$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft File: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json) Hash identifier: qYAIs4kFRenXlYTxDvZXAWz05vSqQJm0VVaDah8jUXs= Subject key identifier: C0:70:B6:E9:6F:56:60:73:67:EA:30:59:80:FF:A3:4D:4A:E9:87:A7 Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft Manifest number: 2E Signing time: Sat 23 Aug 2025 07:55:40 +0000 Manifest this update: Sat 23 Aug 2025 07:55:40 +0000 Manifest next update: Sat 30 Aug 2025 07:55:40 +0000 Files and hashes: 1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: dkUwnf5g+JNKxrhjtfljLH7fYhlsl+jxQT+TU0egQzY=) 2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: EdyHrGdK241FduLFJE474YipzEeOWQ4qQLPgbqAJOd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Validity Not Before: Aug 23 07:55:40 2025 GMT Not After : Aug 30 07:55:40 2025 GMT Subject: CN=68a973fc-f97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:71:7e:2e:e5:db:a6:2f:bf:cb:02:ae:61: ef:ce:d9:8c:d2:93:1f:d3:5c:2f:4d:6a:40:04:07: 54:11:2e:ed:a2:49:54:2a:02:db:46:9e:10:83:2c: 58:c5:4e:67:cb:56:d2:d6:02:73:4d:e2:cb:47:72: 4f:36:f3:b0:bc:b6:c7:01:26:27:82:a8:3f:29:bc: 57:18:f6:3e:f9:a1:55:49:c1:1b:f1:86:7d:b3:13: 3e:14:c0:e6:8e:19:e3:a2:bc:89:72:a9:7e:70:8b: 4c:88:48:32:7c:97:7b:91:af:7a:1e:9d:ad:83:6f: 09:c4:bf:55:d5:ca:9d:81:02:fb:b4:14:83:df:91: 2b:31:2a:fa:67:32:97:ab:63:25:d0:7c:2e:e1:ea: f7:03:4a:54:cd:cb:cd:d7:38:a6:50:eb:83:fe:09: 15:de:a5:52:23:ad:80:e2:7b:ba:48:f4:33:89:61: 49:6d:fd:af:76:7b:9f:ff:b9:78:56:26:98:b8:27: d7:45:67:63:f1:ab:16:3f:6c:37:15:ab:d0:34:cf: ec:78:50:d3:b7:34:11:ee:53:5f:80:72:a4:d5:2f: 76:23:fb:03:66:43:19:7d:35:22:35:be:47:14:23: 6e:04:ed:75:aa:51:b0:53:bb:a4:3c:b7:bf:a3:f8: d5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:70:B6:E9:6F:56:60:73:67:EA:30:59:80:FF:A3:4D:4A:E9:87:A7 X509v3 Authority Key Identifier: keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:1d:57:fc:62:4b:61:b1:ec:3e:67:d8:27:15:ce:4e:3a:32: 84:60:16:c0:5f:a3:10:6c:89:e9:44:e9:6c:f2:47:bf:c6:98: 29:82:af:b2:d0:39:1f:c5:47:2b:66:de:e9:ce:b2:48:35:19: 63:f0:7b:b7:40:ea:08:78:b0:71:82:14:e2:de:0e:ef:c3:f8: 12:27:7b:29:09:de:bb:35:e2:35:6f:e1:73:09:c4:1f:09:02: 04:e4:28:01:f9:a9:fa:7b:8f:eb:84:f2:9f:ab:de:49:07:e6: 5c:61:f6:c4:67:41:d7:d0:f9:6e:83:6f:87:e9:33:95:ae:bb: ba:ea:2a:f9:4b:3c:1e:a8:78:27:72:9d:1a:0a:7c:61:b7:f0: 75:29:d7:7e:dc:0a:b8:7f:9f:56:ed:a2:dc:e9:8d:aa:50:b2: b8:e3:4a:94:89:c5:eb:0e:70:58:53:fe:87:7f:54:2c:ac:8e: 06:33:58:3f:87:08:74:50:61:79:56:4d:e0:73:74:07:5e:01: 71:d7:1f:27:54:10:18:a5:9b:2f:3b:64:ae:9e:81:2d:07:5f: 7b:93:57:8c:09:94:4e:b5:04:59:da:d0:75:91:c6:81:20:1c: 5a:3d:5d:a6:0c:12:c3:a7:34:0a:c9:32:27:22:87:39:a4:b0: 13:37:16:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkE0RjExMC8GA1UEBRMoRTAzOThENTRBQ0Q5REIzM0VENEZDQUE4RDIyODA1RDQ1 RTgwQ0JCNjAeFw0yNTA4MjMwNzU1NDBaFw0yNTA4MzAwNzU1NDBaMBgxFjAUBgNV BAMTDTY4YTk3M2ZjLWY5N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyi3F+LuXbpi+/ywKuYe/O2YzSkx/TXC9NakAEB1QRLu2iSVQqAttGnhCDLFjF TmfLVtLWAnNN4stHck8287C8tscBJieCqD8pvFcY9j75oVVJwRvxhn2zEz4UwOaO GeOivIlyqX5wi0yISDJ8l3uRr3oena2DbwnEv1XVyp2BAvu0FIPfkSsxKvpnMper YyXQfC7h6vcDSlTNy83XOKZQ64P+CRXepVIjrYDie7pI9DOJYUlt/a92e5//uXhW Jpi4J9dFZ2PxqxY/bDcVq9A0z+x4UNO3NBHuU1+AcqTVL3Yj+wNmQxl9NSI1vkcU I24E7XWqUbBTu6Q8t7+j+NVFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwHC26W9W YHNn6jBZgP+jTUrph6cwHwYDVR0jBBgwFoAU4DmNVKzZ2zPtT8qo0igF1F6Ay7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTRGLzU4N0YzNURBM0I3 NzExRjA5N0E4QkIyNEM0RjlBRTAyLzREbU5WS3paMnpQdFQ4cW8waWdGMUY2QXk3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNERtTlZLeloyelB0VDhxbzBpZ0YxRjZBeTdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTRGLzU4N0YzNURBM0I3NzExRjA5N0E4QkIyNEM0RjlBRTAyLzREbU5WS3paMnpQ dFQ4cW8waWdGMUY2QXk3WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAAdV/xiS2Gx7D5n2CcVzk46MoRgFsBfoxBsielE6WzyR7/GmCmCr7LQ OR/FRytm3unOskg1GWPwe7dA6gh4sHGCFOLeDu/D+BIneykJ3rs14jVv4XMJxB8J AgTkKAH5qfp7j+uE8p+r3kkH5lxh9sRnQdfQ+W6Db4fpM5Wuu7rqKvlLPB6oeCdy nRoKfGG38HUp137cCrh/n1btotzpjapQsrjjSpSJxesOcFhT/od/VCysjgYzWD+H CHRQYXlWTeBzdAdeAXHXHydUEBilmy87ZK6egS0HX3uTV4wJlE61BFna0HWRxoEg HFo9XaYMEsOnNArJMicihzmksBM3Fm0= -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:17 2025 by rpki-client