$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json) Hash identifier: xPlAyP2LehtdlxZ8pTwDzqTO8vVHQitilypLVqNy8eI= Subject key identifier: 5B:F1:67:51:37:81:69:56:64:1F:5C:FE:73:6D:6B:4B:F7:4D:EE:B9 Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft Manifest number: 2F Signing time: Sat 23 Aug 2025 07:56:18 +0000 Manifest this update: Sat 23 Aug 2025 07:56:18 +0000 Manifest next update: Sat 30 Aug 2025 07:56:18 +0000 Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: UF7ZduGbC7ujBR84eQKNtAY0ggL1aQmCmwe8lrVOjFQ=) 2: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: iR9RmJIaK9kKAtKzjMGd269EeycB0OEwfaUigxvrCq4=) 3: F88154843B9D11F091B39D67C4F9AE02.roa (hash: nNxkYkRl2gKLDvZBsXppHYQmBwtDL7vgL/l44dOoypk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Validity Not Before: Aug 23 07:56:18 2025 GMT Not After : Aug 30 07:56:18 2025 GMT Subject: CN=68a97422-8fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:40:0d:40:44:48:07:8e:02:44:5a:89:48:9a: b7:3e:c1:8a:62:41:eb:1e:85:c7:6b:4a:1d:44:a4: 55:42:76:32:79:39:3a:02:7d:03:7f:2f:50:6f:49: f4:6a:58:c5:07:68:05:4e:aa:69:9c:5e:ce:49:99: e9:f6:67:cb:61:de:b8:f0:98:a3:94:99:4b:80:70: 39:b8:1c:3d:83:55:50:26:2f:8f:b5:36:2d:75:10: 0d:88:f3:53:03:e5:cf:31:9f:f1:17:54:a7:9d:c9: 66:a8:46:6f:b7:de:7c:09:96:91:6a:38:ff:81:04: 96:dd:f5:5e:3d:3d:23:17:39:76:a8:84:ab:2a:02: 65:4e:a1:f8:6d:69:bd:b6:3f:64:ea:d6:63:cf:26: 90:4d:e5:de:14:61:75:4c:bb:a5:5e:7f:6e:fc:89: 73:00:9d:9d:07:68:20:8b:73:dd:97:d6:5a:d4:27: e9:54:e7:cf:0b:6d:50:b6:37:af:01:a4:5e:eb:b8: aa:0e:c6:57:bf:a5:d6:cb:0c:1f:77:e4:5d:c1:f5: cd:f9:78:65:2f:61:59:56:bc:8d:76:14:51:bc:07: 1b:bd:c1:a2:7b:6d:8f:17:e8:b2:b6:3e:15:e8:98: b9:4d:49:fc:63:33:75:6d:88:f5:0c:c7:1b:16:ea: db:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F1:67:51:37:81:69:56:64:1F:5C:FE:73:6D:6B:4B:F7:4D:EE:B9 X509v3 Authority Key Identifier: keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:43:f7:40:04:ef:50:6e:01:91:65:f6:c6:59:f3:39:11:0c: 55:4a:85:11:18:ea:c6:c3:4e:e0:e4:c1:a3:8e:41:fc:84:09: 03:4e:34:70:68:19:49:bf:c3:02:4e:90:f6:a0:2d:0a:4c:58: f4:72:55:de:34:c9:f7:36:3d:f6:0c:d5:80:18:e4:24:69:c6: a3:8a:7a:e5:fd:f0:87:6c:38:09:41:00:c6:8a:bc:2f:0b:5c: b6:6c:78:9b:45:86:f8:fd:91:26:e5:7b:1a:90:37:bd:63:67: e4:15:bd:a1:fb:b5:cd:0b:09:2d:9c:6a:dd:06:82:67:a3:c3: 06:d7:d7:96:48:d1:ca:11:99:2b:7f:d5:31:85:b6:78:16:53: 16:3d:05:d7:b9:0c:64:4c:1f:9b:20:bb:ae:0f:c2:76:32:23: 2d:63:7e:e3:b8:1e:49:da:60:3f:ea:0f:2b:11:96:32:f7:14: 9e:7c:38:c0:06:b0:c2:bf:68:17:18:a9:0a:a7:b6:58:c6:8d: e5:8c:49:21:76:0f:89:93:71:da:ab:c0:fa:b2:8b:61:ae:35: 88:61:e9:44:53:c6:22:d8:9b:a7:ea:e5:95:46:e5:40:7b:96: 04:aa:db:bb:bb:cf:29:3a:86:4f:47:ee:c4:1a:f6:41:d9:e9: 97:42:8b:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NkMxMDExMC8GA1UEBRMoRTJCMERGQTY5MEQyQzdFQUM0MzYzNjc1NkU0MzdCN0My NjI2RjRCQjAeFw0yNTA4MjMwNzU2MThaFw0yNTA4MzAwNzU2MThaMBgxFjAUBgNV BAMTDTY4YTk3NDIyLThmYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBQA1AREgHjgJEWolImrc+wYpiQesehcdrSh1EpFVCdjJ5OToCfQN/L1BvSfRq WMUHaAVOqmmcXs5Jmen2Z8th3rjwmKOUmUuAcDm4HD2DVVAmL4+1Ni11EA2I81MD 5c8xn/EXVKedyWaoRm+33nwJlpFqOP+BBJbd9V49PSMXOXaohKsqAmVOofhtab22 P2Tq1mPPJpBN5d4UYXVMu6Vef278iXMAnZ0HaCCLc92X1lrUJ+lU588LbVC2N68B pF7ruKoOxle/pdbLDB935F3B9c35eGUvYVlWvI12FFG8Bxu9waJ7bY8X6LK2PhXo mLlNSfxjM3VtiPUMxxsW6tuvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW/FnUTeB aVZkH1z+c21rS/dN7rkwHwYDVR0jBBgwFoAU4rDfppDSx+rENjZ1bkN7fCYm9Lsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2QzEwLzBFOTQwNUJBM0I5 RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlM cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNHJEZnBwRFN4LXJFTmpaMWJrTjdmQ1ltOUxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2 QzEwLzBFOTQwNUJBM0I5RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1y RU5qWjFia043ZkNZbTlMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC5D90AE71BuAZFl9sZZ8zkRDFVKhREY6sbDTuDkwaOOQfyECQNONHBo GUm/wwJOkPagLQpMWPRyVd40yfc2PfYM1YAY5CRpxqOKeuX98IdsOAlBAMaKvC8L XLZseJtFhvj9kSblexqQN71jZ+QVvaH7tc0LCS2cat0GgmejwwbX15ZI0coRmSt/ 1TGFtngWUxY9Bde5DGRMH5sgu64PwnYyIy1jfuO4HknaYD/qDysRljL3FJ58OMAG sMK/aBcYqQqntljGjeWMSSF2D4mTcdqrwPqyi2GuNYhh6URTxiLYm6fq5ZVG5UB7 lgSq27u7zyk6hk9H7sQa9kHZ6ZdCi5w= -----END CERTIFICATE-----Generated at Sun Aug 24 00:09:59 2025 by rpki-client