$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json) Hash identifier: v1IWn+/xhyymuT4NlK3lARF5z/DChIdyRjEtFJZ07PM= Subject key identifier: 1B:6D:18:25:99:A0:E7:AC:EC:5C:FB:D0:DB:0D:97:7B:CD:85:CF:E7 Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Certificate serial: 2448 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft Manifest number: 46E3 Signing time: Fri 08 Aug 2025 15:52:32 +0000 Manifest this update: Fri 08 Aug 2025 15:52:32 +0000 Manifest next update: Fri 15 Aug 2025 15:52:32 +0000 Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: 9tCq8pbLiZs5JDrs8tLYeXHnXgFDELTl3jsm+lAzPaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9288 (0x2448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Validity Not Before: Aug 8 15:52:32 2025 GMT Not After : Aug 15 15:52:32 2025 GMT Subject: CN=68961d40-4e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e7:b3:c9:53:e4:82:ac:4d:d5:76:f3:06:c7: 61:d3:79:ba:2f:a7:40:3c:73:22:18:07:39:11:68: 6d:f2:8a:47:f7:55:a7:0d:c7:33:9d:1f:0e:19:63: 9a:99:25:7c:38:bd:ed:aa:90:06:13:58:51:7e:6c: 18:ff:b2:74:69:ad:1a:e7:55:69:9c:fe:4e:8f:e2: 55:74:cb:b0:28:9f:3b:73:06:38:0d:80:b8:73:cf: da:46:6c:3f:3e:2e:cf:17:c5:a6:72:45:59:c0:86: f1:fe:10:cd:78:2f:59:9a:67:a6:11:a3:ff:49:d9: 7d:c1:4a:5a:94:b7:a1:8c:76:95:56:4e:3a:15:46: 09:04:d6:13:61:8f:9b:ae:68:5f:88:3c:42:04:cd: 76:64:64:d0:92:bf:d6:7a:41:ca:e1:06:2d:85:23: 38:bb:4c:28:49:40:82:e0:bc:31:11:f5:8f:01:4d: 92:b2:ae:3c:5c:a9:12:61:d0:51:e2:d8:fa:da:81: fc:9c:87:5f:e5:cb:4e:a2:2e:62:be:8b:3a:57:48: 04:44:21:46:79:b5:30:7f:22:10:3f:64:bb:b3:1c: 4b:9f:2b:8b:08:83:53:b3:9e:ef:a7:24:5b:b0:c3: 63:f9:a2:0d:b1:50:77:a5:d0:95:d8:0e:7c:ae:ff: 6d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6D:18:25:99:A0:E7:AC:EC:5C:FB:D0:DB:0D:97:7B:CD:85:CF:E7 X509v3 Authority Key Identifier: keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:07:19:7b:4d:b7:88:cd:2b:a6:32:6a:a7:64:05:59:53:d9: 25:75:d9:22:16:fa:bd:53:da:b7:88:9c:c6:38:a2:b1:ae:6e: c7:b6:c1:2d:f4:ed:5e:c4:e9:6a:cb:58:28:3e:b1:54:80:8d: e2:4f:00:68:ca:0a:4c:ef:2a:c4:80:66:af:6f:e9:a9:df:cb: 6f:e5:b3:99:b1:d7:f1:64:da:9e:8e:b5:05:5a:80:65:58:50: 73:7e:49:3e:02:a4:8d:73:bf:6e:b3:35:62:b3:39:bd:27:21: 2c:01:8c:41:84:40:ca:f0:f2:0f:8d:24:38:6f:d1:19:73:fe: 06:f4:1d:d2:8a:bd:ad:fc:85:1d:0a:cd:c9:83:4e:15:31:ff: 73:91:5c:c4:4a:4d:7b:0e:61:16:e5:21:68:c2:67:bf:21:d1: 48:42:09:b5:a5:16:a3:11:c5:f5:3e:38:9f:ab:91:9f:6b:ed: e6:4c:25:84:7a:4e:f5:25:77:6f:e6:21:64:c3:05:7b:6f:05: 98:aa:6d:de:b1:64:97:1f:23:0d:46:66:7e:c8:71:e8:09:cb: 5c:dc:7a:1b:19:6c:20:34:63:20:be:19:48:cd:b9:3d:ff:38: 2e:73:e5:91:46:6c:a4:02:06:60:1f:79:3a:26:49:45:6e:7d: 19:dc:d7:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDczOEMyM0FBNENFNzU1NUVFQTJGQzhDMkJFRDhGNDZB NDg4REM5M0QwHhcNMjUwODA4MTU1MjMyWhcNMjUwODE1MTU1MjMyWjAYMRYwFAYD VQQDEw02ODk2MWQ0MC00ZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteezyVPkgqxN1XbzBsdh03m6L6dAPHMiGAc5EWht8opH91WnDccznR8OGWOa mSV8OL3tqpAGE1hRfmwY/7J0aa0a51VpnP5Oj+JVdMuwKJ87cwY4DYC4c8/aRmw/ Pi7PF8WmckVZwIbx/hDNeC9ZmmemEaP/Sdl9wUpalLehjHaVVk46FUYJBNYTYY+b rmhfiDxCBM12ZGTQkr/WekHK4QYthSM4u0woSUCC4LwxEfWPAU2Ssq48XKkSYdBR 4tj62oH8nIdf5ctOoi5ivos6V0gERCFGebUwfyIQP2S7sxxLnyuLCINTs57vpyRb sMNj+aINsVB3pdCV2A58rv9t7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBttGCWZ oOes7Fz70NsNl3vNhc/nMB8GA1UdIwQYMBaAFHOMI6pM51Ve6i/Iwr7Y9GpIjck9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZWN3FMOGpDdnRqMGFraU55 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0d2pxa3puVlY3cUw4akN2dGowYWtpTnlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZW N3FMOGpDdnRqMGFraU55VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYBxl7TbeIzSumMmqnZAVZU9klddkiFvq9U9q3iJzGOKKxrm7HtsEt 9O1exOlqy1goPrFUgI3iTwBoygpM7yrEgGavb+mp38tv5bOZsdfxZNqejrUFWoBl WFBzfkk+AqSNc79uszViszm9JyEsAYxBhEDK8PIPjSQ4b9EZc/4G9B3Sir2t/IUd Cs3Jg04VMf9zkVzESk17DmEW5SFowme/IdFIQgm1pRajEcX1Pjifq5Gfa+3mTCWE ek71JXdv5iFkwwV7bwWYqm3esWSXHyMNRmZ+yHHoCctc3HobGWwgNGMgvhlIzbk9 /zguc+WRRmykAgZgH3k6JklFbn0Z3Nfp -----END CERTIFICATE-----Generated at Sat Aug 9 01:00:32 2025 by rpki-client