$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft File: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json) Hash identifier: Fis6RyExRd7Rj03tYwxTAUgQbamX8NXq3J9r0cpe+p8= Subject key identifier: 15:BC:AA:99:CF:48:5F:15:52:C0:68:20:B3:4B:8C:86:FC:63:5B:24 Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft Manifest number: 1C Signing time: Sat 19 Jul 2025 08:10:57 +0000 Manifest this update: Sat 19 Jul 2025 08:10:57 +0000 Manifest next update: Sat 26 Jul 2025 08:10:57 +0000 Files and hashes: 1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: pzd6i0gtNfVX42dEZuZtp0nlAJoCJbSdI4wERQy+zpI=) 2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: EdyHrGdK241FduLFJE474YipzEeOWQ4qQLPgbqAJOd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Validity Not Before: Jul 19 08:10:57 2025 GMT Not After : Jul 26 08:10:57 2025 GMT Subject: CN=687b5311-224d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b4:44:50:ab:3d:4b:34:f3:9a:45:1a:16:0c: f3:81:1a:68:73:c5:60:90:c5:ae:ec:5d:03:b5:3d: b5:fe:71:23:ad:0a:4b:dc:3c:d4:41:15:2d:a3:9d: 96:21:c7:55:13:cf:79:dd:20:98:2b:a5:32:13:98: 5e:10:98:f8:0c:58:f7:b7:d7:ff:f6:45:6a:7f:fb: 1a:d1:02:2f:63:c6:a1:d5:d4:04:b0:06:29:85:d0: c2:e4:17:76:1c:de:46:a3:6d:c1:0f:bf:7b:e8:c0: b1:01:00:a2:d4:a7:b4:aa:63:77:ed:54:d9:93:f4: 61:b7:25:ae:c6:b6:c9:7e:38:e3:17:6c:17:f7:5e: d0:01:f3:c1:5a:4e:6c:fe:e6:89:d2:6c:8e:8e:47: 96:8d:53:49:f7:51:4b:d0:de:58:fb:e2:c3:8d:2a: f8:16:90:ee:69:b4:e5:f4:65:a6:92:b6:9a:96:86: 76:60:34:7a:67:40:09:ec:52:28:ed:73:e6:78:c9: 70:fa:7c:a7:ae:0d:31:17:ff:21:07:7a:27:a7:eb: 69:3d:1c:03:82:7f:00:cd:99:bc:7d:18:74:42:67: 89:68:9a:81:45:5c:57:77:32:01:e8:f8:f7:b9:84: 4f:a8:2f:7b:56:b1:06:51:ff:55:7b:4c:0a:cf:69: 07:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BC:AA:99:CF:48:5F:15:52:C0:68:20:B3:4B:8C:86:FC:63:5B:24 X509v3 Authority Key Identifier: keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:12:c1:dd:90:b2:8d:c5:ab:e2:2a:51:db:fa:4b:3b:26:f8: 39:f2:dc:bf:ad:08:39:c1:8c:5f:7c:bd:be:5f:a0:48:33:d1: a3:9b:3e:0b:74:ab:51:38:ef:95:56:97:a0:d3:44:5e:ad:a9: e5:4b:c7:ee:71:a1:68:47:ae:9f:d0:b8:5a:aa:4d:a5:2a:d0: 91:eb:4a:2f:9e:a2:5e:a4:e2:17:5b:fd:c7:6b:09:f4:8c:8d: 10:34:9d:c2:f3:c1:e3:ca:5e:70:17:4a:ef:15:c4:16:0c:b5: e9:72:70:4b:07:8d:21:d1:ce:2b:3a:3b:0a:55:c5:28:8a:d1: b7:e6:79:e0:3a:e5:27:fd:74:45:ab:79:c0:0d:5f:1a:42:7a: fd:03:a1:81:5c:0b:b6:99:a2:98:8f:34:a1:c1:0e:47:a8:ab: e0:f4:65:4d:e7:af:00:0b:4d:b5:e0:32:68:8c:94:2f:ff:bc: e4:85:52:b2:6a:8e:ae:d2:d1:48:b4:d3:1c:48:d7:5d:41:be: 38:2f:36:5a:1e:2b:27:4c:be:12:14:c3:2a:74:05:a1:d6:bb: 67:76:a8:96:33:48:ca:ae:5a:18:9b:ed:cd:a2:20:af:a8:bd: 0b:85:2b:e5:67:f7:d7:ca:d5:e1:ff:16:56:a2:f4:d4:83:53: 6d:69:e1:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkE0RjExMC8GA1UEBRMoRTAzOThENTRBQ0Q5REIzM0VENEZDQUE4RDIyODA1RDQ1 RTgwQ0JCNjAeFw0yNTA3MTkwODEwNTdaFw0yNTA3MjYwODEwNTdaMBgxFjAUBgNV BAMTDTY4N2I1MzExLTIyNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLtERQqz1LNPOaRRoWDPOBGmhzxWCQxa7sXQO1PbX+cSOtCkvcPNRBFS2jnZYh x1UTz3ndIJgrpTITmF4QmPgMWPe31//2RWp/+xrRAi9jxqHV1ASwBimF0MLkF3Yc 3kajbcEPv3vowLEBAKLUp7SqY3ftVNmT9GG3Ja7Gtsl+OOMXbBf3XtAB88FaTmz+ 5onSbI6OR5aNU0n3UUvQ3lj74sONKvgWkO5ptOX0ZaaStpqWhnZgNHpnQAnsUijt c+Z4yXD6fKeuDTEX/yEHeien62k9HAOCfwDNmbx9GHRCZ4lomoFFXFd3MgHo+Pe5 hE+oL3tWsQZR/1V7TArPaQcBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFbyqmc9I XxVSwGggs0uMhvxjWyQwHwYDVR0jBBgwFoAU4DmNVKzZ2zPtT8qo0igF1F6Ay7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTRGLzU4N0YzNURBM0I3 NzExRjA5N0E4QkIyNEM0RjlBRTAyLzREbU5WS3paMnpQdFQ4cW8waWdGMUY2QXk3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNERtTlZLeloyelB0VDhxbzBpZ0YxRjZBeTdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTRGLzU4N0YzNURBM0I3NzExRjA5N0E4QkIyNEM0RjlBRTAyLzREbU5WS3paMnpQ dFQ4cW8waWdGMUY2QXk3WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKYSwd2Qso3Fq+IqUdv6Szsm+Dny3L+tCDnBjF98vb5foEgz0aObPgt0 q1E475VWl6DTRF6tqeVLx+5xoWhHrp/QuFqqTaUq0JHrSi+eol6k4hdb/cdrCfSM jRA0ncLzwePKXnAXSu8VxBYMtelycEsHjSHRzis6OwpVxSiK0bfmeeA65Sf9dEWr ecANXxpCev0DoYFcC7aZopiPNKHBDkeoq+D0ZU3nrwALTbXgMmiMlC//vOSFUrJq jq7S0Ui00xxI111BvjgvNloeKydMvhIUwyp0BaHWu2d2qJYzSMquWhib7c2iIK+o vQuFK+Vn99fK1eH/Flai9NSDU21p4Qs= -----END CERTIFICATE-----Generated at Mon Jul 21 06:00:25 2025 by rpki-client