$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft File: a4J2B8F85j5hIUwuZCxaqFHuOE4.mft (raw, json) Hash identifier: rmMkZjxhpSWkb6CvzqtVBcpE9P9jeyQAZpFSjggKwlY= Subject key identifier: D0:91:A9:E5:1E:F6:07:30:0E:E6:F5:1C:71:B0:A6:5A:20:53:43:38 Authority key identifier: 6B:82:76:07:C1:7C:E6:3E:61:21:4C:2E:64:2C:5A:A8:51:EE:38:4E Certificate issuer: /CN=A91BFD4B/serialNumber=6B827607C17CE63E61214C2E642C5AA851EE384E Certificate serial: 0621 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft Manifest number: 061D Signing time: Fri 08 Aug 2025 23:12:16 +0000 Manifest this update: Fri 08 Aug 2025 23:12:16 +0000 Manifest next update: Fri 15 Aug 2025 23:12:16 +0000 Files and hashes: 1: a4J2B8F85j5hIUwuZCxaqFHuOE4.crl (hash: +ETLx/mNdgGzJ2CKwMs+iO8LsuWRW/N5dnOj8QrKNQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.crl rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1569 (0x621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFD4B, serialNumber=6B827607C17CE63E61214C2E642C5AA851EE384E Validity Not Before: Aug 8 23:12:16 2025 GMT Not After : Aug 15 23:12:16 2025 GMT Subject: CN=68968450-5602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:63:94:ad:f0:c7:18:75:5c:b0:36:e3:63:5c: fb:18:5f:60:b8:d2:e5:47:94:28:be:90:a0:78:6d: 87:6b:fd:24:0d:10:d8:fc:0d:c6:c7:80:c4:0b:d1: 25:58:cc:9e:ad:70:5e:6c:34:9e:f8:85:76:b0:5c: 72:44:e4:2c:c3:b1:d6:e4:62:29:9d:54:db:44:ae: cc:a8:e1:7f:68:5e:3d:84:b5:20:76:69:3c:23:17: e8:90:c3:3b:65:a8:1b:f0:42:05:0f:a8:d1:0d:ba: 5c:d8:ab:7e:6b:d7:bf:f2:fa:71:76:17:71:f3:7f: d9:dd:40:0b:27:fe:35:65:c6:06:ac:fb:b9:43:0f: 84:45:ff:2b:f2:7a:cf:6f:27:69:a2:aa:82:25:e2: 47:2e:b5:98:04:93:73:84:c9:87:97:43:92:e8:7f: 14:91:48:ce:48:93:ed:c2:a9:dd:31:c5:dc:75:3b: d6:e4:98:03:d4:99:3f:60:9f:5c:e1:9f:54:8d:e2: 2d:21:68:49:13:3d:c3:8d:eb:7c:bb:3a:cb:09:c4: e3:f5:f5:47:e8:d2:b0:85:5a:ee:c7:38:07:28:13: 4e:90:fc:7d:a5:82:bf:8f:fb:f7:fd:03:be:d5:7d: 8a:0d:7b:a8:9c:bf:77:48:b2:e4:63:6a:2e:e6:34: 25:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:91:A9:E5:1E:F6:07:30:0E:E6:F5:1C:71:B0:A6:5A:20:53:43:38 X509v3 Authority Key Identifier: keyid:6B:82:76:07:C1:7C:E6:3E:61:21:4C:2E:64:2C:5A:A8:51:EE:38:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a1:30:34:ec:bc:5d:7e:26:4c:02:6b:ad:71:eb:dd:c4:af: