$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json) Hash identifier: AbxVFGs4e4XXhw/Zq1HkJZRV6T5/zm6YUrBShU6S9OI= Subject key identifier: D3:3A:9D:4F:78:51:02:00:31:49:18:60:22:75:07:29:19:0E:B5:E6 Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Certificate serial: 0F31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft Manifest number: 0F20 Signing time: Fri 22 Aug 2025 17:45:08 +0000 Manifest this update: Fri 22 Aug 2025 17:45:08 +0000 Manifest next update: Fri 29 Aug 2025 17:45:08 +0000 Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: JbHQeb92i65M4LFXXZBtt0EgcqURCj0HAwwVoyDzN4o=) 2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: 4nfL4JBKGiookOgEUtMY2He+i4zGwZxLBLPzmr/3qA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3889 (0xf31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Validity Not Before: Aug 22 17:45:08 2025 GMT Not After : Aug 29 17:45:08 2025 GMT Subject: CN=68a8aca4-b6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cd:c4:36:a6:97:c7:52:28:04:6c:aa:6b:13: de:7b:00:c4:59:56:29:64:da:62:25:16:c0:23:c6: 4e:6d:6f:8c:df:54:89:35:bc:9f:ca:08:fd:bd:9c: b4:5b:8e:11:f6:45:b4:5b:59:6f:be:17:c8:8c:75: 7a:2f:ff:1b:5e:ed:f4:43:92:56:98:c4:29:d5:9d: f1:9c:b6:b7:ff:4c:c3:46:ae:67:f8:b2:36:a9:f1: df:b2:de:8b:75:b0:95:f4:47:4c:d8:7a:96:9b:b5: 96:de:2b:3f:2f:ca:03:9c:11:84:8e:41:d4:34:f1: a9:83:39:e2:ce:8a:6e:ff:03:ae:49:b2:f0:d5:04: cc:d5:eb:c1:7b:1e:20:1c:61:62:e5:45:30:35:27: 2c:7e:2c:65:b6:2f:1e:09:c9:24:d8:24:16:87:97: 49:57:8a:29:93:01:56:0d:70:8b:60:a2:54:2b:4c: 22:97:c5:fb:d3:75:b7:ba:58:75:2c:8d:be:cd:e3: a0:86:44:50:87:dd:ec:95:76:19:6b:bb:12:c8:01: 59:76:bd:2c:36:42:40:3d:e7:a8:db:04:03:e8:2b: 6b:6c:5c:73:26:93:5c:51:48:75:5e:c6:7b:7a:72: ae:a4:19:13:2f:b7:56:60:e0:60:37:1b:09:1f:42: 33:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3A:9D:4F:78:51:02:00:31:49:18:60:22:75:07:29:19:0E:B5:E6 X509v3 Authority Key Identifier: keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:b8:7a:a6:00:47:b2:2e:93:1e:5a:94:49:09:1e:f5:e6:e0: 43:2c:e1:e9:54:9c:0f:4a:55:90:ed:47:bd:4e:b9:4f:74:39: 66:c4:db:02:ef:7a:b7:0c:a9:e9:44:ae:90:a7:c0:68:19:73: 51:77:37:32:da:e2:68:fb:db:d7:05:a4:bf:3b:f9:af:25:91: 14:1c:82:79:0e:7e:c6:b3:a3:6a:35:bf:74:4c:6c:5c:fd:6b: 68:6d:33:67:0b:df:bf:ab:fa:6e:ab:63:8a:b3:b4:09:eb:41: 1e:8f:60:88:5e:8d:35:7a:8c:30:ae:91:bd:ff:13:ca:8e:77: 95:fa:84:25:e1:f2:2f:45:b4:b0:28:10:ce:6a:aa:d6:bd:2e: 8c:26:9c:93:0a:28:c0:72:fc:d5:78:ec:85:80:4a:5b:c2:ba: 8f:cd:80:45:85:53:9c:7d:4a:f5:5c:84:d8:0c:a4:4c:9c:6d: 06:57:a3:e7:51:76:6a:94:f3:db:74:45:d0:15:80:0d:9c:90: 52:10:f3:51:1d:93:db:fc:f6:0c:32:02:2a:4a:d3:bd:8d:d4: b1:a4:64:1a:3d:18:1d:93:71:44:ce:99:0b:fc:55:2d:d8:65: 51:b5:c0:86:8d:f2:7a:97:c9:da:03:fc:3b:44:f4:f3:ba:15: 40:89:b0:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RUMxMTAvBgNVBAUTKDczMUUyN0UxMkZCM0RCMEI2Q0NDMEIyMEYxODY4MDlC QTA4RDA5MTUwHhcNMjUwODIyMTc0NTA4WhcNMjUwODI5MTc0NTA4WjAYMRYwFAYD VQQDEw02OGE4YWNhNC1iNmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw83ENqaXx1IoBGyqaxPeewDEWVYpZNpiJRbAI8ZObW+M31SJNbyfygj9vZy0 W44R9kW0W1lvvhfIjHV6L/8bXu30Q5JWmMQp1Z3xnLa3/0zDRq5n+LI2qfHfst6L dbCV9EdM2HqWm7WW3is/L8oDnBGEjkHUNPGpgznizopu/wOuSbLw1QTM1evBex4g HGFi5UUwNScsfixlti8eCckk2CQWh5dJV4opkwFWDXCLYKJUK0wil8X703W3ulh1 LI2+zeOghkRQh93slXYZa7sSyAFZdr0sNkJAPeeo2wQD6CtrbFxzJpNcUUh1XsZ7 enKupBkTL7dWYOBgNxsJH0IzBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNM6nU94 UQIAMUkYYCJ1BykZDrXmMB8GA1UdIwQYMBaAFHMeJ+Evs9sLbMwLIPGGgJugjQkV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThFQy9BRjUwQTBFODgz NjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3dHN6QXNnOFlhQW02Q05D UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NG40Uy16Mnd0c3pBc2c4WWFBbTZDTkNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThFQy9BRjUwQTBFODgzNjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3 dHN6QXNnOFlhQW02Q05DUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+uHqmAEeyLpMeWpRJCR715uBDLOHpVJwPSlWQ7Ue9TrlPdDlmxNsC 73q3DKnpRK6Qp8BoGXNRdzcy2uJo+9vXBaS/O/mvJZEUHIJ5Dn7Gs6NqNb90TGxc /WtobTNnC9+/q/puq2OKs7QJ60Eej2CIXo01eowwrpG9/xPKjneV+oQl4fIvRbSw KBDOaqrWvS6MJpyTCijAcvzVeOyFgEpbwrqPzYBFhVOcfUr1XITYDKRMnG0GV6Pn UXZqlPPbdEXQFYANnJBSEPNRHZPb/PYMMgIqStO9jdSxpGQaPRgdk3FEzpkL/FUt 2GVRtcCGjfJ6l8naA/w7RPTzuhVAibD+ -----END CERTIFICATE-----Generated at Sun Aug 24 03:36:05 2025 by rpki-client