$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft File: C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json) Hash identifier: d0RVwpiMce3K2g/DM6D0GypFXIasWJEuNLPs3OQesfQ= Subject key identifier: E7:97:35:11:57:47:06:0F:C0:5F:D8:12:AE:3C:E1:D6:B6:E9:9B:97 Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B Certificate issuer: /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft Manifest number: 0141 Signing time: Tue 05 Aug 2025 04:46:28 +0000 Manifest this update: Tue 05 Aug 2025 04:46:27 +0000 Manifest next update: Tue 12 Aug 2025 04:46:27 +0000 Files and hashes: 1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: mVaUOhX+fKZ2zj09yvVV1C42YaG3SflLNXcw8E3rKjY=) 2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: 7OzrwZ3Ky/gjMPnFBCcju8Q1dBXI74VmazgiOgPzNsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Validity Not Before: Aug 5 04:46:27 2025 GMT Not After : Aug 12 04:46:27 2025 GMT Subject: CN=68918ca3-754e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:80:c5:54:7d:4c:06:71:e7:a1:56:7b:68: 8e:db:3a:30:46:1d:37:76:a3:51:f6:43:e6:bd:6a: 39:3a:ab:99:00:93:e3:ad:6a:0b:35:c6:e8:6e:d6: a7:fd:4f:9e:33:f4:54:0f:94:f8:e4:bf:8f:a2:0d: 64:14:9e:42:ac:ce:3d:dc:77:b6:85:c9:0d:1f:3b: ed:e5:25:29:5d:c5:6e:4f:88:a4:48:c1:e1:4a:66: ca:fb:23:1a:4a:ac:48:40:00:79:09:f1:23:7c:3f: 85:ff:5e:23:a9:23:76:5e:2e:9c:c4:88:7c:be:0d: b5:23:9d:df:9a:aa:66:72:78:0a:24:40:17:1d:d8: 31:0a:9a:41:bf:d7:4b:69:b5:e4:0b:b5:e3:eb:02: 00:67:5c:48:85:e9:e6:bb:f4:24:a9:01:dc:78:69: 6b:69:c1:34:a4:08:53:4f:03:0e:6f:d0:11:67:c8: df:7d:0b:0b:dc:27:14:45:bb:82:7b:fe:91:c3:6a: 02:09:1f:7d:f6:60:90:46:c2:85:d1:60:ec:f3:7c: 41:e5:cf:f6:30:22:7e:a3:0b:db:2c:ae:81:72:83: c9:cd:2b:b6:b5:9e:8f:dc:60:36:45:b3:6b:df:d2: fc:ae:03:1d:f0:1a:32:4e:04:a5:a4:6a:d3:08:9a: 93:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:97:35:11:57:47:06:0F:C0:5F:D8:12:AE:3C:E1:D6:B6:E9:9B:97 X509v3 Authority Key Identifier: keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:6d:b9:12:50:63:88:18:d8:4f:89:cd:3a:a1:55:b2:67:04: 29:58:3c:b5:e8:3a:81:76:83:27:70:58:b2:f1:de:79:7c:01: c0:52:44:c5:bb:74:93:33:4d:3f:b6:65:98:18:ff:f2:c1:c9: 20:18:a9:a5:b3:0b:a8:99:25:cd:ef:50:24:4d:2c:96:29:be: c7:76:4e:b6:cf:ec:55:d4:f9:30:40:0c:0b:99:22:5c:12:da: c8:74:fb:90:00:1a:5f:51:1b:75:ec:73:c4:04:e7:be:49:09: 45:ef:43:ff:ad:25:f5:8b:cd:12:94:d2:7d:11:59:14:85:70: cf:27:b1:6f:07:ad:60:d2:d6:03:54:e1:a5:15:51:4f:73:2c: 5e:1a:be:8b:27:e9:ed:fd:ce:f5:b2:0a:ec:ce:09:81:53:ca: f7:71:df:50:3c:d0:ba:40:d3:d0:f0:fc:04:0d:3f:27:68:85: 4a:a2:85:c7:72:4f:3a:7a:4d:92:c9:70:9e:03:2d:4d:7f:d6: dd:59:16:4f:d1:f9:f2:29:9f:79:1d:1f:19:12:50:2a:c2:c5: 5c:59:34:eb:ce:e6:c2:e5:b2:c4:7f:b1:3d:67:ee:ca:8b:72: e6:3f:60:69:f7:a9:1e:2f:75:53:fa:05:d5:cf:ad:42:93:31: a1:19:7e:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdBOEUxMTAvBgNVBAUTKDBCODEzRTJCQkE4NDA2OUVCNDM0RDY1NjY2N0ZFQ0Ux RjYxQjQ5NEIwHhcNMjUwODA1MDQ0NjI3WhcNMjUwODEyMDQ0NjI3WjAYMRYwFAYD VQQDEw02ODkxOGNhMy03NTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOaAxVR9TAZx56FWe2iO2zowRh03dqNR9kPmvWo5OquZAJPjrWoLNcbobtan /U+eM/RUD5T45L+Pog1kFJ5CrM493He2hckNHzvt5SUpXcVuT4ikSMHhSmbK+yMa SqxIQAB5CfEjfD+F/14jqSN2Xi6cxIh8vg21I53fmqpmcngKJEAXHdgxCppBv9dL abXkC7Xj6wIAZ1xIhenmu/QkqQHceGlracE0pAhTTwMOb9ARZ8jffQsL3CcURbuC e/6Rw2oCCR999mCQRsKF0WDs83xB5c/2MCJ+owvbLK6BcoPJzSu2tZ6P3GA2RbNr 39L8rgMd8BoyTgSlpGrTCJqTmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeXNRFX RwYPwF/YEq484da26ZuXMB8GA1UdIwQYMBaAFAuBPiu6hAaetDTWVmZ/7OH2G0lL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E4RS9BMDUxNTZBNjgz NUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJwNjBOTlpXWm5fczRmWWJT VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0RS1LN3FFQnA2ME5OWldabl9zNGZZYlNVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0E4RS9BMDUxNTZBNjgzNUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJw NjBOTlpXWm5fczRmWWJTVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3bbkSUGOIGNhPic06oVWyZwQpWDy16DqBdoMncFiy8d55fAHAUkTF u3STM00/tmWYGP/ywckgGKmlswuomSXN71AkTSyWKb7Hdk62z+xV1PkwQAwLmSJc EtrIdPuQABpfURt17HPEBOe+SQlF70P/rSX1i80SlNJ9EVkUhXDPJ7FvB61g0tYD VOGlFVFPcyxeGr6LJ+nt/c71sgrszgmBU8r3cd9QPNC6QNPQ8PwEDT8naIVKooXH ck86ek2SyXCeAy1Nf9bdWRZP0fnyKZ95HR8ZElAqwsVcWTTrzubC5bLEf7E9Z+7K i3LmP2Bp96keL3VT+gXVz61CkzGhGX5d -----END CERTIFICATE-----Generated at Thu Aug 7 03:55:38 2025 by rpki-client