$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json) Hash identifier: 0jAAlwV7dcWwTcJLCJphg8HEX8UmwwgCQ4DNC+9xhBc= Subject key identifier: 20:3C:04:59:84:A4:81:E8:91:8F:61:85:46:D9:9A:7E:B6:29:02:0B Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Certificate serial: 244F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft Manifest number: 46F8 Signing time: Fri 22 Aug 2025 15:50:35 +0000 Manifest this update: Fri 22 Aug 2025 15:50:35 +0000 Manifest next update: Fri 29 Aug 2025 15:50:35 +0000 Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: XLHw2uHh7QY9g9Sc2Vdb5ExSlcC711JUDijMPEX5tZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9295 (0x244f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Validity Not Before: Aug 22 15:50:35 2025 GMT Not After : Aug 29 15:50:35 2025 GMT Subject: CN=68a891cb-5ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:d8:85:fd:e5:42:f5:1d:01:f8:61:32:ee: 4f:3a:2d:53:95:6f:c3:1e:df:4a:91:e9:84:16:fa: cf:b0:2f:f7:45:fe:54:fa:dd:9c:b5:ae:b7:d4:62: 08:4e:98:3e:00:d6:5a:24:a5:de:5c:49:3e:9b:2d: 9b:8c:30:f1:ca:1f:0d:4e:4e:1a:f1:9d:bc:42:fa: 9e:f8:48:a4:93:94:4a:89:25:25:9a:ae:db:2a:dc: 2f:00:c5:c6:0c:8d:ce:26:08:70:e0:2f:a9:f1:98: fc:77:f5:df:aa:b6:6a:a1:73:a6:c3:40:57:84:65: a2:7a:6c:ea:a0:ea:1d:60:84:ae:f6:72:d0:d0:10: 46:94:4d:17:c0:e6:3a:97:e5:d3:8d:b7:16:2a:dd: c1:03:80:f9:79:af:01:90:11:8e:de:2e:5d:7e:db: 17:87:86:0c:90:a5:16:f6:86:ed:ae:ee:c5:18:50: 4e:1f:c2:b8:f3:5f:5c:a4:25:6b:1b:c8:a9:07:e3: 03:c9:b7:21:9f:8c:a2:f9:a7:3c:68:32:16:a0:36: ef:52:10:71:48:6f:c6:73:49:77:ff:0f:ad:51:ae: 3c:f4:60:bb:b9:80:fc:95:41:b3:67:59:7b:9c:04: 23:6c:9c:8a:39:1e:12:f1:19:ce:97:bf:bc:a6:15: ea:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3C:04:59:84:A4:81:E8:91:8F:61:85:46:D9:9A:7E:B6:29:02:0B X509v3 Authority Key Identifier: keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:33:09:06:f2:fe:e3:64:1e:7c:c0:c0:5e:e4:77:3a:c7:cf: 77:88:5c:b8:12:43:46:f6:0d:c0:49:81:a1:69:2e:ce:3d:b3: 6e:3d:81:8f:2a:b3:c1:f7:e1:b6:7a:76:22:2c:d9:01:d5:1b: 54:24:d7:a8:dc:11:dd:e3:72:13:8f:46:22:3b:94:41:9c:09: 02:45:a1:1d:68:3b:77:bf:0c:c7:37:d5:de:e5:a2:f7:e5:4c: ef:43:00:33:55:b6:a1:15:18:e1:e3:f2:d1:91:a8:6e:21:dc: c5:f3:e3:0f:9d:3b:6a:50:df:2b:44:ca:35:c2:62:c1:fd:65: db:41:d5:79:f7:a0:2a:18:26:db:7f:1f:2c:62:55:76:33:e6: 14:c1:4e:6d:32:79:39:81:c7:b0:52:52:ad:66:02:f1:a2:07: f7:4c:37:fa:be:a9:c7:06:c9:72:0a:9f:a1:18:b6:e6:c6:38: ee:1d:21:59:4b:e5:77:3b:04:b0:b2:f9:51:a8:45:91:4a:be: 1e:70:f4:83:fc:e8:bc:a8:83:1f:7b:17:e8:27:54:7a:9e:eb: d8:27:07:72:0c:5c:68:5a:41:95:ab:65:12:a1:0b:0f:56:79: 06:52:b7:c7:00:76:60:d1:a3:98:57:52:27:87:7b:88:ae:49: 07:a6:33:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDczOEMyM0FBNENFNzU1NUVFQTJGQzhDMkJFRDhGNDZB NDg4REM5M0QwHhcNMjUwODIyMTU1MDM1WhcNMjUwODI5MTU1MDM1WjAYMRYwFAYD VQQDEw02OGE4OTFjYi01ZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVjYhf3lQvUdAfhhMu5POi1TlW/DHt9KkemEFvrPsC/3Rf5U+t2cta631GII Tpg+ANZaJKXeXEk+my2bjDDxyh8NTk4a8Z28Qvqe+Eikk5RKiSUlmq7bKtwvAMXG DI3OJghw4C+p8Zj8d/XfqrZqoXOmw0BXhGWiemzqoOodYISu9nLQ0BBGlE0XwOY6 l+XTjbcWKt3BA4D5ea8BkBGO3i5dftsXh4YMkKUW9obtru7FGFBOH8K4819cpCVr G8ipB+MDybchn4yi+ac8aDIWoDbvUhBxSG/Gc0l3/w+tUa489GC7uYD8lUGzZ1l7 nAQjbJyKOR4S8RnOl7+8phXqDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCA8BFmE pIHokY9hhUbZmn62KQILMB8GA1UdIwQYMBaAFHOMI6pM51Ve6i/Iwr7Y9GpIjck9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZWN3FMOGpDdnRqMGFraU55 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0d2pxa3puVlY3cUw4akN2dGowYWtpTnlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZW N3FMOGpDdnRqMGFraU55VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvMwkG8v7jZB58wMBe5Hc6x893iFy4EkNG9g3ASYGhaS7OPbNuPYGP KrPB9+G2enYiLNkB1RtUJNeo3BHd43ITj0YiO5RBnAkCRaEdaDt3vwzHN9Xe5aL3 5UzvQwAzVbahFRjh4/LRkahuIdzF8+MPnTtqUN8rRMo1wmLB/WXbQdV596AqGCbb fx8sYlV2M+YUwU5tMnk5gcewUlKtZgLxogf3TDf6vqnHBslyCp+hGLbmxjjuHSFZ S+V3OwSwsvlRqEWRSr4ecPSD/Oi8qIMfexfoJ1R6nuvYJwdyDFxoWkGVq2USoQsP VnkGUrfHAHZg0aOYV1Inh3uIrkkHpjPm -----END CERTIFICATE-----Generated at Sat Aug 23 16:58:49 2025 by rpki-client