$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft File: 4j5WiDpuN63lIjxBOzs7D3gbySk.mft (raw, json) Hash identifier: FA1sfVc7JCEh97wpUC1XZUMRCdTkuAuUtbfBhuyyr4I= Subject key identifier: 2D:C6:AC:87:C1:FF:C3:8E:30:8C:9C:2A:A3:1D:75:5A:EE:12:98:CF Authority key identifier: E2:3E:56:88:3A:6E:37:AD:E5:22:3C:41:3B:3B:3B:0F:78:1B:C9:29 Certificate issuer: /CN=A91DF645/serialNumber=E23E56883A6E37ADE5223C413B3B3B0F781BC929 Certificate serial: 11A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft Manifest number: 1197 Signing time: Fri 22 Aug 2025 17:20:42 +0000 Manifest this update: Fri 22 Aug 2025 17:20:42 +0000 Manifest next update: Fri 29 Aug 2025 17:20:42 +0000 Files and hashes: 1: 4j5WiDpuN63lIjxBOzs7D3gbySk.crl (hash: Y1NkeBH45wa60Twp9ZUMxHg7JViOytiEtlW7vaHn8KU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.crl rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4512 (0x11a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF645, serialNumber=E23E56883A6E37ADE5223C413B3B3B0F781BC929 Validity Not Before: Aug 22 17:20:42 2025 GMT Not After : Aug 29 17:20:42 2025 GMT Subject: CN=68a8a6ea-8efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:c8:a9:aa:c2:75:c0:45:09:40:83:5c:79: b2:57:57:97:d0:33:d3:93:83:78:80:6b:7a:e9:cf: 20:e5:37:0f:6c:3c:eb:80:00:5f:7d:bb:20:94:36: 6f:6f:6f:50:38:db:80:cc:61:77:7d:18:bb:8a:9d: 03:7b:9a:7c:e1:1e:26:f0:19:d2:09:42:15:5f:d3: ac:39:c8:f4:1d:fd:a3:41:5c:f4:fe:e8:c1:eb:4b: 8f:6f:84:27:8f:ab:25:9a:a1:f7:af:69:16:4a:d1: 01:e2:19:65:bc:75:8f:95:84:96:de:ea:a7:f4:b8: 66:f8:2c:99:a6:e8:1f:82:19:4e:67:89:a8:0b:9f: 0f:55:92:26:2c:2a:69:00:f3:99:e2:01:68:4e:13: 8c:60:cb:fc:26:69:57:81:92:1c:89:22:78:c2:d7: 94:4b:cc:e7:62:3a:b6:bc:82:55:f8:f4:f4:6a:7c: d7:bf:f2:54:7c:c0:fe:ce:c2:63:dd:03:28:6e:ab: 97:55:d5:10:b5:9a:ba:63:94:4c:d2:97:d2:9e:a8: 3d:ba:09:6a:3b:40:89:97:23:f6:9b:02:fc:dd:30: 1e:f9:cf:fe:39:6a:8b:5a:69:77:5a:e0:8f:a6:ac: ac:c4:df:29:b3:2b:5c:a8:e4:02:35:fa:32:28:35: 83:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C6:AC:87:C1:FF:C3:8E:30:8C:9C:2A:A3:1D:75:5A:EE:12:98:CF X509v3 Authority Key Identifier: keyid:E2:3E:56:88:3A:6E:37:AD:E5:22:3C:41:3B:3B:3B:0F:78:1B:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:c2:25:b1:6a:d3:85:3d:3f:05:0e:6f:a4:8d:47:89:1d:27: 