$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft File: H4-gq_qNf39-fqANVuoBxwky5gc.mft (raw, json) Hash identifier: cq3n1YUPQjM1Xy56qlmpUnxI6UWOl7i5RM00fl6gXgA= Subject key identifier: AD:3A:36:79:34:26:B3:B0:2D:98:2F:3C:95:BB:68:60:EC:99:6C:EA Authority key identifier: 1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 Certificate issuer: /CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Certificate serial: 0ECE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft Manifest number: 102B Signing time: Fri 22 Aug 2025 17:47:14 +0000 Manifest this update: Fri 22 Aug 2025 17:47:14 +0000 Manifest next update: Fri 29 Aug 2025 17:47:14 +0000 Files and hashes: 1: H4-gq_qNf39-fqANVuoBxwky5gc.crl (hash: 09GAh5IUnJbGtWA2/9edPDkC4UHJkAn0RC7TimiADtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3790 (0xece) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Validity Not Before: Aug 22 17:47:14 2025 GMT Not After : Aug 29 17:47:14 2025 GMT Subject: CN=68a8ad22-42b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ad:70:6d:32:eb:83:76:9e:5b:4d:16:2d:f3: 26:23:c4:bc:4f:c2:64:7f:6e:4f:67:38:69:dc:3e: 36:86:0c:f5:96:d2:1f:da:77:a6:11:8d:48:13:b9: 8b:80:d2:aa:48:e0:44:2d:33:12:fa:e2:18:d7:12: 43:03:81:32:48:2d:39:70:9f:e0:b0:58:91:ee:e4: 54:6c:17:db:83:4a:65:8b:c3:08:4c:81:47:a7:cf: cc:9f:7c:ad:f5:9c:41:4f:7f:93:0d:82:01:7e:12: f5:db:57:96:43:11:0f:b6:d1:12:f5:af:d9:c5:98: 39:df:c4:35:7b:34:62:e6:9d:37:6d:4b:d3:9e:66: b5:8d:d5:e0:e6:25:e8:65:e8:9a:9a:af:8f:93:9c: a7:15:8e:cc:12:4e:16:a6:ec:2b:4f:8a:a3:97:c6: 6b:ff:4a:9c:25:7f:0b:bc:ab:90:84:b4:65:6f:94: c2:e0:fd:01:79:3a:ca:85:bc:fe:ac:2b:1b:a0:0e: 49:b7:4d:2d:61:3c:02:42:ac:a6:a7:6f:b1:c8:19: 27:ab:46:e1:03:a5:35:b4:70:c8:f6:36:28:f7:36: f1:19:03:30:df:c7:b1:2f:bb:b8:be:d4:06:98:e1: ab:55:8e:f7:a7:ad:ce:da:e5:bd:b1:22:93:40:eb: 5d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3A:36:79:34:26:B3:B0:2D:98:2F:3C:95:BB:68:60:EC:99:6C:EA X509v3 Authority Key Identifier: keyid:1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:81:a5:3f:5e:4a:21:e0:f0:71:b0:49:74:61:49:3f:49:4c: ca:c2:59:96:cd:a7:d6:0d:f1:b9:67:e4:a9:c2:d4:72:b4:41: 2a:a2:ae:05:fa:cf:be:8b:b1:0b:eb:7c:7b:79:db:33:aa:50: d8:ba:14:75:7e:4b:5e:cb:65:e2:50:3e:89:87:c6:2c:f6:10: 78:11:38:62:18:2a:e5:04:d5:7e:b6:b1:20:d6:d6:a5:70:98: be:f1:3c:a8:5f:d5:6c:7a:ef:e0:d8:c6:08:df:87:11:60:1a: c6:1b:b8:fd:c2:fe:7f:3d:9b:2d:ce:bf:da:4f:63:8a:12:08: f3:5d:3c:df:f2:07:6e:a3:93:1b:84:9d:97:47:15:82:48:bd: f3:ef:52:8a:cb:34:0e:81:66:3a:71:80:99:3d:d0:17:ac:6d: 64:e8:44:8e:87:92:1e:bc:f1:b7:17:70:6e:95:a8:d1:0a:ad: 33:59:81:25:b7:10:d9:ac:30:8d:73:12:0b:fa:30:89:12:fa: 87:10:10:7c:f5:36:45:0e:14:53:36:28:e3:b9:30:06:c7:2f: b6:19:e3:5b:82:8e:f5:a0:4c:5f:03:3a:db:18:ce:ee:19:8f: f6:12:0d:21:ee:26:1c:a6:30:68:f2:f1:eb:aa:d0:f2:da:04: b0:67:87:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKDFGOEZBMEFCRkE4RDdGN0Y3RTdFQTAwRDU2RUEwMUM3 MDkzMkU2MDcwHhcNMjUwODIyMTc0NzE0WhcNMjUwODI5MTc0NzE0WjAYMRYwFAYD VQQDEw02OGE4YWQyMi00MmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3K1wbTLrg3aeW00WLfMmI8S8T8Jkf25PZzhp3D42hgz1ltIf2nemEY1IE7mL gNKqSOBELTMS+uIY1xJDA4EySC05cJ/gsFiR7uRUbBfbg0pli8MITIFHp8/Mn3yt 9ZxBT3+TDYIBfhL121eWQxEPttES9a/ZxZg538Q1ezRi5p03bUvTnma1jdXg5iXo Zeiamq+Pk5ynFY7MEk4WpuwrT4qjl8Zr/0qcJX8LvKuQhLRlb5TC4P0BeTrKhbz+ rCsboA5Jt00tYTwCQqymp2+xyBknq0bhA6U1tHDI9jYo9zbxGQMw38exL7u4vtQG mOGrVY73p63O2uW9sSKTQOtdGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK06Nnk0 JrOwLZgvPJW7aGDsmWzqMB8GA1UdIwQYMBaAFB+PoKv6jX9/fn6gDVbqAccJMuYH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYzOS1mcUFOVnVvQnh3a3k1 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g0LWdxX3FOZjM5LWZxQU5WdW9CeHdreTVnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYz OS1mcUFOVnVvQnh3a3k1Z2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClgaU/Xkoh4PBxsEl0YUk/SUzKwlmWzafWDfG5Z+SpwtRytEEqoq4F +s++i7EL63x7edszqlDYuhR1fktey2XiUD6Jh8Ys9hB4EThiGCrlBNV+trEg1tal cJi+8TyoX9Vseu/g2MYI34cRYBrGG7j9wv5/PZstzr/aT2OKEgjzXTzf8gduo5Mb hJ2XRxWCSL3z71KKyzQOgWY6cYCZPdAXrG1k6ESOh5IevPG3F3BulajRCq0zWYEl txDZrDCNcxIL+jCJEvqHEBB89TZFDhRTNijjuTAGxy+2GeNbgo71oExfAzrbGM7u GY/2Eg0h7iYcpjBo8vHrqtDy2gSwZ4cE -----END CERTIFICATE-----Generated at Sat Aug 23 17:21:19 2025 by rpki-client