$ rpki-client -vvf rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft File: 4WPw_lTxea9MbAlwmP774tQ4Wxk.mft (raw, json) Hash identifier: 7WyFG8gpoGif0K8X44KVfXA1ZJ7UEG5sfMdf7ViWlUI= Subject key identifier: F8:A6:EF:2F:CE:B8:4E:AA:A6:1D:67:FE:B3:E6:9A:AE:A1:E0:D4:AF Authority key identifier: E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 Certificate issuer: /CN=A91F54CD/serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft Manifest number: 58 Signing time: Sat 23 Aug 2025 07:27:46 +0000 Manifest this update: Sat 23 Aug 2025 07:27:45 +0000 Manifest next update: Sat 30 Aug 2025 07:27:45 +0000 Files and hashes: 1: 4WPw_lTxea9MbAlwmP774tQ4Wxk.crl (hash: Dq3fJycVQYHZuhTgHwyUMKPbclfjjQZQjkICHc8/W2M=) 2: 2CA96408FD8811EF9404CD48C4F9AE02.roa (hash: ijzYb1r/oyAKx1Hjreuyv8IcJPnhFB/m1NQeL+FUTHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F54CD, serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Validity Not Before: Aug 23 07:27:45 2025 GMT Not After : Aug 30 07:27:45 2025 GMT Subject: CN=68a96d71-9017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:99:23:bf:20:a2:0d:0f:80:c6:9a:0f:15: eb:8b:35:a0:d1:e9:85:47:6b:d1:6a:fc:8d:42:ea: 6a:b6:87:2c:21:2c:f3:9f:1f:71:b3:6d:f2:c9:df: 31:8a:8f:cc:cb:d5:87:12:e5:71:e3:0a:ba:c5:a2: 22:c9:02:88:da:eb:26:58:4a:08:c0:1e:c2:dc:64: 5c:59:0d:d7:08:0c:4a:7d:ce:f2:f1:16:39:73:bb: ef:86:b8:e1:99:c6:41:d1:15:27:9b:1a:70:00:2e: c9:d0:8e:05:fb:9c:77:85:7a:59:f1:ca:62:c7:8c: c1:f8:cd:82:ed:23:ef:92:3f:92:36:ca:ca:a1:fb: d6:c1:a6:03:78:15:94:be:a9:f0:de:0d:48:fb:39: 3f:81:b6:bc:55:ad:63:d3:8e:c3:aa:53:5a:dd:65: 70:06:ef:6c:1e:4f:a8:bf:c8:43:09:76:cc:4b:5c: 4f:56:59:bf:fe:0d:30:c7:cb:e2:74:01:9a:be:02: 80:68:d7:53:94:f0:f9:79:62:42:68:61:b7:b1:d7: c4:c0:1b:8e:8c:45:00:73:6e:24:93:25:a8:c5:e8: 60:23:3e:7e:45:c1:38:e1:48:69:36:02:f4:cc:3f: 2f:2f:86:5f:9f:b6:06:a3:20:a5:c5:22:fa:52:c4: 79:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A6:EF:2F:CE:B8:4E:AA:A6:1D:67:FE:B3:E6:9A:AE:A1:E0:D4:AF X509v3 Authority Key Identifier: keyid:E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:f4:d0:9f:ce:61:df:5b:c2:00:c9:94:86:07:39:63:d2:3d: c5:ec:04:91:62:f3:48:91:d3:70:c6:f4:41:a7:fa:3a:45:73: 32:06:87:63:4f:5b:b5:0c:9b:a8:34:6c:44:c6:c7:20:13:c0: 56:bd:89:bc:91:5c:76:78:9c:e8:fa:f9:38:bc:7e:0c:41:75: 93:65:3e:b0:11:96:67:d6:fc:d0:7e:4c:c4:4e:c6:a8:07:31: 8b:df:f3:e2:40:5e:74:61:ae:d4:de:e3:af:c6:54:bd:97:d2: ad:0f:d4:63:c2:53:0e:40:96:62:df:27:64:c4:d8:30:45:5b: 04:cb:12:5d:a5:95:af:aa:30:d0:a4:74:0f:f3:ba:eb:3a:54: aa:d8:14:7f:78:34:84:ae:58:23:9b:6b:7f:82:b3:b0:55:99: 51:49:6c:3a:8e:b6:53:b1:c5:d3:55:c8:88:1d:79:79:ef:f3: cf:87:ef:8b:86:4f:ef:f7:42:81:46:54:c1:b8:fa:93:d7:9f: bb:3b:12:2a:4f:84:3a:b5:44:0d:27:d9:89:27:cd:0b:49:a2: 2e:49:29:fa:cd:0c:d7:67:a2:ee:f5:7e:05:c5:c9:e1:0f:86: 94:32:44:9f:47:40:f7:a6:d2:5a:cb:b6:06:10:98:e5:c0:7a: e2:82:91:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTRDRDExMC8GA1UEBRMoRTE2M0YwRkU1NEYxNzlBRjRDNkMwOTcwOThGRUZCRTJE NDM4NUIxOTAeFw0yNTA4MjMwNzI3NDVaFw0yNTA4MzAwNzI3NDVaMBgxFjAUBgNV BAMTDTY4YTk2ZDcxLTkwMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRSpkjvyCiDQ+AxpoPFeuLNaDR6YVHa9Fq/I1C6mq2hywhLPOfH3GzbfLJ3zGK j8zL1YcS5XHjCrrFoiLJAoja6yZYSgjAHsLcZFxZDdcIDEp9zvLxFjlzu++GuOGZ xkHRFSebGnAALsnQjgX7nHeFelnxymLHjMH4zYLtI++SP5I2ysqh+9bBpgN4FZS+ qfDeDUj7OT+BtrxVrWPTjsOqU1rdZXAG72weT6i/yEMJdsxLXE9WWb/+DTDHy+J0 AZq+AoBo11OU8Pl5YkJoYbex18TAG46MRQBzbiSTJajF6GAjPn5FwTjhSGk2AvTM Py8vhl+ftgajIKXFIvpSxHlbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+KbvL864 TqqmHWf+s+aarqHg1K8wHwYDVR0jBBgwFoAU4WPw/lTxea9MbAlwmP774tQ4Wxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NENEL0QyRTJDQTdDRkQ4 NzExRUZCNjYyNEEyOEM0RjlBRTAyLzRXUHdfbFR4ZWE5TWJBbHdtUDc3NHRRNFd4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFdQd19sVHhlYTlNYkFsd21QNzc0dFE0V3hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NENEL0QyRTJDQTdDRkQ4NzExRUZCNjYyNEEyOEM0RjlBRTAyLzRXUHdfbFR4ZWE5 TWJBbHdtUDc3NHRRNFd4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAET00J/OYd9bwgDJlIYHOWPSPcXsBJFi80iR03DG9EGn+jpFczIGh2NP W7UMm6g0bETGxyATwFa9ibyRXHZ4nOj6+Ti8fgxBdZNlPrARlmfW/NB+TMROxqgH MYvf8+JAXnRhrtTe46/GVL2X0q0P1GPCUw5AlmLfJ2TE2DBFWwTLEl2lla+qMNCk dA/zuus6VKrYFH94NISuWCOba3+Cs7BVmVFJbDqOtlOxxdNVyIgdeXnv88+H74uG T+/3QoFGVMG4+pPXn7s7EipPhDq1RA0n2YknzQtJoi5JKfrNDNdnou71fgXFyeEP hpQyRJ9HQPem0lrLtgYQmOXAeuKCkZU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:40 2025 by rpki-client