$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft File: 4CEd1HfFtNoX56IChgOs2OcWZrU.mft (raw, json) Hash identifier: FZ0IFftIdySA+EjhZoIz8dBbqFfKaHWfdf/SzGF1BIs= Subject key identifier: 04:47:0A:9B:40:10:FA:A3:06:5A:71:45:BD:85:44:46:B8:8E:9A:AC Authority key identifier: E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 Certificate issuer: /CN=A91EB1BE/serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Certificate serial: 1300 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft Manifest number: 12EF Signing time: Fri 22 Aug 2025 17:10:45 +0000 Manifest this update: Fri 22 Aug 2025 17:10:44 +0000 Manifest next update: Fri 29 Aug 2025 17:10:44 +0000 Files and hashes: 1: 4CEd1HfFtNoX56IChgOs2OcWZrU.crl (hash: qyV9bnCEYiaczWMIBiQEACr6juzU2gWghLA56koMLeU=) 2: 31E1DE72B04B11EE9F3B384BC4F9AE02.roa (hash: SUqha04b2ntyDAUGFXYiqHZijUV69AXBCBCtIkXQ4as=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4864 (0x1300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB1BE, serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Validity Not Before: Aug 22 17:10:44 2025 GMT Not After : Aug 29 17:10:44 2025 GMT Subject: CN=68a8a495-1167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:5a:9a:f2:3b:a5:3f:f2:c9:b3:ca:73:31: 58:96:0c:c3:7c:9a:71:1d:52:c2:75:9e:63:42:93: 84:dd:1d:27:fa:9c:92:5a:15:b1:aa:65:a8:2a:75: 42:8c:9d:85:8d:18:31:87:80:6a:17:60:a8:0a:86: 53:ec:8d:c6:1f:22:72:07:c1:78:c8:3e:87:37:1f: 29:15:15:f0:8b:78:09:b5:15:68:e3:41:cc:15:9e: fe:63:df:bb:bd:14:98:3e:8f:6c:bd:e6:81:44:5f: 74:1a:49:cb:32:d7:ae:f3:fe:b4:27:29:bc:a5:eb: 64:ac:e6:bc:7e:cb:46:e2:bd:16:0c:f0:e3:b9:e7: 1b:37:1b:bd:55:d1:0b:8b:b9:0c:cc:46:9b:44:bc: ff:4e:ed:66:41:64:ca:c5:ac:d2:d9:cb:cc:38:1d: 81:e7:2d:08:c3:4e:6b:35:f7:74:2f:f0:61:50:99: 83:50:1f:8f:32:2a:02:a7:2a:3e:c5:60:d5:8e:f4: df:22:fb:83:9e:0a:cb:b3:2a:79:09:8a:76:83:52: a2:fc:95:16:ee:3c:d7:ad:c3:c8:72:fb:c6:6c:bf: 61:55:d3:16:94:97:d4:c0:3e:2e:15:cc:80:43:7a: e1:69:05:33:be:14:32:2f:f2:14:10:be:25:23:a6: aa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:47:0A:9B:40:10:FA:A3:06:5A:71:45:BD:85:44:46:B8:8E:9A:AC X509v3 Authority Key Identifier: keyid:E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:c3:39:3f:e2:9c:a2:e0:17:1e:a3:da:77:e5:40:ac:17:4b: 04:3f:9d:1f:0e:19:c0:c1:8f:da:36:59:ab:a6:b4:93:2b:b6: b7:2f:f3:29:a4:4f:a9:24:39:47:65:ae:29:12:0f:5d:46:0b: 6c:79:a9:3a:5f:e6:77:a9:25:af:c7:9a:71:50:bf:f5:77:9a: 11:57:1b:a4:13:c9:5f:3e:33:dd:53:4c:8b:c4:2b:f9:5b:70: 66:a7:f0:d4:d1:9d:3b:35:dc:eb:ab:a7:f7:a2:ce:fa:ee:bb: 17:aa:6c:a6:de:c9:28:35:61:c4:61:04:11:77:28:2d:ff:5d: 4a:a6:fc:52:d8:96:7f:e6:91:79:33:1a:7b:3a:8e:38:20:78: 37:72:46:df:73:d5:34:e9:66:c2:91:dc:b3:be:b9:38:fb:b8: e4:36:28:1e:3e:c0:af:ab:24:52:93:7b:38:3b:68:82:ea:be: 96:f9:ef:b5:ee:e9:e1:fb:3c:bc:c2:f4:9e:a9:3e:dc:8b:3a: e4:6e:d3:f2:79:92:f9:47:ce:e8:47:ce:50:cf:2d:db:06:d8: 9a:59:d3:c7:a7:c8:87:86:cd:8b:3a:fb:10:df:34:e9:cb:03: 51:a6:de:e0:c1:e9:dd:64:1f:f9:c0:6f:db:cd:e2:f0:bc:73: 84:7c:43:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIxQkUxMTAvBgNVBAUTKEUwMjExREQ0NzdDNUI0REExN0U3QTIwMjg2MDNBQ0Q4 RTcxNjY2QjUwHhcNMjUwODIyMTcxMDQ0WhcNMjUwODI5MTcxMDQ0WjAYMRYwFAYD VQQDEw02OGE4YTQ5NS0xMTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gVamvI7pT/yybPKczFYlgzDfJpxHVLCdZ5jQpOE3R0n+pySWhWxqmWoKnVC jJ2FjRgxh4BqF2CoCoZT7I3GHyJyB8F4yD6HNx8pFRXwi3gJtRVo40HMFZ7+Y9+7 vRSYPo9sveaBRF90GknLMteu8/60Jym8petkrOa8fstG4r0WDPDjuecbNxu9VdEL i7kMzEabRLz/Tu1mQWTKxazS2cvMOB2B5y0Iw05rNfd0L/BhUJmDUB+PMioCpyo+ xWDVjvTfIvuDngrLsyp5CYp2g1Ki/JUW7jzXrcPIcvvGbL9hVdMWlJfUwD4uFcyA Q3rhaQUzvhQyL/IUEL4lI6aq8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARHCptA EPqjBlpxRb2FREa4jpqsMB8GA1UdIwQYMBaAFOAhHdR3xbTaF+eiAoYDrNjnFma1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjFCRS81QTU3Nzg2Q0Mw QzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnROb1g1NklDaGdPczJPY1da clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDRWQxSGZGdE5vWDU2SUNoZ09zMk9jV1pyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjFCRS81QTU3Nzg2Q0MwQzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnRO b1g1NklDaGdPczJPY1daclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkwzk/4pyi4Bceo9p35UCsF0sEP50fDhnAwY/aNlmrprSTK7a3L/Mp pE+pJDlHZa4pEg9dRgtseak6X+Z3qSWvx5pxUL/1d5oRVxukE8lfPjPdU0yLxCv5 W3Bmp/DU0Z07Ndzrq6f3os767rsXqmym3skoNWHEYQQRdygt/11KpvxS2JZ/5pF5 Mxp7Oo44IHg3ckbfc9U06WbCkdyzvrk4+7jkNigePsCvqyRSk3s4O2iC6r6W+e+1 7unh+zy8wvSeqT7cizrkbtPyeZL5R87oR85Qzy3bBtiaWdPHp8iHhs2LOvsQ3zTp ywNRpt7gwendZB/5wG/bzeLwvHOEfEPu -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:24 2025 by rpki-client