$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft File: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft (raw, json) Hash identifier: ff1wXC/R/zDc3IX/6cxPRhUFuU+3odugfyx8q5vpdCU= Subject key identifier: 4D:09:4C:D8:5C:E5:B3:AF:35:6B:63:AA:FA:01:D7:B4:80:FE:90:6A Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A Certificate issuer: /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft Manifest number: 01DB Signing time: Sat 09 Aug 2025 03:05:23 +0000 Manifest this update: Sat 09 Aug 2025 03:05:23 +0000 Manifest next update: Sat 16 Aug 2025 03:05:23 +0000 Files and hashes: 1: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl (hash: nPZNXYjiRtQ2OgYvULksZ0haj+Q1vGO5yjsUjkLBHLw=) 2: 38702E769AF611ED8D41985BC4F9AE02.roa (hash: ZhWBxmhvIB+43KRBVHlsXZ7qRlNDQ90SpnXAY8rEx0A=) 3: D076B1A49F2911ED937CF05AC4F9AE02.roa (hash: DMBYC+/NRUlRPJuHXxC2cxoOT1tZHI2lI1sjea+2JhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A Validity Not Before: Aug 9 03:05:23 2025 GMT Not After : Aug 16 03:05:23 2025 GMT Subject: CN=6896baf3-55db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a1:30:aa:02:f6:09:f6:33:91:f4:38:07:2f: 01:35:6d:a2:cb:4b:3d:3f:cb:fe:ee:6e:a7:82:e7: 05:6c:43:68:be:61:0f:05:4a:3d:9c:6f:61:f5:b0: 1a:1c:b7:b5:40:d0:c6:bd:85:53:3f:dd:f2:ec:a5: 63:eb:ad:8e:3c:f2:64:ca:03:e5:41:75:98:13:d8: 1a:ad:02:16:95:99:77:c2:87:9e:1f:1a:39:57:5c: 2a:86:25:ba:7d:f1:ff:fc:d4:50:ba:6d:1f:27:99: a9:69:fa:1f:19:f4:03:62:b6:ba:23:8b:14:fd:59: 67:ab:0e:75:24:2d:2b:0f:a4:16:a9:dd:5d:72:ba: 51:0e:ef:91:43:c5:0d:96:cb:e7:e7:16:ea:5e:ba: 5b:92:15:e8:83:ca:78:fc:24:a9:5f:dd:4c:a8:05: 76:2e:c1:f1:45:85:72:75:26:9f:89:07:13:ab:f3: a4:83:ea:d8:c3:83:10:7a:e8:b4:11:27:75:11:94: 0b:73:b6:d4:5a:e4:99:4b:69:21:94:02:c5:88:6d: e4:bb:a9:58:20:5a:b6:2e:96:2b:23:ed:f1:26:bb: 02:be:77:b7:1b:f1:20:e4:67:32:ac:5b:75:50:8d: f9:e9:e1:d9:ac:fd:11:c4:ba:a6:06:e5:86:32:c4: 10:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:09:4C:D8:5C:E5:B3:AF:35:6B:63:AA:FA:01:D7:B4:80:FE:90:6A X509v3 Authority Key Identifier: keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1f:fe:2d:95:5c:e1:ad:3f:e1:f7:b5:d6:b4:e0:15:5b:0b: 94:72:8e:3f:c0:f1:79:10:45:78:0f:9c:db:d6:6e:fa:77:7a: 37:7a:6e:0f:27:14:62:11:91:14:fa:c8:19:ff:b6:4d:bb:ba: 22:17:a9:59:b3:ab:08:c2:0e:98:c9:e0:21:97:34:b2:5e:a2: e8:ec:1b:07:5d:eb:03:12:ac:70:7f:26:85:93:01:4a:2c:3f: 6e:3c:9c:c8:a7:20:92:c1:4a:4d:2d:da:32:5f:06:37:d9:0a: 20:f4:a3:e8:1f:92:c5:6a:a8:40:63:0e:cb:39:7d:79:4b:42: 64:e8:e4:de:ad:76:b3:28:69:82:b4:d9:ec:0b:b2:95:ca:e0: 6b:22:1e:e9:9d:ba:f7:a0:98:17:18:b6:dc:ac:1f:e5:d6:92: 4e:fd:3d:88:cf:42:3c:4d:be:de:2a:0c:80:c3:a0:35:49:24: f6:a6:45:ea:e7:64:3d:3b:df:4c:50:d0:e4:3c:f4:f3:c3:86: 25:c7:58:e9:17:ac:46:73:84:f3:1f:8a:3a:ee:9b:a1:99:65: bd:19:01:33:0c:65:9d:e2:a4:1f:de:f4:a4:34:c4:fc:13:2f: 5a:26:ef:64:b2:4d:aa:64:3e:a3:82:b8:a5:1a:e8:9b:0f:53: 90:b5:ab:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzRkMxMTAvBgNVBAUTKEUxQzFDNzJCNjc5M0E5MDNCQTNERTAzMTAyNzUxOUI0 MzAyMTc1NkEwHhcNMjUwODA5MDMwNTIzWhcNMjUwODE2MDMwNTIzWjAYMRYwFAYD VQQDEw02ODk2YmFmMy01NWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6qEwqgL2CfYzkfQ4By8BNW2iy0s9P8v+7m6ngucFbENovmEPBUo9nG9h9bAa HLe1QNDGvYVTP93y7KVj662OPPJkygPlQXWYE9garQIWlZl3woeeHxo5V1wqhiW6 ffH//NRQum0fJ5mpafofGfQDYra6I4sU/Vlnqw51JC0rD6QWqd1dcrpRDu+RQ8UN lsvn5xbqXrpbkhXog8p4/CSpX91MqAV2LsHxRYVydSafiQcTq/Okg+rYw4MQeui0 ESd1EZQLc7bUWuSZS2khlALFiG3ku6lYIFq2LpYrI+3xJrsCvne3G/Eg5GcyrFt1 UI356eHZrP0RxLqmBuWGMsQQHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0JTNhc 5bOvNWtjqvoB17SA/pBqMB8GA1UdIwQYMBaAFOHBxytnk6kDuj3gMQJ1GbQwIXVq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNGQy9BOTZGNEI3ODlB RjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFRTzZQZUF4QW5VWnREQWhk V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjSEhLMmVUcVFPNlBlQXhBblVadERBaGRXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNGQy9BOTZGNEI3ODlBRjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFR TzZQZUF4QW5VWnREQWhkV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKH/4tlVzhrT/h97XWtOAVWwuUco4/wPF5EEV4D5zb1m76d3o3em4P JxRiEZEU+sgZ/7ZNu7oiF6lZs6sIwg6YyeAhlzSyXqLo7BsHXesDEqxwfyaFkwFK LD9uPJzIpyCSwUpNLdoyXwY32Qog9KPoH5LFaqhAYw7LOX15S0Jk6OTerXazKGmC tNnsC7KVyuBrIh7pnbr3oJgXGLbcrB/l1pJO/T2Iz0I8Tb7eKgyAw6A1SST2pkXq 52Q9O99MUNDkPPTzw4Ylx1jpF6xGc4TzH4o67puhmWW9GQEzDGWd4qQf3vSkNMT8 Ey9aJu9ksk2qZD6jgrilGuibD1OQtasq -----END CERTIFICATE-----Generated at Sat Aug 9 15:16:52 2025 by rpki-client