$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: kgKDFugFC6xmopfaQuz/0/5LnOVajnp4vKk0RTcdwCM= Subject key identifier: 7E:75:8D:41:D5:99:44:7D:9A:79:DB:85:61:33:D9:24:4C:B4:AF:B4 Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 0204 Signing time: Sat 23 Aug 2025 02:23:25 +0000 Manifest this update: Sat 23 Aug 2025 02:23:25 +0000 Manifest next update: Sat 30 Aug 2025 02:23:25 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: RDib7jcpOm7oxVOAyXTg00b4qlPXrVJtji4WCAIKsI0=) 2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: Ple4OYydaAojanyJwx7ZWPyKox9DD4lFfc6gQi2CwTI=) 3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: iBZ0Vc5oqFw84Bi0mykH6jGLVo3+N0cmUjqo5T+vIIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: Aug 23 02:23:25 2025 GMT Not After : Aug 30 02:23:25 2025 GMT Subject: CN=68a9261d-1ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2f:dd:da:79:13:5d:be:9b:f7:0b:c8:0f:cc: 2b:aa:74:4c:30:46:1d:34:1d:c0:75:de:eb:da:83: be:74:09:a3:e3:c2:13:92:a9:b4:e5:ff:3c:75:5b: eb:38:ed:e0:6c:15:90:2e:97:f4:a5:03:dc:de:4a: 07:71:65:60:2c:56:81:0c:8c:bf:58:1c:4d:bb:6b: 9b:6d:c4:b4:72:60:4a:c6:ad:40:df:73:9e:f4:3a: 3d:65:e4:15:2b:ff:14:e8:28:5f:50:51:29:ac:31: 7b:43:0c:ed:96:70:48:c3:57:a6:e3:6d:0d:45:79: e5:8e:cd:fc:45:f4:35:1a:b3:cc:a7:fb:b1:4c:51: a5:c6:c5:a9:8b:16:ac:f8:cf:63:92:fe:cf:63:4d: 92:1b:07:e2:1d:44:45:4c:ed:dd:2f:ce:9d:94:a3: 48:74:a2:34:10:f4:7b:80:d9:a4:2c:12:87:12:c7: 3f:4f:b7:9e:9a:0e:a1:43:fc:98:6b:e3:16:8c:a0: 3f:14:bd:e6:1c:43:b5:ad:65:28:19:7c:ff:0c:cb: c7:68:fc:52:54:14:8a:80:59:a3:3d:3c:e9:3a:34: 0f:e9:19:8e:27:1f:22:5e:4d:d7:27:bb:8f:50:8f: 40:87:5c:35:9e:ec:4c:f2:27:a8:3f:20:5d:3b:54: 19:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:75:8D:41:D5:99:44:7D:9A:79:DB:85:61:33:D9:24:4C:B4:AF:B4 X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:e0:e7:62:5c:08:bf:3f:f4:6f:4d:5f:f6:7d:23:fc:74:04: 36:a8:a3:0b:b2:a6:8c:50:f0:7f:db:97:b1:16:77:10:6d:52: 16:bc:83:53:fa:76:45:ce:60:81:08:ff:09:21:c6:e1:d5:45: ec:76:ef:11:66:01:74:95:81:e0:61:e0:e4:eb:17:9c:7c:2f: 67:fe:d7:1f:e0:c7:72:15:67:d2:41:de:d1:64:97:1a:8f:3c: a5:b0:8f:31:58:40:47:80:36:ec:05:04:71:76:ef:57:f5:c2: 39:9f:a4:c8:e6:9f:a7:78:7a:87:6c:3b:81:aa:3f:6a:e9:5a: 8a:72:b4:fd:da:48:41:4c:16:a2:38:c6:0e:61:6d:2a:f6:c7: e7:9f:53:72:63:c0:9b:67:0f:21:a5:91:c5:fc:98:fa:d3:2f: 8b:14:e0:d8:f9:4f:e8:09:7b:71:f0:49:3f:77:1c:73:e3:22: 6d:c7:ed:05:1c:b2:4d:c1:51:f3:d0:1b:7c:12:eb:fb:e4:ff: e8:8b:73:0b:d9:da:eb:ba:6c:02:ae:ce:c9:85:e6:2c:b1:3f: 14:30:06:90:8c:ad:a9:d1:c6:3e:a3:89:b2:6b:cc:1d:83:f2: a3:99:ce:66:d3:2e:ac:bb:60:a9:11:6f:7a:37:fa:28:24:91: d5:e0:77:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjUwODIzMDIyMzI1WhcNMjUwODMwMDIyMzI1WjAYMRYwFAYD VQQDEw02OGE5MjYxZC0xZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1C/d2nkTXb6b9wvID8wrqnRMMEYdNB3Add7r2oO+dAmj48ITkqm05f88dVvr OO3gbBWQLpf0pQPc3koHcWVgLFaBDIy/WBxNu2ubbcS0cmBKxq1A33Oe9Do9ZeQV K/8U6ChfUFEprDF7QwztlnBIw1em420NRXnljs38RfQ1GrPMp/uxTFGlxsWpixas +M9jkv7PY02SGwfiHURFTO3dL86dlKNIdKI0EPR7gNmkLBKHEsc/T7eemg6hQ/yY a+MWjKA/FL3mHEO1rWUoGXz/DMvHaPxSVBSKgFmjPTzpOjQP6RmOJx8iXk3XJ7uP UI9Ah1w1nuxM8ieoPyBdO1QZwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH51jUHV mUR9mnnbhWEz2SRMtK+0MB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz4OdiXAi/P/RvTV/2fSP8dAQ2qKMLsqaMUPB/25exFncQbVIWvINT +nZFzmCBCP8JIcbh1UXsdu8RZgF0lYHgYeDk6xecfC9n/tcf4MdyFWfSQd7RZJca jzylsI8xWEBHgDbsBQRxdu9X9cI5n6TI5p+neHqHbDuBqj9q6VqKcrT92khBTBai OMYOYW0q9sfnn1NyY8CbZw8hpZHF/Jj60y+LFODY+U/oCXtx8Ek/dxxz4yJtx+0F HLJNwVHz0Bt8Euv75P/oi3ML2drrumwCrs7JheYssT8UMAaQjK2p0cY+o4mya8wd g/Kjmc5m0y6su2CpEW96N/ooJJHV4Hd1 -----END CERTIFICATE-----Generated at Sat Aug 23 20:36:55 2025 by rpki-client