$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: DoU43O6AP3MMv/QvwMI2exZvsrZZjnKuEdpnPDzdAEI= Subject key identifier: 5E:95:4D:F2:E2:8C:DC:FB:DA:11:31:A5:DD:B1:4A:E3:71:AF:97:D1 Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 017E Signing time: Sat 09 Aug 2025 04:05:23 +0000 Manifest this update: Sat 09 Aug 2025 04:05:22 +0000 Manifest next update: Sat 16 Aug 2025 04:05:22 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: UCtV2ASqh7P8IhcAWbeTuwMKXQ19i6P1uXUW1AcCjss=) 2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: glLqt8A+PG2i48HeZjmY7dCokn6j6eyQTAGv7a4dQe4=) 3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: cXsdzPTH/yRS7sygsATYiwsQyV1n0HK8W/wMQYfB7Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: Aug 9 04:05:22 2025 GMT Not After : Aug 16 04:05:22 2025 GMT Subject: CN=6896c902-1459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f7:48:2b:b7:8d:64:a8:f9:d0:d2:72:fc:48: dd:61:67:f3:05:4f:38:2f:54:3d:9d:d3:7d:03:cf: 4a:15:80:67:55:0a:f8:c3:49:52:0d:0b:06:e2:dd: 98:43:fa:19:8c:c4:69:6e:97:0e:46:23:c3:f9:01: 8e:4b:a4:5b:f1:c7:3d:5e:88:85:1b:fb:9f:84:ee: 7e:47:72:74:a9:1c:dc:e4:f3:07:21:77:75:67:5a: 87:77:4c:1b:23:e8:16:3b:ed:d5:58:de:17:20:d8: ce:e6:35:63:1a:f8:57:9c:ac:5e:24:1e:0d:44:c9: a7:ee:d4:dc:bd:23:fc:c2:e5:28:8f:9b:a7:48:f9: e5:20:e3:ec:15:3a:ac:36:eb:80:56:42:a9:8b:ff: d3:1c:81:68:97:c7:b2:13:77:d7:e9:bb:b0:53:54: 79:e1:e8:e7:50:39:25:a5:2e:43:04:23:f2:da:18: f2:fd:21:0e:9a:45:9a:4f:e4:4c:78:07:94:f7:9e: 0a:a4:41:93:e9:25:6a:9f:47:f9:60:04:02:b6:3c: e4:74:76:c9:14:72:27:5a:27:09:aa:9d:c3:a0:9d: a1:5e:a5:1a:1d:da:8b:87:d6:b1:e3:99:22:06:2e: 93:c7:16:a7:28:e9:9b:dc:83:c6:14:b0:f2:e7:31: 6c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:95:4D:F2:E2:8C:DC:FB:DA:11:31:A5:DD:B1:4A:E3:71:AF:97:D1 X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:30:35:ab:92:cd:b8:fe:36:95:fa:27:1e:c3:42:fe:90:75: f8:b2:d4:db:8e:b7:ad:c5:6f:33:fa:b8:74:3d:98:ba:6a:a8: 28:4a:20:b3:53:41:58:90:7e:a8:34:c3:d6:78:2c:2b:ca:4b: dd:28:c0:5d:2f:45:ec:e1:5f:65:02:23:36:6c:2b:df:da:f5: e4:04:3e:ee:04:69:d7:3c:8b:ef:cf:18:6b:58:ca:ba:24:ff: b8:33:89:fa:23:d9:53:04:60:db:ed:19:0d:f2:55:62:b8:df: ef:d2:2e:15:80:c5:70:e7:d7:90:ce:26:ce:91:fc:84:d5:10: 99:bf:cb:5f:2a:59:1b:b8:0c:2c:93:de:0e:00:5d:fd:d3:c7: 22:8b:88:d8:3b:de:f0:78:e3:07:3e:9d:b0:a1:7e:4a:67:71: aa:6d:57:93:be:c5:68:79:05:86:69:b1:ec:76:f5:bc:6d:17: 97:b5:73:86:99:c5:86:d4:4e:37:82:b7:16:ef:ee:f4:7e:3c: 9c:fe:75:de:81:1b:7d:14:87:45:99:95:19:92:84:b1:24:64: 91:7b:6b:9b:7c:3a:3d:79:b1:d5:ea:cd:31:17:f8:67:f1:9a: ee:18:6d:bd:8f:1b:77:07:96:35:cd:32:d2:03:7c:af:c6:0d: 04:de:37:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjUwODA5MDQwNTIyWhcNMjUwODE2MDQwNTIyWjAYMRYwFAYD VQQDEw02ODk2YzkwMi0xNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfdIK7eNZKj50NJy/EjdYWfzBU84L1Q9ndN9A89KFYBnVQr4w0lSDQsG4t2Y Q/oZjMRpbpcORiPD+QGOS6Rb8cc9XoiFG/ufhO5+R3J0qRzc5PMHIXd1Z1qHd0wb I+gWO+3VWN4XINjO5jVjGvhXnKxeJB4NRMmn7tTcvSP8wuUoj5unSPnlIOPsFTqs NuuAVkKpi//THIFol8eyE3fX6buwU1R54ejnUDklpS5DBCPy2hjy/SEOmkWaT+RM eAeU954KpEGT6SVqn0f5YAQCtjzkdHbJFHInWicJqp3DoJ2hXqUaHdqLh9ax45ki Bi6TxxanKOmb3IPGFLDy5zFsrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6VTfLi jNz72hExpd2xSuNxr5fRMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIMDWrks24/jaV+icew0L+kHX4stTbjretxW8z+rh0PZi6aqgoSiCz U0FYkH6oNMPWeCwrykvdKMBdL0Xs4V9lAiM2bCvf2vXkBD7uBGnXPIvvzxhrWMq6 JP+4M4n6I9lTBGDb7RkN8lViuN/v0i4VgMVw59eQzibOkfyE1RCZv8tfKlkbuAws k94OAF3908cii4jYO97weOMHPp2woX5KZ3GqbVeTvsVoeQWGabHsdvW8bReXtXOG mcWG1E43grcW7+70fjyc/nXegRt9FIdFmZUZkoSxJGSRe2ubfDo9ebHV6s0xF/hn 8ZruGG29jxt3B5Y1zTLSA3yvxg0E3jdQ -----END CERTIFICATE-----Generated at Sat Aug 9 23:26:27 2025 by rpki-client