$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft File: 4deDfrzHqaTRdRZXhgR2OivQQnI.mft (raw, json) Hash identifier: taTXnCbZx89+PZlqUc6eW0r6WHyT4R69L4xRKfeAqOU= Subject key identifier: D5:68:6A:B5:EE:07:37:13:65:1E:3E:20:09:2B:61:9F:53:AC:02:AB Authority key identifier: E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 Certificate issuer: /CN=A91EE92F/serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft Manifest number: B1 Signing time: Sat 23 Aug 2025 06:17:22 +0000 Manifest this update: Sat 23 Aug 2025 06:17:21 +0000 Manifest next update: Sat 30 Aug 2025 06:17:21 +0000 Files and hashes: 1: 4deDfrzHqaTRdRZXhgR2OivQQnI.crl (hash: x8mwPNiuTPEIDuLBirLxLzz0Q6o5i2IT+EHAKTyMoug=) 2: 2EC0897A740C11EFB881CE37C4F9AE02.roa (hash: jK7WeiMtYEjncK+3WbHQbUVCOX5jz02RAdo98TCxxKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F, serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Validity Not Before: Aug 23 06:17:21 2025 GMT Not After : Aug 30 06:17:21 2025 GMT Subject: CN=68a95cf2-b34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2b:95:8f:85:4c:2b:13:0b:f8:9c:ca:28:52: 01:4b:5f:9a:1b:93:50:7d:23:93:71:ae:b8:68:03: 47:b9:6e:b5:fb:82:21:4e:45:a8:a6:fd:c6:35:c6: a8:e7:84:7d:41:59:9a:d7:01:93:7d:70:4c:e0:9b: b3:6d:de:e4:07:50:07:29:ec:a7:21:73:53:54:5f: 89:0e:35:ee:1a:eb:9a:b2:ea:97:61:9b:a9:99:a8: 7d:c1:ce:95:df:a3:46:42:65:0c:1f:64:93:ab:65: 21:21:05:27:b7:ec:af:3d:c8:fd:20:28:8d:dd:eb: 71:2a:91:6e:70:61:88:13:9d:7d:5e:43:4b:4f:5a: b3:9a:57:e0:a9:8d:0b:f0:83:71:1d:97:08:65:c9: 92:b9:08:39:6a:40:61:f4:15:c1:55:00:5b:6b:51: e7:8c:e7:40:1c:03:f6:70:38:4c:b0:09:0e:30:45: b0:8d:da:99:b7:a7:be:6f:70:d8:2d:5e:d2:10:a8: 88:62:67:e0:2b:c5:e4:61:31:52:24:e0:36:47:f1: 36:4d:cb:40:09:8b:1b:b1:f6:22:34:33:09:38:d3: dd:b5:8b:49:b5:a0:a2:a1:eb:c4:be:27:15:bf:7c: 3c:71:d2:c3:35:54:df:17:c5:f4:9d:a0:af:25:2f: 0a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:68:6A:B5:EE:07:37:13:65:1E:3E:20:09:2B:61:9F:53:AC:02:AB X509v3 Authority Key Identifier: keyid:E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:fd:e2:15:9e:65:f8:21:98:4d:5c:32:0a:47:13:52:9b:ea: 08:0e:91:2c:ea:a0:ab:a7:94:87:02:f6:f9:95:9f:0a:05:26: f3:80:19:31:48:06:a3:3f:42:18:44:e6:81:bd:88:c0:b2:34: 92:41:54:18:8d:53:b3:3f:fc:a8:35:66:80:35:8f:82:50:25: e4:a1:6b:1a:ab:e4:11:10:38:f8:65:7e:52:6a:9c:26:37:36: 16:e9:eb:8a:a9:bb:a8:d4:2d:a5:d9:02:53:9c:92:81:84:de: 7f:c5:68:43:15:a0:40:c6:f9:e8:c2:31:4f:1e:75:1c:76:ed: cb:e7:4a:e4:a9:c2:87:d1:90:75:f2:93:80:c9:62:dc:27:47: f7:9c:2c:70:5e:14:36:40:a8:8e:8b:6a:c3:50:f5:97:d9:c7: 5d:bd:82:36:93:2c:00:33:f3:ea:75:25:73:b7:90:29:58:3e: d8:dd:73:c3:ef:74:19:3a:1e:ff:69:d6:cc:fc:67:8f:2f:88: 6b:19:8f:65:ea:99:da:e0:39:09:32:9b:70:c4:33:11:e5:e1: 6c:e0:ce:47:fc:7c:12:b1:1e:c6:a3:8f:f9:72:55:3f:ca:b4: 5d:ac:b0:8e:ae:20:3b:be:4f:02:84:e5:b4:26:87:52:9d:30: b9:c1:95:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5MkYxMTAvBgNVBAUTKEUxRDc4MzdFQkNDN0E5QTREMTc1MTY1Nzg2MDQ3NjNB MkJEMDQyNzIwHhcNMjUwODIzMDYxNzIxWhcNMjUwODMwMDYxNzIxWjAYMRYwFAYD VQQDEw02OGE5NWNmMi1iMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziuVj4VMKxML+JzKKFIBS1+aG5NQfSOTca64aANHuW61+4IhTkWopv3GNcao 54R9QVma1wGTfXBM4Juzbd7kB1AHKeynIXNTVF+JDjXuGuuasuqXYZupmah9wc6V 36NGQmUMH2STq2UhIQUnt+yvPcj9ICiN3etxKpFucGGIE519XkNLT1qzmlfgqY0L 8INxHZcIZcmSuQg5akBh9BXBVQBba1HnjOdAHAP2cDhMsAkOMEWwjdqZt6e+b3DY LV7SEKiIYmfgK8XkYTFSJOA2R/E2TctACYsbsfYiNDMJONPdtYtJtaCioevEvicV v3w8cdLDNVTfF8X0naCvJS8KmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVoarXu BzcTZR4+IAkrYZ9TrAKrMB8GA1UdIwQYMBaAFOHXg368x6mk0XUWV4YEdjor0EJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTkyRi8xQjI5MEI1RTc0 MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi80ZGVEZnJ6SHFhVFJkUlpYaGdSMk9pdlFR bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkZURmcnpIcWFUUmRSWlhoZ1IyT2l2UVFuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTkyRi8xQjI5MEI1RTc0MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi80ZGVEZnJ6SHFh VFJkUlpYaGdSMk9pdlFRbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg/eIVnmX4IZhNXDIKRxNSm+oIDpEs6qCrp5SHAvb5lZ8KBSbzgBkx SAajP0IYROaBvYjAsjSSQVQYjVOzP/yoNWaANY+CUCXkoWsaq+QREDj4ZX5Sapwm NzYW6euKqbuo1C2l2QJTnJKBhN5/xWhDFaBAxvnowjFPHnUcdu3L50rkqcKH0ZB1 8pOAyWLcJ0f3nCxwXhQ2QKiOi2rDUPWX2cddvYI2kywAM/PqdSVzt5ApWD7Y3XPD 73QZOh7/adbM/GePL4hrGY9l6pna4DkJMptwxDMR5eFs4M5H/HwSsR7Go4/5clU/ yrRdrLCOriA7vk8ChOW0JodSnTC5wZWM -----END CERTIFICATE-----Generated at Sat Aug 23 16:06:53 2025 by rpki-client