58:cc:45:0d: 66:62:cd:08:79:4a:8a:0d:c6:03:27:e3:b4:96:7c: 2d:d9:43:c1:99:6e:ba:de:b0:e2:f8:4c:57:27:d7: 75:69:94:3b:c2:a0:68:d8:9a:ee:39:37:30:b5:76: 40:14:80:81:fb:04:23:16:ed:41:de:d2:6c:6b:53: 7b:2c:e8:48:8a:cf:77:2f:61:a5:73:c7:87:ae:5b: 9b:d1:7e:a3:52:98:3e:bf:c0:a9:e0:9e:57:ac:a5: 1d:ec:68:03:64:e7:2a:c6:4e:ce:3c:b2:79:01:50: b6:32:ca:7f:29:24:a9:c9:05:9a:08:58:ec:0e:0c: 95:0d:eb:5d:25:bd:9c:b4:f3:71:9c:5f:f3:eb:2e: 35:3a:a2:af:d2:49:95:09:d2:ed:15:62:4c:4d:b9: ce:6d:27:b0:d3:dc:83:17:62:13:43:5b:35:0a:ec: e9:9b:36:9e:7d:d6:b0:f6:43:3b:4b:41:33:01:38: 50:0a:7b:60:1b:54:18:07:41:08:8c:f5:25:40:77: bd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D3:EB:2F:43:8B:FD:10:80:02:6B:3B:6F:AE:8C:D2:08:62:A6:C1 X509v3 Authority Key Identifier: keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:3e:2e:c6:3e:98:56:7f:63:bb:34:67:b4:86:79:f0:bc:3e: d4:85:41:a7:f7:21:ee:24:c5:55:91:74:24:29:1d:57:09:20: 0f:63:27:2a:55:62:ff:be:51:69:a4:41:8c:37:96:fa:82:b9: b2:2e:9e:85:46:06:73:ae:e7:c2:9d:61:30:e7:6c:80:6c:cb: 3e:59:6a:b4:da:b9:fd:6b:d7:75:c7:ba:f6:36:b3:61:e1:bc: b1:e2:5f:b3:8f:74:ff:fb:85:19:05:e7:90:f3:8b:8f:62:d5: 74:65:79:3d:16:dd:00:cf:48:f5:04:c5:eb:14:cf:2a:d9:6c: 98:2b:78:52:8c:e5:56:08:70:7b:d8:df:ee:43:0d:87:23:0e: 78:81:3c:6b:c2:6e:31:7b:b7:2a:3b:75:f2:0c:c5:28:18:ca: 1d:e2:f6:96:e7:ae:d6:d3:e5:b5:bb:c2:68:d4:40:58:6f:13: 01:56:7e:c3:7b:d2:d0:22:34:fa:3a:34:20:60:ea:ae:14:7b: 57:9f:64:d2:72:24:7b:61:5f:73:41:a2:fe:cd:1c:14:80:4a: 19:27:61:78:60:00:a3:e0:5d:67:c5:fe:9e:a6:d6:cb:e4:32: db:34:3e:54:c1:e4:2b:a8:95:be:5e:4f:6b:c5:86:fd:94:17: 8b:ab:51:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBBNkMxMTAvBgNVBAUTKEE3ODdBNjNFNDlFRThFQzZGOTc1MTE2MDdGMUI3QzVC MERGMTE2NEUwHhcNMjUwODIyMjAwMTA0WhcNMjUwODI5MjAwMTA0WjAYMRYwFAYD VQQDEw02OGE4Y2M4MS0zNTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQ87r/JGigQgWlVGHNR03PdIwlGklPcRfVCeIt3ogR5mbiXHLvO9mJADBo23 sTym7ET5bZi1EVjMRQ1mYs0IeUqKDcYDJ+O0lnwt2UPBmW663rDi+ExXJ9d1aZQ7 wqBo2JruOTcwtXZAFICB+wQjFu1B3tJsa1N7LOhIis93L2Glc8eHrlub0X6jUpg+ v8Cp4J5XrKUd7GgDZOcqxk7OPLJ5AVC2Msp/KSSpyQWaCFjsDgyVDetdJb2ctPNx nF/z6y41OqKv0kmVCdLtFWJMTbnObSew09yDF2ITQ1s1Cuzpmzaefdaw9kM7S0Ez AThQCntgG1QYB0EIjPUlQHe90wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLT6y9D i/0QgAJrO2+ujNIIYqbBMB8GA1UdIwQYMBaAFKeHpj5J7o7G+XURYH8bfFsN8RZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEE2Qy9COTE2RjM4ODgy QzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpzYjVkUkZnZnh0OFd3M3hG azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0ZW1Qa251anNiNWRSRmdmeHQ4V3czeEZrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEE2Qy9COTE2RjM4ODgyQzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpz YjVkUkZnZnh0OFd3M3hGazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACPi7GPphWf2O7NGe0hnnwvD7UhUGn9yHuJMVVkXQkKR1XCSAPYycq VWL/vlFppEGMN5b6grmyLp6FRgZzrufCnWEw52yAbMs+WWq02rn9a9d1x7r2NrNh 4byx4l+zj3T/+4UZBeeQ84uPYtV0ZXk9Ft0Az0j1BMXrFM8q2WyYK3hSjOVWCHB7 2N/uQw2HIw54gTxrwm4xe7cqO3XyDMUoGMod4vaW567W0+W1u8Jo1EBYbxMBVn7D e9LQIjT6OjQgYOquFHtXn2TSciR7YV9zQaL+zRwUgEoZJ2F4YACj4F1nxf6eptbL 5DLbND5UweQrqJW+Xk9rxYb9lBeLq1Fi -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:02 2025 by rpki-client