$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft File: F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json) Hash identifier: 6jyBHuB5tECI4kHzrytRNoys2N+xSf1I1yzb3y3vU20= Subject key identifier: 48:10:28:26:04:25:08:37:11:01:BF:F8:D7:41:BC:AD:21:D0:AA:38 Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 Certificate issuer: /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft Manifest number: 20 Signing time: Tue 22 Jul 2025 21:03:28 +0000 Manifest this update: Tue 22 Jul 2025 21:03:27 +0000 Manifest next update: Tue 29 Jul 2025 21:03:27 +0000 Files and hashes: 1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: 5wY0pkYKbGrN+uXnE7/s0cenCpRODegBKzyMB/DE+sk=) 2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: 8eHBf/IW6Kdn5rzP/J/PseLHB5iblvBzJEKUGKo/wC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 21:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Validity Not Before: Jul 22 21:03:27 2025 GMT Not After : Jul 29 21:03:27 2025 GMT Subject: CN=687ffc9f-6130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:79:1d:46:c0:c8:42:02:04:7f:bc:51:5f: 46:92:42:e5:70:d9:70:28:8f:03:8c:b0:02:fa:96: d3:c1:15:ce:90:a8:5c:71:79:6a:ab:38:d1:88:b8: c5:2a:03:aa:cf:5a:53:9f:fe:00:a8:d0:07:e5:07: 17:0d:1c:bc:88:a3:8e:fe:e9:7d:d3:d1:8b:77:14: df:3a:1b:9a:56:06:06:aa:03:07:4f:db:f2:99:34: 36:5c:4b:75:bd:57:01:bb:01:09:91:f5:d5:8c:a9: c3:32:8b:f7:66:f4:b8:0f:12:30:5b:c2:35:a5:9a: e2:06:b3:39:52:90:e0:4f:23:7e:bd:60:b0:69:b9: a0:8d:e3:e2:f5:dc:b6:0d:e7:8f:dd:00:91:8e:33: bf:a5:ad:44:9e:f5:61:1d:36:7c:9d:a4:9b:7c:62: 0f:27:2d:fb:4a:e3:fa:86:6f:c1:2d:17:ce:88:17: ee:47:64:fb:af:11:47:88:07:41:01:e0:ed:b7:36: 52:e7:8e:0c:79:38:9f:19:27:fa:18:6b:e5:76:57: 55:93:d2:22:5b:cb:9b:8e:64:db:14:7c:b8:38:05: 24:89:e2:40:84:9b:3e:33:74:b4:65:7c:f0:ed:a8: 3b:66:32:48:fe:a6:19:be:d4:93:00:3a:c7:bd:fb: 8f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:10:28:26:04:25:08:37:11:01:BF:F8:D7:41:BC:AD:21:D0:AA:38 X509v3 Authority Key Identifier: keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ff:d2:39:31:43:6e:a5:9c:de:f4:90:e0:0b:e6:8f:57:d6: 4d:53:29:53:8a:8b:17:65:b0:0e:bb:b5:12:02:98:cd:e2:eb: d3:22:36:72:d3:f9:33:c7:ba:41:3d:c0:73:3a:da:d5:3e:5a: 03:7c:5a:ad:73:07:f5:a6:12:8b:ab:5b:9e:f8:85:6a:e1:ed: 41:6e:c7:62:f0:8d:9c:e3:4f:9d:10:84:53:99:0e:46:eb:21: de:8e:63:60:c9:53:fd:e5:07:19:08:35:7c:75:47:9a:f2:f3: 91:b2:7b:a6:4f:9d:78:51:86:cf:38:29:2e:8a:b1:15:8d:93: 70:f3:ac:d5:fe:6d:68:4c:a7:20:13:93:ec:16:3a:04:9f:8b: 13:cc:4a:dd:e3:0c:8b:3c:25:e8:ae:8e:e9:e4:29:c1:31:07: 29:ec:4e:ac:c7:09:b0:05:6d:e3:5a:9e:5f:8d:59:f1:01:3b: 34:61:2a:b0:c1:aa:b7:ac:66:14:25:fe:55:a0:7c:f2:51:0e: 93:38:72:19:2f:ff:6b:07:34:8f:6d:4d:94:dc:9f:5c:b4:b6: 66:95:04:7f:08:ed:50:24:23:a9:8b:bb:4e:bb:91:a9:4d:bd: d1:ac:e3:73:c8:13:6f:ac:67:dc:06:c8:97:74:88:5c:67:ba: da:79:60:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDU0MzExMC8GA1UEBRMoMTc4MDA5NkNDOTBBQjZBRUFGMDhENzlBQjE4QzU0QzdC NzdBNTNBMDAeFw0yNTA3MjIyMTAzMjdaFw0yNTA3MjkyMTAzMjdaMBgxFjAUBgNV BAMTDTY4N2ZmYzlmLTYxMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1LHkdRsDIQgIEf7xRX0aSQuVw2XAojwOMsAL6ltPBFc6QqFxxeWqrONGIuMUq A6rPWlOf/gCo0AflBxcNHLyIo47+6X3T0Yt3FN86G5pWBgaqAwdP2/KZNDZcS3W9 VwG7AQmR9dWMqcMyi/dm9LgPEjBbwjWlmuIGszlSkOBPI369YLBpuaCN4+L13LYN 54/dAJGOM7+lrUSe9WEdNnydpJt8Yg8nLftK4/qGb8EtF86IF+5HZPuvEUeIB0EB 4O23NlLnjgx5OJ8ZJ/oYa+V2V1WT0iJby5uOZNsUfLg4BSSJ4kCEmz4zdLRlfPDt qDtmMkj+phm+1JMAOse9+489AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSBAoJgQl CDcRAb/410G8rSHQqjgwHwYDVR0jBBgwFoAUF4AJbMkKtq6vCNeasYxUx7d6U6Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NTQzL0FCNzE5RkNFM0I2 NTExRjA4NzQyREEzOUM0RjlBRTAyL0Y0QUpiTWtLdHE2dkNOZWFzWXhVeDdkNlU2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjRBSmJNa0t0cTZ2Q05lYXNZeFV4N2Q2VTZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 NTQzL0FCNzE5RkNFM0I2NTExRjA4NzQyREEzOUM0RjlBRTAyL0Y0QUpiTWtLdHE2 dkNOZWFzWXhVeDdkNlU2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD3/0jkxQ26lnN70kOAL5o9X1k1TKVOKixdlsA67tRICmM3i69MiNnLT +TPHukE9wHM62tU+WgN8Wq1zB/WmEourW574hWrh7UFux2LwjZzjT50QhFOZDkbr Id6OY2DJU/3lBxkINXx1R5ry85Gye6ZPnXhRhs84KS6KsRWNk3DzrNX+bWhMpyAT k+wWOgSfixPMSt3jDIs8JeiujunkKcExBynsTqzHCbAFbeNanl+NWfEBOzRhKrDB qresZhQl/lWgfPJRDpM4chkv/2sHNI9tTZTcn1y0tmaVBH8I7VAkI6mLu067kalN vdGs43PIE2+sZ9wGyJd0iFxnutp5YBA= -----END CERTIFICATE-----Generated at Wed Jul 23 02:23:45 2025 by rpki-client