$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft File: 4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json) Hash identifier: 6nqNqUOJVHcjQQP42leR6jsPDAOBo/eWp2QcrdN8QQc= Subject key identifier: D3:D4:F6:0E:13:75:8E:92:60:4A:BC:2B:0A:6C:0C:53:8D:DC:01:FF Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 Certificate issuer: /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft Manifest number: 9D Signing time: Mon 11 Aug 2025 06:31:00 +0000 Manifest this update: Mon 11 Aug 2025 06:30:59 +0000 Manifest next update: Mon 18 Aug 2025 06:30:59 +0000 Files and hashes: 1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: KoHJ0m34NrxnA9YfGV5Q+sfR/XsIWoyt00wbDXhUUlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Validity Not Before: Aug 11 06:30:59 2025 GMT Not After : Aug 18 06:30:59 2025 GMT Subject: CN=68998e24-106d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:8b:50:23:9f:e6:da:84:ef:19:4c:6d:e4: 27:09:16:c0:96:13:3e:93:24:61:ef:40:bb:f5:e0: b7:ce:d9:84:de:f2:64:39:86:53:9b:09:a2:bf:44: 96:10:93:d3:56:3f:d5:f5:e5:bc:ab:d5:db:67:45: 7c:d2:2b:1e:4d:f5:aa:e7:0c:b7:ef:74:ff:2e:89: 37:b4:66:21:a1:70:cb:96:b0:e3:ce:fd:19:11:d4: c7:78:6a:29:b6:df:29:c3:66:af:61:e9:73:0f:2b: 24:e5:03:58:bf:e0:d7:d9:d7:f6:95:d5:5f:03:e0: 9c:08:16:c8:74:49:91:3d:a8:cd:09:d2:98:79:ae: dc:00:30:6a:28:48:eb:6f:a5:00:53:44:2d:c6:90: 8a:37:0b:89:61:02:53:45:f0:0f:ff:05:ce:80:8c: cc:b5:02:cb:8c:53:0f:96:74:63:24:06:81:98:cc: 7e:49:fe:ed:97:e8:c5:b9:43:43:5f:e7:80:6e:d3: 9e:b4:5b:29:f2:2a:76:0d:d8:19:03:d0:d8:e5:98: 3b:78:c1:9e:c8:5d:40:55:87:8a:b2:cc:48:e1:a4: b9:62:5b:d0:a9:1b:30:41:de:be:43:d2:13:0b:e8: 68:dd:ca:23:11:a2:de:44:0c:b2:f1:d3:e4:00:84: ca:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D4:F6:0E:13:75:8E:92:60:4A:BC:2B:0A:6C:0C:53:8D:DC:01:FF X509v3 Authority Key Identifier: keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c3:92:e1:12:ff:34:35:ae:f8:d3:43:60:fe:53:c1:94:65: ea:20:7e:80:14:26:5c:ac:eb:c1:ba:b2:ea:03:c7:45:b7:8e: 1e:34:a9:d7:57:06:03:49:db:44:b1:a6:f2:f7:9b:7a:c2:68: eb:a9:1e:7b:91:77:ea:b5:95:f1:e2:96:5f:6f:d9:ee:bd:68: 37:a9:a3:19:1f:40:c7:71:88:c9:74:a2:15:6d:88:61:d6:ed: df:05:56:98:72:99:3a:eb:0b:4a:7c:45:fd:e3:c1:08:02:53: ac:bc:ca:d4:4f:91:07:c7:a2:b3:9f:c8:7e:df:7e:f2:10:c6: fe:78:ae:0a:f1:45:2b:50:d4:7e:93:b6:98:00:4e:2a:dd:79: 1a:12:0b:9e:1a:d7:2f:9f:52:db:a2:1a:99:52:56:48:65:77: b7:4b:14:cb:7b:ed:19:bc:7c:31:2b:1c:2e:d4:ab:0d:06:ba: 56:e1:5f:8f:8d:a5:05:2c:d2:a4:ba:e5:7b:2e:82:40:98:ae: e3:99:98:09:5f:40:23:c5:f0:a6:66:8e:7e:50:fe:74:cc:b0: e6:16:cb:35:49:a9:94:cf:22:b6:8a:f8:82:63:d8:ea:3b:0e: ae:c6:59:08:4f:f7:4a:74:e4:bf:a1:1b:a9:7b:be:16:2a:18: 29:22:6f:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKEUwREM2Q0I3MDlFRUIxMUJDMjA3NUYzNTJFQjZFRDRF ODE4QUU3MDUwHhcNMjUwODExMDYzMDU5WhcNMjUwODE4MDYzMDU5WjAYMRYwFAYD VQQDEw02ODk5OGUyNC0xMDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutKLUCOf5tqE7xlMbeQnCRbAlhM+kyRh70C79eC3ztmE3vJkOYZTmwmiv0SW EJPTVj/V9eW8q9XbZ0V80iseTfWq5wy373T/Lok3tGYhoXDLlrDjzv0ZEdTHeGop tt8pw2avYelzDysk5QNYv+DX2df2ldVfA+CcCBbIdEmRPajNCdKYea7cADBqKEjr b6UAU0QtxpCKNwuJYQJTRfAP/wXOgIzMtQLLjFMPlnRjJAaBmMx+Sf7tl+jFuUND X+eAbtOetFsp8ip2DdgZA9DY5Zg7eMGeyF1AVYeKssxI4aS5YlvQqRswQd6+Q9IT C+ho3cojEaLeRAyy8dPkAITKQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPU9g4T dY6SYEq8KwpsDFON3AH/MB8GA1UdIwQYMBaAFODcbLcJ7rEbwgdfNS627U6BiucF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy80MkE5QkI1NDg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNSdkNCMTgxTHJidFRvR0s1 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROeHN0d251c1J2Q0IxODFMcmJ0VG9HSzV3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy80MkE5QkI1NDg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNS dkNCMTgxTHJidFRvR0s1d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKw5LhEv80Na7400Ng/lPBlGXqIH6AFCZcrOvBurLqA8dFt44eNKnX VwYDSdtEsaby95t6wmjrqR57kXfqtZXx4pZfb9nuvWg3qaMZH0DHcYjJdKIVbYhh 1u3fBVaYcpk66wtKfEX948EIAlOsvMrUT5EHx6Kzn8h+337yEMb+eK4K8UUrUNR+ k7aYAE4q3XkaEgueGtcvn1LbohqZUlZIZXe3SxTLe+0ZvHwxKxwu1KsNBrpW4V+P jaUFLNKkuuV7LoJAmK7jmZgJX0AjxfCmZo5+UP50zLDmFss1SamUzyK2iviCY9jq Ow6uxlkIT/dKdOS/oRupe74WKhgpIm8b -----END CERTIFICATE-----Generated at Wed Aug 13 05:31:45 2025 by rpki-client