$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft File: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json) Hash identifier: 0Ezw+oRPykRvkfEvzkwRRvVdhmoboz0TSKxzBrVG1cA= Subject key identifier: 70:88:8E:3A:D5:58:4D:DD:A8:EF:40:C9:D7:E0:33:1A:FB:26:23:1C Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft Manifest number: 28 Signing time: Mon 11 Aug 2025 08:03:08 +0000 Manifest this update: Mon 11 Aug 2025 08:03:07 +0000 Manifest next update: Mon 18 Aug 2025 08:03:07 +0000 Files and hashes: 1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: h8YQsWPz98flCtZkJSSUN0rJip+B3tZNJGW0m9Lrbkw=) 2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: EdyHrGdK241FduLFJE474YipzEeOWQ4qQLPgbqAJOd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 08:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Validity Not Before: Aug 11 08:03:07 2025 GMT Not After : Aug 18 08:03:07 2025 GMT Subject: CN=6899a3bc-c28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:84:c7:aa:88:b1:b6:a2:ab:b4:82:e9:0a:a2: 3d:91:a1:a3:f2:be:d5:9b:e2:64:7f:01:e2:91:85: 25:54:ca:fd:9d:ad:9d:87:73:eb:4a:0f:fa:a4:2c: 3d:18:d1:f0:78:93:a0:d9:28:e5:28:c6:21:f9:ab: 5a:01:c9:03:08:8f:cb:8b:91:de:e9:7b:7c:dd:f9: 66:90:e7:5b:78:c5:da:61:7b:ff:77:be:2a:2f:66: 3c:8f:b2:ff:fe:7d:4a:2b:28:19:b1:f1:40:74:52: e7:19:f3:79:87:55:dc:6c:f6:a2:5c:e9:d2:17:cd: 43:62:ed:13:35:62:5f:59:7a:9c:16:70:b4:e9:68: 2c:de:1c:2d:42:c3:51:06:91:3d:da:16:72:21:08: 0d:16:55:5f:dd:1f:3f:28:bd:62:02:47:5e:a8:3b: d4:ad:7f:7b:a1:83:3d:d8:ac:01:5a:7d:c0:19:76: c6:0b:2d:96:d8:a0:cb:87:68:80:4c:8c:e7:0c:62: a3:bb:18:ea:b2:f2:0b:ae:f8:cc:29:ed:45:8c:f8: a5:fc:b2:00:94:a2:da:25:47:db:0e:54:04:cc:7d: 4b:1c:4a:63:5c:9b:b2:7d:7f:3d:12:4f:e3:ee:b2: 48:25:5d:ee:7f:32:8f:6e:aa:fc:e4:67:86:6c:27: 97:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:88:8E:3A:D5:58:4D:DD:A8:EF:40:C9:D7:E0:33:1A:FB:26:23:1C X509v3 Authority Key Identifier: keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:14:95:af:f9:75:c3:6b:7f:67:8a:cf:a3:30:1d:41:42:ab: 0d:a4:8d:c2:d5:dc:57:63:f3:c7:dd:72:7a:30:91:c7:ad:f5: a8:35:c1:21:da:0d:3b:93:4b:65:03:5a:4f:d0:c6:1e:ce:5b: cd:74:2e:59:12:98:c4:ad:9e:8c:7d:3c:ea:81:34:19:ac:2d: f1:67:fd:c7:44:f1:8a:86:c0:9f:81:c4:0d:d9:af:ab:84:55: 9d:e4:eb:9b:26:89:7e:63:bf:b0:13:63:b0:0c:a2:ca:c0:f8: c1:7c:77:10:ac:7b:ba:5e:3f:25:00:3c:fd:81:86:4b:a2:21: 5c:49:d8:fc:23:e6:3f:92:5e:01:ae:10:53:0c:d6:e2:84:dc: a3:4f:72:cf:cc:a1:a4:51:7b:80:a9:46:8e:1f:b1:53:51:2f: 75:92:2e:c1:71:8d:71:c5:f0:ee:ae:c0:49:bd:13:27:ed:32: 2d:bc:65:28:4c:17:4c:f7:a1:fa:f8:eb:09:be:14:9b:f9:a3: 37:bc:11:10:03:be:11:16:72:69:ec:33:3d:17:28:53:63:66: 4f:d9:4d:e8:b7:bc:36:ca:77:db:87:71:56:ff:eb:a8:aa:a4: 0b:0d:ac:b5:c2:de:80:59:c0:ae:a7:5d:d1:84:26:5e:c9:de: 6a:84:df:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkE0RjExMC8GA1UEBRMoRTAzOThENTRBQ0Q5REIzM0VENEZDQUE4RDIyODA1RDQ1 RTgwQ0JCNjAeFw0yNTA4MTEwODAzMDdaFw0yNTA4MTgwODAzMDdaMBgxFjAUBgNV BAMTDTY4OTlhM2JjLWMyOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYhMeqiLG2oqu0gukKoj2RoaPyvtWb4mR/AeKRhSVUyv2drZ2Hc+tKD/qkLD0Y 0fB4k6DZKOUoxiH5q1oByQMIj8uLkd7pe3zd+WaQ51t4xdphe/93viovZjyPsv/+ fUorKBmx8UB0UucZ83mHVdxs9qJc6dIXzUNi7RM1Yl9ZepwWcLTpaCzeHC1Cw1EG kT3aFnIhCA0WVV/dHz8ovWICR16oO9Stf3uhgz3YrAFafcAZdsYLLZbYoMuHaIBM jOcMYqO7GOqy8guu+Mwp7UWM+KX8sgCUotolR9sOVATMfUscSmNcm7J9fz0ST+Pu skglXe5/Mo9uqvzkZ4ZsJ5frAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcIiOOtVY Td2o70DJ1+AzGvsmIxwwHwYDVR0jBBgwFoAU4DmNVKzZ2zPtT8qo0igF1F6Ay7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTRGLzU4N0YzNURBM0I3 NzExRjA5N0E4QkIyNEM0RjlBRTAyLzREbU5WS3paMnpQdFQ4cW8waWdGMUY2QXk3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNERtTlZLeloyelB0VDhxbzBpZ0YxRjZBeTdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTRGLzU4N0YzNURBM0I3NzExRjA5N0E4QkIyNEM0RjlBRTAyLzREbU5WS3paMnpQ dFQ4cW8waWdGMUY2QXk3WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA4Ula/5dcNrf2eKz6MwHUFCqw2kjcLV3Fdj88fdcnowkcet9ag1wSHa DTuTS2UDWk/Qxh7OW810LlkSmMStnox9POqBNBmsLfFn/cdE8YqGwJ+BxA3Zr6uE VZ3k65smiX5jv7ATY7AMosrA+MF8dxCse7pePyUAPP2BhkuiIVxJ2Pwj5j+SXgGu EFMM1uKE3KNPcs/MoaRRe4CpRo4fsVNRL3WSLsFxjXHF8O6uwEm9EyftMi28ZShM F0z3ofr46wm+FJv5oze8ERADvhEWcmnsMz0XKFNjZk/ZTei3vDbKd9uHcVb/66iq pAsNrLXC3oBZwK6nXdGEJl7J3mqE39w= -----END CERTIFICATE-----Generated at Wed Aug 13 04:26:37 2025 by rpki-client