$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: IDNvntadkM9+DPyX1fB8h/uwpA+kaYpLfGreCrSNFgU= Subject key identifier: 41:40:D6:66:09:2F:9B:72:2F:4E:4D:91:7E:FE:AE:80:FC:04:C3:7F Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 01FE Signing time: Mon 11 Aug 2025 02:26:15 +0000 Manifest this update: Mon 11 Aug 2025 02:26:15 +0000 Manifest next update: Mon 18 Aug 2025 02:26:15 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: 7g0TeaxqDApLEbskDaMoUfohYDdeDRcMJOj/AtGUZVA=) 2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: Ple4OYydaAojanyJwx7ZWPyKox9DD4lFfc6gQi2CwTI=) 3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: iBZ0Vc5oqFw84Bi0mykH6jGLVo3+N0cmUjqo5T+vIIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: Aug 11 02:26:15 2025 GMT Not After : Aug 18 02:26:15 2025 GMT Subject: CN=689954c7-f0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4f:bc:1f:3f:9e:20:0b:d7:40:94:48:0b:d9: e4:01:00:d3:b6:18:bb:48:32:3b:89:cf:f9:cb:21: 90:71:76:63:e3:f0:89:c5:5a:0b:a7:90:90:f6:7d: 85:be:69:00:8a:b6:1e:d5:b2:e6:6f:ec:d3:47:26: 21:1a:6b:84:73:6e:ce:4f:1e:20:ec:c5:62:fe:98: 8a:51:f2:ec:24:73:9b:5c:67:e0:5f:27:2d:84:c6: 0c:89:08:5d:18:b0:b3:be:8d:75:6e:9f:6b:0c:30: d7:64:ba:a0:d2:99:1f:f7:b3:66:36:77:b9:4c:06: 53:f5:6a:47:c7:d5:ba:2b:40:89:90:5d:b7:e6:3f: ce:e3:12:c9:51:d0:76:64:6b:b1:52:9b:4f:e4:71: 6c:cd:c2:50:99:74:95:36:bd:a2:1a:18:53:05:89: 55:b2:f4:d1:c6:7e:30:b1:40:bb:02:83:48:78:23: 1a:24:ab:b7:d8:c3:e2:c7:73:ed:30:3b:69:22:38: 37:2c:2b:65:10:3e:90:43:11:74:af:5f:c2:c2:97: ec:f7:f7:cf:76:49:71:28:84:7b:bb:2c:4c:32:88: 7b:1d:cc:90:f3:75:38:c0:7c:cc:fb:43:02:16:ae: 4d:97:be:1e:da:d2:9f:83:a8:87:49:ba:89:4b:07: 0a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:40:D6:66:09:2F:9B:72:2F:4E:4D:91:7E:FE:AE:80:FC:04:C3:7F X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:c0:2c:53:40:33:a5:cc:f3:ee:06:0b:b7:90:fd:f7:2c:7e: e9:ee:86:d0:e8:c9:a5:b2:42:4d:e8:29:0f:30:36:0a:9b:94: 4f:17:40:f9:fa:f4:32:07:0a:3f:85:de:b5:ba:c0:c1:25:d5: c8:b6:9a:e6:0d:17:62:5f:e7:11:f6:d0:7f:5f:a4:c6:23:67: 5d:a0:cd:20:f6:78:f6:a1:9c:e6:12:e7:7d:ef:6c:0f:d5:dd: 18:a2:ed:30:b6:45:76:bb:fa:c5:0d:4f:79:4b:c6:37:00:38: a3:3d:40:db:c5:62:07:1a:b0:d3:26:4b:6d:5f:a4:bd:dd:ff: 59:c8:e9:78:a7:6c:ad:36:cf:20:04:02:85:04:1f:ea:92:73: 50:1f:13:b5:e1:28:fb:a3:1d:74:57:8a:de:df:2a:4b:6a:bb: fa:48:cd:33:a9:a7:d4:e7:b1:01:46:58:70:bc:31:da:3c:65: b2:30:47:be:e9:06:ae:24:a6:1b:a5:f2:6d:a1:e7:49:5b:a8: 0b:be:63:2f:2e:ff:11:0b:ce:5a:a8:4a:86:0e:05:13:5a:e7: db:a4:51:7f:91:0f:20:08:d5:b9:22:ce:5a:0c:fa:01:70:b9: 5d:5e:6d:47:76:f6:d3:41:ac:0c:c5:f4:bb:f4:bb:30:32:2b: bb:8e:e9:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjUwODExMDIyNjE1WhcNMjUwODE4MDIyNjE1WjAYMRYwFAYD VQQDEw02ODk5NTRjNy1mMGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3k+8Hz+eIAvXQJRIC9nkAQDTthi7SDI7ic/5yyGQcXZj4/CJxVoLp5CQ9n2F vmkAirYe1bLmb+zTRyYhGmuEc27OTx4g7MVi/piKUfLsJHObXGfgXycthMYMiQhd GLCzvo11bp9rDDDXZLqg0pkf97NmNne5TAZT9WpHx9W6K0CJkF235j/O4xLJUdB2 ZGuxUptP5HFszcJQmXSVNr2iGhhTBYlVsvTRxn4wsUC7AoNIeCMaJKu32MPix3Pt MDtpIjg3LCtlED6QQxF0r1/Cwpfs9/fPdklxKIR7uyxMMoh7HcyQ83U4wHzM+0MC Fq5Nl74e2tKfg6iHSbqJSwcKKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFA1mYJ L5tyL05NkX7+roD8BMN/MB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwwCxTQDOlzPPuBgu3kP33LH7p7obQ6MmlskJN6CkPMDYKm5RPF0D5 +vQyBwo/hd61usDBJdXItprmDRdiX+cR9tB/X6TGI2ddoM0g9nj2oZzmEud972wP 1d0You0wtkV2u/rFDU95S8Y3ADijPUDbxWIHGrDTJkttX6S93f9ZyOl4p2ytNs8g BAKFBB/qknNQHxO14Sj7ox10V4re3ypLarv6SM0zqafU57EBRlhwvDHaPGWyMEe+ 6QauJKYbpfJtoedJW6gLvmMvLv8RC85aqEqGDgUTWufbpFF/kQ8gCNW5Is5aDPoB cLldXm1HdvbTQawMxfS79LswMiu7junt -----END CERTIFICATE-----Generated at Mon Aug 11 10:33:12 2025 by rpki-client