$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json) Hash identifier: LCRRBH/DKhorVt38iIlzjPmHsPeo0JKnBmQOjSgm/4c= Subject key identifier: 6E:A7:49:93:5F:54:0D:89:6D:54:39:9A:0C:EC:44:74:B3:FC:4D:C6 Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Certificate serial: 09EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft Manifest number: 09DE Signing time: Tue 22 Jul 2025 20:09:59 +0000 Manifest this update: Tue 22 Jul 2025 20:09:59 +0000 Manifest next update: Tue 29 Jul 2025 20:09:59 +0000 Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: iaKprIBHdbkYVDGVujyn+vum2Z3lIsTgEl/ytGQV2PI=) 2: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: PugK/HlSlwCNhEasOZjO6B/uomD7VotHJLA2wV6jZrM=) 3: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: hvomTHOFg3fOu5UVv4a+8zSBR7jdgf3xO/+H6ZJICO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 20:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2539 (0x9eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Validity Not Before: Jul 22 20:09:59 2025 GMT Not After : Jul 29 20:09:59 2025 GMT Subject: CN=687ff017-85c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f2:52:6c:a9:bf:07:cd:d0:49:71:b4:84:64: 41:3a:50:cb:f7:cc:71:5f:75:21:3d:fa:52:0d:92: 7d:05:c7:a8:cb:19:18:1f:a5:9e:13:53:4d:8a:aa: 25:14:14:fe:d0:43:6c:9b:4a:9b:31:bd:17:92:3c: 2d:b3:82:c7:e1:7f:45:a1:a5:36:78:12:0a:35:f8: 78:e7:8b:88:50:d6:21:cd:fd:32:6b:c2:0d:de:f2: c9:cd:5e:31:73:d1:0a:64:c6:41:89:7b:e1:55:f8: a0:14:58:01:19:8b:f4:5d:a9:6d:16:b3:cd:11:3b: 50:fc:95:21:e1:71:53:35:ef:01:c3:a8:82:54:86: 59:2e:5b:e3:76:44:8c:70:24:e4:10:5c:68:85:29: 9f:b7:0f:1c:3d:59:e1:68:14:85:31:a0:10:bc:21: cc:30:ff:af:79:8d:77:be:7e:e6:70:55:2b:73:4c: 20:c7:6f:03:b1:bf:cc:ec:31:92:5c:6a:05:8a:b5: 95:45:02:b2:c2:98:d4:f2:79:83:f1:57:ec:36:7c: 41:95:2e:9d:07:e6:cc:9e:7d:1e:55:3b:0c:b6:e8: 23:e6:d3:d3:d4:10:fb:be:c3:26:60:93:8b:72:49: c9:e1:9c:aa:dd:2f:56:2f:78:01:c9:c5:bf:76:65: d5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A7:49:93:5F:54:0D:89:6D:54:39:9A:0C:EC:44:74:B3:FC:4D:C6 X509v3 Authority Key Identifier: keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b3:97:37:c2:c3:33:69:ab:cc:85:dd:59:ed:c6:a5:15:3b: 4d:2b:4e:b9:70:1a:ea:84:a9:4e:3f:de:ab:9c:97:d2:96:43: a8:f0:16:7b:81:9f:9e:00:09:ab:86:c2:92:15:5a:16:c7:cc: 0e:b4:bd:1f:d8:b4:37:ca:87:38:f7:27:8a:0c:2c:f9:ef:9c: ed:de:0a:93:86:44:8c:25:45:f4:21:f7:fe:81:7a:89:04:9e: 28:5f:50:83:36:4c:9c:3a:2c:3e:fe:72:50:bc:4b:25:f2:65: f7:d5:d6:9e:b2:a4:7f:03:e0:ab:48:52:25:f4:48:ff:d2:5b: bf:7d:e9:64:01:53:ff:0b:e8:5e:e0:be:c5:55:2f:58:94:a6: 8e:69:d7:8b:da:8f:da:00:a8:3e:e1:be:7c:17:4e:46:0d:e9: e4:e2:c8:f8:4c:3a:06:ca:21:cb:8c:b6:a4:f6:0e:96:c1:de: 9a:17:c5:32:ab:2a:4a:46:33:6e:db:4e:0c:c8:73:96:34:5b: f4:f8:dc:4d:05:81:d3:ef:1f:85:5f:ae:b0:66:e1:1c:39:60: 3e:2a:cd:c4:b6:25:0d:cf:52:64:68:18:7f:60:46:8e:55:a8: 40:55:0b:94:b0:ff:36:ec:ec:79:6a:58:fe:24:42:28:9c:a2: 42:8a:bd:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBBNkMxMTAvBgNVBAUTKEE3ODdBNjNFNDlFRThFQzZGOTc1MTE2MDdGMUI3QzVC MERGMTE2NEUwHhcNMjUwNzIyMjAwOTU5WhcNMjUwNzI5MjAwOTU5WjAYMRYwFAYD VQQDEw02ODdmZjAxNy04NWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPJSbKm/B83QSXG0hGRBOlDL98xxX3UhPfpSDZJ9BceoyxkYH6WeE1NNiqol FBT+0ENsm0qbMb0Xkjwts4LH4X9FoaU2eBIKNfh454uIUNYhzf0ya8IN3vLJzV4x c9EKZMZBiXvhVfigFFgBGYv0XaltFrPNETtQ/JUh4XFTNe8Bw6iCVIZZLlvjdkSM cCTkEFxohSmftw8cPVnhaBSFMaAQvCHMMP+veY13vn7mcFUrc0wgx28Dsb/M7DGS XGoFirWVRQKywpjU8nmD8VfsNnxBlS6dB+bMnn0eVTsMtugj5tPT1BD7vsMmYJOL cknJ4Zyq3S9WL3gBycW/dmXV+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6nSZNf VA2JbVQ5mgzsRHSz/E3GMB8GA1UdIwQYMBaAFKeHpj5J7o7G+XURYH8bfFsN8RZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEE2Qy9COTE2RjM4ODgy QzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpzYjVkUkZnZnh0OFd3M3hG azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0ZW1Qa251anNiNWRSRmdmeHQ4V3czeEZrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEE2Qy9COTE2RjM4ODgyQzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpz YjVkUkZnZnh0OFd3M3hGazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfs5c3wsMzaavMhd1Z7calFTtNK065cBrqhKlOP96rnJfSlkOo8BZ7 gZ+eAAmrhsKSFVoWx8wOtL0f2LQ3yoc49yeKDCz575zt3gqThkSMJUX0Iff+gXqJ BJ4oX1CDNkycOiw+/nJQvEsl8mX31daesqR/A+CrSFIl9Ej/0lu/felkAVP/C+he 4L7FVS9YlKaOadeL2o/aAKg+4b58F05GDenk4sj4TDoGyiHLjLak9g6Wwd6aF8Uy qypKRjNu204MyHOWNFv0+NxNBYHT7x+FX66wZuEcOWA+Ks3EtiUNz1JkaBh/YEaO VahAVQuUsP827Ox5alj+JEIonKJCir1v -----END CERTIFICATE-----Generated at Thu Jul 24 17:25:07 2025 by rpki-client