$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft File: 664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json) Hash identifier: 7qWN8xMETofO85Pay5YsiOGqz7oA8xDe/pXj1MWUs0o= Subject key identifier: AF:F6:8E:4A:AB:34:A6:FB:E4:A4:DE:B4:3E:5D:EC:DD:BF:CC:39:21 Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 Certificate issuer: /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft Manifest number: 04DB Signing time: Sun 10 Aug 2025 23:58:15 +0000 Manifest this update: Sun 10 Aug 2025 23:58:15 +0000 Manifest next update: Sun 17 Aug 2025 23:58:15 +0000 Files and hashes: 1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: nltlr0IbbOBbTQh/Rzj4UA+2BCYgq11npJyNong24HE=) 2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: fImPoQjcCGEMtVaG0vXMRn+nIx0n4x6cFQDmdGHL2YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923E1, serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Validity Not Before: Aug 10 23:58:15 2025 GMT Not After : Aug 17 23:58:15 2025 GMT Subject: CN=68993217-759f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:53:da:61:74:c2:6d:de:ae:8d:84:d3:db:80: 5e:83:72:1b:93:e9:15:82:5d:bf:9b:96:4a:35:7a: 49:a8:25:91:5c:67:97:ba:f5:11:00:c2:6f:24:ce: 29:36:31:d9:dd:0d:9c:fe:da:a4:71:20:81:34:a9: f2:43:70:d7:eb:24:03:d1:9f:9d:f5:5d:dc:f8:c4: 96:58:c0:9a:cc:0b:9a:80:76:e3:21:12:16:8b:38: 66:9c:4a:79:7e:df:b0:97:72:7c:fa:84:b1:3f:f0: ba:cd:6b:14:2e:d1:69:09:a0:d8:ca:d8:03:b5:ed: 8a:04:37:eb:78:dd:86:2a:da:60:01:43:2c:81:3c: 03:63:f2:06:3b:c3:2a:0b:b7:1f:41:77:ff:d6:5f: 87:ed:15:d0:e1:9e:aa:24:2c:52:76:f5:1b:21:f6: a2:80:a0:35:12:1d:00:3c:36:31:a8:58:df:54:34: 8f:d9:d3:ce:ee:f9:60:1f:bb:29:d6:6a:22:b1:fb: 56:73:49:74:f6:a1:c3:e5:24:05:d9:4d:7b:1a:e1: 52:af:75:4d:1c:36:02:00:f9:ae:c1:93:5f:9e:2d: 40:95:d2:07:af:53:8a:cc:e4:0c:5d:ed:4e:04:2a: 75:22:b3:d3:7b:11:1f:0f:25:1d:27:9a:9d:57:04: 93:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F6:8E:4A:AB:34:A6:FB:E4:A4:DE:B4:3E:5D:EC:DD:BF:CC:39:21 X509v3 Authority Key Identifier: keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:a3:c6:e0:cf:08:eb:48:c8:34:66:ed:f6:9a:51:6c:a2:33: 23:a3:05:bd:c2:fb:06:26:70:ee:cd:1f:10:5d:46:e1:91:0f: 17:4e:2a:0f:10:c9:fb:35:80:d9:f8:f0:40:21:6a:c8:1e:4d: 44:56:8f:25:c1:a0:e7:05:a2:74:bc:a8:99:4a:c0:8e:24:41: 63:e9:a4:a0:7c:99:b5:88:9e:2e:10:37:e3:a4:2c:94:c8:76: fc:be:b8:92:04:28:e3:19:92:59:8e:4e:d6:d3:bb:a7:b0:e0: 63:f1:9b:91:a1:57:bb:6b:fc:49:c7:67:7a:4a:c8:7e:28:0d: 13:1f:42:ea:a8:84:57:01:52:50:0a:57:f4:bc:4e:da:5c:c8: 1c:83:bb:58:9f:a3:6e:5a:0c:d2:c5:e6:05:80:3b:45:61:8e: 2a:5b:71:83:04:da:d3:0c:98:79:1e:ae:23:d1:e7:f3:c3:04: 02:76:a5:d9:60:f9:4d:34:46:a0:9e:c3:89:f3:a7:95:aa:cb: a3:2b:69:b9:13:6d:6c:63:78:e3:09:32:8d:5d:ef:ef:4a:51: d7:66:bf:f8:6a:92:5f:0e:b2:68:2f:a6:80:5b:dc:51:e7:fd: 18:b3:e1:40:b2:b1:b4:13:0f:cb:bf:6c:d5:9a:8c:00:a4:7a: 57:84:e9:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzRTExMTAvBgNVBAUTKEVCQUUxRjlBQjQ5NTZGMTgzNEI3MzUyOTM1N0M5RjNG MUUxMjA1RjAwHhcNMjUwODEwMjM1ODE1WhcNMjUwODE3MjM1ODE1WjAYMRYwFAYD VQQDEw02ODk5MzIxNy03NTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lPaYXTCbd6ujYTT24Beg3Ibk+kVgl2/m5ZKNXpJqCWRXGeXuvURAMJvJM4p NjHZ3Q2c/tqkcSCBNKnyQ3DX6yQD0Z+d9V3c+MSWWMCazAuagHbjIRIWizhmnEp5 ft+wl3J8+oSxP/C6zWsULtFpCaDYytgDte2KBDfreN2GKtpgAUMsgTwDY/IGO8Mq C7cfQXf/1l+H7RXQ4Z6qJCxSdvUbIfaigKA1Eh0APDYxqFjfVDSP2dPO7vlgH7sp 1moisftWc0l09qHD5SQF2U17GuFSr3VNHDYCAPmuwZNfni1AldIHr1OKzOQMXe1O BCp1IrPTexEfDyUdJ5qdVwSTuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/2jkqr NKb75KTetD5d7N2/zDkhMB8GA1UdIwQYMBaAFOuuH5q0lW8YNLc1KTV8nz8eEgXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNFMS8yQUY0QjM3NDMy MjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4ZzB0elVwTlh5ZlB4NFNC ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY2NGZtclNWYnhnMHR6VXBOWHlmUHg0U0JmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjNFMS8yQUY0QjM3NDMyMjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4 ZzB0elVwTlh5ZlB4NFNCZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZo8bgzwjrSMg0Zu32mlFsojMjowW9wvsGJnDuzR8QXUbhkQ8XTioP EMn7NYDZ+PBAIWrIHk1EVo8lwaDnBaJ0vKiZSsCOJEFj6aSgfJm1iJ4uEDfjpCyU yHb8vriSBCjjGZJZjk7W07unsOBj8ZuRoVe7a/xJx2d6Ssh+KA0TH0LqqIRXAVJQ Clf0vE7aXMgcg7tYn6NuWgzSxeYFgDtFYY4qW3GDBNrTDJh5Hq4j0efzwwQCdqXZ YPlNNEagnsOJ86eVqsujK2m5E21sY3jjCTKNXe/vSlHXZr/4apJfDrJoL6aAW9xR 5/0Ys+FAsrG0Ew/Lv2zVmowApHpXhOn1 -----END CERTIFICATE-----Generated at Mon Aug 11 06:20:05 2025 by rpki-client