$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft File: A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json) Hash identifier: 3Fo5DjA5QxvZ1nP0vYilWJOUQeZR4XYqRkE9FvKDJ48= Subject key identifier: 76:8F:32:9F:E3:59:BA:50:BF:4B:BE:B0:93:9A:8E:D0:EC:ED:91:0D Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63 Certificate issuer: /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263 Certificate serial: 0C1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft Manifest number: 0C08 Signing time: Fri 22 Aug 2025 18:53:31 +0000 Manifest this update: Fri 22 Aug 2025 18:53:31 +0000 Manifest next update: Fri 29 Aug 2025 18:53:31 +0000 Files and hashes: 1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: sowALQysbukCwrZkREhLIHtL0U71kenxhGlZvtzfH+s=) 2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: If6A0dtzlgPVB4CBNXQ4TMiF5xMEzeKvLljq5QFI3bk=) 3: 398848523A0011EFB7007939C4F9AE02.roa (hash: Zlhwy82VHpRYLPT4enDdRaV9Hjue+wnu8x2KNE0lTzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3101 (0xc1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4003, serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263 Validity Not Before: Aug 22 18:53:31 2025 GMT Not After : Aug 29 18:53:31 2025 GMT Subject: CN=68a8bcab-0b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b7:35:5a:2a:47:ef:a7:12:ea:b5:47:62:01: 4f:05:a7:17:28:85:2e:2e:e6:27:8e:60:6d:6f:3b: 18:76:ec:26:3c:44:73:98:aa:8f:b9:9c:1e:05:ab: 0f:24:f7:2b:57:92:7e:ff:fd:a3:75:34:11:e5:d0: 26:6b:57:75:79:bb:fe:00:08:7d:77:fc:1e:46:48: 01:c1:3c:95:e4:3c:60:e9:ed:f2:65:37:5b:8f:2a: b7:56:25:f1:07:bb:9b:76:57:2f:bd:7a:c6:3e:df: 35:90:f1:1b:b8:0d:90:d9:68:ed:12:15:a1:35:dd: e9:ca:4f:51:a0:c4:3f:56:43:06:cd:49:40:a3:c1: e8:c7:70:12:b1:d5:dd:5a:72:19:d3:34:a3:11:9c: 45:ae:7b:6c:79:58:f1:83:8f:7c:92:2b:65:37:b2: ba:d2:ef:14:8f:3e:a0:70:ed:2a:e2:59:42:10:7e: 11:b3:c4:ed:2a:5d:53:94:d5:04:6d:95:9c:20:c0: 50:1a:b5:24:10:c9:28:41:52:c8:a0:48:59:ac:c0: db:66:1c:a2:87:5e:5c:7f:b1:f7:51:c6:d9:6a:ca: e5:53:82:75:c4:d5:53:d7:6e:ea:97:cb:61:1c:a7: 8b:5f:c4:d1:da:61:ee:e8:24:d3:fe:1f:75:8b:fe: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8F:32:9F:E3:59:BA:50:BF:4B:BE:B0:93:9A:8E:D0:EC:ED:91:0D X509v3 Authority Key Identifier: keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:72:ed:b9:62:97:2e:68:ac:bf:26:34:51:59:8f:fe:88:33: ac:4c:f1:d2:aa:9d:22:4f:ff:2c:9c:5d:19:0f:13:4c:85:a6: 16:80:42:40:e6:4e:a4:a3:05:f3:81:65:9c:c8:b2:2d:7f:50: d1:84:dd:10:64:81:52:da:7b:49:d6:28:89:6f:bc:c9:a5:41: 41:8d:4c:f0:a9:6c:5a:e9:a4:38:7d:02:e2:79:05:48:d9:22: 78:22:4f:b3:9b:aa:71:f0:49:4d:0d:ff:16:e3:3e:89:32:c8: d1:d0:d2:c4:9f:ce:b8:81:14:d7:27:b7:93:cd:03:55:2a:5d: 63:88:9e:a2:99:ae:fc:de:96:35:8b:32:be:7d:60:5a:fd:00: 8d:77:dc:27:0f:32:3a:0b:07:bb:9a:a9:23:44:b5:c7:ab:03: 66:87:95:24:cb:47:8c:39:28:f4:29:c7:89:0a:35:97:19:44: 4c:95:2c:ce:c2:59:55:6e:bd:24:f6:49:2e:11:a5:79:c4:80: 79:f8:93:48:77:e0:fd:9c:c8:5e:39:be:ac:55:18:ea:83:5e: 0c:dd:64:32:18:2f:fa:ea:93:7c:ce:42:3c:d3:7b:66:e7:77: 7a:71:9b:06:37:d0:a8:44:3d:d8:b7:14:dd:b3:44:9d:22:72: c4:e3:56:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwMDMxMTAvBgNVBAUTKDAzOEE4NkYzNjJCMjU1N0Y5NEJFNzcyRUUwQzVGRDMx ODQ1RkUyNjMwHhcNMjUwODIyMTg1MzMxWhcNMjUwODI5MTg1MzMxWjAYMRYwFAYD VQQDEw02OGE4YmNhYi0wYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07c1WipH76cS6rVHYgFPBacXKIUuLuYnjmBtbzsYduwmPERzmKqPuZweBasP JPcrV5J+//2jdTQR5dAma1d1ebv+AAh9d/weRkgBwTyV5Dxg6e3yZTdbjyq3ViXx B7ubdlcvvXrGPt81kPEbuA2Q2WjtEhWhNd3pyk9RoMQ/VkMGzUlAo8Hox3ASsdXd WnIZ0zSjEZxFrntseVjxg498kitlN7K60u8Ujz6gcO0q4llCEH4Rs8TtKl1TlNUE bZWcIMBQGrUkEMkoQVLIoEhZrMDbZhyih15cf7H3UcbZasrlU4J1xNVT127ql8th HKeLX8TR2mHu6CTT/h91i/7FiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHaPMp/j WbpQv0u+sJOajtDs7ZENMB8GA1UdIwQYMBaAFAOKhvNislV/lL53LuDF/TGEX+Jj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDAwMy9COEU4QUQ3MjFB RDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZYLVV2bmN1NE1YOU1ZUmY0 bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0cUc4Mkt5VlgtVXZuY3U0TVg5TVlSZjRtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDAwMy9COEU4QUQ3MjFBRDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZY LVV2bmN1NE1YOU1ZUmY0bU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGcu25YpcuaKy/JjRRWY/+iDOsTPHSqp0iT/8snF0ZDxNMhaYWgEJA 5k6kowXzgWWcyLItf1DRhN0QZIFS2ntJ1iiJb7zJpUFBjUzwqWxa6aQ4fQLieQVI 2SJ4Ik+zm6px8ElNDf8W4z6JMsjR0NLEn864gRTXJ7eTzQNVKl1jiJ6ima783pY1 izK+fWBa/QCNd9wnDzI6Cwe7mqkjRLXHqwNmh5Uky0eMOSj0KceJCjWXGURMlSzO wllVbr0k9kkuEaV5xIB5+JNId+D9nMheOb6sVRjqg14M3WQyGC/66pN8zkI803tm 53d6cZsGN9CoRD3YtxTds0SdInLE41b/ -----END CERTIFICATE-----Generated at Sat Aug 23 19:16:08 2025 by rpki-client