$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft File: 4UieBUVuksrXFYRyAOSnXWw-Q84.mft (raw, json) Hash identifier: e81c5AlF3OiOdBtxMnzJ1vfchv8d4DVPtUgcAdbQ+Rs= Subject key identifier: 4F:98:58:89:80:39:C5:64:E0:DD:FE:FB:52:DC:33:F3:67:BE:6F:B7 Authority key identifier: E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE Certificate issuer: /CN=A91F6AE0/serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Certificate serial: 02ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft Manifest number: 02E7 Signing time: Sat 09 Aug 2025 01:51:53 +0000 Manifest this update: Sat 09 Aug 2025 01:51:53 +0000 Manifest next update: Sat 16 Aug 2025 01:51:53 +0000 Files and hashes: 1: 4UieBUVuksrXFYRyAOSnXWw-Q84.crl (hash: 49NH0VOEtoaG7WAjfZbcukETtd2xMQzFn0gxzhsYH28=) 2: E2DF828CF20211ECBCC9B986C4F9AE02.roa (hash: z4QSZHsaMIqrT5GqWS+ItSZJBTmn9r2MlyBM2UIg/g4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 749 (0x2ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6AE0, serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Validity Not Before: Aug 9 01:51:53 2025 GMT Not After : Aug 16 01:51:53 2025 GMT Subject: CN=6896a9b9-b0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e7:5d:e6:39:5e:c8:a9:08:33:c8:64:1d:ee: 9a:e2:2a:ae:4e:b8:4e:cb:24:6c:61:8f:a7:12:5c: ea:a1:0f:19:d5:b7:61:49:75:3b:8c:b9:3a:b8:42: cc:d7:ff:0f:28:32:4f:cb:07:df:46:b2:d5:00:19: 0a:4a:62:75:5c:ce:cb:b4:23:72:1e:71:95:38:1a: 27:1c:4c:49:08:d7:ba:4d:8b:39:45:21:16:e2:53: 60:8c:10:b8:08:69:79:2d:b6:1e:ba:75:fc:68:18: 7e:f2:e3:73:9a:60:a0:e3:19:02:8d:85:c3:09:06: a1:9b:84:49:5e:2b:8f:c1:47:d4:c1:40:13:42:e4: f6:48:9b:fd:6f:3e:b1:67:18:bc:59:e5:30:74:47: 9b:81:8e:6e:7f:b3:11:63:f8:b0:e4:a7:67:92:7a: 17:ec:08:11:20:fb:07:8b:2e:20:7a:01:3c:98:b2: 52:de:d1:a1:09:cd:5c:dd:cc:6d:3d:a5:a2:44:37: 3d:2c:ab:c9:6b:c2:24:14:fd:e8:11:da:ba:af:e9: 60:7d:97:2c:9a:f5:9e:0d:d8:5c:1d:ca:49:05:2d: 9f:52:b4:39:cd:38:13:9c:8f:1d:9e:53:3c:47:91: f8:d9:c3:51:b7:2b:a0:3f:7a:2f:fc:27:3c:b4:b9: 66:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:98:58:89:80:39:C5:64:E0:DD:FE:FB:52:DC:33:F3:67:BE:6F:B7 X509v3 Authority Key Identifier: keyid:E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:24:e5:f2:56:05:2e:5f:86:e1:f8:67:39:17:b5:ac:5d:de: 