$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: gYkgNBTTr1TzkMdEVsoc8hCh5sCiHRTuy56Si4WxVmc= Subject key identifier: 7D:E6:4A:88:8D:7F:5E:7A:F5:E5:C3:26:7A:EF:E1:E6:3C:50:3D:9F Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 34BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 34B8 Signing time: Tue 12 Aug 2025 14:35:51 +0000 Manifest this update: Tue 12 Aug 2025 14:35:51 +0000 Manifest next update: Tue 19 Aug 2025 14:35:51 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: v5r81HssduXeCg6hzvLiv6li18SFVTAx1hi4DrCQhh4=) 2: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: /ycT0LeM2B6SfJOIcutt73CO4dhLu842cRCTArO5hco=) 3: 673DC29606B011EFA665703AC4F9AE02.roa (hash: F5Zy7dXCYPL9clQFpPmuH37XP7Qhuqmf+NBAd1W/CM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 14:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13502 (0x34be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Aug 12 14:35:51 2025 GMT Not After : Aug 19 14:35:51 2025 GMT Subject: CN=689b5147-9ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:50:0b:cb:a1:61:f4:a9:7c:c1:f0:42:73: 4c:1a:96:64:0d:be:c5:ad:44:36:ef:a9:df:5f:ac: 3e:82:9e:4b:fc:d8:f0:35:26:70:ca:5f:1f:9e:ee: ad:89:35:2e:4b:04:72:0f:e2:a4:b3:4d:25:f1:57: 88:12:3f:75:57:c9:55:8c:39:04:50:27:ca:eb:e7: 9a:26:3b:53:e7:9b:bb:12:c7:03:c7:20:02:5b:64: ce:fb:35:e5:bb:99:83:8c:02:d8:c8:12:da:8b:5b: 11:7a:95:5f:9c:7e:ad:52:ec:72:fd:db:57:b2:e8: a9:8f:bc:9f:40:d4:d1:bc:64:8c:c7:03:a1:10:34: 7d:07:b4:67:24:23:57:dc:e9:cc:40:8b:d5:77:f4: af:31:24:0d:1b:a3:8c:af:28:75:be:31:86:80:4e: c3:80:fd:83:61:fc:eb:2f:a4:ba:2a:2b:cc:5d:46: 5c:3b:a7:27:61:6b:e0:aa:e7:d5:58:32:e9:47:a9: 0e:19:8f:d2:e0:81:95:c5:de:f4:a1:b7:f2:3a:c6: 26:38:8e:0e:06:fc:f5:5b:bd:ae:f6:ae:f0:e3:4f: ad:3a:a9:10:75:62:ea:0a:96:41:dd:bc:74:28:29: c9:74:98:5f:df:7a:70:ba:7a:59:73:3e:a9:3f:2b: 8d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E6:4A:88:8D:7F:5E:7A:F5:E5:C3:26:7A:EF:E1:E6:3C:50:3D:9F X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:9a:ed:bd:d5:85:0d:f5:4e:d1:5c:94:65:9b:94:ba:fd:f5: 68:59:e9:fc:e4:69:ac:36:9a:c2:6a:f8:2b:72:a1:81:10:b6: d9:6d:ff:b9:16:20:0d:23:ce:c4:7f:34:39:16:70:ac:09:c7: 69:75:d8:64:ca:08:66:73:00:34:91:0a:65:55:63:c0:3a:aa: c4:68:99:6a:3a:2d:d2:a7:98:34:fe:d9:6b:d2:72:50:a2:f7: 3a:8c:4c:b6:ab:f1:cf:6f:d7:19:81:e1:79:01:0f:1a:ad:46: 71:60:4d:1b:47:43:91:3c:88:ca:58:d0:12:fa:28:27:bc:96: 2a:f0:ce:cd:90:06:b0:f9:2c:f1:50:f0:a6:8a:20:44:08:3b: cf:a6:79:74:da:9b:94:b0:bb:b4:d7:6d:c3:e8:4b:ee:d3:a7: a3:69:7b:c0:b5:f9:50:3e:16:19:02:ba:c7:de:7c:8f:6e:6e: 22:2b:c0:6b:84:86:64:c8:10:4c:3e:94:17:ce:7f:c5:78:57: d3:96:f2:92:fe:c6:74:a8:60:f9:71:aa:ad:df:c5:9e:2b:a8: b8:12:98:af:2a:c0:c9:e1:1b:d1:3c:91:ef:76:85:83:c1:65: 72:70:11:dd:b8:b4:88:88:c7:9c:d4:5e:a5:ff:94:5a:c8:93: ea:ea:cd:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjUwODEyMTQzNTUxWhcNMjUwODE5MTQzNTUxWjAYMRYwFAYD VQQDEw02ODliNTE0Ny05Y2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVdQC8uhYfSpfMHwQnNMGpZkDb7FrUQ276nfX6w+gp5L/NjwNSZwyl8fnu6t iTUuSwRyD+Kks00l8VeIEj91V8lVjDkEUCfK6+eaJjtT55u7EscDxyACW2TO+zXl u5mDjALYyBLai1sRepVfnH6tUuxy/dtXsuipj7yfQNTRvGSMxwOhEDR9B7RnJCNX 3OnMQIvVd/SvMSQNG6OMryh1vjGGgE7DgP2DYfzrL6S6KivMXUZcO6cnYWvgqufV WDLpR6kOGY/S4IGVxd70obfyOsYmOI4OBvz1W72u9q7w40+tOqkQdWLqCpZB3bx0 KCnJdJhf33pwunpZcz6pPyuNywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3mSoiN f1569eXDJnrv4eY8UD2fMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSmu291YUN9U7RXJRlm5S6/fVoWen85GmsNprCavgrcqGBELbZbf+5 FiANI87EfzQ5FnCsCcdpddhkyghmcwA0kQplVWPAOqrEaJlqOi3Sp5g0/tlr0nJQ ovc6jEy2q/HPb9cZgeF5AQ8arUZxYE0bR0ORPIjKWNAS+ignvJYq8M7NkAaw+Szx UPCmiiBECDvPpnl02puUsLu0123D6Evu06ejaXvAtflQPhYZArrH3nyPbm4iK8Br hIZkyBBMPpQXzn/FeFfTlvKS/sZ0qGD5caqt38WeK6i4EpivKsDJ4RvRPJHvdoWD wWVycBHduLSIiMec1F6l/5RayJPq6s19 -----END CERTIFICATE-----Generated at Wed Aug 13 02:15:34 2025 by rpki-client