$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json) Hash identifier: Qd80+p/+ozxVIuEpXDKGeBIw+kaNsNj7++YbuNYQikc= Subject key identifier: 92:E9:05:DE:94:25:AD:58:64:68:CC:EF:EB:96:EB:54:F4:70:25:DF Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft Manifest number: 12 Signing time: Mon 11 Aug 2025 08:20:49 +0000 Manifest this update: Mon 11 Aug 2025 08:20:49 +0000 Manifest next update: Mon 18 Aug 2025 08:20:49 +0000 Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: d2FiFdYEpe0B9EmIEoEoE4gwGJ1uug7dv/G0h5PDSfI=) 2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: SdgAZZ52cjGHFYLx6r6iySsbR8aD22mEVfk3u39V65w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 08:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Validity Not Before: Aug 11 08:20:49 2025 GMT Not After : Aug 18 08:20:49 2025 GMT Subject: CN=6899a7e1-c0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:11:32:65:51:91:0e:9e:28:9a:df:a3:15: 58:f5:5a:2d:44:57:6f:60:74:0f:f9:c8:ea:bf:ef: 25:a5:fd:69:85:15:b0:f1:a8:c8:e2:7b:c9:81:8b: ef:7e:28:7d:ef:2c:6b:42:03:d4:c4:09:f9:23:ba: f5:c5:c7:27:09:1b:49:63:6d:bf:32:4c:9e:1f:ef: 39:2c:3c:e1:90:45:48:a6:56:c2:11:49:3c:b5:13: 8b:16:2c:d5:0f:85:02:e4:b1:e1:a9:e0:79:d9:46: 6e:65:2a:c7:a9:61:27:3e:a4:bf:4c:61:97:62:6d: 73:65:35:29:6f:8d:b6:13:59:f1:6a:ca:fb:38:3c: 1f:92:be:24:d1:ef:a4:29:95:9e:22:c7:88:4d:4c: 38:44:39:c2:0f:9f:ad:91:3f:1b:cc:ad:bc:67:e9: 35:ce:1b:e6:fa:b8:2a:df:a9:f8:2f:4d:96:5c:04: e9:84:f9:e5:69:c4:60:7b:6c:95:39:61:e8:44:06: e0:fa:52:aa:65:e3:45:3c:28:b2:c5:ae:ed:ad:2c: 85:1d:bb:7a:13:01:96:dd:c1:a4:a3:d2:a8:16:56: 0f:6d:8d:8b:9b:a5:b8:54:cf:3c:48:c8:23:d6:1b: 8f:a8:8a:a1:b4:60:d3:eb:f5:37:dd:3f:b8:8d:5d: b1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E9:05:DE:94:25:AD:58:64:68:CC:EF:EB:96:EB:54:F4:70:25:DF X509v3 Authority Key Identifier: keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:aa:28:ac:63:ec:f4:05:46:79:0b:fe:c1:6a:dd:4b:73:ac: 05:7e:2f:07:3b:1f:e2:0a:6e:a5:1c:1e:31:6f:9f:61:b6:f6: e2:21:cc:03:4d:4e:21:a8:41:66:10:c3:35:8f:f9:29:a6:86: 69:96:75:54:22:9d:90:e8:9e:58:df:1b:7b:26:84:f6:b1:9d: 83:77:b2:fd:25:c5:20:50:98:ad:de:c5:1a:1b:3d:2b:c7:9c: 56:66:fc:e8:45:ba:30:e8:8a:81:0b:a1:9b:35:9d:e3:7a:0f: f4:36:41:36:2f:d7:37:bd:90:ef:c0:1c:83:a4:06:d2:1f:16: 6b:ae:c5:d1:7e:f0:05:aa:1e:f2:e7:bf:fa:c5:47:ea:87:98: c2:8a:73:39:54:99:d8:f2:43:30:09:c9:57:83:21:29:ad:19: 4c:1c:84:02:e1:c6:df:25:33:4f:1e:03:db:49:aa:98:fb:69: aa:58:23:0e:ef:97:c3:be:11:4d:ae:8a:d3:c3:a3:ee:28:8b: 46:ee:3c:d7:21:f7:48:28:63:de:37:9d:f9:1e:6f:cb:93:ad: 11:5f:48:6a:2f:3e:8a:61:39:57:a6:be:06:63:79:fd:3e:c6: a2:49:be:41:41:0c:43:40:b1:f4:61:08:c9:3b:59:f2:6a:53: 2b:c0:66:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTFERTExMC8GA1UEBRMoNkI4Mjk2QTU4MTU0MzAyNzhFQzMxMUI1RTlDQkVCN0ZG MEE5MERDNjAeFw0yNTA4MTEwODIwNDlaFw0yNTA4MTgwODIwNDlaMBgxFjAUBgNV BAMTDTY4OTlhN2UxLWMwYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo/REyZVGRDp4omt+jFVj1Wi1EV29gdA/5yOq/7yWl/WmFFbDxqMjie8mBi+9+ KH3vLGtCA9TECfkjuvXFxycJG0ljbb8yTJ4f7zksPOGQRUimVsIRSTy1E4sWLNUP hQLkseGp4HnZRm5lKsepYSc+pL9MYZdibXNlNSlvjbYTWfFqyvs4PB+SviTR76Qp lZ4ix4hNTDhEOcIPn62RPxvMrbxn6TXOG+b6uCrfqfgvTZZcBOmE+eVpxGB7bJU5 YehEBuD6Uqpl40U8KLLFru2tLIUdu3oTAZbdwaSj0qgWVg9tjYubpbhUzzxIyCPW G4+oiqG0YNPr9TfdP7iNXbHVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkukF3pQl rVhkaMzv65brVPRwJd8wHwYDVR0jBBgwFoAUa4KWpYFUMCeOwxG16cvrf/CpDcYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1MURFLzg3MUZEQTM2NjBC NDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNlT3d4RzE2Y3ZyZl9DcERj WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYTRLV3BZRlVNQ2VPd3hHMTZjdnJmX0NwRGNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 MURFLzg3MUZEQTM2NjBCNDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNl T3d4RzE2Y3ZyZl9DcERjWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADiqKKxj7PQFRnkL/sFq3UtzrAV+Lwc7H+IKbqUcHjFvn2G29uIhzANN TiGoQWYQwzWP+SmmhmmWdVQinZDonljfG3smhPaxnYN3sv0lxSBQmK3exRobPSvH nFZm/OhFujDoioELoZs1neN6D/Q2QTYv1ze9kO/AHIOkBtIfFmuuxdF+8AWqHvLn v/rFR+qHmMKKczlUmdjyQzAJyVeDISmtGUwchALhxt8lM08eA9tJqpj7aapYIw7v l8O+EU2uitPDo+4oi0buPNch90goY943nfkeb8uTrRFfSGovPophOVemvgZjef0+ xqJJvkFBDENAsfRhCMk7WfJqUyvAZoU= -----END CERTIFICATE-----Generated at Wed Aug 13 02:15:49 2025 by rpki-client