23:d8:14:94:18:3c:df:fd:7a:ce:58:c7:1a:3a:82:4d:6f:1c: c6:e6:73:10:76:d1:1d:7d:07:d6:6e:05:ef:04:44:55:19:3c: e7:7a:7c:af:54:84:53:f9:48:8f:e6:e2:d4:a4:c4:8b:92:2d: d1:ae:2c:18:3e:c4:a2:a8:4c:36:ac:0d:66:d0:b8:48:4a:d1: 31:01:0a:b3:a0:95:9d:12:70:b4:c3:f4:4e:ec:b6:40:cf:be: 2b:bd:77:69:fb:d6:e9:b6:23:fc:aa:34:7d:7e:ea:c3:1c:90: 91:77:51:f0:c0:0f:0e:38:74:80:34:d6:c9:85:ef:51:23:87: 35:ec:cc:65:e8:04:a1:cb:be:1e:c7:a1:e8:e0:8b:3a:88:26: bf:11:c7:69:7b:a3:52:de:1a:06:5d:f8:6b:fc:d3:fc:ca:c8: 16:bc:ab:3e:7d:62:fc:9c:07:ad:52:75:4a:87:c6:f9:af:63: 68:a5:6a:86:aa:f5:54:cb:8b:b4:d3:dd:9e:61:7f:df:e7:27: e7:23:d5:b3:de:f2:c2:bd:2b:8a:7d:6c:20:00:d6:36:ca:c4: 1c:73:ef:d3:70:18:ff:06:ab:c9:38:93:db:5a:d0:ff:a0:d1: a6:e5:dd:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZBRTAxMTAvBgNVBAUTKEUxNDg5RTA1NDU2RTkyQ0FENzE1ODQ3MjAwRTRBNzVE NkMzRTQzQ0UwHhcNMjUwODA5MDE1MTUzWhcNMjUwODE2MDE1MTUzWjAYMRYwFAYD VQQDEw02ODk2YTliOS1iMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+dd5jleyKkIM8hkHe6a4iquTrhOyyRsYY+nElzqoQ8Z1bdhSXU7jLk6uELM 1/8PKDJPywffRrLVABkKSmJ1XM7LtCNyHnGVOBonHExJCNe6TYs5RSEW4lNgjBC4 CGl5LbYeunX8aBh+8uNzmmCg4xkCjYXDCQahm4RJXiuPwUfUwUATQuT2SJv9bz6x Zxi8WeUwdEebgY5uf7MRY/iw5KdnknoX7AgRIPsHiy4gegE8mLJS3tGhCc1c3cxt PaWiRDc9LKvJa8IkFP3oEdq6r+lgfZcsmvWeDdhcHcpJBS2fUrQ5zTgTnI8dnlM8 R5H42cNRtyugP3ov/Cc8tLlmXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+YWImA OcVk4N3++1LcM/Nnvm+3MB8GA1UdIwQYMBaAFOFIngVFbpLK1xWEcgDkp11sPkPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkFFMC9GQTA0N0Y1NEYx RkMxMUVDOTlCMkNCNkJDNEY5QUUwMi80VWllQlVWdWtzclhGWVJ5QU9TblhXdy1R ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVaWVCVVZ1a3NyWEZZUnlBT1NuWFd3LVE4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkFFMC9GQTA0N0Y1NEYxRkMxMUVDOTlCMkNCNkJDNEY5QUUwMi80VWllQlVWdWtz clhGWVJ5QU9TblhXdy1RODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqJOXyVgUuX4bh+Gc5F7WsXd4j2BSUGDzf/XrOWMcaOoJNbxzG5nMQ dtEdfQfWbgXvBERVGTznenyvVIRT+UiP5uLUpMSLki3RriwYPsSiqEw2rA1m0LhI StExAQqzoJWdEnC0w/RO7LZAz74rvXdp+9bptiP8qjR9furDHJCRd1HwwA8OOHSA NNbJhe9RI4c17Mxl6AShy74ex6Ho4Is6iCa/Ecdpe6NS3hoGXfhr/NP8ysgWvKs+ fWL8nAetUnVKh8b5r2NopWqGqvVUy4u0092eYX/f5yfnI9Wz3vLCvSuKfWwgANY2 ysQcc+/TcBj/BqvJOJPbWtD/oNGm5d3q -----END CERTIFICATE-----Generated at Sat Aug 9 15:16:28 2025 by rpki-client