$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json) Hash identifier: PSs6HJh4li023ESqNAKqNWd0O35+kCkTADUTp1q2BLg= Subject key identifier: 29:89:0E:28:30:2F:AC:FF:DD:F2:FC:64:67:53:13:26:BA:67:3D:93 Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Certificate serial: 243E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft Manifest number: 46C5 Signing time: Sun 20 Jul 2025 15:48:53 +0000 Manifest this update: Sun 20 Jul 2025 15:48:53 +0000 Manifest next update: Sun 27 Jul 2025 15:48:53 +0000 Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: NQ4zS3MVOM4svOSxjokR+/WgdcGt1/b5MNzgn756JxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9278 (0x243e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Validity Not Before: Jul 20 15:48:53 2025 GMT Not After : Jul 27 15:48:53 2025 GMT Subject: CN=687d0fe5-4d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:80:f3:fb:c0:9f:31:9d:ff:01:24:11:5a:ab: 3d:12:54:d1:74:32:1b:75:17:3c:ca:cd:63:e6:0a: 15:80:1c:2d:83:07:15:57:27:bc:79:2a:4c:65:70: 8b:78:60:73:61:8f:43:84:f8:18:7e:c9:f9:5c:50: d1:c9:57:0c:09:99:36:34:b9:73:29:8e:b7:2f:4f: 13:b1:19:a1:76:98:14:11:93:c9:f4:73:2a:60:99: 1d:a2:63:fe:57:64:df:7a:3e:55:60:8e:e8:22:f3: f4:3b:7a:72:af:31:d9:5c:03:54:8c:fe:5d:30:47: 15:0d:62:da:d9:cd:6e:83:97:2a:59:5b:eb:72:f1: 4f:ee:dc:dc:a2:a2:33:62:7f:c7:ee:d7:2a:ed:ea: be:03:97:a4:2e:ed:5a:5c:87:20:21:c1:7f:49:bd: e5:19:1c:dd:ff:df:74:c1:94:84:e8:2d:64:52:7f: 72:bf:08:31:80:65:40:2b:0c:97:e9:dc:80:d7:35: b1:c2:7d:3c:6e:a8:c2:0c:d4:a5:69:b1:bd:13:f4: 7b:c7:7b:d8:84:f2:4d:fc:87:64:b0:44:93:a4:79: 22:01:eb:66:a0:5b:e8:b5:d8:fa:50:70:b3:d3:2e: 75:d8:28:b3:0b:b4:bc:f9:1e:8a:cc:71:c5:a0:d9: ac:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:89:0E:28:30:2F:AC:FF:DD:F2:FC:64:67:53:13:26:BA:67:3D:93 X509v3 Authority Key Identifier: keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d3:d6:b8:c3:fd:02:ba:a5:8b:de:d6:57:d5:b9:38:b6:09: 61:30:87:52:93:39:0a:6e:de:8a:a1:d0:d0:7b:01:a8:52:e8: 19:22:24:de:ad:b6:ec:5c:7b:85:9a:31:33:ab:bd:cc:b9:06: 07:94:36:ce:af:16:4d:26:c2:06:18:15:af:b8:45:31:cd:51: e9:b9:57:b1:3c:1f:1f:7a:b6:5e:7c:b6:bd:97:8c:7c:ea:5a: d5:44:e2:78:78:35:89:29:80:15:24:75:b6:e1:ab:5b:9d:f6: a4:f3:a4:cc:12:6e:ae:98:7c:73:0b:c1:ad:51:8a:6e:d2:38: a9:3c:5e:5f:c2:f8:5a:b0:6c:a5:b2:cf:8c:6c:6f:c3:ec:db: 98:db:6c:48:be:56:c1:10:bc:ad:78:f1:60:66:65:83:ec:70: c1:da:30:1d:01:43:a2:fd:9c:ba:3b:93:cb:f0:90:10:18:c9: c4:74:12:d2:c0:be:47:10:73:86:8f:04:82:1d:06:74:7e:1a: 23:36:1e:fa:1d:d9:5f:9b:e3:b3:35:41:a8:a5:5b:4b:98:36: f8:2a:f0:bd:97:bc:96:9d:fc:8f:b6:d7:e8:1a:09:c6:de:90: 5a:98:8e:aa:0c:cb:e3:87:c9:4e:1e:03:6c:4d:7d:1c:4e:89: d0:20:13:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDczOEMyM0FBNENFNzU1NUVFQTJGQzhDMkJFRDhGNDZB NDg4REM5M0QwHhcNMjUwNzIwMTU0ODUzWhcNMjUwNzI3MTU0ODUzWjAYMRYwFAYD VQQDEw02ODdkMGZlNS00ZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8IDz+8CfMZ3/ASQRWqs9ElTRdDIbdRc8ys1j5goVgBwtgwcVVye8eSpMZXCL eGBzYY9DhPgYfsn5XFDRyVcMCZk2NLlzKY63L08TsRmhdpgUEZPJ9HMqYJkdomP+ V2Tfej5VYI7oIvP0O3pyrzHZXANUjP5dMEcVDWLa2c1ug5cqWVvrcvFP7tzcoqIz Yn/H7tcq7eq+A5ekLu1aXIcgIcF/Sb3lGRzd/990wZSE6C1kUn9yvwgxgGVAKwyX 6dyA1zWxwn08bqjCDNSlabG9E/R7x3vYhPJN/IdksESTpHkiAetmoFvotdj6UHCz 0y512CizC7S8+R6KzHHFoNmsXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmJDigw L6z/3fL8ZGdTEya6Zz2TMB8GA1UdIwQYMBaAFHOMI6pM51Ve6i/Iwr7Y9GpIjck9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZWN3FMOGpDdnRqMGFraU55 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0d2pxa3puVlY3cUw4akN2dGowYWtpTnlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZW N3FMOGpDdnRqMGFraU55VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ09a4w/0CuqWL3tZX1bk4tglhMIdSkzkKbt6KodDQewGoUugZIiTe rbbsXHuFmjEzq73MuQYHlDbOrxZNJsIGGBWvuEUxzVHpuVexPB8ferZefLa9l4x8 6lrVROJ4eDWJKYAVJHW24atbnfak86TMEm6umHxzC8GtUYpu0jipPF5fwvhasGyl ss+MbG/D7NuY22xIvlbBELytePFgZmWD7HDB2jAdAUOi/Zy6O5PL8JAQGMnEdBLS wL5HEHOGjwSCHQZ0fhojNh76Hdlfm+OzNUGopVtLmDb4KvC9l7yWnfyPttfoGgnG 3pBamI6qDMvjh8lOHgNsTX0cTonQIBMn -----END CERTIFICATE-----Generated at Mon Jul 21 05:46:06 2025 by rpki-client