$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft File: a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json) Hash identifier: STjM6k1oDONMlOoQ3bZ2Agvd340XDcjaJCT/dnXwb34= Subject key identifier: 1C:DC:6D:1C:3C:F5:2A:FA:1C:C1:EF:D4:82:87:9E:29:55:36:91:4C Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Certificate serial: 1B70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft Manifest number: 1B63 Signing time: Wed 06 Aug 2025 16:21:47 +0000 Manifest this update: Wed 06 Aug 2025 16:21:46 +0000 Manifest next update: Wed 13 Aug 2025 16:21:46 +0000 Files and hashes: 1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: xxdKCMJgw5l7qq6I2che1pfLyh4j9AcZ7quD/W5RcN0=) 2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: ZmGMH4g7cGfub9A5Ucup2yr3pAIXwRpZ1v4yX9SvAOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 16:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7024 (0x1b70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAD6F, serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Validity Not Before: Aug 6 16:21:46 2025 GMT Not After : Aug 13 16:21:46 2025 GMT Subject: CN=6893811a-395b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:93:82:1a:f4:6a:e1:49:4a:da:0e:66:e5:98: 07:7a:5e:bc:88:d8:81:fb:7f:7e:27:95:f2:fe:15: 6e:4e:d6:c3:f7:95:19:5d:e4:ac:0c:02:99:32:55: cb:92:c3:6e:26:b3:0b:c3:53:60:7c:b7:b9:d7:41: a9:85:08:7f:94:e9:b4:77:22:22:29:b5:c0:b2:98: a9:fd:10:b1:0e:59:4d:54:9c:ad:bb:2b:ed:a2:48: 82:02:72:bd:38:66:c7:f9:a8:f2:1d:bd:40:51:a9: a9:b9:a4:89:ad:f4:2d:59:39:46:e1:68:a1:aa:48: 26:8a:d7:91:48:cf:95:66:20:5e:c0:dd:83:bf:32: 95:59:7c:f4:06:51:dd:4f:ce:2f:da:4c:e7:4e:2a: 1f:ae:86:82:fd:b7:3d:83:26:73:64:e9:ff:cc:92: 86:1a:06:d2:6d:ba:77:b3:1e:b0:71:21:75:c2:3d: 02:17:e5:8f:ca:bb:af:f9:2f:2d:a1:e5:02:be:6b: cb:82:eb:86:be:01:98:31:41:c8:f3:13:47:80:01: 32:79:b4:4d:d3:70:e9:8b:9f:e0:d8:c4:6c:f7:72: e0:32:1d:06:46:48:0d:dd:25:a2:4f:b0:7e:fa:8e: b1:81:cf:63:da:e3:f4:c3:f3:37:ba:50:85:89:e6: 0a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DC:6D:1C:3C:F5:2A:FA:1C:C1:EF:D4:82:87:9E:29:55:36:91:4C X509v3 Authority Key Identifier: keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:33:7a:7a:e1:2c:33:a3:90:1a:a5:72:be:19:ad:99:06:c3: 24:f9:2e:b5:c9:07:59:c1:1b:c3:21:53:c7:c6:ce:50:e1:33: fd:61:8a:c2:86:66:63:9f:8a:18:30:d6:a5:bf:72:71:41:15: 12:5b:58:aa:14:93:2b:f4:fa:fb:65:41:c4:d0:6e:00:7c:76: e4:49:43:91:75:15:10:f6:79:89:bd:9c:2a:4c:8b:55:fb:33: 95:72:88:36:e8:cf:bb:d9:a4:1e:e2:99:d9:07:b3:ea:29:34: 87:25:2d:52:1b:e5:ef:22:5f:50:10:b4:a2:5f:51:bc:de:3a: 8a:94:ef:38:c9:07:82:66:da:2b:bd:20:27:c1:fa:5f:4a:8c: 6f:1f:39:40:3d:c5:6c:ba:9d:0a:61:5c:ce:66:23:b3:e8:69: d2:49:c9:2e:0d:f5:2c:22:79:6f:bc:d9:97:c9:c7:ef:15:1d: 81:8e:31:c7:19:86:a1:55:ba:33:35:b5:e3:3e:fc:83:31:9b: c4:26:24:30:aa:fa:c9:76:df:b3:a6:10:ce:bb:26:a2:c7:84: 28:b9:f6:06:26:99:56:97:33:20:db:90:7d:60:0e:42:8d:b9: 1a:53:8d:6d:c0:79:54:6f:49:c2:56:63:d9:a9:a1:5a:b7:01: 63:cb:36:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFENkYxMTAvBgNVBAUTKDZCODY0MjQxREYwMTJGMjM5MjdBMDFDMEUzODZFMDdB QUI0OUM1MjIwHhcNMjUwODA2MTYyMTQ2WhcNMjUwODEzMTYyMTQ2WjAYMRYwFAYD VQQDEw02ODkzODExYS0zOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZOCGvRq4UlK2g5m5ZgHel68iNiB+39+J5Xy/hVuTtbD95UZXeSsDAKZMlXL ksNuJrMLw1NgfLe510GphQh/lOm0dyIiKbXAspip/RCxDllNVJytuyvtokiCAnK9 OGbH+ajyHb1AUampuaSJrfQtWTlG4WihqkgmiteRSM+VZiBewN2DvzKVWXz0BlHd T84v2kznTiofroaC/bc9gyZzZOn/zJKGGgbSbbp3sx6wcSF1wj0CF+WPyruv+S8t oeUCvmvLguuGvgGYMUHI8xNHgAEyebRN03Dpi5/g2MRs93LgMh0GRkgN3SWiT7B+ +o6xgc9j2uP0w/M3ulCFieYKuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzcbRw8 9Sr6HMHv1IKHnilVNpFMMB8GA1UdIwQYMBaAFGuGQkHfAS8jknoBwOOG4HqrScUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUQ2Ri80NkM5NDA5NDE0 NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5T1NlZ0hBNDRiZ2VxdEp4 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0WkNRZDhCTHlPU2VnSEE0NGJnZXF0SnhTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUQ2Ri80NkM5NDA5NDE0NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5 T1NlZ0hBNDRiZ2VxdEp4U0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoM3p64Swzo5AapXK+Ga2ZBsMk+S61yQdZwRvDIVPHxs5Q4TP9YYrC hmZjn4oYMNalv3JxQRUSW1iqFJMr9Pr7ZUHE0G4AfHbkSUORdRUQ9nmJvZwqTItV +zOVcog26M+72aQe4pnZB7PqKTSHJS1SG+XvIl9QELSiX1G83jqKlO84yQeCZtor vSAnwfpfSoxvHzlAPcVsup0KYVzOZiOz6GnSSckuDfUsInlvvNmXycfvFR2BjjHH GYahVbozNbXjPvyDMZvEJiQwqvrJdt+zphDOuyaix4QoufYGJplWlzMg25B9YA5C jbkaU41twHlUb0nCVmPZqaFatwFjyzad -----END CERTIFICATE-----Generated at Thu Aug 7 04:26:26 2025 by rpki-client