$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft File: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft (raw, json) Hash identifier: NyRHNAyOenIOcHEhjQnOzsmbHUwkSsfTvPnxB3RaNh4= Subject key identifier: 24:23:C3:D3:29:9C:C9:C1:26:A0:88:EE:15:77:FC:99:FB:B2:C3:2D Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 Certificate issuer: /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Certificate serial: 0395 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft Manifest number: 0391 Signing time: Fri 25 Jul 2025 01:13:15 +0000 Manifest this update: Fri 25 Jul 2025 01:13:15 +0000 Manifest next update: Fri 01 Aug 2025 01:13:15 +0000 Files and hashes: 1: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl (hash: IaC7iQ77l9o81CgN2RHp+EL6EBga8tB02enzInGWjaM=) 2: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (hash: +7SXGk64WdhbzbBHPQcKc3z8KwO03i6JIK3eFusKvxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 01:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE1C, serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Validity Not Before: Jul 25 01:13:15 2025 GMT Not After : Aug 1 01:13:15 2025 GMT Subject: CN=6882da2b-8c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:5b:80:e7:00:1b:04:a4:47:14:2c:9c:d5: 9a:e4:19:d0:83:73:ff:9a:7f:79:02:3d:c9:00:c0: 02:30:c9:d3:44:f3:5e:4f:36:48:1f:17:d1:2c:20: 4c:51:37:e7:9d:48:d9:c8:32:8f:d1:eb:ab:b4:d1: 1e:17:94:68:55:d9:92:1d:99:99:f0:c3:97:f1:59: d3:25:b0:63:74:df:f6:f9:ad:0a:0c:90:94:f4:9b: b7:18:9a:75:cb:91:9e:85:e3:32:3b:ae:14:0a:b7: 24:a8:0d:7d:20:41:0c:ab:13:75:a7:33:4e:ab:79: c8:2a:8b:78:c2:65:7f:74:7a:10:ad:7f:60:d2:f9: 9b:9e:8c:a8:a7:4b:ee:e3:8d:95:d1:43:be:97:88: db:92:65:74:8c:06:80:a8:b9:c2:90:c2:2f:81:41: af:61:13:1f:9a:cc:50:06:e0:ab:63:16:ab:0f:93: 94:7c:c2:3b:30:ce:cf:b3:e6:fc:0a:78:e8:6b:f0: 0e:99:2d:dc:37:c4:71:f7:b0:4a:ef:ab:1b:f4:78: 81:69:16:7e:d7:bf:29:3f:76:b2:90:25:9f:50:bb: e6:1c:57:51:39:84:05:01:66:b3:b2:43:f9:de:5f: c2:54:1f:23:77:6b:fc:12:90:fb:7a:b8:8e:66:a2: d4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:23:C3:D3:29:9C:C9:C1:26:A0:88:EE:15:77:FC:99:FB:B2:C3:2D X509v3 Authority Key Identifier: keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ba:5f:57:6e:fb:b3:8d:9b:f6:ef:88:eb:2c:8a:1e:95:2d: 3a:7a:c1:2c:34:49:ce:0a:3a:6e:ef:dd:6e:bb:30:d0:3f:45: a1:f1:ee:a2:88:19:7f:32:84:30:65:c5:bd:4f:a0:14:45:8b: ed:38:09:42:03:ab:84:4b:7e:78:09:3b:eb:1b:ff:9b:f1:f9: 49:30:ef:4d:a9:b7:09:e5:18:d8:c2:2c:b5:3e:4f:7a:fe:f5: 83:69:08:96:23:a1:7f:74:1b:16:28:36:d2:c3:f9:3c:49:22: c6:c9:d6:39:c2:1a:7b:2e:49:f7:92:cd:77:06:fe:7f:14:9a: 11:bb:9a:4a:2e:22:4f:dc:a1:ac:81:b0:a7:a0:29:37:d2:a7: a5:1e:dd:7d:92:46:06:8d:e7:f5:16:37:c0:af:d6:03:a0:a8: 94:12:bd:40:dd:4a:ce:82:13:b8:45:1d:50:b4:92:79:56:cb: 85:fa:17:40:9d:e0:a4:50:0a:67:fc:6c:c5:a1:27:b7:27:80: c9:d1:19:b0:5a:86:2d:e0:7e:82:6a:0c:5b:35:50:d2:1b:69: b2:36:43:36:d6:4b:c2:b9:00:2e:12:b0:c9:7f:01:09:c5:2f: 58:81:d7:02:5c:c2:76:98:07:b8:b2:f4:18:92:bb:87:61:95: 46:04:0e:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMUMxMTAvBgNVBAUTKEUyRTA0M0E5MzJFQ0UwNDM5RTJBOEVGMURDNDA2NEQz MjE0QzI3RTYwHhcNMjUwNzI1MDExMzE1WhcNMjUwODAxMDExMzE1WjAYMRYwFAYD VQQDEw02ODgyZGEyYi04YzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywZbgOcAGwSkRxQsnNWa5BnQg3P/mn95Aj3JAMACMMnTRPNeTzZIHxfRLCBM UTfnnUjZyDKP0eurtNEeF5RoVdmSHZmZ8MOX8VnTJbBjdN/2+a0KDJCU9Ju3GJp1 y5GeheMyO64UCrckqA19IEEMqxN1pzNOq3nIKot4wmV/dHoQrX9g0vmbnoyop0vu 442V0UO+l4jbkmV0jAaAqLnCkMIvgUGvYRMfmsxQBuCrYxarD5OUfMI7MM7Ps+b8 Cnjoa/AOmS3cN8Rx97BK76sb9HiBaRZ+178pP3aykCWfULvmHFdROYQFAWazskP5 3l/CVB8jd2v8EpD7eriOZqLUdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQjw9Mp nMnBJqCI7hV3/Jn7ssMtMB8GA1UdIwQYMBaAFOLgQ6ky7OBDniqO8dxAZNMhTCfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxQy9GMDc0NzNBRUFB NjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRFT2VLbzd4M0VCazB5Rk1K LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1QkRxVExzNEVPZUtvN3gzRUJrMHlGTUotWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUxQy9GMDc0NzNBRUFBNjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRF T2VLbzd4M0VCazB5Rk1KLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyul9XbvuzjZv274jrLIoelS06esEsNEnOCjpu791uuzDQP0Wh8e6i iBl/MoQwZcW9T6AURYvtOAlCA6uES354CTvrG/+b8flJMO9NqbcJ5RjYwiy1Pk96 /vWDaQiWI6F/dBsWKDbSw/k8SSLGydY5whp7Lkn3ks13Bv5/FJoRu5pKLiJP3KGs gbCnoCk30qelHt19kkYGjef1FjfAr9YDoKiUEr1A3UrOghO4RR1QtJJ5VsuF+hdA neCkUApn/GzFoSe3J4DJ0RmwWoYt4H6CagxbNVDSG2myNkM21kvCuQAuErDJfwEJ xS9YgdcCXMJ2mAe4svQYkruHYZVGBA5E -----END CERTIFICATE-----Generated at Sat Jul 26 01:59:05 2025 by rpki-client