54:89:35:b1:1b:8f:fe:8f:5f:81:fc:2c:bf:ee:40:b4:97:77: ba:a1:49:3c:ac:63:cf:7c:6e:cf:35:6e:ec:33:3d:e7:f5:f5: 65:78:88:0a:62:cc:5f:e1:3f:80:ee:47:b0:17:8a:0c:f2:c5: b8:75:a8:0b:c7:8f:48:3a:04:70:f0:66:81:ca:73:a9:3b:3f: 1d:ac:be:a6:c5:c6:5c:0a:27:34:4b:0b:31:4d:7d:b2:1c:2d: 5f:89:64:8e:f6:7b:15:2e:a5:32:36:56:bc:a9:bd:c2:04:57: 3a:b1:d1:df:1c:60:c3:31:95:d1:19:4b:00:03:c3:b3:0d:ab: 7e:85:be:4e:0a:a5:23:7e:5d:a0:b1:54:5b:23:7c:5d:12:07: 6b:2e:36:30:b9:b2:92:1e:66:3d:85:78:55:df:0c:ec:e3:20: 24:06:1a:bb:3e:e0:b5:74:ea:0e:f9:01:bf:38:3f:ce:20:cc: 4f:2c:05:af:fb:a9:e3:f2:4e:e7:dc:79:2e:82:91:73:75:f0: 62:02:32:d9:94:83:9d:c0:52:3b:f9:7d:38:44:14:0f:ae:47: db:c4:89:54:57:74:8b:aa:77:32:56:f1:47:5c:8c:63:f2:9f: 6c:42:f3:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY2NDUxMTAvBgNVBAUTKEUyM0U1Njg4M0E2RTM3QURFNTIyM0M0MTNCM0IzQjBG NzgxQkM5MjkwHhcNMjUwODIyMTcyMDQyWhcNMjUwODI5MTcyMDQyWjAYMRYwFAYD VQQDEw02OGE4YTZlYS04ZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFbIqarCdcBFCUCDXHmyV1eX0DPTk4N4gGt66c8g5TcPbDzrgABffbsglDZv b29QONuAzGF3fRi7ip0De5p84R4m8BnSCUIVX9OsOcj0Hf2jQVz0/ujB60uPb4Qn j6slmqH3r2kWStEB4hllvHWPlYSW3uqn9Lhm+CyZpugfghlOZ4moC58PVZImLCpp APOZ4gFoThOMYMv8JmlXgZIciSJ4wteUS8znYjq2vIJV+PT0anzXv/JUfMD+zsJj 3QMobquXVdUQtZq6Y5RM0pfSnqg9uglqO0CJlyP2mwL83TAe+c/+OWqLWml3WuCP pqysxN8psytcqOQCNfoyKDWDuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3GrIfB /8OOMIycKqMddVruEpjPMB8GA1UdIwQYMBaAFOI+Vog6bjet5SI8QTs7Ow94G8kp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjY0NS9BQjE2RTU1MjAx RjYxMUU5QUJCODg3MERDNEY5QUUwMi80ajVXaURwdU42M2xJanhCT3pzN0QzZ2J5 U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqNVdpRHB1TjYzbElqeEJPenM3RDNnYnlTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjY0NS9BQjE2RTU1MjAxRjYxMUU5QUJCODg3MERDNEY5QUUwMi80ajVXaURwdU42 M2xJanhCT3pzN0QzZ2J5U2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlwiWxatOFPT8FDm+kjUeJHSdUiTWxG4/+j1+B/Cy/7kC0l3e6oUk8 rGPPfG7PNW7sMz3n9fVleIgKYsxf4T+A7kewF4oM8sW4dagLx49IOgRw8GaBynOp Oz8drL6mxcZcCic0SwsxTX2yHC1fiWSO9nsVLqUyNla8qb3CBFc6sdHfHGDDMZXR GUsAA8OzDat+hb5OCqUjfl2gsVRbI3xdEgdrLjYwubKSHmY9hXhV3wzs4yAkBhq7 PuC1dOoO+QG/OD/OIMxPLAWv+6nj8k7n3HkugpFzdfBiAjLZlIOdwFI7+X04RBQP rkfbxIlUV3SLqncyVvFHXIxj8p9sQvON -----END CERTIFICATE-----Generated at Sun Aug 24 01:02:47 2025 by rpki-client