$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft File: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft (raw, json) Hash identifier: VgcE4IGN2A5HDvouR77gVgvvxv7hlFztwgIU4mHd5pg= Subject key identifier: A9:91:9C:83:35:51:61:3C:B7:D3:30:A3:B7:71:9E:A7:C9:F0:CA:FE Authority key identifier: E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D Certificate issuer: /CN=A91F2B47/serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft Manifest number: 0250 Signing time: Sat 23 Aug 2025 02:05:16 +0000 Manifest this update: Sat 23 Aug 2025 02:05:15 +0000 Manifest next update: Sat 30 Aug 2025 02:05:15 +0000 Files and hashes: 1: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl (hash: a/AXAnVztlvR9lnFUda9I3JzSnT+kvwn0BexNyTPWXs=) 2: 909F94F070F911EDBA42F056C4F9AE02.roa (hash: J59LrtIyPPPdrZKXDpKJBMgQFNUlF3OmhLoyAq20BcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D Validity Not Before: Aug 23 02:05:15 2025 GMT Not After : Aug 30 02:05:15 2025 GMT Subject: CN=68a921db-fb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ac:28:ef:52:85:f6:ea:00:5b:ae:59:43:14: 69:b8:ec:fd:4f:e4:6e:42:5d:e5:28:51:a2:7e:af: 82:0e:ea:3a:2f:23:3d:0b:54:93:d8:2d:f8:8f:d2: 6e:e6:12:0c:47:3a:86:37:c6:96:2c:11:82:64:27: c1:0a:4b:b7:cf:c7:46:84:a2:99:2f:9e:32:97:dc: d5:42:1f:47:8e:24:26:ae:c6:f0:4b:a9:14:8e:9b: b7:6f:d9:6b:eb:64:75:2e:52:fd:3a:bf:54:03:ba: 2e:90:6d:5a:e3:cb:63:bd:38:4b:df:5d:44:12:1d: 72:3e:7b:79:5c:2a:34:4d:23:e7:95:3f:18:8f:9b: 2d:36:59:4e:74:51:8f:2b:45:2b:91:cf:31:18:46: f0:32:d5:42:b2:27:96:f9:ef:eb:36:09:f6:1a:8c: a6:1b:55:9e:60:65:01:c3:65:d2:62:de:13:be:0c: 07:69:ce:79:40:15:c0:3e:2f:37:33:57:e0:75:22: 5d:7b:cf:3a:a1:a7:87:cd:93:0c:9a:08:21:c5:a7: 30:ec:02:9e:b5:48:16:0a:61:02:6f:65:07:d1:17: 8c:db:a4:44:7e:1e:47:70:27:27:08:b4:b3:46:35: c6:61:1c:62:62:f9:1d:cc:35:ea:04:f1:fa:ee:31: 4c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:91:9C:83:35:51:61:3C:B7:D3:30:A3:B7:71:9E:A7:C9:F0:CA:FE X509v3 Authority Key Identifier: keyid:E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:96:3f:9d:06:c2:07:92:c4:05:22:ff:56:42:66:37:b0:f9: bd:03:94:c0:81:ac:d1:58:a6:0a:88:72:17:d7:bb:95:c2:20: b3:23:17:de:05:62:35:91:1c:84:44:5b:e2:cb:fd:e1:28:18: 9f:03:64:62:a3:6b:36:15:26:d1:27:08:44:40:d7:71:94:c1: 60:df:aa:75:b2:dd:e8:75:65:41:bb:08:b0:52:df:83:82:06: 62:db:50:d5:c8:6b:17:83:1b:04:be:6b:eb:9c:15:86:55:66: 19:bc:45:c1:07:bd:1d:98:0b:bd:31:be:be:08:ea:5e:63:86: 6e:df:95:98:e4:d5:af:13:92:37:1c:df:e2:de:d2:fc:b2:5c: 06:f9:ec:61:ed:f7:c7:1c:36:f1:06:5b:3b:63:ec:cd:93:92: 34:fc:7e:96:9a:d0:ff:e4:58:b8:f4:02:03:88:10:3e:40:21: 0b:dc:db:bc:41:7b:74:26:90:ee:84:99:7e:3d:28:7a:24:75: 2f:1e:31:ef:c9:0f:8a:6a:7e:5e:80:00:53:80:24:32:b4:6c: ca:ad:98:f1:56:1f:12:b8:c5:7e:5a:cc:9f:3b:98:00:50:5e: 64:39:01:71:59:2c:e4:ac:a5:54:de:e1:8f:47:d0:fe:3c:5e: 63:4b:09:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKEUxMTg5NkIwMEM5NDg2RTQzRUU3NDgwMkQyMTk2OUY4 ODhFRTRFMkQwHhcNMjUwODIzMDIwNTE1WhcNMjUwODMwMDIwNTE1WjAYMRYwFAYD VQQDEw02OGE5MjFkYi1mYjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Kwo71KF9uoAW65ZQxRpuOz9T+RuQl3lKFGifq+CDuo6LyM9C1ST2C34j9Ju 5hIMRzqGN8aWLBGCZCfBCku3z8dGhKKZL54yl9zVQh9HjiQmrsbwS6kUjpu3b9lr 62R1LlL9Or9UA7oukG1a48tjvThL311EEh1yPnt5XCo0TSPnlT8Yj5stNllOdFGP K0Urkc8xGEbwMtVCsieW+e/rNgn2GoymG1WeYGUBw2XSYt4TvgwHac55QBXAPi83 M1fgdSJde886oaeHzZMMmgghxacw7AKetUgWCmECb2UH0ReM26REfh5HcCcnCLSz RjXGYRxiYvkdzDXqBPH67jFMqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmRnIM1 UWE8t9Mwo7dxnqfJ8Mr+MB8GA1UdIwQYMBaAFOEYlrAMlIbkPudIAtIZafiI7k4t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9GMUZFMzJCQTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi80UmlXc0F5VWh1US01MGdDMGhscC1JanVU aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSaVdzQXlVaHVRLTUwZ0MwaGxwLUlqdVRpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9GMUZFMzJCQTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi80UmlXc0F5VWh1 US01MGdDMGhscC1JanVUaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBglj+dBsIHksQFIv9WQmY3sPm9A5TAgazRWKYKiHIX17uVwiCzIxfe BWI1kRyERFviy/3hKBifA2Rio2s2FSbRJwhEQNdxlMFg36p1st3odWVBuwiwUt+D ggZi21DVyGsXgxsEvmvrnBWGVWYZvEXBB70dmAu9Mb6+COpeY4Zu35WY5NWvE5I3 HN/i3tL8slwG+exh7ffHHDbxBls7Y+zNk5I0/H6WmtD/5Fi49AIDiBA+QCEL3Nu8 QXt0JpDuhJl+PSh6JHUvHjHvyQ+Kan5egABTgCQytGzKrZjxVh8SuMV+WsyfO5gA UF5kOQFxWSzkrKVU3uGPR9D+PF5jSwn5 -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:05 2025 by rpki-client