$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft File: 4uYwZnXV9U0ge2eCqWx6qWex_JE.mft (raw, json) Hash identifier: 4CBIOolDk00pehwa6CSjLNpEfz9ii87Ay/nrwPKMp28= Subject key identifier: F4:20:3E:E0:B0:5B:0F:F9:00:ED:C4:36:FC:00:B4:F1:2D:42:23:8F Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 Certificate issuer: /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft Manifest number: 85 Signing time: Sat 09 Aug 2025 07:09:58 +0000 Manifest this update: Sat 09 Aug 2025 07:09:57 +0000 Manifest next update: Sat 16 Aug 2025 07:09:57 +0000 Files and hashes: 1: 4uYwZnXV9U0ge2eCqWx6qWex_JE.crl (hash: xBE2kwe1cLYP/B9YoM6mOSciXKTTzf9ASGVrlkYtK4w=) 2: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (hash: +DamE3tU9Fo7eBYdyyuSzK/6/nm5KtgHW7yUMIG6MHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Validity Not Before: Aug 9 07:09:57 2025 GMT Not After : Aug 16 07:09:57 2025 GMT Subject: CN=6896f445-720f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0d:09:11:68:de:76:41:be:27:8c:5e:69:6a: 7b:6e:48:1a:89:15:b3:71:de:63:c2:c9:ac:6e:a5: 6c:33:b6:7d:b7:16:16:ac:f2:9b:85:8b:94:7a:01: a4:d8:0c:25:14:76:71:36:8a:49:79:b5:ef:1f:d1: be:77:38:ad:dc:0c:f4:02:91:6e:49:d3:cf:bb:06: 6e:ce:bb:e0:41:f7:22:03:45:43:db:f8:eb:bc:72: dc:54:82:e4:47:3c:5c:5f:f5:76:2d:13:21:ac:2f: 9d:e9:2b:e6:5f:48:33:e5:0f:b2:f6:a1:35:43:28: 1c:b5:15:7e:24:2c:a9:3a:56:90:96:f1:79:01:64: 27:76:2f:2b:9e:ed:46:45:f9:74:cc:44:86:5c:2b: 57:44:de:bf:be:dd:c6:4a:c6:95:89:28:3d:65:7f: af:1b:4d:69:c5:c2:9b:d2:9e:48:1b:2a:68:f6:99: f6:f5:ec:0c:ab:9e:40:61:b6:17:f8:81:ef:37:d4: 96:1a:3c:7f:83:fc:52:38:a4:f4:2e:f9:44:64:3d: 9e:be:82:d9:c6:5c:34:e5:e5:39:8c:67:14:d4:6c: e1:de:f2:ef:a6:2f:0b:b3:44:e5:07:53:0a:dc:72: fd:e0:76:d1:25:d1:f4:81:27:73:42:97:9a:db:73: 35:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:20:3E:E0:B0:5B:0F:F9:00:ED:C4:36:FC:00:B4:F1:2D:42:23:8F X509v3 Authority Key Identifier: keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:62:64:12:f6:99:c1:2d:70:db:57:17:bb:b1:b8:fd:bb:fe: ba:05:c4:56:c9:b7:d1:96:d6:03:9f:30:70:b9:7b:f5:9f:a4: ac:fe:2b:47:47:90:8e:ee:50:3a:67:f1:40:bd:03:e6:92:2d: 26:01:a2:6c:1c:b6:9e:80:1f:6f:09:ad:c6:5d:1a:25:3b:e5: 13:0f:0c:97:12:60:46:81:f2:15:98:47:55:5c:f2:ab:fc:fb: ca:d5:31:c3:de:db:5f:79:e3:68:1f:0b:d7:49:63:33:8a:4b: b6:60:f0:eb:16:f5:b9:92:20:4b:69:75:b5:d0:07:59:24:e2: eb:0a:39:5e:3a:bb:af:01:f3:bf:8f:8b:f7:1e:12:b7:72:73: 2f:f5:ab:1c:02:8d:d6:68:1f:1a:5d:3f:4e:d5:a6:de:62:e5: b6:a8:97:09:0b:ad:2d:bd:1c:ec:df:3f:2f:9b:9a:50:af:14: 40:a6:02:79:8e:bb:6f:9c:00:c7:15:6f:95:0e:0c:1e:86:66: 00:2e:eb:49:2c:94:bf:98:22:4e:d4:eb:cf:8e:be:d7:68:85: f5:b0:63:16:5b:35:17:71:54:17:45:71:fb:2e:b9:58:5e:3c: 01:3a:7e:33:26:e8:e2:49:25:3b:c3:6b:57:b7:95:b0:e3:d4: 32:95:51:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBQzgxMTAvBgNVBAUTKEUyRTYzMDY2NzVENUY1NEQyMDdCNjc4MkE5NkM3QUE5 NjdCMUZDOTEwHhcNMjUwODA5MDcwOTU3WhcNMjUwODE2MDcwOTU3WjAYMRYwFAYD VQQDEw02ODk2ZjQ0NS03MjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvw0JEWjedkG+J4xeaWp7bkgaiRWzcd5jwsmsbqVsM7Z9txYWrPKbhYuUegGk 2AwlFHZxNopJebXvH9G+dzit3Az0ApFuSdPPuwZuzrvgQfciA0VD2/jrvHLcVILk RzxcX/V2LRMhrC+d6SvmX0gz5Q+y9qE1QygctRV+JCypOlaQlvF5AWQndi8rnu1G Rfl0zESGXCtXRN6/vt3GSsaViSg9ZX+vG01pxcKb0p5IGypo9pn29ewMq55AYbYX +IHvN9SWGjx/g/xSOKT0LvlEZD2evoLZxlw05eU5jGcU1Gzh3vLvpi8Ls0TlB1MK 3HL94HbRJdH0gSdzQpea23M12wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQgPuCw Ww/5AO3ENvwAtPEtQiOPMB8GA1UdIwQYMBaAFOLmMGZ11fVNIHtngqlseqlnsfyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEFDOC9FOUJFMDVEQ0Ix M0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi80dVl3Wm5YVjlVMGdlMmVDcVd4NnFXZXhf SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1WXdablhWOVUwZ2UyZUNxV3g2cVdleF9KRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEFDOC9FOUJFMDVEQ0IxM0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi80dVl3Wm5YVjlV MGdlMmVDcVd4NnFXZXhfSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMYmQS9pnBLXDbVxe7sbj9u/66BcRWybfRltYDnzBwuXv1n6Ss/itH R5CO7lA6Z/FAvQPmki0mAaJsHLaegB9vCa3GXRolO+UTDwyXEmBGgfIVmEdVXPKr /PvK1THD3ttfeeNoHwvXSWMziku2YPDrFvW5kiBLaXW10AdZJOLrCjleOruvAfO/ j4v3HhK3cnMv9ascAo3WaB8aXT9O1abeYuW2qJcJC60tvRzs3z8vm5pQrxRApgJ5 jrtvnADHFW+VDgwehmYALutJLJS/mCJO1OvPjr7XaIX1sGMWWzUXcVQXRXH7LrlY XjwBOn4zJujiSSU7w2tXt5Ww49QylVHa -----END CERTIFICATE-----Generated at Sun Aug 10 03:47:27 2025 by rpki-client