$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft File: a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json) Hash identifier: AsS9+iY81TKCsXsfVUcPS5rXCuxvoUaXnEDo//xjg24= Subject key identifier: FA:61:8D:82:53:6C:DB:B7:BC:98:5B:FA:20:36:48:A4:A8:8C:A2:5C Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Certificate serial: 1B78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft Manifest number: 1B6B Signing time: Fri 22 Aug 2025 16:21:14 +0000 Manifest this update: Fri 22 Aug 2025 16:21:13 +0000 Manifest next update: Fri 29 Aug 2025 16:21:13 +0000 Files and hashes: 1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: iMpFc4ahpeRbhH7kI+NGDY/94itdkcILaHS8SfHHdAM=) 2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: ZmGMH4g7cGfub9A5Ucup2yr3pAIXwRpZ1v4yX9SvAOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7032 (0x1b78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAD6F, serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Validity Not Before: Aug 22 16:21:13 2025 GMT Not After : Aug 29 16:21:13 2025 GMT Subject: CN=68a898fa-7e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fe:9e:bb:55:3b:ba:cb:22:bd:95:d4:0b:bf: ea:c3:fe:f6:c4:72:15:18:9c:57:a0:a4:d3:39:fc: 40:5a:cd:ec:3d:f1:0b:2d:75:9e:10:81:3b:8d:47: d7:43:a9:a2:81:b1:59:70:fe:5a:bd:1e:2a:2d:c4: 75:61:0d:03:42:e4:6b:b7:44:11:a3:51:68:e0:4e: 53:66:ca:46:1e:f0:83:76:ce:58:e8:a1:8d:a3:ed: 13:22:9d:4c:e0:aa:78:e0:b4:d9:4a:b5:cf:cd:6a: 01:4d:5e:45:f4:1b:1c:ff:30:2a:f6:98:67:7b:96: 00:c0:f9:0e:01:25:24:04:a1:80:38:ec:3f:10:ab: 89:25:58:fd:f7:e8:46:96:aa:f7:21:25:a3:29:3c: ce:92:c9:d3:e1:cc:e8:b1:f4:b6:f7:e9:92:ed:8a: 2e:d4:bb:99:fb:e8:28:e7:ac:90:42:b3:8a:89:4e: e9:10:63:3a:49:78:42:d9:cc:70:cf:bb:96:da:df: ba:96:fa:70:5d:84:19:5a:7d:96:57:ad:b5:55:64: 9d:a9:ba:97:da:c7:ea:5e:42:53:57:a6:7b:27:5a: f1:d6:5d:8b:ab:a5:b8:fa:63:ae:42:44:8f:cb:47: 47:37:f9:06:e4:5a:63:6e:9d:08:8d:82:27:c5:de: 09:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:61:8D:82:53:6C:DB:B7:BC:98:5B:FA:20:36:48:A4:A8:8C:A2:5C X509v3 Authority Key Identifier: keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:01:89:cc:55:3d:26:a2:df:91:cf:db:38:a7:b5:2d:88:67: 47:6f:37:01:13:29:67:92:b6:dd:73:8b:c6:78:52:63:bb:57: b0:37:fb:4c:0c:a4:12:08:17:49:c5:b0:4b:b8:a2:ad:d2:40: de:a8:c0:c0:b5:57:5b:22:07:3c:32:d5:49:5c:40:d5:20:72: 9a:14:37:9c:2e:b4:3b:f1:e5:5f:6e:9f:23:30:44:52:46:3f: 95:15:25:b4:65:0d:a9:d1:96:a2:bd:5a:d4:7e:a5:2d:7f:b0: 60:0c:f1:09:51:ba:c3:55:9a:e8:28:2b:7c:93:ca:4d:18:79: 32:82:e5:b9:ef:82:95:80:42:e5:91:69:3d:c4:2c:58:2c:f9: ea:ba:99:07:17:85:a7:3e:69:41:2b:6b:e3:4e:a0:f4:50:12: 0d:9d:e7:c8:46:14:43:83:7a:cb:c1:b5:f7:0e:75:81:0b:8e: c1:a5:80:e0:55:ef:9e:04:c0:ed:6a:54:e8:40:3e:61:76:f4: ae:b7:d1:7e:63:6b:f8:78:0b:26:88:cd:c2:c8:71:a5:20:c5: ed:45:2b:a8:a9:83:23:ca:3d:61:9e:c0:f6:11:d9:b9:52:7d: e8:54:e8:07:9d:f3:2f:0d:a3:fe:55:7b:12:1f:16:7e:31:85: 13:35:3b:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFENkYxMTAvBgNVBAUTKDZCODY0MjQxREYwMTJGMjM5MjdBMDFDMEUzODZFMDdB QUI0OUM1MjIwHhcNMjUwODIyMTYyMTEzWhcNMjUwODI5MTYyMTEzWjAYMRYwFAYD VQQDEw02OGE4OThmYS03ZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3P6eu1U7ussivZXUC7/qw/72xHIVGJxXoKTTOfxAWs3sPfELLXWeEIE7jUfX Q6migbFZcP5avR4qLcR1YQ0DQuRrt0QRo1Fo4E5TZspGHvCDds5Y6KGNo+0TIp1M 4Kp44LTZSrXPzWoBTV5F9Bsc/zAq9phne5YAwPkOASUkBKGAOOw/EKuJJVj99+hG lqr3ISWjKTzOksnT4czosfS29+mS7You1LuZ++go56yQQrOKiU7pEGM6SXhC2cxw z7uW2t+6lvpwXYQZWn2WV621VWSdqbqX2sfqXkJTV6Z7J1rx1l2Lq6W4+mOuQkSP y0dHN/kG5Fpjbp0IjYInxd4J+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPphjYJT bNu3vJhb+iA2SKSojKJcMB8GA1UdIwQYMBaAFGuGQkHfAS8jknoBwOOG4HqrScUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUQ2Ri80NkM5NDA5NDE0 NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5T1NlZ0hBNDRiZ2VxdEp4 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0WkNRZDhCTHlPU2VnSEE0NGJnZXF0SnhTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUQ2Ri80NkM5NDA5NDE0NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5 T1NlZ0hBNDRiZ2VxdEp4U0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRAYnMVT0mot+Rz9s4p7UtiGdHbzcBEylnkrbdc4vGeFJju1ewN/tM DKQSCBdJxbBLuKKt0kDeqMDAtVdbIgc8MtVJXEDVIHKaFDecLrQ78eVfbp8jMERS Rj+VFSW0ZQ2p0ZaivVrUfqUtf7BgDPEJUbrDVZroKCt8k8pNGHkyguW574KVgELl kWk9xCxYLPnqupkHF4WnPmlBK2vjTqD0UBINnefIRhRDg3rLwbX3DnWBC47BpYDg Ve+eBMDtalToQD5hdvSut9F+Y2v4eAsmiM3CyHGlIMXtRSuoqYMjyj1hnsD2Edm5 Un3oVOgHnfMvDaP+VXsSHxZ+MYUTNTvp -----END CERTIFICATE-----Generated at Sat Aug 23 21:01:21 2025 by rpki-client