$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft File: n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json) Hash identifier: Yo5PbCzJbY3Pq4+CRS6XvZOtJkbPW5t4+iPeaMRfhqc= Subject key identifier: B4:17:A3:BA:F5:A4:09:C2:EE:D2:1A:4B:38:0E:70:23:2B:30:8E:3A Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29 Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft Manifest number: 52 Signing time: Tue 05 Aug 2025 07:52:39 +0000 Manifest this update: Tue 05 Aug 2025 07:52:39 +0000 Manifest next update: Tue 12 Aug 2025 07:52:39 +0000 Files and hashes: 1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: ctGKmUKzQ7bDEvhNvv1n8mbPXPjtiUuSBbfbGF4u33g=) 2: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: BUhldgfxait6fPn7ddMr7oElIYN1G4FTjWGIi47OvkE=) 3: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: AXOaVoqZ86dlROkyEdtuYYcAQanKRipkDbyi/sYqa94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29 Validity Not Before: Aug 5 07:52:39 2025 GMT Not After : Aug 12 07:52:39 2025 GMT Subject: CN=6891b847-f9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:86:90:83:f8:c7:1b:39:ef:7c:d3:30:d2:f5: 81:55:67:bc:94:9e:75:d7:c4:35:9c:e4:0e:b8:90: 98:84:c1:cc:91:ba:09:3a:25:5b:32:79:8f:a7:cd: 4c:2d:35:2d:db:e8:ca:47:de:28:5b:b5:af:f0:19: a9:33:55:84:ba:ed:35:8a:3f:7a:1c:6c:81:d4:3a: 26:82:6c:73:79:68:9e:da:8f:24:3f:eb:49:86:59: 41:43:5d:24:5e:d0:ce:f6:c4:4e:c6:62:35:40:01: 07:7a:68:10:3c:30:e6:5b:22:31:65:81:dd:0a:8e: c2:b0:92:46:63:fc:8e:a7:d3:b5:93:56:9b:1a:2e: d2:51:ff:65:b6:67:67:22:f3:29:3c:94:8a:6d:79: 06:e3:56:dd:95:1d:d5:c6:0e:c9:0c:ed:db:5a:3f: 5b:c2:07:26:f8:c2:2b:5f:34:e8:60:42:b5:4e:cc: be:fe:c4:dc:0b:05:c2:92:ec:71:43:6b:5e:fa:af: 29:32:ac:cc:e6:86:50:5a:82:5c:65:9c:dd:32:9a: c2:1e:42:ca:21:f9:2e:fa:7a:38:b2:56:45:87:e9: 54:f0:0a:9c:55:a3:ad:cd:69:54:ee:e7:d6:7e:e4: a7:9a:fc:50:b8:47:d7:8d:9c:9d:b8:b3:34:f3:fb: 1a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:17:A3:BA:F5:A4:09:C2:EE:D2:1A:4B:38:0E:70:23:2B:30:8E:3A X509v3 Authority Key Identifier: keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:de:79:de:ca:ca:a1:5a:37:4a:37:f2:ec:f7:42:1d:dd:96: bc:e7:37:e3:35:de:82:5e:71:55:7f:c9:d7:d6:3a:f8:a9:c9: cf:de:74:e8:1a:db:09:fd:59:a6:e8:e7:e5:df:b0:84:a5:a5: e4:9f:46:e7:ca:16:4f:b1:bb:c4:fe:5a:90:bd:e5:4f:f8:88: b2:a7:98:ef:18:d3:59:ae:40:23:fd:10:69:a3:aa:49:31:1c: 1d:61:cc:b4:f3:9c:58:c4:6b:70:94:21:45:80:ce:b4:8a:77: 58:dd:57:09:72:06:05:5c:35:9a:97:c6:30:75:06:54:83:5f: c9:ed:9d:62:0c:13:2c:7a:05:46:9a:67:e2:aa:a3:ca:d5:a9: 52:e2:55:37:b7:92:b0:df:b3:eb:55:de:88:61:bf:57:89:73: 0f:7e:90:2e:02:84:81:92:1f:77:ce:cf:8c:9f:96:fd:ff:d3: 3f:fa:48:23:52:47:51:bc:39:f3:51:47:55:f5:db:23:f9:18: 12:c4:58:50:b6:4b:2c:52:18:9f:91:b2:c2:f9:b3:8c:17:a7: a0:02:f5:65:e1:58:98:39:47:1f:e8:06:69:8f:77:4f:1d:ca: f8:a4:17:b3:2e:ce:66:8e:07:62:7d:3e:a7:9f:7d:f0:5c:7c: 38:d7:e4:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDNGNjExMC8GA1UEBRMoOUY4OUE2MDRGNDVDRUI2RjY4MDRGQjUzNEVBREMyNDE2 NkJEMEYyOTAeFw0yNTA4MDUwNzUyMzlaFw0yNTA4MTIwNzUyMzlaMBgxFjAUBgNV BAMTDTY4OTFiODQ3LWY5YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDphpCD+McbOe980zDS9YFVZ7yUnnXXxDWc5A64kJiEwcyRugk6JVsyeY+nzUwt NS3b6MpH3ihbta/wGakzVYS67TWKP3ocbIHUOiaCbHN5aJ7ajyQ/60mGWUFDXSRe 0M72xE7GYjVAAQd6aBA8MOZbIjFlgd0KjsKwkkZj/I6n07WTVpsaLtJR/2W2Z2ci 8yk8lIpteQbjVt2VHdXGDskM7dtaP1vCByb4witfNOhgQrVOzL7+xNwLBcKS7HFD a176rykyrMzmhlBaglxlnN0ymsIeQsoh+S76ejiyVkWH6VTwCpxVo63NaVTu59Z+ 5Kea/FC4R9eNnJ24szTz+xp5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtBejuvWk CcLu0hpLOA5wIyswjjowHwYDVR0jBBgwFoAUn4mmBPRc629oBPtTTq3CQWa9Dykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEM0Y2LzM3MTY4MUZBRjhE MzExRUY5NzU4RkIwRkM0RjlBRTAyL240bW1CUFJjNjI5b0JQdFRUcTNDUVdhOUR5 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbjRtbUJQUmM2MjlvQlB0VFRxM0NRV2E5RHlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE M0Y2LzM3MTY4MUZBRjhEMzExRUY5NzU4RkIwRkM0RjlBRTAyL240bW1CUFJjNjI5 b0JQdFRUcTNDUVdhOUR5ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABXeed7KyqFaN0o38uz3Qh3dlrznN+M13oJecVV/ydfWOvipyc/edOga 2wn9Wabo5+XfsISlpeSfRufKFk+xu8T+WpC95U/4iLKnmO8Y01muQCP9EGmjqkkx HB1hzLTznFjEa3CUIUWAzrSKd1jdVwlyBgVcNZqXxjB1BlSDX8ntnWIMEyx6BUaa Z+Kqo8rVqVLiVTe3krDfs+tV3ohhv1eJcw9+kC4ChIGSH3fOz4yflv3/0z/6SCNS R1G8OfNRR1X12yP5GBLEWFC2SyxSGJ+RssL5s4wXp6AC9WXhWJg5Rx/oBmmPd08d yvikF7MuzmaOB2J9PqefffBcfDjX5DI= -----END CERTIFICATE-----Generated at Thu Aug 7 01:56:57 2025 by rpki-client