$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json) Hash identifier: ipVND6ExO6YcxTjZPJA4y2oTa0Bpjw4UZ6k7mmm0Xcc= Subject key identifier: AC:A7:F0:28:36:5D:A1:D5:71:2F:A3:36:66:ED:09:5D:F1:49:9F:2C Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Certificate serial: 081D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft Manifest number: 07D8 Signing time: Fri 08 Aug 2025 21:42:26 +0000 Manifest this update: Fri 08 Aug 2025 21:42:25 +0000 Manifest next update: Fri 15 Aug 2025 21:42:25 +0000 Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: AcdhrvEx8sMaY4NZ4Cx140is0NYDvpC11XwaqlNuCq0=) 2: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: JGXFZsvdAlPkzVwMIVDlhUnyxUdEjpH4xc3F+m/pQB0=) 3: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: yu9kaJ9SbaIghj5mweHVls+umbPvibjZ8k0y4rtHgrI=) 4: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: KYrgpq+j2JdiosQSHACv2bRMY5BVzOvfLnyNf5narws=) 5: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: Y/iBnK8ZipjxkATaALxABZ9CTEeJIdjjxY8Yxx9n9DM=) 6: 0989F3EE120911EB83107638C4F9AE02.roa (hash: ZN83zETo/fGZjHplsgi4LIPj/1+Cv9tK+RMfhDQAvcM=) 7: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: MIyFaAMcoVX+JijHyNBp9lzEprzyQwwRu4V9wwVXios=) 8: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: CoOgUqT0FD59n+BELVSjes/s0qoXYfrPfM4+T31Fkoo=) 9: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: Ej4Olhx/k6YWemdl2TV8Frzo1JOOuwGbcCqfJq8lBxg=) 10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: UjevdaGjYYh/fLHbv94Vi82GRHni+SflrmcRbP8Ltsg=) 11: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: BJy4+HNv8kQ6Lc2CH7nff6rHz79DtOyFMzKFxBbxH6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Validity Not Before: Aug 8 21:42:25 2025 GMT Not After : Aug 15 21:42:25 2025 GMT Subject: CN=68966f42-e660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:82:1e:ab:0a:4d:69:e5:76:92:22:4c:0b: 30:0f:1a:f5:16:8f:c6:45:88:29:c6:e8:df:18:81: 76:f1:39:4f:59:3a:b3:34:d9:3f:f7:80:04:a3:31: f4:61:b3:cd:e4:66:40:de:f4:ce:4f:49:fb:78:1f: 71:1a:9c:d0:70:a4:64:90:e3:ab:37:c3:45:c1:f0: 4a:42:d9:58:ce:3c:7a:41:1d:9e:75:2b:28:f0:6a: 42:3f:7e:cb:83:56:0a:40:44:47:41:87:91:d5:77: 77:92:6a:b9:56:74:fd:0d:36:d2:e5:2d:50:5b:f1: ed:b7:ae:0d:cf:a6:be:47:f5:b5:fa:f8:8c:8b:ee: 0b:35:0f:ef:89:76:0d:6b:d7:bf:a5:3d:3c:b7:8e: 3c:cd:ba:9c:56:12:d3:5c:1f:1f:96:07:8e:f0:0d: 06:96:f4:33:91:02:75:eb:3a:5e:eb:6e:3c:44:9f: 85:f5:5f:ec:39:cd:6e:99:d2:e1:e4:73:3b:89:d8: