$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: CZQVqmz4uAllQfqBXZRh9WAh3d3tAn34Ptd679RhNGo= Subject key identifier: BB:24:8D:6B:EE:96:5A:E2:75:E3:6C:86:9F:E5:D6:E4:5A:8A:6E:9E Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 0185 Signing time: Sat 23 Aug 2025 03:45:43 +0000 Manifest this update: Sat 23 Aug 2025 03:45:43 +0000 Manifest next update: Sat 30 Aug 2025 03:45:43 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: Fq1sJfuRVEMMCSPylvNZPWUhXVCcmCFFiTXLmzOEtnQ=) 2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: glLqt8A+PG2i48HeZjmY7dCokn6j6eyQTAGv7a4dQe4=) 3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: cXsdzPTH/yRS7sygsATYiwsQyV1n0HK8W/wMQYfB7Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: Aug 23 03:45:43 2025 GMT Not After : Aug 30 03:45:43 2025 GMT Subject: CN=68a93967-ca83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8d:67:94:27:43:e4:e4:c3:0c:55:89:3e:d7: 5a:b1:ff:3f:74:59:51:83:55:74:fd:f0:82:14:eb: 33:be:30:55:72:c8:e7:bc:6e:d3:c3:e5:a6:05:e3: d4:2c:32:05:5f:33:12:dc:02:ca:03:73:23:75:b3: 22:b1:a0:21:1b:80:60:0d:0a:f8:8b:8c:96:00:a1: 56:fb:1b:7c:82:94:02:ed:34:7f:10:bf:0c:e7:23: af:59:23:15:f1:b6:49:d3:53:89:0f:ae:6e:be:fd: ee:c5:57:c0:1c:3b:b3:b0:c2:86:9a:4a:15:70:cd: c5:46:e7:26:17:08:19:41:57:58:32:3a:17:7f:e7: 12:fb:d4:4b:7d:69:76:45:04:db:20:3a:27:db:5e: 4e:bc:81:31:93:98:f2:ce:bc:ea:39:cd:7f:38:16: 81:af:42:6a:4e:1a:65:a4:76:b6:bf:9c:7a:42:ba: 58:a1:7c:a5:a3:ec:92:c9:06:a0:31:96:2b:4a:fb: 55:7a:39:7e:67:60:70:f6:97:ca:48:43:55:b4:d9: 56:00:c2:ec:1c:3d:9a:9b:1c:3d:36:4b:b0:57:43: 68:6e:a2:23:79:fb:94:47:8a:4e:22:90:18:f6:da: a7:50:40:c3:23:7d:59:56:85:44:1c:73:d7:18:35: b1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:24:8D:6B:EE:96:5A:E2:75:E3:6C:86:9F:E5:D6:E4:5A:8A:6E:9E X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f7:45:ce:18:67:56:ea:94:8c:17:d1:cf:7b:62:e5:2b:ec: 4b:97:5f:cb:9d:ff:56:65:8d:38:68:d1:71:55:86:c0:a9:d1: 4b:12:2b:05:ba:5b:c2:bc:26:d7:a9:d9:d5:53:42:ed:c4:b9: 98:d3:b6:8d:20:f0:e8:e3:71:2d:47:7d:d2:b5:64:d5:a8:07: b3:f3:58:d7:5f:4d:99:e7:2a:06:d6:78:df:b9:cc:25:e8:03: f6:90:70:f3:03:e5:f0:72:85:82:6e:58:02:2b:88:1e:cf:95: 7d:a7:f6:b2:6f:3f:4f:13:6e:42:ec:64:3a:71:97:9c:78:a3: 5c:bb:41:e0:e3:cb:d3:4a:07:f6:37:0d:27:b6:de:44:dd:78: b1:06:b5:4f:33:2e:ef:5e:9b:5f:50:a4:08:39:00:2d:32:ea: 0e:ef:59:89:aa:86:6c:e2:cd:0a:7f:a2:f4:eb:97:07:1d:f4: 6f:10:66:46:8e:56:00:da:89:50:52:81:71:dd:07:53:40:11: d7:b9:f8:6c:27:61:62:23:36:43:2b:70:06:25:24:65:31:d7: 62:92:19:88:99:65:8d:ea:8c:4e:c6:9c:89:1d:d1:8b:1c:56: 34:f6:6f:0d:fd:2e:e2:15:a5:ed:54:c2:4a:ad:3e:bf:02:18: c3:8a:9c:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjUwODIzMDM0NTQzWhcNMjUwODMwMDM0NTQzWjAYMRYwFAYD VQQDEw02OGE5Mzk2Ny1jYTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu41nlCdD5OTDDFWJPtdasf8/dFlRg1V0/fCCFOszvjBVcsjnvG7Tw+WmBePU LDIFXzMS3ALKA3MjdbMisaAhG4BgDQr4i4yWAKFW+xt8gpQC7TR/EL8M5yOvWSMV 8bZJ01OJD65uvv3uxVfAHDuzsMKGmkoVcM3FRucmFwgZQVdYMjoXf+cS+9RLfWl2 RQTbIDon215OvIExk5jyzrzqOc1/OBaBr0JqThplpHa2v5x6QrpYoXylo+ySyQag MZYrSvtVejl+Z2Bw9pfKSENVtNlWAMLsHD2amxw9NkuwV0NobqIjefuUR4pOIpAY 9tqnUEDDI31ZVoVEHHPXGDWxcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLskjWvu llrideNshp/l1uRaim6eMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe90XOGGdW6pSMF9HPe2LlK+xLl1/Lnf9WZY04aNFxVYbAqdFLEisF ulvCvCbXqdnVU0LtxLmY07aNIPDo43EtR33StWTVqAez81jXX02Z5yoG1njfucwl 6AP2kHDzA+XwcoWCblgCK4gez5V9p/aybz9PE25C7GQ6cZeceKNcu0Hg48vTSgf2 Nw0ntt5E3XixBrVPMy7vXptfUKQIOQAtMuoO71mJqoZs4s0Kf6L065cHHfRvEGZG jlYA2olQUoFx3QdTQBHXufhsJ2FiIzZDK3AGJSRlMddikhmImWWN6oxOxpyJHdGL HFY09m8N/S7iFaXtVMJKrT6/AhjDipzJ -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:07 2025 by rpki-client