$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json) Hash identifier: T6dklBvDibP2/f7s6uf3Erw+sGUcRkDxjiFVgO9VlVk= Subject key identifier: 02:CD:DD:68:EC:F8:53:DC:45:60:A0:19:68:6F:E7:DC:A7:55:71:55 Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft Manifest number: 28 Signing time: Sat 09 Aug 2025 08:18:06 +0000 Manifest this update: Sat 09 Aug 2025 08:18:06 +0000 Manifest next update: Sat 16 Aug 2025 08:18:06 +0000 Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: c2R26SSE5JBR+8YxbzvkOQARcTg1AhSdBL7SbSQHcFM=) 2: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: iR9RmJIaK9kKAtKzjMGd269EeycB0OEwfaUigxvrCq4=) 3: F88154843B9D11F091B39D67C4F9AE02.roa (hash: nNxkYkRl2gKLDvZBsXppHYQmBwtDL7vgL/l44dOoypk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Validity Not Before: Aug 9 08:18:06 2025 GMT Not After : Aug 16 08:18:06 2025 GMT Subject: CN=6897043e-ec05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:50:ed:6a:9a:b8:3d:de:59:38:17:78:5b: 7b:32:bb:de:8e:98:e9:a7:15:48:12:fb:4d:a0:5c: 29:a1:fa:83:05:55:70:09:df:ef:6a:e9:db:7c:48: 3d:2d:89:46:ea:a7:cf:a4:25:7a:32:66:61:58:1d: ec:19:29:af:22:77:40:62:e9:fe:44:e1:68:79:0e: 80:08:17:ef:a4:77:71:6e:df:db:0d:b9:ce:f6:c9: 67:9a:e5:a0:45:80:0d:b6:68:12:4b:89:5f:32:63: 2a:6e:9d:35:2d:d6:97:65:bd:f1:8b:15:c7:37:b7: 48:ec:1f:1c:be:5e:c3:ee:3f:f8:7e:e1:0e:26:87: c3:3f:dd:25:76:f5:d5:bb:4f:13:fc:0f:0c:72:d2: b5:09:69:b3:39:64:d2:a7:be:50:02:13:62:ff:f0: 79:7d:67:50:0d:20:68:ba:5c:c0:8b:13:34:12:35: 7f:61:3d:9f:32:fd:43:b3:cd:c9:b8:85:f5:42:56: 44:a2:04:d0:c3:94:b1:94:f4:cf:7a:94:66:4f:d0: 0a:b2:fa:d2:0d:6f:1a:e2:b3:eb:98:0d:b8:e4:f0: 33:1a:dd:fd:29:31:44:9a:67:54:d5:ac:f3:61:f7: e6:1e:6d:b1:81:8b:15:84:a3:e7:fd:e6:83:be:44: 65:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CD:DD:68:EC:F8:53:DC:45:60:A0:19:68:6F:E7:DC:A7:55:71:55 X509v3 Authority Key Identifier: keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:fe:9e:46:f6:3b:74:31:87:0b:42:06:f2:9f:58:4e:98:3c: 09:24:9f:c8:7c:07:ea:11:c0:e3:1f:27:75:cc:61:a0:4a:27: f9:d0:78:49:1f:d1:25:ca:6c:99:ac:87:ca:34:ae:ed:9b:b7: fb:8d:93:47:77:f9:40:35:d9:b1:4c:24:b8:39:f8:c3:41:87: 8b:86:fd:31:b2:93:28:7c:a7:05:b1:a8:03:15:46:88:12:55: ed:58:ed:24:9e:98:7a:9f:dc:90:f1:61:00:71:07:3a:ce:db: 34:e9:00:d2:d9:91:89:15:b7:9f:0e:44:dc:30:ce:bb:83:15: cc:5a:c9:18:d7:15:a2:df:ed:b3:42:31:b1:fa:5b:1b:3c:d7: 2e:56:bc:08:bc:05:20:b6:59:25:90:f4:44:48:53:b1:e1:8a: c3:72:13:b2:e7:ef:ec:1c:4c:bc:d2:19:e9:e0:28:2f:3f:18: 7d:51:c2:51:0b:16:2e:35:a5:50:21:f4:a8:a8:5d:94:73:65: 18:8c:81:51:ff:1b:33:5d:5d:0f:82:3f:52:7e:ce:08:5f:5f: 18:9f:8e:7d:97:61:40:d9:4c:51:da:20:4a:a2:3a:76:c5:d4: 7b:9e:04:c9:4c:f5:49:19:ff:16:1e:06:b0:b3:0b:48:90:88: 6e:f4:a5:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NkMxMDExMC8GA1UEBRMoRTJCMERGQTY5MEQyQzdFQUM0MzYzNjc1NkU0MzdCN0My NjI2RjRCQjAeFw0yNTA4MDkwODE4MDZaFw0yNTA4MTYwODE4MDZaMBgxFjAUBgNV BAMTDTY4OTcwNDNlLWVjMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChiVDtapq4Pd5ZOBd4W3syu96OmOmnFUgS+02gXCmh+oMFVXAJ3+9q6dt8SD0t iUbqp8+kJXoyZmFYHewZKa8id0Bi6f5E4Wh5DoAIF++kd3Fu39sNuc72yWea5aBF gA22aBJLiV8yYypunTUt1pdlvfGLFcc3t0jsHxy+XsPuP/h+4Q4mh8M/3SV29dW7 TxP8Dwxy0rUJabM5ZNKnvlACE2L/8Hl9Z1ANIGi6XMCLEzQSNX9hPZ8y/UOzzcm4 hfVCVkSiBNDDlLGU9M96lGZP0Aqy+tINbxris+uYDbjk8DMa3f0pMUSaZ1TVrPNh 9+YebbGBixWEo+f95oO+RGXlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAs3daOz4 U9xFYKAZaG/n3KdVcVUwHwYDVR0jBBgwFoAU4rDfppDSx+rENjZ1bkN7fCYm9Lsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2QzEwLzBFOTQwNUJBM0I5 RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlM cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNHJEZnBwRFN4LXJFTmpaMWJrTjdmQ1ltOUxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2 QzEwLzBFOTQwNUJBM0I5RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1y RU5qWjFia043ZkNZbTlMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJP+nkb2O3QxhwtCBvKfWE6YPAkkn8h8B+oRwOMfJ3XMYaBKJ/nQeEkf 0SXKbJmsh8o0ru2bt/uNk0d3+UA12bFMJLg5+MNBh4uG/TGykyh8pwWxqAMVRogS Ve1Y7SSemHqf3JDxYQBxBzrO2zTpANLZkYkVt58ORNwwzruDFcxayRjXFaLf7bNC MbH6Wxs81y5WvAi8BSC2WSWQ9ERIU7HhisNyE7Ln7+wcTLzSGengKC8/GH1RwlEL Fi41pVAh9KioXZRzZRiMgVH/GzNdXQ+CP1J+zghfXxifjn2XYUDZTFHaIEqiOnbF 1HueBMlM9UkZ/xYeBrCzC0iQiG70pUM= -----END CERTIFICATE-----Generated at Sat Aug 9 23:20:49 2025 by rpki-client