$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft File: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft (raw, json) Hash identifier: x9Y3n0MtYtE5av5JRkL8Q4fUTgBUPf4Ov3JUpPW/9AM= Subject key identifier: 27:1F:EA:AA:AB:3C:F7:30:06:33:4B:4E:E5:38:98:8B:35:3E:9E:76 Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 Certificate issuer: /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Certificate serial: 0394 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft Manifest number: 0390 Signing time: Wed 23 Jul 2025 01:16:01 +0000 Manifest this update: Wed 23 Jul 2025 01:16:01 +0000 Manifest next update: Wed 30 Jul 2025 01:16:01 +0000 Files and hashes: 1: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl (hash: Lo/EfObqW1jBA0SpuUq3Q7hqsEnxzzGPkdDufr+pAk8=) 2: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (hash: +7SXGk64WdhbzbBHPQcKc3z8KwO03i6JIK3eFusKvxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 01:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 916 (0x394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE1C, serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Validity Not Before: Jul 23 01:16:01 2025 GMT Not After : Jul 30 01:16:01 2025 GMT Subject: CN=688037d1-ea22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:b7:97:75:a0:03:4c:de:2d:d8:22:de:74: fd:2a:bf:3e:af:50:f1:87:50:4b:95:a3:6c:ef:e7: b1:07:85:2b:d9:85:b1:24:f7:bd:dd:c7:38:df:2e: a0:4c:41:89:9a:9a:d6:f8:e0:f6:72:88:84:de:be: 5b:d3:52:99:65:fc:53:77:96:0b:36:61:49:3f:15: 25:92:75:97:92:15:03:f1:42:6c:af:23:37:7f:79: 57:77:2f:39:52:ad:97:2d:69:b5:a1:4d:07:d5:b2: ba:a9:7b:4a:e4:61:f7:ae:dd:9d:69:a2:d5:f1:40: 95:df:b7:2a:01:af:5d:70:a0:14:a5:23:18:39:03: 2b:a9:81:cd:ae:24:d3:8b:31:e2:49:b1:32:93:2a: 12:c3:2a:c8:bc:37:dc:08:c7:76:a2:e9:66:0e:c3: 18:1e:01:32:3a:25:19:3d:df:35:21:b9:ee:19:88: 92:18:6d:f2:8a:dc:03:2d:81:e7:0b:f6:1b:1f:e8: 1c:a5:3f:60:38:bd:60:b0:44:5c:8b:8b:1c:af:58: 18:dd:ad:fb:00:f5:c8:84:67:89:c1:3a:15:55:9b: 8c:3a:1e:a3:71:93:12:6c:ad:9f:d7:fc:3c:5f:cb: 1b:12:5b:d4:24:d4:51:82:65:50:1c:bb:62:21:42: c5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1F:EA:AA:AB:3C:F7:30:06:33:4B:4E:E5:38:98:8B:35:3E:9E:76 X509v3 Authority Key Identifier: keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:a7:e9:67:35:15:4c:c6:f0:c9:95:cc:77:f0:51:94:a7:9b: 8e:f2:ed:b5:92:b9:97:1c:79:03:5d:24:c6:f6:5b:c1:1c:9d: b5:00:54:bb:44:d8:e6:ff:23:7d:83:5e:33:12:ed:48:05:c5: c8:cb:67:1b:d4:5a:77:d6:57:ae:e4:3b:b9:7e:fe:8b:b3:80: 7b:9f:d4:b4:d1:6f:0d:a0:8d:82:54:d8:7a:02:0a:91:a0:e4: c8:df:37:51:40:98:70:94:b9:a6:eb:50:ca:b8:2a:db:e0:9e: f9:4c:e0:6d:71:9a:b6:3b:3e:87:41:b6:f6:44:7c:fa:76:80: bd:ec:e9:69:5d:34:99:af:50:cc:f9:b8:cb:e3:3e:c0:e8:ad: 5b:5f:51:5a:1d:89:b7:aa:49:84:ee:7b:e3:ff:68:93:be:2c: 32:0c:cb:59:77:89:f2:5b:bb:8a:f2:04:03:51:3f:cb:72:0c: 41:b9:f5:87:00:50:22:e9:0d:5e:6e:e8:e5:f6:fa:7c:a1:4c: a1:eb:f8:7f:6b:84:5a:06:72:58:77:b6:04:ff:f9:ad:f1:76: 06:c3:8e:e5:6a:a4:4e:98:f1:75:c0:f2:a6:b9:d2:0d:47:36: 01:55:db:41:4d:27:63:d0:44:32:34:fa:a3:45:38:83:e9:dc: a4:cf:1a:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMUMxMTAvBgNVBAUTKEUyRTA0M0E5MzJFQ0UwNDM5RTJBOEVGMURDNDA2NEQz MjE0QzI3RTYwHhcNMjUwNzIzMDExNjAxWhcNMjUwNzMwMDExNjAxWjAYMRYwFAYD VQQDEw02ODgwMzdkMS1lYTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8i3l3WgA0zeLdgi3nT9Kr8+r1Dxh1BLlaNs7+exB4Ur2YWxJPe93cc43y6g TEGJmprW+OD2coiE3r5b01KZZfxTd5YLNmFJPxUlknWXkhUD8UJsryM3f3lXdy85 Uq2XLWm1oU0H1bK6qXtK5GH3rt2daaLV8UCV37cqAa9dcKAUpSMYOQMrqYHNriTT izHiSbEykyoSwyrIvDfcCMd2oulmDsMYHgEyOiUZPd81IbnuGYiSGG3yitwDLYHn C/YbH+gcpT9gOL1gsERci4scr1gY3a37APXIhGeJwToVVZuMOh6jcZMSbK2f1/w8 X8sbElvUJNRRgmVQHLtiIULFjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcf6qqr PPcwBjNLTuU4mIs1Pp52MB8GA1UdIwQYMBaAFOLgQ6ky7OBDniqO8dxAZNMhTCfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxQy9GMDc0NzNBRUFB NjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRFT2VLbzd4M0VCazB5Rk1K LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1QkRxVExzNEVPZUtvN3gzRUJrMHlGTUotWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUxQy9GMDc0NzNBRUFBNjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRF T2VLbzd4M0VCazB5Rk1KLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpp+lnNRVMxvDJlcx38FGUp5uO8u21krmXHHkDXSTG9lvBHJ21AFS7 RNjm/yN9g14zEu1IBcXIy2cb1Fp31leu5Du5fv6Ls4B7n9S00W8NoI2CVNh6AgqR oOTI3zdRQJhwlLmm61DKuCrb4J75TOBtcZq2Oz6HQbb2RHz6doC97OlpXTSZr1DM +bjL4z7A6K1bX1FaHYm3qkmE7nvj/2iTviwyDMtZd4nyW7uK8gQDUT/LcgxBufWH AFAi6Q1ebujl9vp8oUyh6/h/a4RaBnJYd7YE//mt8XYGw47laqROmPF1wPKmudIN RzYBVdtBTSdj0EQyNPqjRTiD6dykzxqB -----END CERTIFICATE-----Generated at Thu Jul 24 05:01:02 2025 by rpki-client