$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft File: 4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json) Hash identifier: hMzT3It8ujrWngxny3FYjImY0+ADTn+Xu50pjHY83o8= Subject key identifier: DF:28:90:3F:C6:1A:B2:7B:FD:87:C0:1E:4A:14:B9:06:34:E0:8B:14 Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft Manifest number: 02A5 Signing time: Sat 23 Aug 2025 01:47:25 +0000 Manifest this update: Sat 23 Aug 2025 01:47:24 +0000 Manifest next update: Sat 30 Aug 2025 01:47:24 +0000 Files and hashes: 1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: 6LaLt7dE6JQ5qTOHrBfttW1Z9fJvVPTr42CyPvMRbFE=) 2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: h+ue+R5DGdF0uaqUXBTnmoh/DYvzHxp90t2bN+4sANk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Validity Not Before: Aug 23 01:47:24 2025 GMT Not After : Aug 30 01:47:24 2025 GMT Subject: CN=68a91dac-2b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:36:e5:ff:cc:6c:7b:46:0f:5f:22:ed:bc: 97:88:1f:47:2a:ba:8e:0b:57:a2:7f:f3:ca:19:01: 46:9b:8c:00:4a:50:6f:c8:9e:fa:aa:b8:ec:d5:91: c6:3b:97:a5:d2:9e:53:e1:98:67:d8:15:6c:4c:b7: 52:e4:1b:e1:68:d1:07:8c:09:15:90:7c:73:48:f8: 45:28:be:b2:f9:c0:5b:40:ee:51:38:93:9b:9d:b1: 73:ad:b7:93:d7:80:d3:7f:94:c2:ee:2b:9c:0e:d2: 80:25:8b:c1:ea:6d:86:d7:0a:ee:a4:93:da:6c:d2: c2:7a:ef:c9:cd:ff:65:e6:6f:79:de:75:99:ad:c1: d5:c5:eb:f5:b0:20:73:f5:8b:d8:ad:43:81:1c:8e: 4c:1d:67:80:d9:f0:ac:5b:78:d9:65:1f:9b:10:5a: ec:96:ec:78:90:d2:67:8f:aa:33:24:81:a8:ac:a0: a7:24:c6:c1:d1:12:34:d0:71:3b:47:46:b5:1e:4d: c7:00:5a:fd:89:02:14:6a:2c:94:6a:67:7b:8b:7c: a8:1b:54:dd:c9:f2:1f:58:0a:97:f4:04:19:f7:cb: 30:8d:e0:bd:73:06:85:f1:7a:ca:54:00:be:9e:d7: 2f:75:3e:eb:b1:84:26:17:35:c1:5b:f9:88:49:c4: 62:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:28:90:3F:C6:1A:B2:7B:FD:87:C0:1E:4A:14:B9:06:34:E0:8B:14 X509v3 Authority Key Identifier: keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a8:69:91:b6:63:04:aa:98:93:f5:d8:00:fe:02:3d:d3:c7: b2:bf:ba:33:a6:9a:ce:0d:16:bf:3a:7c:b7:ee:41:6e:1b:11: 11:e1:46:3c:0b:f1:70:82:dc:ac:07:1e:41:01:df:b3:1a:2d: ed:dd:b5:52:a8:cd:d6:ee:cc:df:1a:f9:9b:1e:b8:f0:ad:87: 7d:d7:d7:a2:e0:55:34:2c:aa:2e:41:4c:a0:25:c9:31:df:9c: 42:d5:1b:46:3c:e6:be:9f:cc:46:49:f1:2b:2e:0e:40:3f:4a: 33:6c:4b:3a:de:29:d5:74:76:d1:4e:5a:fe:7f:a3:0a:f1:94: a3:82:a1:0f:42:4b:cd:3e:d1:09:96:dd:04:cb:f2:3c:4a:3a: 50:20:38:72:d7:bf:37:b6:8e:b5:a3:0b:9c:b9:80:94:06:c7: a2:7c:1c:8e:55:8e:bc:8c:c0:ca:ce:ca:29:2f:4d:aa:58:c2: e0:8b:1e:6f:be:e0:ae:db:c5:79:b6:b8:fd:68:6e:cf:ec:b8: 51:a8:e7:0a:3a:97:bd:2d:ff:48:e9:74:8f:58:ed:29:3c:45: d1:89:af:71:6c:18:0e:0f:0a:88:89:0c:58:8d:7f:dc:2d:fe: 2e:fe:7b:4e:a9:df:df:8b:b8:cc:29:6d:54:2d:89:23:56:e7: fd:54:89:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1RDkxMTAvBgNVBAUTKEUzMUU2N0NBMEU1QkVEQjI0OEY5N0E2NTdERUZGNjJF Qzg2RjUyNEIwHhcNMjUwODIzMDE0NzI0WhcNMjUwODMwMDE0NzI0WjAYMRYwFAYD VQQDEw02OGE5MWRhYy0yYjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqw25f/MbHtGD18i7byXiB9HKrqOC1eif/PKGQFGm4wASlBvyJ76qrjs1ZHG O5el0p5T4Zhn2BVsTLdS5BvhaNEHjAkVkHxzSPhFKL6y+cBbQO5ROJObnbFzrbeT 14DTf5TC7iucDtKAJYvB6m2G1wrupJPabNLCeu/Jzf9l5m953nWZrcHVxev1sCBz 9YvYrUOBHI5MHWeA2fCsW3jZZR+bEFrslux4kNJnj6ozJIGorKCnJMbB0RI00HE7 R0a1Hk3HAFr9iQIUaiyUamd7i3yoG1TdyfIfWAqX9AQZ98swjeC9cwaF8XrKVAC+ ntcvdT7rsYQmFzXBW/mIScRijQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8okD/G GrJ7/YfAHkoUuQY04IsUMB8GA1UdIwQYMBaAFOMeZ8oOW+2ySPl6ZX3v9i7Ib1JL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDVEOS84OUU4N0ZFMDBD QzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1YjdiSkktWHBsZmVfMkxzaHZV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4NW55ZzViN2JKSS1YcGxmZV8yTHNodlVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDVEOS84OUU4N0ZFMDBDQzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1Yjdi SkktWHBsZmVfMkxzaHZVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIqGmRtmMEqpiT9dgA/gI908eyv7ozpprODRa/Ony37kFuGxER4UY8 C/FwgtysBx5BAd+zGi3t3bVSqM3W7szfGvmbHrjwrYd919ei4FU0LKouQUygJckx 35xC1RtGPOa+n8xGSfErLg5AP0ozbEs63inVdHbRTlr+f6MK8ZSjgqEPQkvNPtEJ lt0Ey/I8SjpQIDhy1783to61owucuYCUBseifByOVY68jMDKzsopL02qWMLgix5v vuCu28V5trj9aG7P7LhRqOcKOpe9Lf9I6XSPWO0pPEXRia9xbBgODwqIiQxYjX/c Lf4u/ntOqd/fi7jMKW1ULYkjVuf9VIkF -----END CERTIFICATE-----Generated at Sun Aug 24 04:36:10 2025 by rpki-client