$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: esya1JFrv6OAj3b/E6lR5hsJMUBOq6oB1FniEpbUy0U= Subject key identifier: C5:4A:D0:7B:0F:8E:B5:20:B6:13:92:58:94:44:48:3F:2A:74:F4:1A Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 07C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 07BA Signing time: Fri 22 Aug 2025 21:24:15 +0000 Manifest this update: Fri 22 Aug 2025 21:24:15 +0000 Manifest next update: Fri 29 Aug 2025 21:24:15 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: jY8R2UZhFp4cr0KR1gZ90TERSKbkgMsXLvu6Ossl43w=) 2: 009FA5F0397C11EF9EC42850C4F9AE02.roa (hash: E4kJ9iOaWgd6kt6tetVvQMWfFOobpWfFfGNUTYY1QpA=) 3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: ULfIGDxLDtcTmx758s/wyZezobSONv5OLR5TRBpsLtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1990 (0x7c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Aug 22 21:24:15 2025 GMT Not After : Aug 29 21:24:15 2025 GMT Subject: CN=68a8dfff-08fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:97:0b:ae:2d:47:8e:04:fb:5a:d3:c7:77:96: c0:21:de:3d:aa:90:91:46:73:12:2f:54:e9:54:06: 42:79:b5:e9:61:b1:ee:31:e1:e1:9d:63:a3:89:93: af:fa:c9:2c:d7:4f:71:59:62:4a:43:ae:74:00:b9: 1d:34:11:c9:52:64:85:91:d8:08:c1:81:4d:76:26: 9f:b9:72:be:ae:8f:87:1c:61:5a:c3:ad:da:76:af: 7d:99:4c:06:79:d4:c8:5d:ca:01:c3:66:b8:4e:19: 86:5c:cc:7c:e6:a3:43:1c:88:4a:66:0d:34:3d:51: 0f:67:f6:99:36:bb:59:41:33:6b:3e:bd:0a:56:a2: ef:0f:76:1e:38:4e:1b:8d:68:3c:15:da:dc:47:30: 6a:60:41:55:1a:d1:80:cc:71:21:d7:c4:a5:5a:d7: ab:e6:25:42:64:7d:b1:7e:21:99:96:51:78:31:4a: 4a:3e:54:4a:bc:f7:83:0c:02:ef:91:24:b0:34:1c: cd:5b:23:9b:af:1f:cd:6b:d2:c2:7d:d3:80:ff:4e: d4:60:ec:02:66:32:40:a9:42:1b:f2:22:fc:ac:22: 8a:30:63:40:23:a9:b4:ee:fd:a5:d9:24:c5:c5:be: 37:80:78:bb:14:33:97:09:93:5f:0d:fe:6c:28:ea: 8f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4A:D0:7B:0F:8E:B5:20:B6:13:92:58:94:44:48:3F:2A:74:F4:1A X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ca:1a:40:53:86:f4:96:d4:95:30:64:7f:70:c8:9f:3d:90: 55:39:6b:4d:1b:7f:97:8b:25:1f:8e:bb:d8:9e:e3:24:72:db: 17:32:e9:8a:2b:78:3c:37:e3:2c:0b:16:6c:33:73:ed:0d:9e: 85:9e:44:d4:c5:36:d6:66:92:f6:13:c4:59:c7:9e:e7:a2:c2: a2:8b:9e:b7:ed:fe:23:31:48:48:c8:71:b0:04:59:62:d2:83: 91:87:a2:3a:79:a4:e4:b6:50:87:e8:1f:59:6b:a8:ff:98:43: d8:ce:c5:75:79:82:1b:92:3b:9d:3f:d4:40:0d:ac:27:bf:8f: 6d:35:c0:ab:be:b1:99:d8:b4:db:80:de:d8:e6:42:87:f9:02: bf:bb:4c:c3:ee:c1:48:ff:72:f1:a0:01:80:51:a1:4f:96:d4: 83:e2:69:18:9f:67:30:40:98:a9:94:80:7e:f8:24:a9:55:45: 9f:2a:bb:d4:e7:3e:76:3b:6a:07:90:19:ff:d5:c4:b7:be:f0: 5f:da:d5:7e:31:db:e8:2f:46:23:66:fa:cc:27:ff:35:a2:5c: 3d:28:91:9d:d7:e1:d7:08:23:52:f0:5c:b2:13:1f:86:ff:93: c6:04:f0:2a:b5:0c:78:18:4a:df:72:94:ea:0f:70:a0:55:a1: 39:4e:58:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjUwODIyMjEyNDE1WhcNMjUwODI5MjEyNDE1WjAYMRYwFAYD VQQDEw02OGE4ZGZmZi0wOGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65cLri1HjgT7WtPHd5bAId49qpCRRnMSL1TpVAZCebXpYbHuMeHhnWOjiZOv +sks109xWWJKQ650ALkdNBHJUmSFkdgIwYFNdiafuXK+ro+HHGFaw63adq99mUwG edTIXcoBw2a4ThmGXMx85qNDHIhKZg00PVEPZ/aZNrtZQTNrPr0KVqLvD3YeOE4b jWg8FdrcRzBqYEFVGtGAzHEh18SlWter5iVCZH2xfiGZllF4MUpKPlRKvPeDDALv kSSwNBzNWyObrx/Na9LCfdOA/07UYOwCZjJAqUIb8iL8rCKKMGNAI6m07v2l2STF xb43gHi7FDOXCZNfDf5sKOqPbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVK0HsP jrUgthOSWJRESD8qdPQaMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtyhpAU4b0ltSVMGR/cMifPZBVOWtNG3+XiyUfjrvYnuMkctsXMumK K3g8N+MsCxZsM3PtDZ6FnkTUxTbWZpL2E8RZx57nosKii5637f4jMUhIyHGwBFli 0oORh6I6eaTktlCH6B9Za6j/mEPYzsV1eYIbkjudP9RADawnv49tNcCrvrGZ2LTb gN7Y5kKH+QK/u0zD7sFI/3LxoAGAUaFPltSD4mkYn2cwQJiplIB++CSpVUWfKrvU 5z52O2oHkBn/1cS3vvBf2tV+MdvoL0YjZvrMJ/81olw9KJGd1+HXCCNS8FyyEx+G /5PGBPAqtQx4GErfcpTqD3CgVaE5Tlhc -----END CERTIFICATE-----Generated at Sat Aug 23 17:58:54 2025 by rpki-client