$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft File: C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json) Hash identifier: WlKslDZR74iXrdgK+NcRA6znOID7VcHhinJvGIr12ko= Subject key identifier: 76:4A:D6:83:18:FE:92:EA:14:E0:91:7A:F7:46:D1:0C:97:E9:F8:66 Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B Certificate issuer: /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft Manifest number: 014A Signing time: Sat 23 Aug 2025 04:21:58 +0000 Manifest this update: Sat 23 Aug 2025 04:21:57 +0000 Manifest next update: Sat 30 Aug 2025 04:21:57 +0000 Files and hashes: 1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: 3CWWGtNhTlWFtCtrKcj4sZeCUDrtEbyui7md+587VXM=) 2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: 7OzrwZ3Ky/gjMPnFBCcju8Q1dBXI74VmazgiOgPzNsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Validity Not Before: Aug 23 04:21:57 2025 GMT Not After : Aug 30 04:21:57 2025 GMT Subject: CN=68a941e5-e93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:22:2e:11:7f:e6:1e:fd:ce:c2:c9:c0:45:b7: 6b:63:29:61:7d:a4:45:cb:8e:b7:26:e7:56:33:91: 91:e0:9b:b8:0d:16:ae:e4:6d:32:0f:dd:77:af:00: fe:af:34:04:8c:3b:9c:f8:54:16:ae:b0:fc:91:71: 28:8d:66:48:b7:ca:e2:29:f1:5d:80:4e:a1:bf:ca: dd:c6:45:b5:84:61:d0:78:6b:40:43:82:6d:1e:2c: 3d:b9:4f:3f:2a:22:e0:41:ef:af:0e:89:d4:ec:a8: 9b:66:94:2c:44:70:3d:a2:8f:46:4d:cc:16:52:e2: ef:22:8c:23:04:11:1e:15:78:a3:cc:61:7e:5e:40: c4:40:17:07:5f:5f:c0:82:fe:9d:5c:34:09:d7:97: 3a:16:f4:4c:39:99:0d:8f:58:c9:82:14:fc:dc:67: a3:2e:85:58:6e:18:88:c9:af:a1:cd:80:7e:dc:83: 91:da:b1:a2:f6:fd:38:c2:cb:f2:57:98:61:7c:cc: 27:99:78:33:16:0c:cb:3a:70:f2:7d:59:e3:f9:c4: 8a:c6:5a:75:5b:b8:56:8d:52:51:7b:0f:e3:ab:49: f0:52:b0:d6:94:df:cc:0c:47:35:3d:16:2e:e8:10: e6:5a:62:62:91:22:80:8f:44:b1:6a:64:32:92:30: 58:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4A:D6:83:18:FE:92:EA:14:E0:91:7A:F7:46:D1:0C:97:E9:F8:66 X509v3 Authority Key Identifier: keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:61:6f:0c:48:f4:2b:f5:4b:ef:d0:bd:0a:cd:d2:ab:c1:48: bb:3d:75:cd:77:1d:a2:56:99:e9:b8:7f:4c:ee:48:3c:1c:5b: 68:ec:fe:c8:49:b5:f2:6c:e8:b0:f8:d0:6c:8b:e9:52:62:67: ef:14:4e:07:27:4e:b0:fb:39:28:f3:8a:11:f7:90:ce:3e:ce: 13:e8:82:20:6f:18:b6:5b:c1:c4:f3:51:cd:54:34:ae:34:c9: 87:4c:37:b9:b5:00:0d:84:2d:6b:28:55:5e:26:f7:af:cf:67: 9a:bf:40:11:0b:00:74:31:19:af:68:84:08:20:78:01:36:67: 6c:a6:d9:d4:d8:66:86:8c:a0:4e:aa:72:29:9b:1c:ca:97:e6: 91:fd:52:c4:d0:8e:3d:f8:af:5b:02:b4:c7:55:ce:3e:34:c1: f6:21:a3:28:d5:8c:4f:dd:3c:81:8e:f5:45:7b:8b:b6:75:aa: 94:0b:ec:e2:16:45:3c:c2:d6:36:11:34:a2:43:ee:c5:37:63: 94:61:ee:a6:8c:2f:ad:25:c2:fc:02:34:8e:e3:7b:c6:46:f8: 10:0d:f0:91:4b:6f:d3:a6:76:d2:04:10:d9:be:1b:ae:85:9e: 9b:23:ce:b3:96:fd:2b:c1:dc:8f:37:97:2b:87:69:e8:61:8d: d4:85:90:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdBOEUxMTAvBgNVBAUTKDBCODEzRTJCQkE4NDA2OUVCNDM0RDY1NjY2N0ZFQ0Ux RjYxQjQ5NEIwHhcNMjUwODIzMDQyMTU3WhcNMjUwODMwMDQyMTU3WjAYMRYwFAYD VQQDEw02OGE5NDFlNS1lOTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCIuEX/mHv3OwsnARbdrYylhfaRFy463JudWM5GR4Ju4DRau5G0yD913rwD+ rzQEjDuc+FQWrrD8kXEojWZIt8riKfFdgE6hv8rdxkW1hGHQeGtAQ4JtHiw9uU8/ KiLgQe+vDonU7KibZpQsRHA9oo9GTcwWUuLvIowjBBEeFXijzGF+XkDEQBcHX1/A gv6dXDQJ15c6FvRMOZkNj1jJghT83GejLoVYbhiIya+hzYB+3IOR2rGi9v04wsvy V5hhfMwnmXgzFgzLOnDyfVnj+cSKxlp1W7hWjVJRew/jq0nwUrDWlN/MDEc1PRYu 6BDmWmJikSKAj0SxamQykjBYXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZK1oMY /pLqFOCRevdG0QyX6fhmMB8GA1UdIwQYMBaAFAuBPiu6hAaetDTWVmZ/7OH2G0lL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E4RS9BMDUxNTZBNjgz NUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJwNjBOTlpXWm5fczRmWWJT VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0RS1LN3FFQnA2ME5OWldabl9zNGZZYlNVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0E4RS9BMDUxNTZBNjgzNUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJw NjBOTlpXWm5fczRmWWJTVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYYW8MSPQr9Uvv0L0KzdKrwUi7PXXNdx2iVpnpuH9M7kg8HFto7P7I SbXybOiw+NBsi+lSYmfvFE4HJ06w+zko84oR95DOPs4T6IIgbxi2W8HE81HNVDSu NMmHTDe5tQANhC1rKFVeJvevz2eav0ARCwB0MRmvaIQIIHgBNmdsptnU2GaGjKBO qnIpmxzKl+aR/VLE0I49+K9bArTHVc4+NMH2IaMo1YxP3TyBjvVFe4u2daqUC+zi FkU8wtY2ETSiQ+7FN2OUYe6mjC+tJcL8AjSO43vGRvgQDfCRS2/TpnbSBBDZvhuu hZ6bI86zlv0rwdyPN5crh2noYY3UhZCZ -----END CERTIFICATE-----Generated at Sat Aug 23 21:05:22 2025 by rpki-client