$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft File: 4V0TCwuymA4b8RwBvMt1O0loSoA.mft (raw, json) Hash identifier: rueMx+Vg/Mip4TnEQMcqdXj+4gU+NfbWakDSUHxhiFM= Subject key identifier: FF:B9:45:2B:C9:8B:68:BD:0E:D0:CA:28:90:03:A8:6A:E2:AC:37:EC Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 Certificate issuer: /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Certificate serial: 0635 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft Manifest number: 0630 Signing time: Sun 10 Aug 2025 22:49:06 +0000 Manifest this update: Sun 10 Aug 2025 22:49:06 +0000 Manifest next update: Sun 17 Aug 2025 22:49:06 +0000 Files and hashes: 1: 4V0TCwuymA4b8RwBvMt1O0loSoA.crl (hash: AuhFESLLWLoUct1PxT1r94ZuyZrrywZOAp2ypbX7gHc=) 2: 6AE1616AA3F711EBBA757063C4F9AE02.roa (hash: Om3xOjvt7/SStBWrpIGKKE+8s1rKbJeum5OSIuQByU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1589 (0x635) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7BD, serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Validity Not Before: Aug 10 22:49:06 2025 GMT Not After : Aug 17 22:49:06 2025 GMT Subject: CN=689921e2-6eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8b:5f:5d:4d:1f:60:8e:fc:b7:2e:c6:8c:33: cd:9c:0d:80:39:11:e2:f1:6c:4e:27:3f:2e:de:0b: 99:5f:21:83:58:5a:c1:f9:1a:91:c8:d9:17:3c:ef: 32:d7:ea:aa:60:cb:ba:4d:b7:3d:82:f0:12:2e:39: c8:b4:ff:fe:0d:d3:c2:15:49:49:e0:60:b7:b7:ad: 52:d3:b8:8c:68:ce:e2:f1:e0:a5:10:fb:92:34:50: 80:e3:9c:ff:e3:70:13:8d:96:e7:50:d0:30:98:eb: 8c:81:13:29:55:32:a5:17:08:be:17:e0:c2:d6:9e: 9e:0f:6a:61:f3:d8:0d:fb:dc:5c:3e:e8:32:8e:55: 8a:1d:ca:22:c9:ca:35:e7:81:ca:7a:b2:75:a6:58: 42:04:3d:c5:9a:96:a9:9c:21:ea:9f:8d:ac:0a:16: b3:65:4e:45:c6:89:35:57:a9:ff:f3:42:11:1f:e3: 9b:aa:80:44:73:71:99:6b:13:0e:9e:03:e1:45:bb: 55:4f:91:36:dc:d5:50:a7:b0:f3:bd:61:6e:6e:a1: 75:4a:8b:58:57:fc:b1:60:47:96:3d:09:8b:f4:23: 20:15:ae:c5:73:99:d9:f4:71:7d:60:ce:de:de:f5: aa:cf:9e:84:29:04:b0:71:82:f5:08:42:09:55:b0: c3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B9:45:2B:C9:8B:68:BD:0E:D0:CA:28:90:03:A8:6A:E2:AC:37:EC X509v3 Authority Key Identifier: keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:98:1e:3c:f4:7f:a9:04:80:d0:f5:20:e9:2b:d6:d6:56:ed: 73:2a:77:ec:3a:55:42:b3:30:38:83:ce:d7:b4:f0:5f:07:19: c6:7a:95:f4:1f:f5:ce:e5:61:9a:94:77:10:db:db:72:70:5a: 3c:01:37:73:3b:bf:49:c8:77:5c:b1:f9:0e:2e:58:b3:ea:67: a7:e6:c5:80:01:53:3e:e0:f9:7e:a1:ec:4b:79:a5:0d:6c:11: 72:fd:0c:e9:98:c7:7a:d9:7d:54:11:2d:03:6f:fe:80:e3:ea: 2d:c7:da:e3:40:bb:06:2f:c2:7a:95:bd:35:10:a5:1b:aa:1a: 92:07:12:f7:03:ef:ee:ba:22:b1:57:6e:7f:68:3d:de:31:07: 3b:dc:8f:37:bb:a5:34:aa:b1:98:69:2b:10:5a:b1:3c:50:5a: 45:55:25:04:a3:f3:d5:a6:44:74:19:e1:e3:1c:7e:87:ef:fb: c7:96:27:7b:ec:e1:06:04:f8:62:64:a2:63:e4:8f:f8:0c:9b: c0:dc:0f:19:9e:d4:d7:be:e8:58:d4:e1:87:a7:36:37:ab:ea: 07:b5:53:cf:58:8e:fe:fa:17:e4:60:ad:d0:42:96:a2:89:56: 37:2b:45:b7:d5:ef:23:de:6f:85:66:59:a9:b5:11:a8:3a:fa: fb:0a:08:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QkQxMTAvBgNVBAUTKEUxNUQxMzBCMEJCMjk4MEUxQkYxMUMwMUJDQ0I3NTNC NDk2ODRBODAwHhcNMjUwODEwMjI0OTA2WhcNMjUwODE3MjI0OTA2WjAYMRYwFAYD VQQDEw02ODk5MjFlMi02ZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24tfXU0fYI78ty7GjDPNnA2AORHi8WxOJz8u3guZXyGDWFrB+RqRyNkXPO8y 1+qqYMu6Tbc9gvASLjnItP/+DdPCFUlJ4GC3t61S07iMaM7i8eClEPuSNFCA45z/ 43ATjZbnUNAwmOuMgRMpVTKlFwi+F+DC1p6eD2ph89gN+9xcPugyjlWKHcoiyco1 54HKerJ1plhCBD3FmpapnCHqn42sChazZU5Fxok1V6n/80IRH+ObqoBEc3GZaxMO ngPhRbtVT5E23NVQp7DzvWFubqF1SotYV/yxYEeWPQmL9CMgFa7Fc5nZ9HF9YM7e 3vWqz56EKQSwcYL1CEIJVbDDYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+5RSvJ i2i9DtDKKJADqGrirDfsMB8GA1UdIwQYMBaAFOFdEwsLspgOG/EcAbzLdTtJaEqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdCRC9EMzAyNjAzNEEz RjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1BNGI4UndCdk10MU8wbG9T b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWMFRDd3V5bUE0YjhSd0J2TXQxTzBsb1NvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdCRC9EMzAyNjAzNEEzRjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1B NGI4UndCdk10MU8wbG9Tb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVmB489H+pBIDQ9SDpK9bWVu1zKnfsOlVCszA4g87XtPBfBxnGepX0 H/XO5WGalHcQ29tycFo8ATdzO79JyHdcsfkOLliz6men5sWAAVM+4Pl+oexLeaUN bBFy/QzpmMd62X1UES0Db/6A4+otx9rjQLsGL8J6lb01EKUbqhqSBxL3A+/uuiKx V25/aD3eMQc73I83u6U0qrGYaSsQWrE8UFpFVSUEo/PVpkR0GeHjHH6H7/vHlid7 7OEGBPhiZKJj5I/4DJvA3A8ZntTXvuhY1OGHpzY3q+oHtVPPWI7++hfkYK3QQpai iVY3K0W31e8j3m+FZlmptRGoOvr7Cgj0 -----END CERTIFICATE-----Generated at Mon Aug 11 10:34:19 2025 by rpki-client