$ rpki-client -vvf rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft File: g4n9Rv74flk96Bz_3N8guiynYB4.mft (raw, json) Hash identifier: CJHsQYy6fGXH3MFG6cVyki40yhz6Hyna/OpNaiR/qz0= Subject key identifier: 18:D3:A9:53:E8:EB:74:B2:7C:15:4B:A4:6F:17:D2:32:B1:91:C2:EF Authority key identifier: 83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E Certificate issuer: /CN=A91475BA/serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Certificate serial: 0837 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft Manifest number: 0832 Signing time: Fri 08 Aug 2025 21:06:54 +0000 Manifest this update: Fri 08 Aug 2025 21:06:53 +0000 Manifest next update: Fri 15 Aug 2025 21:06:53 +0000 Files and hashes: 1: g4n9Rv74flk96Bz_3N8guiynYB4.crl (hash: 6MvyVTuqbDtQhhZJl/OzCZuazLVfVOh9Ix/m3FRFN9c=) 2: 1E1D32C22FF311EC9220256BC4F9AE02.roa (hash: pTjj2b7GgJwyDNJuxZHgCMBFpwcbCF/p1EbBwHpmEQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103 (0x837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475BA, serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Validity Not Before: Aug 8 21:06:53 2025 GMT Not After : Aug 15 21:06:53 2025 GMT Subject: CN=689666ed-506e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:dc:e5:f2:66:94:54:1e:d5:be:2a:f2:c4: 86:cc:ea:16:d6:8a:8e:b3:a0:30:21:92:7d:d6:16: 0d:2a:69:0f:bc:d5:00:00:c5:e9:32:2a:0a:56:b1: 2a:f0:c8:0f:a8:f8:f0:8e:e5:a9:43:92:50:67:af: c9:5e:11:d9:e5:84:82:6e:78:5a:d9:9a:91:1b:b1: 90:51:7f:81:6f:a5:0b:ca:1f:92:17:f0:15:e2:8f: 00:30:94:b6:c7:87:2a:a9:a1:ee:8c:05:1b:3c:17: 72:a4:02:0b:5c:94:eb:cd:e9:99:99:71:ec:5c:17: 7b:a1:70:ba:ce:6e:c8:cd:80:a5:96:3c:05:95:5a: 16:e4:1d:20:96:5e:af:d1:e6:da:12:ba:36:63:1f: 5c:34:0a:a7:3d:69:5e:85:c2:0b:16:0c:4a:2b:56: 3a:e1:24:25:e2:d2:e9:ff:7f:f1:40:55:f2:fe:6c: 8c:72:10:6c:64:d1:da:56:4a:9c:7a:7d:ee:6a:47: 94:a6:9b:b4:c9:35:69:63:59:5b:08:20:ca:96:07: ac:bd:83:21:04:4e:74:7a:01:82:ae:d3:27:92:83: 27:d9:9d:b7:48:f1:ad:5c:9d:d5:a0:65:89:59:bd: 13:80:cf:57:21:e3:34:02:19:56:7b:95:bc:e8:4c: 6f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D3:A9:53:E8:EB:74:B2:7C:15:4B:A4:6F:17:D2:32:B1:91:C2:EF X509v3 Authority Key Identifier: keyid:83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fb:43:c7:52:e5:ed:c6:51:68:31:41:3c:47:26:12:ad:f9: ba:24:ce:79:7e:8b:51:69:0d:97:da:6b:b8:ef:46:d1:54:c4: 0b:de:e4:8b:7c:be:40:bc:20:b0:5b:61:86:f6:f0:e2:b2:f4: ec:38:dc:d2:4d:31:47:64:87:64:8d:83:9f:df:17:b2:3e:ed: b9:ac:95:de:43:bf:83:1f:66:49:3a:8f:83:c2:28:ef:4c:7e: f1:12:7d:8b:8a:84:34:30:f3:e4:5c:96:82:fb:4c:17:f7:f0: 0e:ad:90:2f:3b:a0:0c:98:4c:82:eb:4e:39:9b:82:c3:ed:5a: ed:97:96:7a:69:52:5b:5b:47:1f:4c:9c:84:7f:3c:36:04:0f: f1:33:d8:f8:79:20:0a:b2:9c:17:8e:19:8e:e8:ae:6a:7e:df: 63:55:2e:d5:29:3e:a2:e8:aa:32:ec:37:5c:23:04:2e:ff:42: 8e:80:9a:f2:7b:90:74:13:70:72:b0:f0:76:24:49:c6:c3:72: 0e:34:0f:9b:ea:18:b1:bb:0e:e7:f6:47:6a:17:14:ef:54:57: e5:4f:06:1b:ad:73:3c:da:a5:16:d9:ad:ff:4c:bd:3c:4c:b3: cb:3e:ce:eb:f3:6d:97:3f:bc:60:fc:4d:42:8e:dc:ae:3a:ef: 7a:2d:6e:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QkExMTAvBgNVBAUTKDgzODlGRDQ2RkVGODdFNTkzREU4MUNGRkRDREYyMEJB MkNBNzYwMUUwHhcNMjUwODA4MjEwNjUzWhcNMjUwODE1MjEwNjUzWjAYMRYwFAYD VQQDEw02ODk2NjZlZC01MDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnDc5fJmlFQe1b4q8sSGzOoW1oqOs6AwIZJ91hYNKmkPvNUAAMXpMioKVrEq 8MgPqPjwjuWpQ5JQZ6/JXhHZ5YSCbnha2ZqRG7GQUX+Bb6ULyh+SF/AV4o8AMJS2 x4cqqaHujAUbPBdypAILXJTrzemZmXHsXBd7oXC6zm7IzYClljwFlVoW5B0gll6v 0ebaEro2Yx9cNAqnPWlehcILFgxKK1Y64SQl4tLp/3/xQFXy/myMchBsZNHaVkqc en3uakeUppu0yTVpY1lbCCDKlgesvYMhBE50egGCrtMnkoMn2Z23SPGtXJ3VoGWJ Wb0TgM9XIeM0AhlWe5W86ExvAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjTqVPo 63SyfBVLpG8X0jKxkcLvMB8GA1UdIwQYMBaAFIOJ/Ub++H5ZPegc/9zfILosp2Ae MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVCQS9ENEYwOEVFNkRB RTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZsazk2QnpfM044Z3VpeW5Z QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0bjlSdjc0ZmxrOTZCel8zTjhndWl5bllCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVCQS9ENEYwOEVFNkRBRTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZs azk2QnpfM044Z3VpeW5ZQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv+0PHUuXtxlFoMUE8RyYSrfm6JM55fotRaQ2X2mu470bRVMQL3uSL fL5AvCCwW2GG9vDisvTsONzSTTFHZIdkjYOf3xeyPu25rJXeQ7+DH2ZJOo+Dwijv TH7xEn2LioQ0MPPkXJaC+0wX9/AOrZAvO6AMmEyC6045m4LD7Vrtl5Z6aVJbW0cf TJyEfzw2BA/xM9j4eSAKspwXjhmO6K5qft9jVS7VKT6i6Koy7DdcIwQu/0KOgJry e5B0E3BysPB2JEnGw3IONA+b6hixuw7n9kdqFxTvVFflTwYbrXM82qUW2a3/TL08 TLPLPs7r822XP7xg/E1CjtyuOu96LW4D -----END CERTIFICATE-----Generated at Sun Aug 10 05:33:17 2025 by rpki-client