$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json) Hash identifier: 4G3v2M3AbKg+36awSssQz/7ZkXT2Gx0bAqlYF9fak2E= Subject key identifier: F7:C2:E1:11:3E:28:EB:B9:06:E5:9D:F3:92:50:B1:FC:2F:94:9B:73 Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Certificate serial: 09F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft Manifest number: 09E7 Signing time: Fri 08 Aug 2025 20:13:07 +0000 Manifest this update: Fri 08 Aug 2025 20:13:07 +0000 Manifest next update: Fri 15 Aug 2025 20:13:07 +0000 Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: dJKrx84vkK8ufoVS1WYAUAp42N4p4fWNIS/BpIffDTM=) 2: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: PugK/HlSlwCNhEasOZjO6B/uomD7VotHJLA2wV6jZrM=) 3: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: hvomTHOFg3fOu5UVv4a+8zSBR7jdgf3xO/+H6ZJICO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2548 (0x9f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Validity Not Before: Aug 8 20:13:07 2025 GMT Not After : Aug 15 20:13:07 2025 GMT Subject: CN=68965a53-2ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:bd:d3:ec:f2:39:93:64:9c:35:41:69:b3: 8f:cc:df:5e:51:0e:3d:91:05:ae:68:1c:af:33:1f: 8b:87:eb:57:e9:7e:7f:23:fa:05:ce:61:fd:96:0c: 49:6e:2f:02:0c:0e:ec:40:fd:75:cb:7e:8b:b8:b1: 3f:20:a4:8e:1e:fe:94:7a:33:4d:65:ad:9d:3c:9e: a2:a7:bb:c3:c2:53:01:62:dc:92:de:a8:b9:fa:79: 4f:12:91:b3:90:e5:5a:f5:0d:78:e6:4d:c2:e2:e1: e5:50:55:67:bd:98:c2:bb:ad:4e:7f:0e:9d:c9:2a: e0:f8:b0:c7:c2:74:51:01:22:1f:43:d8:0d:e6:47: 8b:6d:f0:00:61:fc:fe:4d:ea:90:a2:38:b2:b8:a6: 2b:6a:18:3d:8e:a9:36:13:46:34:36:10:b9:87:28: 30:ff:c8:d6:30:3c:0a:b5:2a:5f:ca:00:fa:90:74: a6:8d:fa:d6:cf:30:d2:5e:21:65:8d:10:22:cd:d3: ad:47:20:7b:2e:2c:a1:64:0b:3a:4f:07:7d:29:66: 23:82:22:86:ae:8c:ca:e3:37:9c:09:54:d0:94:c9: c1:f3:1b:00:c8:bf:64:8e:aa:44:fe:50:df:a2:6b: 54:84:2c:bb:0f:27:2f:bc:25:24:25:d8:f1:8c:a5: 53:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C2:E1:11:3E:28:EB:B9:06:E5:9D:F3:92:50:B1:FC:2F:94:9B:73 X509v3 Authority Key Identifier: keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:79:e9:9f:0b:f1:44:e2:ee:06:6e:88:13:97:7a:1b:ea:2c: d2:3c:ae:54:5e:fc:4c:57:a9:8e:61:a3:b6:7e:c0:7e:bb:6c: 8c:3e:51:c1:e1:52:17:0d:a9:56:5b:8c:41:2d:2b:ce:0c:ed: 4c:26:a1:1d:34:10:81:11:45:e0:cb:c9:f6:de:87:e1:59:23: 24:2a:d7:d1:69:6a:23:fb:d9:bd:9d:22:94:b5:19:6b:7e:b2: 87:60:ff:e1:51:18:ea:c7:aa:f7:37:80:e9:26:12:a0:4d:71: ac:34:a6:29:f3:19:d3:3b:4e:9c:d8:4c:1d:54:31:1c:c4:cd: 3d:c6:bb:9e:49:93:9a:eb:82:90:e0:5b:e2:fd:0b:e4:f8:f7: c1:bf:18:78:9a:8a:5a:fb:60:f9:08:e7:38:d0:6a:b7:b6:02: e6:31:c7:a8:43:a1:30:b9:5c:c1:76:d4:21:da:f1:35:a9:b4: 27:47:08:e0:6d:24:c3:ff:19:f0:94:fa:2b:b6:bd:6c:8a:96: 8a:6a:b3:dc:6e:18:dc:32:ae:ab:ab:11:be:cf:68:03:62:17: 88:b2:cd:af:6a:76:d4:29:ab:40:b0:3d:5a:2d:79:37:1f:6f: 9c:f9:2a:3b:2a:19:e0:cf:a1:fa:a3:c5:49:1b:62:3d:a0:53: 5f:59:af:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBBNkMxMTAvBgNVBAUTKEE3ODdBNjNFNDlFRThFQzZGOTc1MTE2MDdGMUI3QzVC MERGMTE2NEUwHhcNMjUwODA4MjAxMzA3WhcNMjUwODE1MjAxMzA3WjAYMRYwFAYD VQQDEw02ODk2NWE1My0yZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUS90+zyOZNknDVBabOPzN9eUQ49kQWuaByvMx+Lh+tX6X5/I/oFzmH9lgxJ bi8CDA7sQP11y36LuLE/IKSOHv6UejNNZa2dPJ6ip7vDwlMBYtyS3qi5+nlPEpGz kOVa9Q145k3C4uHlUFVnvZjCu61Ofw6dySrg+LDHwnRRASIfQ9gN5keLbfAAYfz+ TeqQojiyuKYrahg9jqk2E0Y0NhC5hygw/8jWMDwKtSpfygD6kHSmjfrWzzDSXiFl jRAizdOtRyB7LiyhZAs6Twd9KWYjgiKGrozK4zecCVTQlMnB8xsAyL9kjqpE/lDf omtUhCy7DycvvCUkJdjxjKVTzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfC4RE+ KOu5BuWd85JQsfwvlJtzMB8GA1UdIwQYMBaAFKeHpj5J7o7G+XURYH8bfFsN8RZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEE2Qy9COTE2RjM4ODgy QzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpzYjVkUkZnZnh0OFd3M3hG azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0ZW1Qa251anNiNWRSRmdmeHQ4V3czeEZrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEE2Qy9COTE2RjM4ODgyQzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpz YjVkUkZnZnh0OFd3M3hGazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADeemfC/FE4u4GbogTl3ob6izSPK5UXvxMV6mOYaO2fsB+u2yMPlHB 4VIXDalWW4xBLSvODO1MJqEdNBCBEUXgy8n23ofhWSMkKtfRaWoj+9m9nSKUtRlr frKHYP/hURjqx6r3N4DpJhKgTXGsNKYp8xnTO06c2EwdVDEcxM09xrueSZOa64KQ 4Fvi/Qvk+PfBvxh4mopa+2D5COc40Gq3tgLmMceoQ6EwuVzBdtQh2vE1qbQnRwjg bSTD/xnwlPortr1sipaKarPcbhjcMq6rqxG+z2gDYheIss2vanbUKatAsD1aLXk3 H2+c+So7Khngz6H6o8VJG2I9oFNfWa98 -----END CERTIFICATE-----Generated at Sun Aug 10 16:02:25 2025 by rpki-client