$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft File: 4RvPp2LU9ssvatCdA6lA4P6qAfg.mft (raw, json) Hash identifier: TaVXoikB9iBoolpB9mUHcMwtRVw7Ew7ziXJaVL0CY+k= Subject key identifier: DC:53:AD:DF:9D:88:2E:CC:D2:D4:AB:35:A3:E2:D8:36:E2:0B:E8:39 Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 Certificate issuer: /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Certificate serial: 1F04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft Manifest number: 1EFD Signing time: Sun 10 Aug 2025 16:00:09 +0000 Manifest this update: Sun 10 Aug 2025 16:00:08 +0000 Manifest next update: Sun 17 Aug 2025 16:00:08 +0000 Files and hashes: 1: 4RvPp2LU9ssvatCdA6lA4P6qAfg.crl (hash: wWQ15178WaqhgTJ1xF/ZCl1MiV4MVUVCQK6s8vVZIqQ=) 2: DB92DE200AEF11ECB7243C0FC4F9AE02.roa (hash: jUBoH/NsE+2KO1Z4hcom5Ddnhv0XpfeG1RJbEdRDm9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7940 (0x1f04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Validity Not Before: Aug 10 16:00:08 2025 GMT Not After : Aug 17 16:00:08 2025 GMT Subject: CN=6898c209-fc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ed:6e:20:5f:ca:b6:42:54:c8:6e:ea:21:18: 06:d4:29:57:a9:f4:b9:b4:29:96:b0:7a:57:12:9e: 1a:83:1a:66:2d:a2:63:b7:70:ac:49:f6:b0:57:cc: 36:a3:54:51:96:51:7a:34:72:ab:48:7e:a4:d3:52: 1a:77:19:c8:39:cf:47:f9:0e:0a:49:b3:8d:a6:79: a1:1d:32:69:d0:12:1e:1f:3e:6c:57:ee:d4:9d:b2: e8:8e:f9:87:80:8d:36:15:8e:ed:9d:6e:4d:36:c6: 7b:97:1c:14:c9:4a:b2:5b:43:94:f1:81:d8:19:6c: ee:b5:b9:b2:cb:53:ce:32:2d:8e:8b:8c:34:1f:da: 0f:a5:61:73:ee:3f:24:13:da:d2:0d:73:4f:74:8c: ed:db:e6:7f:26:de:18:6c:10:8b:eb:8a:90:6a:e3: 5d:e1:59:c0:85:a6:91:cd:b5:a0:ae:4f:aa:79:37: 45:95:13:cc:f1:f7:db:5b:1e:f1:5c:8b:3f:d1:35: b8:89:b7:4b:6a:f7:bd:6f:eb:6f:e5:10:43:4b:2e: 33:53:d6:2c:1d:53:6f:7b:8b:20:65:e7:00:f1:24: 49:f7:31:68:0e:73:a9:3f:6d:29:86:61:c9:75:72: f1:71:53:d4:31:99:3e:76:4a:29:63:43:68:db:af: 41:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:53:AD:DF:9D:88:2E:CC:D2:D4:AB:35:A3:E2:D8:36:E2:0B:E8:39 X509v3 Authority Key Identifier: keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:af:97:46:93:81:9c:08:80:33:77:cd:aa:bb:fb:36:35:f7: 38:ea:97:c2:be:d1:10:49:90:23:e4:79:ea:97:2e:a7:c3:26: 7e:d0:39:a1:a4:df:c8:4d:43:01:2d:49:47:f0:66:b6:a8:29: 1c:32:46:09:56:ab:e4:c1:1c:17:74:0d:59:76:b3:09:b7:70: 2f:c1:3f:f2:75:9d:10:85:d5:d3:6d:96:22:ed:de:b1:3d:2e: d2:d1:2d:86:08:23:f3:a9:4d:45:08:3f:71:1a:a9:f7:4f:7d: c3:85:45:cd:b1:0f:fd:c7:68:69:4c:7d:aa:ff:23:62:90:cd: bf:67:d7:7f:40:68:95:b0:ba:6d:62:c1:87:b4:a1:e8:43:4f: eb:7d:2f:37:a8:4a:b4:4a:63:8f:43:17:e8:43:00:3f:99:5c: 08:dc:3d:6d:52:df:c3:e0:a6:e6:03:95:60:2d:e5:bd:fd:97: f7:fe:23:ad:2a:62:e8:66:77:69:de:9b:a4:e7:c3:c4:9a:da: 43:0d:46:0e:5f:d9:4b:02:87:6f:2a:3a:a2:94:a8:75:b2:6f: 5d:b5:a6:30:5a:2d:ee:db:fc:f9:e7:bf:de:f7:fb:05:e5:df: cb:a7:c0:e2:46:06:7c:fa:a2:17:a0:b1:46:c9:5b:0a:02:9c: bb:0b:21:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAwRjUxMTAvBgNVBAUTKEUxMUJDRkE3NjJENEY2Q0IyRjZBRDA5RDAzQTk0MEUw RkVBQTAxRjgwHhcNMjUwODEwMTYwMDA4WhcNMjUwODE3MTYwMDA4WjAYMRYwFAYD VQQDEw02ODk4YzIwOS1mYzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+1uIF/KtkJUyG7qIRgG1ClXqfS5tCmWsHpXEp4agxpmLaJjt3CsSfawV8w2 o1RRllF6NHKrSH6k01IadxnIOc9H+Q4KSbONpnmhHTJp0BIeHz5sV+7UnbLojvmH gI02FY7tnW5NNsZ7lxwUyUqyW0OU8YHYGWzutbmyy1POMi2Oi4w0H9oPpWFz7j8k E9rSDXNPdIzt2+Z/Jt4YbBCL64qQauNd4VnAhaaRzbWgrk+qeTdFlRPM8ffbWx7x XIs/0TW4ibdLave9b+tv5RBDSy4zU9YsHVNve4sgZecA8SRJ9zFoDnOpP20phmHJ dXLxcVPUMZk+dkopY0No269BDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxTrd+d iC7M0tSrNaPi2DbiC+g5MB8GA1UdIwQYMBaAFOEbz6di1PbLL2rQnQOpQOD+qgH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDBGNS9EOUU5NTJGNDVF RjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlzc3ZhdENkQTZsQTRQNnFB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSdlBwMkxVOXNzdmF0Q2RBNmxBNFA2cUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDBGNS9EOUU5NTJGNDVFRjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlz c3ZhdENkQTZsQTRQNnFBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMr5dGk4GcCIAzd82qu/s2Nfc46pfCvtEQSZAj5Hnqly6nwyZ+0Dmh pN/ITUMBLUlH8Ga2qCkcMkYJVqvkwRwXdA1ZdrMJt3AvwT/ydZ0QhdXTbZYi7d6x PS7S0S2GCCPzqU1FCD9xGqn3T33DhUXNsQ/9x2hpTH2q/yNikM2/Z9d/QGiVsLpt YsGHtKHoQ0/rfS83qEq0SmOPQxfoQwA/mVwI3D1tUt/D4KbmA5VgLeW9/Zf3/iOt KmLoZndp3puk58PEmtpDDUYOX9lLAodvKjqilKh1sm9dtaYwWi3u2/z557/e9/sF 5d/Lp8DiRgZ8+qIXoLFGyVsKApy7CyFL -----END CERTIFICATE-----Generated at Mon Aug 11 05:58:25 2025 by rpki-client