$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft File: 4_fO9uelaeRrLZA5MitpdVMcJWY.mft (raw, json) Hash identifier: O1+i2sbkiavaKUoQE5zbAQmU3VkyxByq2MlMEN1+lw4= Subject key identifier: 7B:1A:BB:71:D3:78:8A:2E:16:1D:7F:BA:E1:E4:AD:62:85:D6:50:8B Authority key identifier: E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 Certificate issuer: /CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft Manifest number: 01F1 Signing time: Sat 23 Aug 2025 02:36:41 +0000 Manifest this update: Sat 23 Aug 2025 02:36:40 +0000 Manifest next update: Sat 30 Aug 2025 02:36:40 +0000 Files and hashes: 1: 4_fO9uelaeRrLZA5MitpdVMcJWY.crl (hash: zZn45/zPrikh64zVQaAB2ytmtO5QcAu5NUlM7GcexDM=) 2: 24F87CC2810611EDA756F886C4F9AE02.roa (hash: 8hmKlSyIYm+hEMbljQN7ZPJxD7JA/JzX6lz/de7dJIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0077, serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Validity Not Before: Aug 23 02:36:40 2025 GMT Not After : Aug 30 02:36:40 2025 GMT Subject: CN=68a92938-2dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:de:d9:29:e6:28:8b:68:97:eb:d2:71:3c: f2:5b:ce:48:43:38:d2:ba:33:6d:e1:15:d1:51:e7: 2a:74:18:b7:82:ce:ed:ba:18:85:2a:d4:49:50:a7: 9a:1e:08:51:4f:5d:4e:61:eb:3c:7c:cd:e4:a9:ca: d1:be:7b:f6:d7:c7:f3:b3:c9:74:1b:67:e1:02:cb: d2:2c:96:f8:99:70:dd:b2:3c:40:6f:63:2b:45:19: b1:40:46:35:87:08:84:7e:f4:f5:2f:a3:b5:35:69: 9b:ab:a0:22:7d:e9:ad:9a:45:2e:4f:5a:b0:87:03: 88:da:a0:96:a9:2e:4d:d1:33:eb:4e:02:39:92:a2: f7:44:40:fc:75:f5:58:7d:93:35:f0:08:cf:20:bd: f6:81:5a:d7:1e:d7:75:62:64:c1:d7:2a:d8:8b:6a: 64:d6:75:e3:ae:61:cc:08:98:d3:3f:12:ac:44:de: bb:c3:83:b5:41:ba:b4:bb:24:23:46:0a:9d:51:91: c5:68:8b:0f:66:0e:af:09:c8:c2:ff:4d:32:22:a3: e1:32:39:7f:14:bf:bc:d1:e6:84:36:f3:e9:bf:3c: 5a:1d:86:19:f4:ff:b6:82:6c:f6:e4:5e:81:f5:fd: 6e:c1:38:bc:5d:48:d2:46:27:23:cf:ae:e0:63:00: af:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1A:BB:71:D3:78:8A:2E:16:1D:7F:BA:E1:E4:AD:62:85:D6:50:8B X509v3 Authority Key Identifier: keyid:E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:a3:27:70:1d:4a:56:d2:7f:3e:9d:b5:d9:5f:7a:91:7f:71: a4:0d:9e:09:4a:ad:e5:f2:12:e4:00:b2:91:a0:da:ce:e0:74: 0e:6c:18:19:2f:6b:c6:bc:85:43:6b:10:de:f7:be:88:5f:57: fc:ae:23:57:96:ae:d3:73:95:49:c3:57:b1:7b:6b:78:c0:29: 53:58:97:f1:66:24:b9:8d:71:e7:34:26:11:d6:b6:f7:92:4d: cb:7e:8c:24:fc:9a:b3:01:13:23:4d:7b:c9:69:1d:89:af:11: e6:ad:91:50:07:63:71:11:cc:1d:a4:6a:5b:ca:9f:1e:3c:2d: 0d:c8:d3:26:a2:57:5d:ee:61:a1:79:5b:e8:6b:77:61:22:6a: 59:53:7c:39:01:72:c2:5f:71:f6:45:21:c4:6e:f9:3a:14:83: 00:75:8f:4c:aa:84:f3:d0:6a:b4:e4:15:79:2d:6c:8b:ea:77: d7:58:cf:a4:65:d6:91:cc:67:60:00:34:ce:0d:3c:f4:6b:0f: 27:1a:8f:ea:6c:b2:04:5b:0c:be:ce:15:4d:35:bc:eb:79:90: 7a:39:27:15:fd:44:a3:27:a8:36:eb:af:2f:9d:76:c1:27:5c: f0:f5:6d:23:20:9e:f6:84:71:ee:42:af:6e:35:6e:8f:9f:32: 8c:7a:db:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAwNzcxMTAvBgNVBAUTKEUzRjdDRUY2RTdBNTY5RTQ2QjJEOTAzOTMyMkI2OTc1 NTMxQzI1NjYwHhcNMjUwODIzMDIzNjQwWhcNMjUwODMwMDIzNjQwWjAYMRYwFAYD VQQDEw02OGE5MjkzOC0yZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI7e2SnmKItol+vScTzyW85IQzjSujNt4RXRUecqdBi3gs7tuhiFKtRJUKea HghRT11OYes8fM3kqcrRvnv218fzs8l0G2fhAsvSLJb4mXDdsjxAb2MrRRmxQEY1 hwiEfvT1L6O1NWmbq6AifemtmkUuT1qwhwOI2qCWqS5N0TPrTgI5kqL3RED8dfVY fZM18AjPIL32gVrXHtd1YmTB1yrYi2pk1nXjrmHMCJjTPxKsRN67w4O1Qbq0uyQj RgqdUZHFaIsPZg6vCcjC/00yIqPhMjl/FL+80eaENvPpvzxaHYYZ9P+2gmz25F6B 9f1uwTi8XUjSRicjz67gYwCvbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsau3HT eIouFh1/uuHkrWKF1lCLMB8GA1UdIwQYMBaAFOP3zvbnpWnkay2QOTIraXVTHCVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDA3Ny81MDZBRTIzMDgx MDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFlUnJMWkE1TWl0cGRWTWNK V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfZk85dWVsYWVSckxaQTVNaXRwZFZNY0pXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDA3Ny81MDZBRTIzMDgxMDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFl UnJMWkE1TWl0cGRWTWNKV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAloydwHUpW0n8+nbXZX3qRf3GkDZ4JSq3l8hLkALKRoNrO4HQObBgZ L2vGvIVDaxDe976IX1f8riNXlq7Tc5VJw1exe2t4wClTWJfxZiS5jXHnNCYR1rb3 kk3Lfowk/JqzARMjTXvJaR2JrxHmrZFQB2NxEcwdpGpbyp8ePC0NyNMmoldd7mGh eVvoa3dhImpZU3w5AXLCX3H2RSHEbvk6FIMAdY9MqoTz0Gq05BV5LWyL6nfXWM+k ZdaRzGdgADTODTz0aw8nGo/qbLIEWwy+zhVNNbzreZB6OScV/USjJ6g2668vnXbB J1zw9W0jIJ72hHHuQq9uNW6PnzKMetsv -----END CERTIFICATE-----Generated at Sun Aug 24 00:10:14 2025 by rpki-client