fc:b2:29:e7:37:b3:e6:e0:17:2e:ec:b1:a4:c3:8f: b4:a5:65:c1:8a:e1:17:bf:f2:c7:7d:00:03:85:60: 7b:b6:00:1a:94:c8:df:77:5e:c4:0f:13:94:c0:ef: 29:57:88:63:12:d4:c5:8f:4d:13:5d:89:73:a9:87: 3d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A7:F0:28:36:5D:A1:D5:71:2F:A3:36:66:ED:09:5D:F1:49:9F:2C X509v3 Authority Key Identifier: keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:c7:07:34:29:ef:60:7f:f3:f0:aa:c9:c3:2f:a2:89:27:8d: e5:55:81:58:a3:c8:43:f1:eb:08:90:0a:8b:e7:fe:5e:f6:c9: d2:24:54:6b:d8:95:3d:ac:8e:b7:a5:72:9e:82:5a:83:1f:9e: 9a:06:6b:6a:97:11:e6:a9:f3:a6:8d:81:fe:58:eb:15:74:b0: 11:a4:6c:13:26:bc:fd:df:de:b0:55:7f:c0:50:ab:e2:69:7f: 99:e0:ec:27:f7:b9:56:f2:18:19:21:b7:0e:6a:d1:e4:36:f2: 72:d8:d5:ef:03:4b:99:c2:c2:ca:4a:bc:c0:1a:d5:ab:05:b0: 15:58:dd:c9:fa:6f:12:7a:1e:59:78:35:99:19:1f:02:91:06: e6:e2:70:54:98:e2:db:38:4f:01:5c:a4:42:c3:5e:2d:b9:de: e0:f6:00:5e:6b:90:9e:bf:ee:dd:82:f8:ff:c5:b6:02:9c:e9: 25:67:94:9a:72:ae:e6:db:3a:bd:32:5d:b4:40:91:6b:20:1b: 6b:5b:9c:80:dc:c7:37:2e:50:64:8e:0d:cb:69:5a:30:a4:40: e5:66:c3:34:76:02:f9:b4:81:42:cc:f6:72:61:61:9b:23:55: d5:9f:ee:b2:e3:1d:84:e6:06:35:f6:30:6f:37:6e:dd:f9:0a: 37:ef:62:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3 NDRBQUY0ODAwHhcNMjUwODA4MjE0MjI1WhcNMjUwODE1MjE0MjI1WjAYMRYwFAYD VQQDEw02ODk2NmY0Mi1lNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwy2CHqsKTWnldpIiTAswDxr1Fo/GRYgpxujfGIF28TlPWTqzNNk/94AEozH0 YbPN5GZA3vTOT0n7eB9xGpzQcKRkkOOrN8NFwfBKQtlYzjx6QR2edSso8GpCP37L g1YKQERHQYeR1Xd3kmq5VnT9DTbS5S1QW/Htt64Nz6a+R/W1+viMi+4LNQ/viXYN a9e/pT08t448zbqcVhLTXB8flgeO8A0GlvQzkQJ16zpe6248RJ+F9V/sOc1umdLh 5HM7idj8sinnN7Pm4Bcu7LGkw4+0pWXBiuEXv/LHfQADhWB7tgAalMjfd17EDxOU wO8pV4hjEtTFj00TXYlzqYc9lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyn8Cg2 XaHVcS+jNmbtCV3xSZ8sMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI1Ri8yMkQ5MUY3MjExQ0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pv ZDJBdm1VLVBfVDUwU3E5SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpxwc0Ke9gf/PwqsnDL6KJJ43lVYFYo8hD8esIkAqL5/5e9snSJFRr 2JU9rI63pXKeglqDH56aBmtqlxHmqfOmjYH+WOsVdLARpGwTJrz9396wVX/AUKvi aX+Z4Own97lW8hgZIbcOatHkNvJy2NXvA0uZwsLKSrzAGtWrBbAVWN3J+m8Seh5Z eDWZGR8CkQbm4nBUmOLbOE8BXKRCw14tud7g9gBea5Cev+7dgvj/xbYCnOklZ5Sa cq7m2zq9Ml20QJFrIBtrW5yA3Mc3LlBkjg3LaVowpEDlZsM0dgL5tIFCzPZyYWGb I1XVn+6y4x2E5gY19jBvN27d+Qo372IG -----END CERTIFICATE-----Generated at Sat Aug 9 23:07:34 2025 by rpki-client