$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json) Hash identifier: q4vA7G986eChrFTBW1gxE/vdp96NErz1UX9SghkgHBM= Subject key identifier: CF:A7:4C:6F:73:93:CE:67:81:63:B9:7C:00:53:68:40:5F:39:4E:9E Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Certificate serial: 0608 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft Manifest number: 0602 Signing time: Fri 08 Aug 2025 23:18:15 +0000 Manifest this update: Fri 08 Aug 2025 23:18:14 +0000 Manifest next update: Fri 15 Aug 2025 23:18:14 +0000 Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: WhnpdYudnho28qSfEcYAcbNdpnOrGmJj9WY3YR6s6N4=) 2: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: LrOS5vT6G1w5nCu4oa5LHxalQDErRntPMrUYlIi++Aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1544 (0x608) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5ECA, serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Validity Not Before: Aug 8 23:18:14 2025 GMT Not After : Aug 15 23:18:14 2025 GMT Subject: CN=689685b6-2850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:73:21:74:c5:d6:bc:f8:83:66:2f:73:2d: 17:02:c1:df:af:cc:5f:13:62:54:21:6c:6c:a5:d5: 14:4b:d2:eb:b5:9d:91:7b:3d:e9:8c:f2:c7:43:12: 81:7b:8e:ce:74:76:a6:94:5e:6a:f2:73:b4:2f:2b: ba:c5:25:77:f3:df:54:12:e6:c2:87:ae:01:29:f7: 4d:6a:15:fa:92:6c:10:2c:f2:1a:ea:0d:f7:44:9e: 54:c3:18:ca:e3:4e:83:4b:1f:b9:36:0a:d1:b6:e7: d1:35:84:6a:60:f0:46:c9:09:66:e6:6a:27:39:ab: 65:93:eb:2a:b1:1c:8a:60:2e:8f:73:3e:6d:e1:42: f7:55:dc:ce:8e:b2:48:d3:49:9d:75:fb:e6:2e:8c: 4b:a6:2b:b5:30:73:ac:54:e3:1c:96:5b:4a:e8:93: 6c:33:cb:4e:2a:9f:0f:ad:4a:7f:30:f8:e2:51:1f: 12:3d:08:7e:a3:cd:37:cd:5a:26:e5:86:74:3a:4c: 43:1c:92:47:9f:5f:52:59:6a:41:94:2f:96:16:fc: d7:a7:53:85:80:df:8e:00:35:bf:0f:87:13:f2:9e: 62:a3:3f:c6:70:6e:2a:a1:2f:53:ee:ee:c7:c3:9c: 79:27:29:b4:8b:24:88:5c:a4:b0:c4:66:94:42:52: 4f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A7:4C:6F:73:93:CE:67:81:63:B9:7C:00:53:68:40:5F:39:4E:9E X509v3 Authority Key Identifier: keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:9a:bc:c3:49:f2:46:ed:7c:1e:d3:55:44:4e:5f:c2:05:d6: 76:33:cf:aa:c3:f7:9b:45:b3:4e:7f:41:59:a6:46:28:71:18: c6:2b:e2:39:c8:5b:18:6a:7e:5a:17:81:91:f3:f9:a6:19:7a: a2:3a:a4:8b:59:e9:d2:0f:0f:a0:7b:6e:f8:d6:a4:cf:fc:c7: b1:da:19:9b:3c:98:02:a1:90:12:ea:42:4c:88:3b:bf:6f:3e: 9c:a6:06:3d:13:a7:41:9c:62:f6:f3:2f:08:54:ec:e1:52:1e: f5:75:e7:1f:86:fe:e8:35:7b:57:1c:e0:ee:1c:fd:73:d9:7e: ba:31:55:83:01:27:af:76:50:69:f1:b6:21:b8:ba:d3:18:90: 85:a3:93:f9:96:df:ef:4d:b0:12:c0:e2:f7:63:b0:77:af:23: 02:1a:93:e6:fb:49:4b:a5:81:44:3f:11:82:c2:69:54:44:6e: cc:80:a6:13:bb:7a:85:27:2f:a7:44:cf:8a:f4:68:cf:04:e6: 08:b2:41:39:a3:a2:71:9b:89:d5:ce:3c:8d:c6:32:8d:a8:31: 14:05:f9:1d:82:ab:0a:da:df:0a:93:57:ac:43:d2:b0:8e:cd: bd:70:ac:9a:f6:ba:9b:03:6d:93:cc:72:82:83:cc:b9:73:c8: db:7d:39:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFQ0ExMTAvBgNVBAUTKEZCODA1RDUzNzlDQjA3RDUyQTQxMUVGRkZEMDQ5MUNB MzlCN0JGMjcwHhcNMjUwODA4MjMxODE0WhcNMjUwODE1MjMxODE0WjAYMRYwFAYD VQQDEw02ODk2ODViNi0yODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMNzIXTF1rz4g2Yvcy0XAsHfr8xfE2JUIWxspdUUS9LrtZ2Rez3pjPLHQxKB e47OdHamlF5q8nO0Lyu6xSV3899UEubCh64BKfdNahX6kmwQLPIa6g33RJ5UwxjK 406DSx+5NgrRtufRNYRqYPBGyQlm5monOatlk+sqsRyKYC6Pcz5t4UL3VdzOjrJI 00mddfvmLoxLpiu1MHOsVOMclltK6JNsM8tOKp8PrUp/MPjiUR8SPQh+o803zVom 5YZ0OkxDHJJHn19SWWpBlC+WFvzXp1OFgN+OADW/D4cT8p5ioz/GcG4qoS9T7u7H w5x5Jym0iySIXKSwxGaUQlJP3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+nTG9z k85ngWO5fABTaEBfOU6eMB8GA1UdIwQYMBaAFPuAXVN5ywfVKkEe//0Ekco5t78n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUVDQS9CRkQyMzIwNkI5 MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5VXFRUjdfX1FTUnlqbTN2 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy00QmRVM25MQjlVcVFSN19fUVNSeWptM3Z5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUVDQS9CRkQyMzIwNkI5MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5 VXFRUjdfX1FTUnlqbTN2eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0mrzDSfJG7Xwe01VETl/CBdZ2M8+qw/ebRbNOf0FZpkYocRjGK+I5 yFsYan5aF4GR8/mmGXqiOqSLWenSDw+ge2741qTP/Mex2hmbPJgCoZAS6kJMiDu/ bz6cpgY9E6dBnGL28y8IVOzhUh71decfhv7oNXtXHODuHP1z2X66MVWDASevdlBp 8bYhuLrTGJCFo5P5lt/vTbASwOL3Y7B3ryMCGpPm+0lLpYFEPxGCwmlURG7MgKYT u3qFJy+nRM+K9GjPBOYIskE5o6Jxm4nVzjyNxjKNqDEUBfkdgqsK2t8Kk1esQ9Kw js29cKya9rqbA22TzHKCg8y5c8jbfTmp -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:00 2025 by rpki-client