$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft File: B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json) Hash identifier: esnKO2m3huYScVVm7npx+F/qtvQlr1qx1jUVzp5t1O4= Subject key identifier: 32:33:95:DF:A4:9B:0B:AE:6A:9E:D2:99:B6:A9:35:4D:D2:1A:FA:AB Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Certificate serial: 1E5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft Manifest number: 1E3C Signing time: Mon 04 Aug 2025 16:13:53 +0000 Manifest this update: Mon 04 Aug 2025 16:13:52 +0000 Manifest next update: Mon 11 Aug 2025 16:13:52 +0000 Files and hashes: 1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: Sg41SozZWKa5iUu4HsoooVzkXdZseeqWE8GL4xSDXH4=) 2: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: 3kkH5EW9k5TTFg+XHHqI2feA7kJawsJC4SpKye1S2b4=) 3: BD314CEA619711EE81211277C4F9AE02.roa (hash: pyylUNX9LlmDbhjQ7Mn/l8NCaA1ACQcAW5FWWwcceq0=) 4: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: 01F6A8KAEiWwfIj9UacQjLscVPBcvyK/XHWq85nJWZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7771 (0x1e5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Validity Not Before: Aug 4 16:13:52 2025 GMT Not After : Aug 11 16:13:52 2025 GMT Subject: CN=6890dc41-e042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:39:1c:6b:31:7f:d1:bc:af:f3:13:1b:10:81: c7:5c:e7:ac:e8:21:ac:7d:a7:73:1f:be:18:a8:24: 31:5c:1d:1a:ce:99:57:17:1a:ea:de:54:32:84:93: f6:c7:32:86:36:e1:6b:69:d4:78:ce:71:91:4d:e8: 75:2e:ad:06:a9:0c:c8:46:11:dd:af:1e:22:32:47: 09:a8:46:66:e7:ad:5a:a8:f5:07:d2:88:1b:4d:7a: cc:4e:99:85:f6:79:47:f8:eb:ba:2f:ba:ae:46:4d: 78:b9:1e:54:11:08:be:cc:99:26:94:ba:bc:fd:28: e2:1a:75:f3:b2:16:a3:e5:60:d8:09:1d:7c:c0:a8: 67:a1:c8:0b:08:cf:57:57:9c:34:48:f4:04:2c:23: 4b:73:49:8e:da:e0:7d:2d:c4:bb:b1:e2:75:d3:0c: d6:9e:41:56:ea:76:0e:23:66:fc:f6:09:4a:35:f8: f3:53:6c:db:91:f6:b2:85:fd:fc:aa:35:f3:2a:60: ff:f4:d6:de:93:18:ba:20:22:45:3a:2b:33:13:0e: fc:3d:81:6c:f5:c0:b8:4f:50:b4:54:36:dd:de:85: aa:53:50:b8:e0:92:7b:aa:b8:e3:f1:65:18:97:ca: d2:89:83:26:17:69:e1:e5:9d:e4:e4:74:74:d5:ba: 8f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:33:95:DF:A4:9B:0B:AE:6A:9E:D2:99:B6:A9:35:4D:D2:1A:FA:AB X509v3 Authority Key Identifier: keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b0:af:10:13:33:cd:a8:d8:f5:97:cb:c7:03:93:5f:a6:01: a4:76:8c:80:9c:74:e7:7d:92:66:16:6d:1a:9f:f4:d3:06:5b: 8d:f3:a2:1e:b5:da:01:0f:f4:af:ce:de:17:9a:7e:c5:28:0c: d8:6e:bf:1e:a5:db:21:42:ce:93:23:5d:b1:ce:4c:df:4a:8b: f0:1e:1b:81:b9:da:1f:aa:c4:81:e8:a4:21:ac:be:8b:e9:dd: 1e:1f:a1:52:ad:62:3d:2f:8a:c1:d1:99:67:56:ef:27:9c:5c: 69:a0:50:38:39:03:bd:1b:be:58:b1:7e:81:66:46:dd:af:38: ea:fc:b7:41:c5:8f:3b:71:c7:97:6f:f7:53:1b:fd:04:1b:07: 3d:47:9c:c5:44:45:7a:17:84:4e:8c:64:c3:94:d2:75:25:c3: 08:98:19:f1:8b:1e:27:09:e0:19:87:88:64:c1:f6:87:43:1a: 73:3e:cf:ff:18:72:28:51:2f:f3:47:34:39:6a:aa:5c:31:28: 50:1a:5a:29:69:5a:86:13:01:f3:e7:45:e8:ad:66:a9:26:1e: 5c:87:8e:26:12:73:29:34:c0:1d:24:16:5e:30:46:de:8d:58: 99:a4:a6:ba:3a:16:0a:94:a0:d3:88:29:58:cc:6d:38:a7:92: f3:34:20:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDQjYxMTAvBgNVBAUTKDA3ODE2NzVDQzY0RkFCMkI4NDVEQTdGNTExNTU0OTgw NDJFQ0U0NjcwHhcNMjUwODA0MTYxMzUyWhcNMjUwODExMTYxMzUyWjAYMRYwFAYD VQQDEw02ODkwZGM0MS1lMDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jkcazF/0byv8xMbEIHHXOes6CGsfadzH74YqCQxXB0azplXFxrq3lQyhJP2 xzKGNuFradR4znGRTeh1Lq0GqQzIRhHdrx4iMkcJqEZm561aqPUH0ogbTXrMTpmF 9nlH+Ou6L7quRk14uR5UEQi+zJkmlLq8/SjiGnXzshaj5WDYCR18wKhnocgLCM9X V5w0SPQELCNLc0mO2uB9LcS7seJ10wzWnkFW6nYOI2b89glKNfjzU2zbkfayhf38 qjXzKmD/9Nbekxi6ICJFOiszEw78PYFs9cC4T1C0VDbd3oWqU1C44JJ7qrjj8WUY l8rSiYMmF2nh5Z3k5HR01bqPTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIzld+k mwuuap7SmbapNU3SGvqrMB8GA1UdIwQYMBaAFAeBZ1zGT6srhF2n9RFVSYBC7ORn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRENCNi82N0M2QUE0QThB RjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5dUVYYWYxRVZWSmdFTHM1 R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I0Rm5YTVpQcXl1RVhhZjFFVlZKZ0VMczVHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RENCNi82N0M2QUE0QThBRjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5 dUVYYWYxRVZWSmdFTHM1R2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHsK8QEzPNqNj1l8vHA5NfpgGkdoyAnHTnfZJmFm0an/TTBluN86Ie tdoBD/Svzt4Xmn7FKAzYbr8epdshQs6TI12xzkzfSovwHhuBudofqsSB6KQhrL6L 6d0eH6FSrWI9L4rB0ZlnVu8nnFxpoFA4OQO9G75YsX6BZkbdrzjq/LdBxY87cceX b/dTG/0EGwc9R5zFREV6F4ROjGTDlNJ1JcMImBnxix4nCeAZh4hkwfaHQxpzPs// GHIoUS/zRzQ5aqpcMShQGlopaVqGEwHz50XorWapJh5ch44mEnMpNMAdJBZeMEbe jViZpKa6OhYKlKDTiClYzG04p5LzNCA0 -----END CERTIFICATE-----Generated at Wed Aug 6 10:13:34 2025 by rpki-client