$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft File: 4H5XaJwnqZNhHLq6l7GU0xeWz28.mft (raw, json) Hash identifier: OugQvtkELFoXrkq97smJKywXTpQKnMF3qPg8yWi1Xi4= Subject key identifier: CA:8F:A3:F8:23:49:DA:5B:E2:70:7C:51:29:F6:3F:F1:49:5F:D6:15 Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F Certificate issuer: /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft Manifest number: 2E Signing time: Sat 23 Aug 2025 07:56:43 +0000 Manifest this update: Sat 23 Aug 2025 07:56:42 +0000 Manifest next update: Sat 30 Aug 2025 07:56:42 +0000 Files and hashes: 1: 4H5XaJwnqZNhHLq6l7GU0xeWz28.crl (hash: gF3Gis+5ZJIX4gU3F791MjNwsabXKKDiQX9KwbYr8n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Validity Not Before: Aug 23 07:56:42 2025 GMT Not After : Aug 30 07:56:42 2025 GMT Subject: CN=68a9743a-993e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f3:a7:f9:fd:8d:87:d8:37:76:60:69:c8:8b: ba:17:18:92:41:3c:73:c4:06:d3:be:bf:fb:7a:c2: 72:d2:fb:a4:f7:7a:33:82:e6:d9:87:37:9c:2b:53: 6e:ce:46:4e:e7:db:36:6c:fd:fb:96:31:a5:6d:ce: 82:7b:4d:9d:1d:f3:37:46:af:8d:ba:e9:3c:e5:2f: aa:10:45:9f:74:c8:60:62:1b:74:b1:9d:79:f3:26: a7:73:57:5c:41:ca:c8:1e:93:6a:41:a0:c8:bc:5f: c5:f1:b7:36:08:4b:8b:91:99:e7:6e:20:ee:2e:4a: 57:45:a5:90:d1:22:70:a7:54:15:6d:e7:64:39:bc: 18:43:31:b1:9f:65:a0:7d:61:24:12:b0:74:31:b3: 50:08:64:93:6b:6e:1e:7d:44:e8:e8:f8:e0:92:cf: d8:5f:0b:e0:6e:e4:5b:48:6b:ee:ca:12:3a:9a:e5: df:22:15:74:e4:4b:8e:6a:ad:d7:e8:1b:b1:8a:2d: 7d:35:a3:4b:6e:cc:6b:d9:f6:a2:e4:2e:f5:43:cf: ff:c3:1e:d3:75:03:41:14:5f:20:ef:4d:b8:a6:b8: da:0a:bc:5b:ce:70:c3:74:68:21:60:54:2a:6d:88: 43:71:51:b0:21:27:ff:1b:3a:d2:8e:5f:35:2c:2b: cc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8F:A3:F8:23:49:DA:5B:E2:70:7C:51:29:F6:3F:F1:49:5F:D6:15 X509v3 Authority Key Identifier: keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:23:33:36:b0:be:77:66:8e:ba:97:2d:c9:52:c2:02:32:0d: e1:b9:4a:27:09:63:0e:93:a1:f2:4f:9e:3e:9e:b2:4f:2a:21: 5d:e5:61:e8:56:44:86:c6:ca:12:d7:9a:d7:b2:77:d2:33:84: 26:90:9e:e4:96:09:5f:e8:cd:fe:11:61:51:e5:36:62:d6:dd: 86:c0:18:87:55:43:e0:03:a5:a5:96:a9:d4:18:62:64:74:50: 62:9a:13:04:25:3c:9d:03:1c:88:80:ff:c1:33:ee:e9:98:f3: 13:5c:25:ba:25:5b:d5:64:7a:b9:65:f9:e5:de:6d:60:d2:af: 56:ad:17:51:34:ad:e2:64:2f:8a:de:13:59:45:16:bd:51:03: 05:13:2c:11:1f:c4:43:6e:71:16:0a:de:67:c5:24:f4:79:da: b9:b9:ec:5a:c0:96:1b:cc:d0:d0:e5:09:ec:b4:d5:e9:e1:ae: 49:87:dc:b1:61:9b:4d:bd:fc:7f:6c:fa:9c:bb:9e:f8:3f:68: 9a:65:72:85:11:1d:90:8b:ed:3c:b0:a9:c5:ac:18:d6:20:6b: 8a:61:50:57:e4:25:8e:b8:8c:d0:77:c0:27:64:a1:df:24:3d: 16:e6:b9:9f:eb:e4:91:dc:0a:64:fb:28:bc:b4:af:a3:d3:4e: 89:da:e2:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0U1QjExMC8GA1UEBRMoRTA3RTU3Njg5QzI3QTk5MzYxMUNCQUJBOTdCMTk0RDMx Nzk2Q0Y2RjAeFw0yNTA4MjMwNzU2NDJaFw0yNTA4MzAwNzU2NDJaMBgxFjAUBgNV BAMTDTY4YTk3NDNhLTk5M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg86f5/Y2H2Dd2YGnIi7oXGJJBPHPEBtO+v/t6wnLS+6T3ejOC5tmHN5wrU27O Rk7n2zZs/fuWMaVtzoJ7TZ0d8zdGr4266TzlL6oQRZ90yGBiG3SxnXnzJqdzV1xB ysgek2pBoMi8X8XxtzYIS4uRmeduIO4uSldFpZDRInCnVBVt52Q5vBhDMbGfZaB9 YSQSsHQxs1AIZJNrbh59ROjo+OCSz9hfC+Bu5FtIa+7KEjqa5d8iFXTkS45qrdfo G7GKLX01o0tuzGvZ9qLkLvVDz//DHtN1A0EUXyDvTbimuNoKvFvOcMN0aCFgVCpt iENxUbAhJ/8bOtKOXzUsK8wnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyo+j+CNJ 2lvicHxRKfY/8Ulf1hUwHwYDVR0jBBgwFoAU4H5XaJwnqZNhHLq6l7GU0xeWz28w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RTVCL0UxNEY3MjI0M0M2 RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpOaEhMcTZsN0dVMHhlV3oy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEg1WGFKd25xWk5oSExxNmw3R1UweGVXejI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RTVCL0UxNEY3MjI0M0M2RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpO aEhMcTZsN0dVMHhlV3oyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHgjMzawvndmjrqXLclSwgIyDeG5SicJYw6TofJPnj6esk8qIV3lYehW RIbGyhLXmteyd9IzhCaQnuSWCV/ozf4RYVHlNmLW3YbAGIdVQ+ADpaWWqdQYYmR0 UGKaEwQlPJ0DHIiA/8Ez7umY8xNcJbolW9Vkerll+eXebWDSr1atF1E0reJkL4re E1lFFr1RAwUTLBEfxENucRYK3mfFJPR52rm57FrAlhvM0NDlCey01enhrkmH3LFh m029/H9s+py7nvg/aJplcoURHZCL7TywqcWsGNYga4phUFfkJY64jNB3wCdkod8k PRbmuZ/r5JHcCmT7KLy0r6PTTona4vY= -----END CERTIFICATE-----Generated at Sat Aug 23 23:51:25 2025 by rpki-client