b1:54:fd:6b:c9:6b:a7:74:96:56:c2:bd:15:35:bd:93:34:05: db:de:de:c7:7a:b4:34:4a:65:ec:4f:50:fa:5d:ad:2f:17:8c: 89:b6:c6:50:f0:bb:68:9d:23:3d:13:07:b7:85:67:34:de:df: 23:ec:8e:48:0b:20:52:57:89:2a:67:d0:40:ce:d7:96:82:9f: 50:db:33:3a:83:90:5c:13:bd:31:05:72:43:9a:07:62:80:ad: 4d:73:d8:16:db:82:6c:6f:4f:43:52:b8:af:88:7d:87:3a:70: b3:5b:cb:f5:6f:08:5e:dd:56:b0:8d:cd:80:ec:5a:2d:8d:2e: a1:e9:52:c9:d6:b6:07:88:90:56:e4:b8:71:7b:93:b0:47:81: e3:5d:00:cc:b2:07:29:6a:73:79:a3:d6:1e:fb:b9:37:76:d2: 82:c3:6b:08:73:93:c1:1e:dd:c0:06:73:dd:12:46:f5:80:24: bc:9e:d2:fa:0f:9f:08:b2:b0:d2:c3:92:7d:ee:92:7a:9e:a6: 72:12:b5:01:54:49:14:62:b8:0c:76:58:0c:54:1e:c5:97:4c: b3:15:ef:66:82:9e:e2:0f:38:78:05:2b:fa:22:28:4c:b2:56: e9:7b:97:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZENEIxMTAvBgNVBAUTKDZCODI3NjA3QzE3Q0U2M0U2MTIxNEMyRTY0MkM1QUE4 NTFFRTM4NEUwHhcNMjUwODA4MjMxMjE2WhcNMjUwODE1MjMxMjE2WjAYMRYwFAYD VQQDEw02ODk2ODQ1MC01NjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WOUrfDHGHVcsDbjY1z7GF9guNLlR5QovpCgeG2Ha/0kDRDY/A3Gx4DEC9El WMyerXBebDSe+IV2sFxyROQsw7HW5GIpnVTbRK7MqOF/aF49hLUgdmk8IxfokMM7 Zagb8EIFD6jRDbpc2Kt+a9e/8vpxdhdx83/Z3UALJ/41ZcYGrPu5Qw+ERf8r8nrP bydpoqqCJeJHLrWYBJNzhMmHl0OS6H8UkUjOSJPtwqndMcXcdTvW5JgD1Jk/YJ9c 4Z9UjeItIWhJEz3Djet8uzrLCcTj9fVH6NKwhVruxzgHKBNOkPx9pYK/j/v3/QO+ 1X2KDXuonL93SLLkY2ou5jQlnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCRqeUe 9gcwDub1HHGwplogU0M4MB8GA1UdIwQYMBaAFGuCdgfBfOY+YSFMLmQsWqhR7jhO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkQ0Qi9BQTQ3ODkzQUFC RDkxMUVCODMzRDRDNkFDNEY5QUUwMi9hNEoyQjhGODVqNWhJVXd1WkN4YXFGSHVP RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0SjJCOEY4NWo1aElVd3VaQ3hhcUZIdU9FNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkQ0Qi9BQTQ3ODkzQUFCRDkxMUVCODMzRDRDNkFDNEY5QUUwMi9hNEoyQjhGODVq NWhJVXd1WkN4YXFGSHVPRTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkoTA07LxdfiZMAmutcevdxK+xVP1ryWundJZWwr0VNb2TNAXb3t7H erQ0SmXsT1D6Xa0vF4yJtsZQ8LtonSM9Ewe3hWc03t8j7I5ICyBSV4kqZ9BAzteW gp9Q2zM6g5BcE70xBXJDmgdigK1Nc9gW24Jsb09DUriviH2HOnCzW8v1bwhe3Vaw jc2A7FotjS6h6VLJ1rYHiJBW5Lhxe5OwR4HjXQDMsgcpanN5o9Ye+7k3dtKCw2sI c5PBHt3ABnPdEkb1gCS8ntL6D58IsrDSw5J97pJ6nqZyErUBVEkUYrgMdlgMVB7F l0yzFe9mgp7iDzh4BSv6IihMslbpe5cI -----END CERTIFICATE-----Generated at Sat Aug 9 14:23:12 2025 by rpki-client