$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft File: F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json) Hash identifier: 4/6/op5GXnd3ZfqBUdZaRzRzy68eMUUbL1FfsR5vV1c= Subject key identifier: 4C:93:D2:1A:57:62:7E:7E:03:DA:73:B3:2E:44:0D:0F:D0:00:A5:4C Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 Certificate issuer: /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft Manifest number: 30 Signing time: Fri 22 Aug 2025 20:54:44 +0000 Manifest this update: Fri 22 Aug 2025 20:54:43 +0000 Manifest next update: Fri 29 Aug 2025 20:54:43 +0000 Files and hashes: 1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: KV+NbQW5TkYfvL2A1pnKznmgdwEANYS/y7YFhBgcEXM=) 2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: 8eHBf/IW6Kdn5rzP/J/PseLHB5iblvBzJEKUGKo/wC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Validity Not Before: Aug 22 20:54:43 2025 GMT Not After : Aug 29 20:54:43 2025 GMT Subject: CN=68a8d914-720b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a9:0d:d9:35:95:84:68:d4:8a:33:4d:f4:7d: 67:82:ec:af:0d:7e:45:c2:f7:a0:f4:2d:86:5b:2d: 16:d5:c6:c3:a2:94:1d:3d:f2:9a:f3:e6:87:0f:ad: 56:41:44:82:a1:01:62:94:39:b3:39:13:c6:3b:bf: 5b:77:ee:ab:eb:bd:a9:e4:47:22:a5:19:51:3f:8c: 06:97:32:91:12:86:8c:a0:5c:77:c8:a3:37:3c:87: f4:18:19:13:6e:0a:6a:72:d7:e4:06:8e:7c:3b:f3: bf:fd:93:39:f1:c7:9d:dd:00:66:a9:b4:7d:b3:91: 25:56:bf:ca:85:d4:12:44:bb:62:f5:75:2d:c3:66: f1:78:9b:73:10:0f:2e:1d:72:8f:be:26:67:66:f0: 43:d3:2c:ff:2c:82:ab:c4:08:00:17:f1:73:31:62: 21:2f:9d:f5:f0:6a:87:e4:19:d2:7d:db:5e:a0:e4: f7:bf:d7:ed:0d:d7:4e:b2:e3:86:64:c8:31:d8:04: 93:39:85:0b:62:50:61:a2:9f:8d:7f:f4:f8:24:01: c7:a7:3d:07:29:60:c6:d6:8e:f3:fe:43:13:d5:f7: 5e:86:36:77:0e:3c:c2:96:73:46:27:8f:68:d9:f5: 21:da:99:ae:7d:25:8e:1b:df:4c:68:2e:63:66:bc: fa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:93:D2:1A:57:62:7E:7E:03:DA:73:B3:2E:44:0D:0F:D0:00:A5:4C X509v3 Authority Key Identifier: keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:f2:c3:a0:ca:16:75:18:65:69:93:0c:98:34:61:be:bb:8c: e9:23:0b:67:e0:74:86:b1:92:e8:64:dc:50:8b:c7:5e:5e:d2: 5d:8c:09:75:39:ba:8f:e5:08:bc:c6:c2:bf:40:a5:dc:5e:60: 8c:33:f0:0f:1c:f6:03:f0:9e:5d:5d:f3:60:3d:82:12:9d:4f: bc:f1:65:17:59:87:96:45:ae:2d:6f:ee:0d:76:0c:67:9f:71: f7:85:4e:bb:73:87:7d:38:d1:1c:25:93:f6:b6:26:07:6e:a5: 7d:76:d2:e1:ee:50:57:da:9c:06:ac:c6:1d:66:86:c9:66:42: f6:f9:e5:4c:fb:62:15:58:7d:02:e1:90:ec:fc:a5:02:b5:52: b2:ec:96:30:67:53:c2:0c:51:e8:2f:5c:92:4d:94:bd:ce:4e: a8:af:20:55:8b:93:f6:7f:38:76:2a:33:5b:c4:43:80:c3:be: 38:ff:7c:24:3e:bd:c0:1b:79:33:9a:f6:65:9e:d2:b9:07:d8: db:5d:07:81:24:04:5b:89:e8:97:b2:a8:e1:07:ce:05:2f:94: aa:f8:60:ad:b1:4c:c1:74:41:3b:04:ad:2c:c7:b1:b2:38:c6: 60:a7:4b:44:2a:31:b9:f3:e8:5a:51:1a:07:7b:f6:31:af:f4: 86:0c:53:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDU0MzExMC8GA1UEBRMoMTc4MDA5NkNDOTBBQjZBRUFGMDhENzlBQjE4QzU0QzdC NzdBNTNBMDAeFw0yNTA4MjIyMDU0NDNaFw0yNTA4MjkyMDU0NDNaMBgxFjAUBgNV BAMTDTY4YThkOTE0LTcyMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbqQ3ZNZWEaNSKM030fWeC7K8NfkXC96D0LYZbLRbVxsOilB098prz5ocPrVZB RIKhAWKUObM5E8Y7v1t37qvrvankRyKlGVE/jAaXMpEShoygXHfIozc8h/QYGRNu Cmpy1+QGjnw787/9kznxx53dAGaptH2zkSVWv8qF1BJEu2L1dS3DZvF4m3MQDy4d co++Jmdm8EPTLP8sgqvECAAX8XMxYiEvnfXwaofkGdJ9216g5Pe/1+0N106y44Zk yDHYBJM5hQtiUGGin41/9PgkAcenPQcpYMbWjvP+QxPV916GNncOPMKWc0Ynj2jZ 9SHama59JY4b30xoLmNmvPrzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTJPSGldi fn4D2nOzLkQND9AApUwwHwYDVR0jBBgwFoAUF4AJbMkKtq6vCNeasYxUx7d6U6Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NTQzL0FCNzE5RkNFM0I2 NTExRjA4NzQyREEzOUM0RjlBRTAyL0Y0QUpiTWtLdHE2dkNOZWFzWXhVeDdkNlU2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjRBSmJNa0t0cTZ2Q05lYXNZeFV4N2Q2VTZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 NTQzL0FCNzE5RkNFM0I2NTExRjA4NzQyREEzOUM0RjlBRTAyL0Y0QUpiTWtLdHE2 dkNOZWFzWXhVeDdkNlU2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJLyw6DKFnUYZWmTDJg0Yb67jOkjC2fgdIaxkuhk3FCLx15e0l2MCXU5 uo/lCLzGwr9ApdxeYIwz8A8c9gPwnl1d82A9ghKdT7zxZRdZh5ZFri1v7g12DGef cfeFTrtzh3040Rwlk/a2JgdupX120uHuUFfanAasxh1mhslmQvb55Uz7YhVYfQLh kOz8pQK1UrLsljBnU8IMUegvXJJNlL3OTqivIFWLk/Z/OHYqM1vEQ4DDvjj/fCQ+ vcAbeTOa9mWe0rkH2NtdB4EkBFuJ6JeyqOEHzgUvlKr4YK2xTMF0QTsErSzHsbI4 xmCnS0QqMbnz6FpRGgd79jGv9IYMU8U= -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:09 2025 by rpki-client