$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft File: 4V0TCwuymA4b8RwBvMt1O0loSoA.mft (raw, json) Hash identifier: B4e6FkitKVw3/3fHo90thlWs8Yi/bLSp6pADM+id+N4= Subject key identifier: 9F:71:C8:EC:83:DD:CF:4C:4F:E6:1C:4C:EE:C5:FB:D5:D0:71:84:CE Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 Certificate issuer: /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Certificate serial: 063B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft Manifest number: 0636 Signing time: Fri 22 Aug 2025 22:54:05 +0000 Manifest this update: Fri 22 Aug 2025 22:54:04 +0000 Manifest next update: Fri 29 Aug 2025 22:54:04 +0000 Files and hashes: 1: 4V0TCwuymA4b8RwBvMt1O0loSoA.crl (hash: TSKsvxcWy8OPJJ00jJyUbDH4vgqmjwiXxDGK/zy8UGo=) 2: 6AE1616AA3F711EBBA757063C4F9AE02.roa (hash: Om3xOjvt7/SStBWrpIGKKE+8s1rKbJeum5OSIuQByU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7BD, serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Validity Not Before: Aug 22 22:54:04 2025 GMT Not After : Aug 29 22:54:04 2025 GMT Subject: CN=68a8f50d-0823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:cc:cf:5a:48:79:bf:e8:40:a3:32:de:e2: 2c:fb:30:09:15:5c:02:4a:bd:af:f0:f0:01:6c:47: 18:5c:57:17:20:96:01:ca:90:14:58:47:30:33:9e: c6:52:72:0f:69:5b:ad:c1:7d:c0:eb:cb:bd:9d:73: ad:c4:9b:40:5c:8d:ff:28:ce:14:c5:a8:91:b2:a8: 18:97:90:3c:e3:43:38:b3:41:72:89:cd:d4:59:18: 84:23:0e:2c:3c:20:f0:1a:b5:4f:f8:8f:05:1d:01: 17:87:49:40:ba:72:1e:f4:83:9a:52:94:fc:47:e5: e6:56:c0:97:6d:a9:bb:9e:62:3a:17:e7:4a:7a:4b: d8:10:a1:6d:4e:fe:e8:1b:9b:7e:b2:8c:f9:00:f0: 42:61:d7:19:6a:4e:94:58:46:27:f9:b5:9d:05:a3: 16:f9:05:33:09:a1:83:4e:6c:77:73:4e:1e:1d:bf: b2:32:98:89:28:79:79:32:fb:17:35:03:8c:c8:c7: 05:73:b5:35:dc:f7:27:a8:da:cf:86:60:e2:a2:6f: 53:c9:c3:01:05:ad:35:1b:c4:59:7b:74:2b:09:bd: 3d:7e:da:34:d0:51:7b:bc:48:59:45:83:db:50:cf: c4:55:98:d6:21:44:97:e7:61:2e:d3:5c:d9:a1:a6: 0f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:71:C8:EC:83:DD:CF:4C:4F:E6:1C:4C:EE:C5:FB:D5:D0:71:84:CE X509v3 Authority Key Identifier: keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d6:e1:12:c2:75:63:72:51:5a:6e:a7:51:92:03:75:cb:19: 4f:cb:c1:67:c1:bb:11:57:44:86:05:80:9c:9c:b5:1e:9b:0a: 8e:98:83:e0:0d:31:5f:77:c6:ba:d4:3c:18:39:a5:c8:69:28: 62:5b:4b:df:61:38:e6:0f:b7:1e:64:12:b6:7c:14:44:8c:66: a0:a6:c8:4c:b6:6a:66:cf:7c:c3:a4:87:5c:f2:cc:85:bf:85: 1a:48:a8:b9:30:b2:5b:a5:b4:8b:cc:bb:18:32:e2:69:a3:f5: a3:e5:f2:31:89:be:8f:ec:0f:46:94:7a:d3:78:9c:c6:0a:c2: d2:ca:28:32:00:b6:5c:d0:1d:54:4a:f3:39:3b:f8:95:64:53: 22:75:25:4c:62:a2:0c:86:fa:b0:cf:7c:5c:d2:41:be:d0:3c: 80:5e:b0:17:d9:da:89:a5:36:4f:3e:fc:b6:ca:32:fa:21:dc: d5:ae:93:36:32:33:7c:20:e4:a3:0b:d9:c5:69:19:07:a4:fa: 3e:8a:ba:bb:5b:6f:14:d7:d3:6c:1e:03:fd:d7:e5:13:c5:2a: 2d:7d:2e:3a:19:61:83:67:40:19:fd:77:ce:4f:6c:c4:7e:6c: bc:6e:d2:22:10:4a:b8:63:2a:5c:20:51:d7:2a:df:c0:aa:71: 09:12:72:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QkQxMTAvBgNVBAUTKEUxNUQxMzBCMEJCMjk4MEUxQkYxMUMwMUJDQ0I3NTNC NDk2ODRBODAwHhcNMjUwODIyMjI1NDA0WhcNMjUwODI5MjI1NDA0WjAYMRYwFAYD VQQDEw02OGE4ZjUwZC0wODIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLjMz1pIeb/oQKMy3uIs+zAJFVwCSr2v8PABbEcYXFcXIJYBypAUWEcwM57G UnIPaVutwX3A68u9nXOtxJtAXI3/KM4UxaiRsqgYl5A840M4s0Fyic3UWRiEIw4s PCDwGrVP+I8FHQEXh0lAunIe9IOaUpT8R+XmVsCXbam7nmI6F+dKekvYEKFtTv7o G5t+soz5APBCYdcZak6UWEYn+bWdBaMW+QUzCaGDTmx3c04eHb+yMpiJKHl5MvsX NQOMyMcFc7U13PcnqNrPhmDiom9TycMBBa01G8RZe3QrCb09fto00FF7vEhZRYPb UM/EVZjWIUSX52Eu01zZoaYPewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9xyOyD 3c9MT+YcTO7F+9XQcYTOMB8GA1UdIwQYMBaAFOFdEwsLspgOG/EcAbzLdTtJaEqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdCRC9EMzAyNjAzNEEz RjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1BNGI4UndCdk10MU8wbG9T b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWMFRDd3V5bUE0YjhSd0J2TXQxTzBsb1NvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdCRC9EMzAyNjAzNEEzRjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1B NGI4UndCdk10MU8wbG9Tb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu1uESwnVjclFabqdRkgN1yxlPy8FnwbsRV0SGBYCcnLUemwqOmIPg DTFfd8a61DwYOaXIaShiW0vfYTjmD7ceZBK2fBREjGagpshMtmpmz3zDpIdc8syF v4UaSKi5MLJbpbSLzLsYMuJpo/Wj5fIxib6P7A9GlHrTeJzGCsLSyigyALZc0B1U SvM5O/iVZFMidSVMYqIMhvqwz3xc0kG+0DyAXrAX2dqJpTZPPvy2yjL6IdzVrpM2 MjN8IOSjC9nFaRkHpPo+irq7W28U19NsHgP91+UTxSotfS46GWGDZ0AZ/XfOT2zE fmy8btIiEEq4YypcIFHXKt/AqnEJEnIK -----END CERTIFICATE-----Generated at Sat Aug 23 22:42:03 2025 by rpki-client