$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft File: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json) Hash identifier: +aMaNpeyZBqFV/DykTFlWjSs2XPXt2yhmblezStc0+0= Subject key identifier: 04:F3:3D:83:E3:D9:1E:F6:4C:90:17:72:21:6B:70:DE:A5:F3:63:1A Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE Certificate issuer: /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft Manifest number: 019E Signing time: Sat 09 Aug 2025 03:41:16 +0000 Manifest this update: Sat 09 Aug 2025 03:41:15 +0000 Manifest next update: Sat 16 Aug 2025 03:41:15 +0000 Files and hashes: 1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: lncRsmsKGwVFnDn8+DTRToqk4HCmT9Ezk4iTK9aLuuo=) 2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: g/bQAw9THkYcNZaMLuiJQ2Zt7avDBvnfO+P6mLE3afM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273A9, serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE Validity Not Before: Aug 9 03:41:15 2025 GMT Not After : Aug 16 03:41:15 2025 GMT Subject: CN=6896c35b-e7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b7:09:3d:01:95:43:28:ee:23:12:c2:57:cb: 9d:44:d2:37:f3:39:44:f2:71:3a:41:69:ac:fc:70: 2b:13:54:4a:bb:1c:52:0b:f3:9a:8c:a8:85:f1:c9: 89:08:bb:1a:20:c8:5d:ac:97:8e:83:fd:16:be:bb: 28:eb:61:af:48:10:d2:a6:2d:09:12:75:c8:79:95: 7f:ab:f5:49:7e:a8:d9:1b:36:8c:86:ee:28:7e:6f: 35:90:19:23:82:11:e0:5a:7f:d1:e4:06:ec:62:2a: 48:f0:8c:ef:d4:08:04:45:bf:b5:8f:ee:68:ea:9f: d5:7e:af:5b:59:70:37:9a:08:8f:ba:29:53:92:2b: 55:16:7d:33:d5:19:a9:92:38:b7:7f:98:93:fc:02: 3e:28:40:9f:6a:73:ad:0e:2d:2c:bb:33:d9:83:04: c4:28:06:b5:11:20:2c:bc:02:d3:3e:64:2a:1e:fb: bc:91:c5:21:e8:ad:e4:11:56:f7:42:2d:35:d5:51: b6:c9:6f:74:71:d8:bf:21:9a:37:58:73:e8:45:78: 52:4f:3d:ef:b2:b1:54:c9:ec:92:2e:eb:c2:f2:ed: ca:e7:59:c1:c4:92:46:52:6a:40:99:8d:c0:af:8a: 4c:74:9b:b6:34:0a:b6:71:62:cf:5f:8f:d5:d2:76: cd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F3:3D:83:E3:D9:1E:F6:4C:90:17:72:21:6B:70:DE:A5:F3:63:1A X509v3 Authority Key Identifier: keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:b2:b2:bc:a2:13:19:44:64:02:c8:c7:da:06:49:ad:eb:fd: c1:b8:c9:e2:6e:e2:40:71:2e:ea:c1:5a:b3:01:1c:34:d3:45: 75:70:48:40:1f:4d:ec:45:e3:ae:1a:7b:cb:ac:b4:6c:c1:cc: 89:3e:de:70:82:a1:86:7b:76:b3:82:89:35:d8:1a:98:15:c8: 9e:21:31:4f:62:98:38:1b:d0:e5:13:c5:c4:42:76:52:ab:80: bb:08:82:6e:2b:3f:2d:f4:20:c4:22:d9:97:54:62:88:7e:ae: 08:00:24:7b:45:68:08:8d:f6:96:ce:b0:97:a2:b2:80:7a:8b: c4:bd:3d:63:37:6a:5e:c7:a5:eb:a3:6b:5b:41:9e:4d:28:a6: b0:59:6a:9f:21:19:23:5a:54:0a:f5:59:a4:aa:36:76:89:f7: b7:b9:40:2d:60:75:19:08:88:0e:a5:f9:6e:c7:e0:7a:85:23: 9c:7e:c2:cd:f2:ef:49:ef:4f:4b:04:b3:52:62:43:48:ab:59: cf:36:14:22:50:41:5c:35:24:fc:d9:f6:25:47:1e:0e:22:07: 60:06:ee:9b:4e:93:2f:8e:52:fd:cb:96:a2:ed:26:dc:44:c6: 0d:3d:cc:aa:a7:31:13:d3:63:f5:5e:b4:1f:61:0c:79:2c:5d: e6:86:30:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczQTkxMTAvBgNVBAUTKEUwQjQ0NThCOUFCRDMyMDM1MTczNTNFQzgwQkUzMTBD MzY1NTREQUUwHhcNMjUwODA5MDM0MTE1WhcNMjUwODE2MDM0MTE1WjAYMRYwFAYD VQQDEw02ODk2YzM1Yi1lN2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bcJPQGVQyjuIxLCV8udRNI38zlE8nE6QWms/HArE1RKuxxSC/OajKiF8cmJ CLsaIMhdrJeOg/0Wvrso62GvSBDSpi0JEnXIeZV/q/VJfqjZGzaMhu4ofm81kBkj ghHgWn/R5AbsYipI8Izv1AgERb+1j+5o6p/Vfq9bWXA3mgiPuilTkitVFn0z1Rmp kji3f5iT/AI+KECfanOtDi0suzPZgwTEKAa1ESAsvALTPmQqHvu8kcUh6K3kEVb3 Qi011VG2yW90cdi/IZo3WHPoRXhSTz3vsrFUyeySLuvC8u3K51nBxJJGUmpAmY3A r4pMdJu2NAq2cWLPX4/V0nbNMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATzPYPj 2R72TJAXciFrcN6l82MaMB8GA1UdIwQYMBaAFOC0RYuavTIDUXNT7IC+MQw2VU2u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNBOS9EOEVGMTNDMkZB Q0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1nTlJjMVBzZ0w0eEREWlZU YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMUkZpNXE5TWdOUmMxUHNnTDR4RERaVlRhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNBOS9EOEVGMTNDMkZBQ0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1n TlJjMVBzZ0w0eEREWlZUYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3srK8ohMZRGQCyMfaBkmt6/3BuMnibuJAcS7qwVqzARw000V1cEhA H03sReOuGnvLrLRswcyJPt5wgqGGe3azgok12BqYFcieITFPYpg4G9DlE8XEQnZS q4C7CIJuKz8t9CDEItmXVGKIfq4IACR7RWgIjfaWzrCXorKAeovEvT1jN2pex6Xr o2tbQZ5NKKawWWqfIRkjWlQK9VmkqjZ2ife3uUAtYHUZCIgOpflux+B6hSOcfsLN 8u9J709LBLNSYkNIq1nPNhQiUEFcNST82fYlRx4OIgdgBu6bTpMvjlL9y5ai7Sbc RMYNPcyqpzET02P1XrQfYQx5LF3mhjBu -----END CERTIFICATE-----Generated at Sun Aug 10 03:51:36 2025 by rpki-client