$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: 2Xsk9NecP8JL0xvP9slTzbbytWESUZsqGUNVWg93AUA= Subject key identifier: 34:D5:98:64:11:83:24:99:86:2C:FD:E9:80:A1:D9:DD:C7:D1:4C:A2 Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 07BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 07B1 Signing time: Mon 04 Aug 2025 21:37:19 +0000 Manifest this update: Mon 04 Aug 2025 21:37:18 +0000 Manifest next update: Mon 11 Aug 2025 21:37:18 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: E9IONHdmcdHzRnZv99lfkwDhxfSNrMV4MN2TJWwBCX0=) 2: 009FA5F0397C11EF9EC42850C4F9AE02.roa (hash: E4kJ9iOaWgd6kt6tetVvQMWfFOobpWfFfGNUTYY1QpA=) 3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: ULfIGDxLDtcTmx758s/wyZezobSONv5OLR5TRBpsLtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1981 (0x7bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Aug 4 21:37:18 2025 GMT Not After : Aug 11 21:37:18 2025 GMT Subject: CN=6891280f-df96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:f6:3c:6b:62:54:c5:49:90:01:0d:41:75: 1d:f3:49:3a:30:e2:00:03:7c:2a:00:6f:76:1c:66: ac:83:a2:73:41:96:c4:df:2a:33:dc:20:d2:3c:4d: 3b:37:55:85:25:5f:24:e9:e2:60:6f:d5:98:3e:a2: 8c:13:d9:0c:b6:cc:dc:b5:d6:f6:05:4e:d2:2f:b6: 84:62:5c:6a:e8:10:20:26:b5:9b:77:88:3e:80:2e: b8:70:09:68:5f:dc:d3:2e:ac:c9:63:a4:d3:f5:45: 28:bf:8d:75:3e:0f:e9:94:8f:93:1c:13:be:cb:55: 23:98:a0:d6:ef:d9:ec:cb:18:ee:17:81:a3:aa:e1: aa:60:6f:91:79:c7:36:56:66:32:d3:32:3c:92:70: 2d:41:b9:52:1a:a3:a7:79:3a:c5:e3:60:6c:3e:41: ed:2e:37:be:71:f7:bc:f6:57:0a:d3:49:5f:2d:d1: 65:c1:49:26:ea:b3:4f:48:12:a5:b9:36:14:18:cd: 53:ef:ae:ae:41:66:89:05:52:59:1e:90:79:d8:c2: d2:04:e8:8d:63:93:98:6b:90:5e:b6:f0:7c:60:e2: 8b:96:80:cc:8e:bb:b5:1c:17:2a:e7:76:64:32:8b: 19:08:20:8a:96:d5:aa:12:82:69:f9:71:1f:dc:59: 38:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D5:98:64:11:83:24:99:86:2C:FD:E9:80:A1:D9:DD:C7:D1:4C:A2 X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:b6:99:3d:59:f8:1a:c9:15:09:d8:ae:c0:de:1d:05:a5:40: fb:bd:17:f1:69:e2:bd:d0:a2:f4:d0:db:2f:38:73:4e:44:23: 61:2b:ba:6c:dd:0d:b0:b5:31:ae:23:9d:cf:0d:0f:e9:ae:5a: c4:fc:4a:d0:82:3e:c6:3f:78:5a:a3:c5:ea:c5:a0:f6:a1:7f: c5:06:86:c5:02:76:3e:8f:7f:13:50:ff:b1:45:44:1a:55:9b: 93:54:05:91:68:7d:e2:c5:69:dc:f1:b8:60:7d:91:b6:11:8f: c5:3e:36:c5:e3:b6:57:14:b7:55:21:6c:21:76:a9:72:31:54: 52:f0:b0:dc:1b:73:48:ff:db:81:ce:9f:a2:14:f7:5d:f9:af: b9:17:ec:81:67:c3:49:35:84:cc:ad:ca:1f:b4:bb:35:0f:90: 50:1f:db:b8:2f:f3:3c:bd:1e:ad:2c:4c:52:eb:c7:1a:6a:97: db:f9:fa:54:0f:16:ac:eb:65:80:a6:bc:72:35:ec:56:a6:09: 31:bc:3c:1e:9a:8d:fd:38:55:ee:a9:19:72:eb:a0:de:4f:53: 87:7c:e9:9c:a0:4f:80:39:c8:e0:c6:68:0b:53:b4:bb:68:fa: 07:b6:44:04:00:09:6e:c5:74:e8:f3:fb:de:05:3f:ca:1b:5d: 8f:18:36:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjUwODA0MjEzNzE4WhcNMjUwODExMjEzNzE4WjAYMRYwFAYD VQQDEw02ODkxMjgwZi1kZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGH2PGtiVMVJkAENQXUd80k6MOIAA3wqAG92HGasg6JzQZbE3yoz3CDSPE07 N1WFJV8k6eJgb9WYPqKME9kMtszctdb2BU7SL7aEYlxq6BAgJrWbd4g+gC64cAlo X9zTLqzJY6TT9UUov411Pg/plI+THBO+y1UjmKDW79nsyxjuF4GjquGqYG+Recc2 VmYy0zI8knAtQblSGqOneTrF42BsPkHtLje+cfe89lcK00lfLdFlwUkm6rNPSBKl uTYUGM1T766uQWaJBVJZHpB52MLSBOiNY5OYa5BetvB8YOKLloDMjru1HBcq53Zk MosZCCCKltWqEoJp+XEf3Fk4KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTVmGQR gySZhiz96YCh2d3H0UyiMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCltpk9WfgayRUJ2K7A3h0FpUD7vRfxaeK90KL00NsvOHNORCNhK7ps 3Q2wtTGuI53PDQ/prlrE/ErQgj7GP3hao8XqxaD2oX/FBobFAnY+j38TUP+xRUQa VZuTVAWRaH3ixWnc8bhgfZG2EY/FPjbF47ZXFLdVIWwhdqlyMVRS8LDcG3NI/9uB zp+iFPdd+a+5F+yBZ8NJNYTMrcoftLs1D5BQH9u4L/M8vR6tLExS68caapfb+fpU Dxas62WAprxyNexWpgkxvDwemo39OFXuqRly66DeT1OHfOmcoE+AOcjgxmgLU7S7 aPoHtkQEAAluxXTo8/veBT/KG12PGDZd -----END CERTIFICATE-----Generated at Wed Aug 6 05:12:12 2025 by rpki-client