$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft File: 4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json) Hash identifier: IfQiYBScKp5Jb95nMxNTbGxaNnza/96JzTWuVm3UceY= Subject key identifier: A7:A9:6A:79:59:1E:B7:7F:95:F3:7D:3E:C5:8B:C4:2B:3B:7F:2F:85 Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 Certificate issuer: /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Certificate serial: 08FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft Manifest number: 08EE Signing time: Fri 22 Aug 2025 20:31:25 +0000 Manifest this update: Fri 22 Aug 2025 20:31:25 +0000 Manifest next update: Fri 29 Aug 2025 20:31:25 +0000 Files and hashes: 1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: yfKCElyL55IayPIMqmoyQR8xlolCER0daaNL76Ks/U0=) 2: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: hfrhHFCjm9A1IZZ68jj/fGY3wp72/JwweOhEQKmJp+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2301 (0x8fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Validity Not Before: Aug 22 20:31:25 2025 GMT Not After : Aug 29 20:31:25 2025 GMT Subject: CN=68a8d39d-a4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:90:15:7c:75:10:83:2a:a1:3b:91:d2:01: 21:1f:0a:78:a6:61:d9:26:51:4f:f4:f1:75:cb:c5: bb:c8:ed:37:bb:6d:23:d4:b2:e2:bc:e1:89:4c:af: e8:52:5f:84:52:ce:bf:b0:5b:07:07:d5:79:16:19: 24:1c:ef:ab:b7:50:63:ca:11:67:93:d5:4c:3c:19: 59:d9:5d:25:86:7d:da:ac:cf:42:ef:95:25:cd:4d: 25:7f:2e:80:0f:c2:4d:cd:35:46:91:e6:48:69:04: fd:c9:27:4e:5e:2a:17:39:5d:03:43:73:1e:92:27: 19:57:e5:74:4c:64:9c:cf:4f:0e:c4:7b:41:a9:a3: d4:f4:d0:ff:af:5b:ed:0b:3c:0a:93:e7:b3:f4:ac: 45:67:06:c7:66:af:9a:a4:ba:a2:ef:72:a3:57:16: 8e:82:3f:ac:3f:92:43:ff:d7:dc:6e:17:ce:49:d6: 28:24:30:77:cb:56:2c:96:9b:5c:92:a7:94:54:39: 46:f7:61:b9:2c:31:d7:28:2c:f9:79:7a:a9:c2:d1: bd:ed:b9:9b:99:b6:40:5a:0a:96:28:02:55:f7:04: 51:44:68:c3:93:98:82:27:e6:1a:6f:98:03:6c:ea: ec:73:24:6b:21:49:55:a2:c0:24:a6:8d:58:8a:6b: 16:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A9:6A:79:59:1E:B7:7F:95:F3:7D:3E:C5:8B:C4:2B:3B:7F:2F:85 X509v3 Authority Key Identifier: keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:63:56:d3:e5:b6:85:d6:19:5d:2b:13:da:ab:f8:bc:c6:a2: 6d:af:0c:69:7d:a0:74:73:3d:1b:78:7c:10:d3:6d:01:d7:eb: 32:25:64:6b:dd:bd:a8:da:fa:29:1c:91:07:b7:cb:6d:f3:00: d1:3d:4a:7a:40:48:0e:d7:f4:2c:09:fb:ef:61:17:09:52:7e: 17:44:d7:7c:e6:03:ec:18:a0:55:6f:41:b6:fa:bd:a0:58:71: 24:d8:50:e9:ac:fc:6b:ec:ce:08:cd:08:45:65:5b:2b:7a:19: c1:d2:ed:dd:84:1b:21:a5:ab:29:61:45:d2:28:2a:ea:e2:3f: e6:9a:aa:e4:9f:17:d0:c1:b5:7b:1a:b9:aa:6b:56:7a:ff:e2: 4a:c8:2d:b6:06:71:d1:29:4a:c3:64:4b:c1:65:83:6f:e8:ae: 91:cb:dd:72:97:1a:3c:b9:70:98:9a:80:6e:46:74:72:e8:95: 7d:78:5e:18:2f:e6:bb:b3:96:10:86:d1:3a:a1:d7:01:8c:80: f6:39:39:0f:f2:1f:7e:9d:eb:40:0e:aa:cf:32:57:55:8f:93: 7f:09:9e:29:6c:eb:a0:a7:30:2f:d0:b4:fd:f1:e7:2d:79:34: ca:64:28:12:c1:e5:9e:d3:4c:02:5d:0b:31:fc:0f:b8:d0:b8: 02:6e:19:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRDNkIxMTAvBgNVBAUTKEUyNjg3M0I0NUY4OEQxRjVEODgzQzE3RTRDQ0Y3MEEy NDUxNjIxNDIwHhcNMjUwODIyMjAzMTI1WhcNMjUwODI5MjAzMTI1WjAYMRYwFAYD VQQDEw02OGE4ZDM5ZC1hNGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4KQFXx1EIMqoTuR0gEhHwp4pmHZJlFP9PF1y8W7yO03u20j1LLivOGJTK/o Ul+EUs6/sFsHB9V5FhkkHO+rt1BjyhFnk9VMPBlZ2V0lhn3arM9C75UlzU0lfy6A D8JNzTVGkeZIaQT9ySdOXioXOV0DQ3MekicZV+V0TGScz08OxHtBqaPU9ND/r1vt CzwKk+ez9KxFZwbHZq+apLqi73KjVxaOgj+sP5JD/9fcbhfOSdYoJDB3y1Yslptc kqeUVDlG92G5LDHXKCz5eXqpwtG97bmbmbZAWgqWKAJV9wRRRGjDk5iCJ+Yab5gD bOrscyRrIUlVosAkpo1YimsWgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKepanlZ Hrd/lfN9PsWLxCs7fy+FMB8GA1UdIwQYMBaAFOJoc7RfiNH12IPBfkzPcKJFFiFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEM2Qi8yNzhBQTNFNEI1 MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBmWFlnOEYtVE05d29rVVdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRtaHp0Ri1JMGZYWWc4Ri1UTTl3b2tVV0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEM2Qi8yNzhBQTNFNEI1MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBm WFlnOEYtVE05d29rVVdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAY1bT5baF1hldKxPaq/i8xqJtrwxpfaB0cz0beHwQ020B1+syJWRr 3b2o2vopHJEHt8tt8wDRPUp6QEgO1/QsCfvvYRcJUn4XRNd85gPsGKBVb0G2+r2g WHEk2FDprPxr7M4IzQhFZVsrehnB0u3dhBshpaspYUXSKCrq4j/mmqrknxfQwbV7 Grmqa1Z6/+JKyC22BnHRKUrDZEvBZYNv6K6Ry91ylxo8uXCYmoBuRnRy6JV9eF4Y L+a7s5YQhtE6odcBjID2OTkP8h9+netADqrPMldVj5N/CZ4pbOugpzAv0LT98ect eTTKZCgSweWe00wCXQsx/A+40LgCbhmt -----END CERTIFICATE-----Generated at Sat Aug 23 17:31:40 2025 by rpki-client