$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json) Hash identifier: n0o26Y8FTKwfVk7EGYRbVtScsshb+piRdLlnhs8yRfg= Subject key identifier: D2:E8:02:57:6D:EA:63:75:D2:2F:0F:76:E2:5F:04:0D:49:1F:97:48 Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft Manifest number: 0159 Signing time: Sat 23 Aug 2025 04:13:20 +0000 Manifest this update: Sat 23 Aug 2025 04:13:19 +0000 Manifest next update: Sat 30 Aug 2025 04:13:19 +0000 Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: 6B/pXjZOkfDsbqraA0vaIZ/WF9Rx4A4WIb2KNZDxRbE=) 2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: 1MgG7WTwswH0kCn616eOpfwXJOyuod5SbIGbahzjBCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Validity Not Before: Aug 23 04:13:19 2025 GMT Not After : Aug 30 04:13:19 2025 GMT Subject: CN=68a93fdf-fc1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:be:ff:99:87:ac:81:d0:7b:19:95:7a:b1: 2a:63:fa:6e:bf:97:a0:4a:01:4b:59:9e:50:0f:f0: 53:dc:7d:8a:65:81:21:21:cc:6b:66:e9:7c:15:53: 49:b5:88:04:21:7c:9d:f1:98:f4:74:c0:f9:2e:53: 2c:95:06:b3:8a:2e:8b:08:60:45:88:1b:dd:45:f3: 9f:4a:d5:c7:c5:7e:26:71:00:7a:1d:f6:b1:2b:d4: a8:c0:0e:bf:a9:9a:f4:da:d7:4a:0d:4c:cf:b8:bf: 26:05:f2:15:76:83:81:f9:22:b8:3f:a3:73:33:aa: 2f:5d:a6:1a:3b:eb:7b:56:a3:b5:41:a1:74:43:0c: c4:c4:d3:b4:fc:8c:18:48:4e:35:57:ab:37:cc:d9: ca:f8:58:38:42:16:7a:22:37:c9:2c:8a:ef:95:2a: 4c:62:72:a6:ae:7f:96:32:06:d6:e4:df:78:54:a0: 7b:4c:87:fa:65:ca:b8:fd:b0:fd:2f:70:61:5d:6e: 23:20:da:ef:de:4c:4d:37:46:8e:f9:9b:5c:e9:02: 3c:71:04:00:4e:8b:92:01:20:f8:57:6a:db:0c:58: 9c:c7:a7:e5:54:56:72:bf:1e:df:f8:4b:f9:ab:bf: 93:c9:04:7d:a8:e6:42:58:69:51:4c:55:7e:d4:ca: 61:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E8:02:57:6D:EA:63:75:D2:2F:0F:76:E2:5F:04:0D:49:1F:97:48 X509v3 Authority Key Identifier: keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:d0:2f:49:82:06:71:a4:31:27:64:b7:05:b5:79:4a:9b:70: 80:73:01:3f:65:9c:68:62:cc:8a:85:73:5f:f8:fd:64:09:9e: 28:fa:c4:06:19:a1:ca:80:76:d5:29:55:6a:ab:94:f6:54:e6: 3d:04:fa:95:5b:e6:d9:f5:82:b9:4e:57:25:52:65:56:a5:6f: da:7f:be:ed:82:c1:1c:7a:b6:c3:f9:72:f2:2b:c6:38:08:42: ce:f4:68:5b:f6:a4:07:fd:42:09:78:ae:cc:6a:d9:e9:7a:cc: c8:1c:d8:d8:28:50:5a:9f:2f:b5:5f:f7:97:56:fb:7d:68:95: 4b:b1:3b:2a:62:b0:1e:a5:4d:61:9e:98:24:64:13:88:92:4c: cf:e5:ae:e9:5d:e7:2c:c9:12:4b:84:0f:2f:4d:2b:d2:84:e4: 5f:c2:59:9b:03:ea:aa:49:fd:02:25:71:35:59:4a:ff:a2:a5: 57:4b:69:ba:f0:99:dd:82:30:a3:5f:b8:7f:be:af:23:a9:9d: 97:61:11:34:ab:03:35:dc:5e:5f:3c:bc:7c:dd:eb:1c:97:2a: 51:10:14:5b:4a:15:c2:06:02:89:8a:5b:38:3c:d5:25:9a:27: 3c:b1:28:43:4e:de:bc:e9:29:78:d2:04:a4:4e:49:0b:84:dd: 84:e9:0b:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMDcxMTAvBgNVBAUTKDczODREQzY2N0I0RDQ5QTVBQ0Q1MEE1OEI0ODkxNkEx NUFDMjYxNkIwHhcNMjUwODIzMDQxMzE5WhcNMjUwODMwMDQxMzE5WjAYMRYwFAYD VQQDEw02OGE5M2ZkZi1mYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyf6+/5mHrIHQexmVerEqY/puv5egSgFLWZ5QD/BT3H2KZYEhIcxrZul8FVNJ tYgEIXyd8Zj0dMD5LlMslQazii6LCGBFiBvdRfOfStXHxX4mcQB6HfaxK9SowA6/ qZr02tdKDUzPuL8mBfIVdoOB+SK4P6NzM6ovXaYaO+t7VqO1QaF0QwzExNO0/IwY SE41V6s3zNnK+Fg4QhZ6IjfJLIrvlSpMYnKmrn+WMgbW5N94VKB7TIf6Zcq4/bD9 L3BhXW4jINrv3kxNN0aO+Ztc6QI8cQQATouSASD4V2rbDFicx6flVFZyvx7f+Ev5 q7+TyQR9qOZCWGlRTFV+1MphBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLoAldt 6mN10i8PduJfBA1JH5dIMB8GA1UdIwQYMBaAFHOE3GZ7TUmlrNUKWLSJFqFawmFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQwNy81MDU1NjBCNjZF N0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNhV3MxUXBZdElrV29WckNZ V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQwNy81MDU1NjBCNjZFN0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNh V3MxUXBZdElrV29WckNZV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz0C9JggZxpDEnZLcFtXlKm3CAcwE/ZZxoYsyKhXNf+P1kCZ4o+sQG GaHKgHbVKVVqq5T2VOY9BPqVW+bZ9YK5TlclUmVWpW/af77tgsEcerbD+XLyK8Y4 CELO9Ghb9qQH/UIJeK7MatnpeszIHNjYKFBany+1X/eXVvt9aJVLsTsqYrAepU1h npgkZBOIkkzP5a7pXecsyRJLhA8vTSvShORfwlmbA+qqSf0CJXE1WUr/oqVXS2m6 8JndgjCjX7h/vq8jqZ2XYRE0qwM13F5fPLx83esclypREBRbShXCBgKJils4PNUl mic8sShDTt686Sl40gSkTkkLhN2E6Qti -----END CERTIFICATE-----Generated at Sat Aug 23 23:39:30 2025 by rpki-client