$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft File: 4ggepNPNtZniYIYCcE_bNYbUj1c.mft (raw, json) Hash identifier: fZUazZP9IF4Gx3OhdfvLPycr3pRv2+RY2xEWWS8B8MA= Subject key identifier: 2E:61:38:74:40:81:14:FB:19:AA:72:A3:9E:30:01:09:92:19:4D:3C Authority key identifier: E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 Certificate issuer: /CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Certificate serial: 0BC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft Manifest number: 0BC3 Signing time: Fri 22 Aug 2025 19:03:36 +0000 Manifest this update: Fri 22 Aug 2025 19:03:36 +0000 Manifest next update: Fri 29 Aug 2025 19:03:36 +0000 Files and hashes: 1: 4ggepNPNtZniYIYCcE_bNYbUj1c.crl (hash: Qn4XSblNtkP3wbgaUg/bQ3Lfz072Nh0noNR1DVQ6f70=) 2: 277BE15035CD11EAA2366620C4F9AE02.roa (hash: hJTBnRNb+rBuco3pui7GARCwhnSPV6pCkk0fRFtrHKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3017 (0xbc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF1C, serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Validity Not Before: Aug 22 19:03:36 2025 GMT Not After : Aug 29 19:03:36 2025 GMT Subject: CN=68a8bf08-d3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:56:cf:f6:ce:76:e2:ff:93:36:80:67:11:5b: dc:d5:b2:0c:18:34:8d:4f:df:3c:d6:28:25:31:b6: e5:21:86:50:72:e6:75:45:4f:50:a2:4f:f4:da:f6: a6:67:b3:e7:19:19:9d:e4:cc:1c:47:e2:4a:28:75: 8a:f8:b0:8c:9a:4a:53:21:0a:7c:23:cf:93:40:1b: 43:c2:3e:20:65:93:da:6b:b2:ad:b2:db:a5:5c:b6: 70:df:ab:c7:cd:ef:fe:87:16:e1:b9:22:42:29:01: cf:a6:fb:3f:cb:fd:53:b3:0f:2d:4b:07:d5:8c:76: 58:59:c9:2e:54:f6:ce:e8:42:06:5a:04:84:a5:b0: 7a:f1:46:1d:67:6f:f7:72:81:fc:58:e3:e7:1d:40: e8:f6:8a:cc:5e:f3:18:4f:7f:cc:90:d0:f6:d5:bc: b7:13:71:e0:74:f5:3b:af:70:e7:13:52:01:93:00: 79:fb:4c:cf:35:8b:cc:9d:37:1f:a6:d6:db:92:4b: 48:8f:6d:6d:a8:50:f9:67:40:f5:a7:2a:0c:b5:d8: e2:b5:6e:6c:7f:81:34:1f:f0:fa:01:19:60:a9:8a: dc:5b:4c:a8:b5:25:5c:cc:70:fb:2d:10:ca:f6:60: 43:f0:c1:ec:e4:aa:79:e8:d5:64:b4:2f:16:28:78: ab:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:61:38:74:40:81:14:FB:19:AA:72:A3:9E:30:01:09:92:19:4D:3C X509v3 Authority Key Identifier: keyid:E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:51:0a:ff:6e:55:56:ec:cd:09:00:af:c8:9a:ae:b5:51:2e: 37:4d:72:5e:9b:92:cc:ba:43:58:26:a9:8a:d7:bc:9d:bb:5f: e9:87:f2:94:ca:0d:b3:b0:3f:bd:25:cc:8e:73:43:46:db:81: b1:95:4c:5c:57:23:4a:c0:72:26:e9:b0:ef:28:64:cc:89:64: 80:95:36:a4:1f:1c:61:e8:2b:83:d5:73:96:2a:f3:ea:04:94: f1:bc:f7:97:e5:98:0d:6d:47:8f:63:16:65:40:75:16:52:7e: 97:0b:98:e1:ea:a0:d6:4b:e6:a9:d1:41:0a:3d:ca:af:b9:83: 89:a3:ec:92:a9:18:b8:36:ce:f6:52:e4:d2:a1:f5:04:26:8f: 72:97:91:ab:14:1d:53:64:86:8f:47:97:16:62:37:08:c0:aa: 61:3a:e8:27:f9:32:aa:ac:19:e0:0c:99:12:f2:bb:ba:0d:9e: 37:fa:58:59:38:ee:f6:b3:85:e1:df:12:50:11:aa:b3:8c:39: 11:23:0b:0f:3d:d0:a4:df:c9:c6:10:e5:5c:bb:f8:f6:5d:43: bb:7a:30:92:5e:5e:3a:53:13:3d:35:07:69:3b:95:3c:56:ad: 2a:a7:81:31:8c:fb:ee:cd:e4:dd:1f:42:4c:92:c6:83:9d:dd: 38:36:47:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGMUMxMTAvBgNVBAUTKEUyMDgxRUE0RDNDREI1OTlFMjYwODYwMjcwNEZEQjM1 ODZENDhGNTcwHhcNMjUwODIyMTkwMzM2WhcNMjUwODI5MTkwMzM2WjAYMRYwFAYD VQQDEw02OGE4YmYwOC1kM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1bP9s524v+TNoBnEVvc1bIMGDSNT9881iglMbblIYZQcuZ1RU9Qok/02vam Z7PnGRmd5MwcR+JKKHWK+LCMmkpTIQp8I8+TQBtDwj4gZZPaa7KtstulXLZw36vH ze/+hxbhuSJCKQHPpvs/y/1Tsw8tSwfVjHZYWckuVPbO6EIGWgSEpbB68UYdZ2/3 coH8WOPnHUDo9orMXvMYT3/MkND21by3E3HgdPU7r3DnE1IBkwB5+0zPNYvMnTcf ptbbkktIj21tqFD5Z0D1pyoMtdjitW5sf4E0H/D6ARlgqYrcW0yotSVczHD7LRDK 9mBD8MHs5Kp56NVktC8WKHirUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5hOHRA gRT7Gapyo54wAQmSGU08MB8GA1UdIwQYMBaAFOIIHqTTzbWZ4mCGAnBP2zWG1I9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREYxQy8zNkM5NjIyMDI2 M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRabmlZSVlDY0VfYk5ZYlVq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRnZ2VwTlBOdFpuaVlJWUNjRV9iTlliVWoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REYxQy8zNkM5NjIyMDI2M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRa bmlZSVlDY0VfYk5ZYlVqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFUQr/blVW7M0JAK/Imq61US43TXJem5LMukNYJqmK17ydu1/ph/KU yg2zsD+9JcyOc0NG24GxlUxcVyNKwHIm6bDvKGTMiWSAlTakHxxh6CuD1XOWKvPq BJTxvPeX5ZgNbUePYxZlQHUWUn6XC5jh6qDWS+ap0UEKPcqvuYOJo+ySqRi4Ns72 UuTSofUEJo9yl5GrFB1TZIaPR5cWYjcIwKphOugn+TKqrBngDJkS8ru6DZ43+lhZ OO72s4Xh3xJQEaqzjDkRIwsPPdCk38nGEOVcu/j2XUO7ejCSXl46UxM9NQdpO5U8 Vq0qp4ExjPvuzeTdH0JMksaDnd04NkdX -----END CERTIFICATE-----Generated at Sat Aug 23 20:26:38 2025 by rpki-client