$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft File: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft (raw, json) Hash identifier: beihOdP3G82+fPUi5jJ/B8noIM21/Azaf+TgjHXyqJ0= Subject key identifier: C1:B0:39:E4:37:AA:E8:A8:61:E0:74:95:24:D1:91:C0:75:6B:CD:C9 Authority key identifier: E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 Certificate issuer: /CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Certificate serial: 0AE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft Manifest number: 0ADA Signing time: Fri 08 Aug 2025 19:41:53 +0000 Manifest this update: Fri 08 Aug 2025 19:41:53 +0000 Manifest next update: Fri 15 Aug 2025 19:41:53 +0000 Files and hashes: 1: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl (hash: ICT6m3CVnvIjvD/kcl1O1L5GGiw2+O/bxM+Iqh47sDM=) 2: 29B9D5B8524111EABEF0A119C4F9AE02.roa (hash: XgnhviRQUKAkeu4itRmlPhHlV4kxqNIZcBKK2pdxl3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2785 (0xae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CA1, serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Validity Not Before: Aug 8 19:41:53 2025 GMT Not After : Aug 15 19:41:53 2025 GMT Subject: CN=68965301-2ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:55:46:3c:5d:ab:52:90:71:1f:de:b4:ea: 1a:87:a7:ce:a6:8d:f7:18:d9:e8:1c:19:1f:ee:ff: 1d:7c:9d:9b:32:48:4c:ab:c2:9d:a4:29:65:a8:04: 75:e4:41:e8:43:9d:78:6b:9e:36:9c:03:bd:7a:a4: a5:71:7d:fb:7e:63:16:1b:7c:92:56:ff:1b:7a:98: 6c:a1:aa:05:69:ef:2d:73:fe:e4:38:8b:fb:63:f2: b7:80:13:a2:17:2a:9b:7d:53:ad:ed:6b:e3:a0:76: e8:6d:63:44:03:5d:53:00:e1:3f:3f:42:18:0a:83: 4e:5a:ba:d0:23:4d:48:0f:cb:cc:13:b7:af:6a:8d: 85:49:76:bf:f9:3c:b7:f2:d1:dd:d7:ad:dd:7c:7a: a3:ae:02:aa:a7:7f:9e:fe:9a:03:d6:04:bf:8f:b5: d4:9d:c0:05:b2:4a:eb:53:8b:99:3e:a4:60:9b:2f: 6d:aa:66:29:fa:b9:7c:40:2b:26:5d:5f:23:65:b4: a8:b0:f4:28:bb:94:e0:00:02:37:03:62:91:84:34: 6b:8d:30:20:0b:7a:e3:b2:a8:26:02:f0:3a:05:30: c2:7a:c9:d5:9c:e3:02:67:3f:2d:de:1a:07:a1:f8: 03:a6:f2:67:e1:69:1f:f1:04:b4:74:8a:5d:a2:b3: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B0:39:E4:37:AA:E8:A8:61:E0:74:95:24:D1:91:C0:75:6B:CD:C9 X509v3 Authority Key Identifier: keyid:E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:be:bb:0d:37:45:fc:2f:08:7d:97:10:42:7a:66:f3:0f:70: e8:7b:db:94:44:b0:28:52:78:c8:0c:b4:d7:2b:ed:e0:4a:0f: 8f:d7:89:8f:ee:50:68:7b:ab:83:34:10:04:aa:f2:1d:f5:7e: f2:d5:d8:8b:36:6c:fb:ef:2c:18:46:54:20:e9:f6:3d:47:33: 98:2a:91:26:c6:40:5b:11:9c:01:65:1e:77:82:cf:3c:09:ad: 97:b0:80:1a:a6:84:77:95:ee:ca:03:c0:2c:b6:04:e1:90:4e: 38:4e:a1:ff:ed:1e:ee:7f:c2:a1:05:2b:a4:23:60:77:a0:31: 53:7e:eb:be:30:ca:37:f0:0a:5e:c4:e8:ed:ae:42:5c:1c:be: 8a:24:2b:02:ea:de:37:83:2c:83:37:7e:dd:14:1e:c7:93:20: d5:90:e3:19:bb:bc:7c:d4:91:69:d0:7b:7c:7b:be:99:72:25: 3e:36:cf:c4:69:24:12:f6:ce:83:6c:b6:3b:41:e4:74:5a:84: e3:9c:d1:ce:77:b3:28:df:f0:2c:14:11:71:13:72:9a:c3:43: e9:4a:81:ce:8c:1f:56:eb:fa:dc:9a:81:ab:c9:25:8f:5b:e2: fe:bd:5a:3b:81:2e:bf:27:82:ef:f7:65:b3:d4:4c:46:3d:e7: c1:3b:84:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDQTExMTAvBgNVBAUTKEUxRDk1QTNDQkREOTIwMjlBRUJFMUUxMzA4MDk5RTYy NDlDRDM2MjQwHhcNMjUwODA4MTk0MTUzWhcNMjUwODE1MTk0MTUzWjAYMRYwFAYD VQQDEw02ODk2NTMwMS0yYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSpVRjxdq1KQcR/etOoah6fOpo33GNnoHBkf7v8dfJ2bMkhMq8KdpCllqAR1 5EHoQ514a542nAO9eqSlcX37fmMWG3ySVv8bephsoaoFae8tc/7kOIv7Y/K3gBOi FyqbfVOt7WvjoHbobWNEA11TAOE/P0IYCoNOWrrQI01ID8vME7evao2FSXa/+Ty3 8tHd163dfHqjrgKqp3+e/poD1gS/j7XUncAFskrrU4uZPqRgmy9tqmYp+rl8QCsm XV8jZbSosPQou5TgAAI3A2KRhDRrjTAgC3rjsqgmAvA6BTDCesnVnOMCZz8t3hoH ofgDpvJn4Wkf8QS0dIpdorPTKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGwOeQ3 quioYeB0lSTRkcB1a83JMB8GA1UdIwQYMBaAFOHZWjy92SAprr4eEwgJnmJJzTYk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS83MDYzRTQyNDUy M0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklDbXV2aDRUQ0FtZVlrbk5O aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkbGFQTDNaSUNtdXZoNFRDQW1lWWtuTk5pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENBMS83MDYzRTQyNDUyM0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklD bXV2aDRUQ0FtZVlrbk5OaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjvrsNN0X8Lwh9lxBCembzD3Doe9uURLAoUnjIDLTXK+3gSg+P14mP 7lBoe6uDNBAEqvId9X7y1diLNmz77ywYRlQg6fY9RzOYKpEmxkBbEZwBZR53gs88 Ca2XsIAapoR3le7KA8AstgThkE44TqH/7R7uf8KhBSukI2B3oDFTfuu+MMo38Ape xOjtrkJcHL6KJCsC6t43gyyDN37dFB7HkyDVkOMZu7x81JFp0Ht8e76ZciU+Ns/E aSQS9s6DbLY7QeR0WoTjnNHOd7Mo3/AsFBFxE3Kaw0PpSoHOjB9W6/rcmoGrySWP W+L+vVo7gS6/J4Lv92Wz1ExGPefBO4SL -----END CERTIFICATE-----Generated at Sun Aug 10 10:38:08 2025 by rpki-client