$ rpki-client -vvf rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft File: _3wGiSUYZz7M4Ea2pxfzU85TxQk.mft (raw, json) Hash identifier: XmiZVTu58wCmjiD5KW4YxZdl4zc1L6LZ88CmhHSl3fA= Subject key identifier: 7D:89:9C:32:79:52:14:E1:6B:76:C9:B2:06:01:EF:91:CC:07:65:D4 Authority key identifier: FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09 Certificate issuer: /CN=A91476FE/serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft Manifest number: 4C Signing time: Sat 09 Aug 2025 07:53:41 +0000 Manifest this update: Sat 09 Aug 2025 07:53:41 +0000 Manifest next update: Sat 16 Aug 2025 07:53:41 +0000 Files and hashes: 1: _3wGiSUYZz7M4Ea2pxfzU85TxQk.crl (hash: TdKOgzaiGWbT0ZfzG1Zz5RoanawHRk7qYDEbTdLPyI4=) 2: CC704C6639B711F09D08292CC4F9AE02.roa (hash: M1ecwuMzW/hIMvSj6913M6NZRe+PJV/YKqOHZ/y8oF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476FE, serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509 Validity Not Before: Aug 9 07:53:41 2025 GMT Not After : Aug 16 07:53:41 2025 GMT Subject: CN=6896fe85-c8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a7:36:d5:bf:4b:0e:04:f2:d6:30:b1:d5:e0: 10:18:9f:6f:8a:04:ef:01:ab:8e:0a:cc:1b:f8:00: da:72:9f:5a:d7:bb:b0:8b:55:ea:9a:27:02:61:1b: 9c:53:ea:f0:ae:76:38:a6:3d:9c:c4:6c:2d:9f:88: 18:d6:1e:ce:0e:8c:8f:1c:98:6d:ec:5d:a1:c3:6c: b4:40:f6:74:89:eb:24:b5:db:87:3c:a2:d7:cc:d2: 89:be:4a:96:36:0a:90:2a:7f:e4:f0:28:99:7b:85: 04:36:2a:80:a7:02:e6:82:af:a6:2e:a0:ec:98:71: 3e:38:b4:16:10:67:46:11:c1:93:a6:da:e7:45:17: 1c:d5:fb:bb:79:69:90:3d:2c:9c:ef:8f:3f:46:62: 1d:e4:8b:48:51:33:bb:3d:a6:13:78:af:2d:50:cf: 3c:eb:97:3c:af:f5:76:0d:b5:48:b3:2b:67:d6:25: bb:78:8b:89:e6:bd:05:19:98:bf:f1:fb:cf:53:1c: 29:19:51:89:63:69:be:58:80:b8:b9:5c:d6:00:d2: e1:87:c3:71:ca:7e:16:e8:12:e1:88:53:a6:92:93: f4:20:5c:f3:8a:ed:6c:1b:71:ab:d3:d6:9e:3c:f1: b2:e0:e4:66:53:35:3a:16:66:f8:33:26:30:69:b7: 98:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:89:9C:32:79:52:14:E1:6B:76:C9:B2:06:01:EF:91:CC:07:65:D4 X509v3 Authority Key Identifier: keyid:FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ae:27:70:2a:9c:7e:b0:f4:da:97:d3:ae:64:28:11:00:4f: db:30:dd:ad:d9:1d:f8:ed:92:01:d1:d7:04:87:77:4b:ee:69: ef:b3:af:1a:57:9e:c7:54:a4:f5:e3:41:ff:d9:de:36:c6:da: 06:1a:2d:d1:90:ce:48:98:fa:65:29:12:fe:d3:32:a1:c4:e1: 9a:4e:a1:66:77:83:27:7b:86:84:fa:17:c4:0d:cb:11:27:fb: 54:92:3c:86:18:ae:cd:64:28:5e:87:a0:6b:64:d2:61:ed:49: fe:d9:2e:01:ca:b1:61:6a:92:96:e0:e9:3f:66:1c:fc:a7:1e: 38:95:7a:66:59:1d:06:35:b7:77:f5:b6:a7:73:b9:89:81:ee: 81:2f:85:5b:60:b0:2d:ad:24:f7:88:d5:a9:cf:51:21:0d:0a: 30:52:4f:e6:d5:10:f3:d4:45:e0:67:0a:08:52:24:c5:f6:40: b7:a3:b8:17:a6:ec:db:15:7c:59:4e:c8:9b:53:d3:7e:e3:97: e2:c2:06:e8:50:ed:72:19:cf:70:ff:5b:d0:50:52:87:c0:9f: 58:af:e1:8b:0c:8c:9f:e1:a2:50:4e:bd:f0:56:7e:dc:03:f6: e0:7c:67:ef:02:03:f7:9b:09:7a:32:9d:49:05:c3:30:94:1a: 52:04:2e:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzZGRTExMC8GA1UEBRMoRkY3QzA2ODkyNTE4NjczRUNDRTA0NkI2QTcxN0YzNTND RTUzQzUwOTAeFw0yNTA4MDkwNzUzNDFaFw0yNTA4MTYwNzUzNDFaMBgxFjAUBgNV BAMTDTY4OTZmZTg1LWM4ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZpzbVv0sOBPLWMLHV4BAYn2+KBO8Bq44KzBv4ANpyn1rXu7CLVeqaJwJhG5xT 6vCudjimPZzEbC2fiBjWHs4OjI8cmG3sXaHDbLRA9nSJ6yS124c8otfM0om+SpY2 CpAqf+TwKJl7hQQ2KoCnAuaCr6YuoOyYcT44tBYQZ0YRwZOm2udFFxzV+7t5aZA9 LJzvjz9GYh3ki0hRM7s9phN4ry1Qzzzrlzyv9XYNtUizK2fWJbt4i4nmvQUZmL/x +89THCkZUYljab5YgLi5XNYA0uGHw3HKfhboEuGIU6aSk/QgXPOK7WwbcavT1p48 8bLg5GZTNToWZvgzJjBpt5ijAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfYmcMnlS FOFrdsmyBgHvkcwHZdQwHwYDVR0jBBgwFoAU/3wGiSUYZz7M4Ea2pxfzU85TxQkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NkZFLzkwRkU0NzIwMDgz NzExRjA5REI5MUI3MEM0RjlBRTAyL18zd0dpU1VZWno3TTRFYTJweGZ6VTg1VHhR ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvXzN3R2lTVVlaejdNNEVhMnB4ZnpVODVUeFFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NkZFLzkwRkU0NzIwMDgzNzExRjA5REI5MUI3MEM0RjlBRTAyL18zd0dpU1VZWno3 TTRFYTJweGZ6VTg1VHhRay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFmuJ3AqnH6w9NqX065kKBEAT9sw3a3ZHfjtkgHR1wSHd0vuae+zrxpX nsdUpPXjQf/Z3jbG2gYaLdGQzkiY+mUpEv7TMqHE4ZpOoWZ3gyd7hoT6F8QNyxEn +1SSPIYYrs1kKF6HoGtk0mHtSf7ZLgHKsWFqkpbg6T9mHPynHjiVemZZHQY1t3f1 tqdzuYmB7oEvhVtgsC2tJPeI1anPUSENCjBST+bVEPPUReBnCghSJMX2QLejuBem 7NsVfFlOyJtT037jl+LCBuhQ7XIZz3D/W9BQUofAn1iv4YsMjJ/holBOvfBWftwD 9uB8Z+8CA/ebCXoynUkFwzCUGlIELis= -----END CERTIFICATE-----Generated at Sun Aug 10 10:35:44 2025 by rpki-client