$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft File: 4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json) Hash identifier: bsUkK3xFYz2g6OpKDTxtP7NsZQmmivapgGDH881iSHE= Subject key identifier: E2:82:FC:FE:8B:4E:D0:A3:7F:3B:87:C8:51:46:7F:41:61:05:85:F4 Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 Certificate issuer: /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft Manifest number: A3 Signing time: Sat 23 Aug 2025 06:27:24 +0000 Manifest this update: Sat 23 Aug 2025 06:27:23 +0000 Manifest next update: Sat 30 Aug 2025 06:27:23 +0000 Files and hashes: 1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: w+ini82S06eYbEzwdaSaIXEMfWQRdWFp84ZcJEpaG8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Validity Not Before: Aug 23 06:27:23 2025 GMT Not After : Aug 30 06:27:23 2025 GMT Subject: CN=68a95f4c-5dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:dc:6f:bf:d2:15:7d:c5:d4:0c:33:58:91: 68:81:cd:4e:0a:64:29:58:d2:61:fd:d1:23:57:33: 7e:11:d2:22:26:72:1b:bf:75:f3:0c:f9:9b:b3:11: a5:cf:86:05:76:8c:15:d9:53:7d:85:d9:a1:fb:bd: de:73:6e:e7:bb:f1:10:16:bf:a5:13:24:ef:b5:02: 54:24:ce:ea:ba:01:d1:6e:94:1f:0d:7f:48:31:6b: 30:09:09:69:f9:79:88:87:f6:fc:60:85:e4:36:77: 15:87:09:03:dc:23:e3:6a:7f:3e:83:fc:c1:3e:b4: 2c:4f:65:0c:6f:e5:98:d9:2c:fa:36:6b:a7:ee:d2: ea:a7:10:27:ad:dd:a0:d8:d0:8f:b7:26:a0:94:ed: c6:48:6b:55:2b:e4:77:71:60:9a:3e:21:1d:e6:0a: 41:b5:ab:a0:9b:77:90:9d:84:c1:a6:3f:61:f8:5b: 44:4f:ef:f3:08:fe:45:b8:9f:43:90:ff:7d:d6:01: c1:3d:fa:37:b0:f8:b8:56:af:cb:b8:44:aa:22:a3: 33:79:db:ec:b2:8c:5f:40:f1:d7:50:95:0a:31:e0: 35:84:0a:ba:6d:42:cb:c4:a9:bb:1f:1b:8c:ae:5e: 99:34:d0:bc:bd:77:69:a9:fb:09:03:84:03:f6:e3: 2a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:82:FC:FE:8B:4E:D0:A3:7F:3B:87:C8:51:46:7F:41:61:05:85:F4 X509v3 Authority Key Identifier: keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:32:e7:af:ce:ad:e4:f6:fd:b2:47:75:50:3c:35:61:91:f5: 46:1a:24:0a:f1:6d:cb:e3:27:31:8f:75:c6:cf:f4:8b:c7:5a: 8c:e4:9e:d1:ab:20:5e:6a:44:c9:d7:10:05:a8:1b:6d:f8:7e: e3:15:a9:36:43:dd:98:b4:b1:e5:d3:d6:2a:d9:4d:f7:62:3f: 8e:8a:97:54:d2:b5:e9:aa:26:33:eb:97:8e:f6:8a:ae:d5:06: d7:a2:da:97:be:46:d1:ab:c2:b9:1b:fe:20:16:05:8b:b3:58: 70:4a:00:54:39:de:41:6a:27:93:74:5b:9a:b6:f0:bb:2d:4e: a9:03:bc:61:81:ec:b6:7f:c0:b3:c4:c2:d7:81:0f:a2:4d:ba: 05:f3:42:4f:8c:8c:67:47:da:e2:cb:54:12:a1:f1:02:1f:b9: 32:ec:03:d1:eb:1f:e4:38:1d:3e:25:75:37:ee:52:56:aa:10: ae:8c:5e:51:67:ce:9a:91:4b:a7:a7:25:36:86:90:87:8b:05: ac:2e:2e:60:b9:0b:66:ca:32:ec:58:23:fa:a3:a8:06:e9:16: f3:16:b2:90:03:a5:50:72:2f:fc:03:5a:5b:a0:93:fe:48:0e: 48:89:a8:93:43:10:7d:1d:b9:0c:46:84:ec:8b:d2:e6:1b:33: 81:02:d8:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKEUwREM2Q0I3MDlFRUIxMUJDMjA3NUYzNTJFQjZFRDRF ODE4QUU3MDUwHhcNMjUwODIzMDYyNzIzWhcNMjUwODMwMDYyNzIzWjAYMRYwFAYD VQQDEw02OGE5NWY0Yy01ZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzDcb7/SFX3F1AwzWJFogc1OCmQpWNJh/dEjVzN+EdIiJnIbv3XzDPmbsxGl z4YFdowV2VN9hdmh+73ec27nu/EQFr+lEyTvtQJUJM7qugHRbpQfDX9IMWswCQlp +XmIh/b8YIXkNncVhwkD3CPjan8+g/zBPrQsT2UMb+WY2Sz6Nmun7tLqpxAnrd2g 2NCPtyaglO3GSGtVK+R3cWCaPiEd5gpBtaugm3eQnYTBpj9h+FtET+/zCP5FuJ9D kP991gHBPfo3sPi4Vq/LuESqIqMzedvssoxfQPHXUJUKMeA1hAq6bULLxKm7HxuM rl6ZNNC8vXdpqfsJA4QD9uMqrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKC/P6L TtCjfzuHyFFGf0FhBYX0MB8GA1UdIwQYMBaAFODcbLcJ7rEbwgdfNS627U6BiucF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy80MkE5QkI1NDg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNSdkNCMTgxTHJidFRvR0s1 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROeHN0d251c1J2Q0IxODFMcmJ0VG9HSzV3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy80MkE5QkI1NDg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNS dkNCMTgxTHJidFRvR0s1d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGMuevzq3k9v2yR3VQPDVhkfVGGiQK8W3L4ycxj3XGz/SLx1qM5J7R qyBeakTJ1xAFqBtt+H7jFak2Q92YtLHl09Yq2U33Yj+OipdU0rXpqiYz65eO9oqu 1QbXotqXvkbRq8K5G/4gFgWLs1hwSgBUOd5BaieTdFuatvC7LU6pA7xhgey2f8Cz xMLXgQ+iTboF80JPjIxnR9riy1QSofECH7ky7APR6x/kOB0+JXU37lJWqhCujF5R Z86akUunpyU2hpCHiwWsLi5guQtmyjLsWCP6o6gG6RbzFrKQA6VQci/8A1pboJP+ SA5IiaiTQxB9HbkMRoTsi9LmGzOBAtjQ -----END CERTIFICATE-----Generated at Sun Aug 24 00:42:02 2025 by rpki-client