$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft File: 4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json) Hash identifier: tr399VOY134d8NqVo9nDobfdBYbvqXNxb/krW76itlw= Subject key identifier: BB:6E:51:0C:72:26:42:E5:AB:C3:6C:98:73:1F:4E:B6:4A:C3:BF:D2 Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 Certificate issuer: /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Certificate serial: 08F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft Manifest number: 08E5 Signing time: Mon 04 Aug 2025 20:41:31 +0000 Manifest this update: Mon 04 Aug 2025 20:41:31 +0000 Manifest next update: Mon 11 Aug 2025 20:41:31 +0000 Files and hashes: 1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: 8VkbK5fqrWa5NN5l4WJ0ZE1jACCr/WsBAQM+oxz2SbU=) 2: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: hfrhHFCjm9A1IZZ68jj/fGY3wp72/JwweOhEQKmJp+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2292 (0x8f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Validity Not Before: Aug 4 20:41:31 2025 GMT Not After : Aug 11 20:41:31 2025 GMT Subject: CN=68911afb-acaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:f2:e7:e2:bf:d3:ca:0e:c1:d0:d5:7c:67: ff:28:07:e2:5b:51:ad:6b:f8:6f:13:b3:0a:94:a3: 8e:e7:24:b6:87:b7:e2:06:14:92:50:94:75:2b:97: 85:16:ee:0d:e3:21:f2:7c:d6:0c:ec:a3:f0:b8:fd: b1:41:fe:27:f2:6d:8e:e9:e6:82:0c:9c:2a:2b:c1: ce:ba:a9:f5:9e:5d:66:06:9b:79:ad:2d:0b:33:db: 92:86:df:1a:ab:48:c6:ea:8f:62:c7:74:e3:0c:1f: 5f:db:8d:56:35:cb:55:c2:7e:62:dd:eb:af:05:87: b8:18:ba:93:fb:6e:ce:0b:61:40:95:cd:75:8b:32: d3:be:84:f5:52:76:ed:e9:73:0a:d7:ac:e9:38:b7: a4:e8:60:0c:32:8b:14:0a:81:02:eb:d2:eb:1f:68: b6:a8:bb:43:9f:7f:d7:0a:b8:de:0f:6c:74:8c:9a: c4:23:99:17:55:57:40:45:85:dd:d3:58:64:c0:b0: 56:8a:2b:7e:84:c4:74:d2:b3:06:cb:76:36:19:e7: f4:25:ad:b6:1e:f0:ca:ac:19:d6:32:65:4a:66:f1: af:5c:14:20:1a:04:77:7f:da:a8:82:3e:21:c8:82: d0:ff:b5:07:40:18:41:ee:c9:44:5a:99:ef:e9:d7: 2d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6E:51:0C:72:26:42:E5:AB:C3:6C:98:73:1F:4E:B6:4A:C3:BF:D2 X509v3 Authority Key Identifier: keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:d6:42:30:63:bf:72:f8:fa:80:5c:81:45:a7:fd:c9:14:d6: 7a:76:f8:6b:95:d6:87:a5:16:f8:f0:ed:1b:7b:aa:ee:d9:bd: 9d:df:3b:49:89:ad:ca:13:71:ba:72:58:e0:0c:38:1d:1a:d3: 87:5d:70:e1:3a:1d:b7:6d:d8:12:5a:fe:d9:3c:ea:13:4f:8b: e0:33:64:50:26:6a:a4:69:9d:96:09:0c:38:e2:14:4a:bd:4f: 6a:95:3f:25:21:47:64:20:4c:98:22:26:ac:90:c0:4c:38:91: 8f:b9:b6:20:1e:a0:47:40:c1:f6:fa:b0:41:4c:b2:38:d9:19: ae:23:f8:a3:4b:80:c5:46:2f:77:fe:8c:1f:9b:6b:43:14:61: 14:2f:6e:48:66:aa:31:d2:cb:e7:76:72:4f:2a:fd:8d:67:e2: 27:c2:b5:ab:42:10:67:d0:d1:ca:8d:6d:4f:13:12:94:19:b7: c5:92:25:95:7e:2d:b3:11:3f:04:73:62:59:d2:8c:d6:7d:5d: 7b:94:7c:61:60:2f:a9:7e:8e:ba:a6:a4:a5:c3:c6:27:4e:0c: c7:81:17:82:73:ba:75:f0:55:ff:9a:37:49:42:f3:86:c4:b4: 7f:89:2a:94:7a:7f:45:7c:df:82:c1:32:6a:57:a0:55:21:a2: 1a:4b:31:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRDNkIxMTAvBgNVBAUTKEUyNjg3M0I0NUY4OEQxRjVEODgzQzE3RTRDQ0Y3MEEy NDUxNjIxNDIwHhcNMjUwODA0MjA0MTMxWhcNMjUwODExMjA0MTMxWjAYMRYwFAYD VQQDEw02ODkxMWFmYi1hY2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq47y5+K/08oOwdDVfGf/KAfiW1Gta/hvE7MKlKOO5yS2h7fiBhSSUJR1K5eF Fu4N4yHyfNYM7KPwuP2xQf4n8m2O6eaCDJwqK8HOuqn1nl1mBpt5rS0LM9uSht8a q0jG6o9ix3TjDB9f241WNctVwn5i3euvBYe4GLqT+27OC2FAlc11izLTvoT1Unbt 6XMK16zpOLek6GAMMosUCoEC69LrH2i2qLtDn3/XCrjeD2x0jJrEI5kXVVdARYXd 01hkwLBWiit+hMR00rMGy3Y2Gef0Ja22HvDKrBnWMmVKZvGvXBQgGgR3f9qogj4h yILQ/7UHQBhB7slEWpnv6dct0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtuUQxy JkLlq8NsmHMfTrZKw7/SMB8GA1UdIwQYMBaAFOJoc7RfiNH12IPBfkzPcKJFFiFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEM2Qi8yNzhBQTNFNEI1 MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBmWFlnOEYtVE05d29rVVdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRtaHp0Ri1JMGZYWWc4Ri1UTTl3b2tVV0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEM2Qi8yNzhBQTNFNEI1MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBm WFlnOEYtVE05d29rVVdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm1kIwY79y+PqAXIFFp/3JFNZ6dvhrldaHpRb48O0be6ru2b2d3ztJ ia3KE3G6cljgDDgdGtOHXXDhOh23bdgSWv7ZPOoTT4vgM2RQJmqkaZ2WCQw44hRK vU9qlT8lIUdkIEyYIiaskMBMOJGPubYgHqBHQMH2+rBBTLI42RmuI/ijS4DFRi93 /owfm2tDFGEUL25IZqox0svndnJPKv2NZ+InwrWrQhBn0NHKjW1PExKUGbfFkiWV fi2zET8Ec2JZ0ozWfV17lHxhYC+pfo66pqSlw8YnTgzHgReCc7p18FX/mjdJQvOG xLR/iSqUen9FfN+CwTJqV6BVIaIaSzEG -----END CERTIFICATE-----Generated at Tue Aug 5 17:13:52 2025 by rpki-client