$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft File: 4ggepNPNtZniYIYCcE_bNYbUj1c.mft (raw, json) Hash identifier: JKdC9EzQODi2S0EnMpZyDRycvE19DtdTmK1dwpYKAg0= Subject key identifier: 5F:BF:F5:70:4E:98:72:B7:BD:53:6A:EF:CB:0A:76:9E:75:75:B1:49 Authority key identifier: E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 Certificate issuer: /CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Certificate serial: 0BC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft Manifest number: 0BBE Signing time: Tue 12 Aug 2025 19:08:48 +0000 Manifest this update: Tue 12 Aug 2025 19:08:48 +0000 Manifest next update: Tue 19 Aug 2025 19:08:48 +0000 Files and hashes: 1: 4ggepNPNtZniYIYCcE_bNYbUj1c.crl (hash: 0aHM5QBu4Mua1+DIFRsUb8H+gdruCzlJjL+/X9yWHqc=) 2: 277BE15035CD11EAA2366620C4F9AE02.roa (hash: hJTBnRNb+rBuco3pui7GARCwhnSPV6pCkk0fRFtrHKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 19:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3012 (0xbc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF1C, serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Validity Not Before: Aug 12 19:08:48 2025 GMT Not After : Aug 19 19:08:48 2025 GMT Subject: CN=689b9140-ac37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f4:e7:fe:7a:d3:81:89:a1:5f:19:a2:98:b4: ea:b8:3a:18:fb:d1:4d:96:9f:dc:dd:7b:16:19:fc: e7:49:62:ce:51:ce:c5:85:8a:09:84:c6:66:ae:3d: 31:9d:cc:30:a0:fe:12:4e:ed:8c:1b:c5:92:cd:b3: 4f:c7:c1:23:0a:d7:44:51:56:10:8f:2a:a4:ef:46: fe:f2:5e:83:e7:88:aa:f1:24:fe:7f:4e:2e:34:a7: 50:51:98:5e:6b:96:f3:6c:9c:7d:ca:1e:c4:2e:2c: b3:6d:e4:ac:1e:2e:58:aa:be:53:b5:b1:b1:f4:15: 7d:9c:16:b5:60:20:de:13:12:bf:16:13:0d:4b:72: ad:70:be:53:53:9a:f0:2f:e9:b4:ee:2f:37:6b:96: 40:25:c0:f3:e1:83:9a:3e:5b:12:07:9e:fc:3a:c0: 73:c8:86:94:f2:61:f4:6a:64:01:24:12:48:bb:e3: be:d7:e0:14:78:88:31:a6:69:4c:ca:90:3c:cd:4f: 3a:cf:6b:99:82:1a:ec:92:06:7b:23:e8:9c:8d:b1: f0:a8:07:ee:59:be:02:bc:8c:ae:05:9e:7a:f7:53: 9e:08:d1:2b:f8:28:44:54:42:21:b4:ae:60:72:14: 7d:63:d9:e9:27:ba:6d:18:55:f4:0c:f2:3b:51:66: 4e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BF:F5:70:4E:98:72:B7:BD:53:6A:EF:CB:0A:76:9E:75:75:B1:49 X509v3 Authority Key Identifier: keyid:E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:d9:75:6c:2b:11:9e:71:58:13:47:23:3c:9a:e6:67:70:3b: 64:52:61:b6:92:e4:75:d4:59:19:ab:8f:51:00:d4:bc:2d:6b: cd:f0:a9:32:b6:60:70:7a:9d:31:0e:4e:9a:2d:e7:e0:af:72: 3f:3a:6f:73:4b:0f:ff:69:7f:1a:be:1c:72:b5:82:98:71:1e: de:9b:7d:80:1f:64:2c:3d:ea:f7:a8:4f:37:9c:b3:00:f9:0f: 0f:97:14:85:fb:b2:88:b9:82:9f:16:de:a3:df:8e:60:ea:29: 2b:74:03:9a:b6:5f:0e:dd:89:d1:f9:59:ef:8e:24:82:54:54: 3b:5b:eb:e5:88:84:17:72:c0:f0:9c:16:50:aa:1d:35:02:ac: 75:ec:cd:8f:fd:ce:04:e4:19:b8:a5:8b:95:98:2f:8f:2a:9b: a2:bb:eb:33:d1:f4:5f:5b:b3:b6:f4:e7:e7:23:b3:7b:ba:d3: 15:dd:ba:9b:af:65:59:6a:a3:d2:e6:25:b6:ee:8f:ff:d8:63: ff:0e:ac:52:62:91:6e:30:c4:a6:ab:d9:63:60:4b:33:b7:f6: af:8b:06:b2:bc:06:76:42:2b:9f:fd:09:4f:7e:b5:64:40:6e: 9d:ac:88:2b:ff:4f:68:6d:13:6b:ac:f0:f5:5f:89:2a:f2:8d: be:db:16:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGMUMxMTAvBgNVBAUTKEUyMDgxRUE0RDNDREI1OTlFMjYwODYwMjcwNEZEQjM1 ODZENDhGNTcwHhcNMjUwODEyMTkwODQ4WhcNMjUwODE5MTkwODQ4WjAYMRYwFAYD VQQDEw02ODliOTE0MC1hYzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPTn/nrTgYmhXxmimLTquDoY+9FNlp/c3XsWGfznSWLOUc7FhYoJhMZmrj0x ncwwoP4STu2MG8WSzbNPx8EjCtdEUVYQjyqk70b+8l6D54iq8ST+f04uNKdQUZhe a5bzbJx9yh7ELiyzbeSsHi5Yqr5TtbGx9BV9nBa1YCDeExK/FhMNS3KtcL5TU5rw L+m07i83a5ZAJcDz4YOaPlsSB578OsBzyIaU8mH0amQBJBJIu+O+1+AUeIgxpmlM ypA8zU86z2uZghrskgZ7I+icjbHwqAfuWb4CvIyuBZ5691OeCNEr+ChEVEIhtK5g chR9Y9npJ7ptGFX0DPI7UWZOrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+/9XBO mHK3vVNq78sKdp51dbFJMB8GA1UdIwQYMBaAFOIIHqTTzbWZ4mCGAnBP2zWG1I9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREYxQy8zNkM5NjIyMDI2 M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRabmlZSVlDY0VfYk5ZYlVq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRnZ2VwTlBOdFpuaVlJWUNjRV9iTlliVWoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REYxQy8zNkM5NjIyMDI2M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRa bmlZSVlDY0VfYk5ZYlVqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX2XVsKxGecVgTRyM8muZncDtkUmG2kuR11FkZq49RANS8LWvN8Kky tmBwep0xDk6aLefgr3I/Om9zSw//aX8avhxytYKYcR7em32AH2QsPer3qE83nLMA +Q8PlxSF+7KIuYKfFt6j345g6ikrdAOatl8O3YnR+VnvjiSCVFQ7W+vliIQXcsDw nBZQqh01Aqx17M2P/c4E5Bm4pYuVmC+PKpuiu+sz0fRfW7O29OfnI7N7utMV3bqb r2VZaqPS5iW27o//2GP/DqxSYpFuMMSmq9ljYEszt/aviwayvAZ2Qiuf/QlPfrVk QG6drIgr/09obRNrrPD1X4kq8o2+2xZW -----END CERTIFICATE-----Generated at Wed Aug 13 02:15:29 2025 by rpki-client