$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft File: H4-gq_qNf39-fqANVuoBxwky5gc.mft (raw, json) Hash identifier: YMErxbOtrNGwjYZdJTK/0jYwuujquNGv/L5zJ5Pb4x0= Subject key identifier: A6:19:95:FD:34:04:3C:49:68:6E:8A:83:04:21:FE:F6:3F:AE:F8:4A Authority key identifier: 1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 Certificate issuer: /CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Certificate serial: 0EBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft Manifest number: 1004 Signing time: Fri 18 Jul 2025 17:50:47 +0000 Manifest this update: Fri 18 Jul 2025 17:50:46 +0000 Manifest next update: Fri 25 Jul 2025 17:50:46 +0000 Files and hashes: 1: H4-gq_qNf39-fqANVuoBxwky5gc.crl (hash: +ou3QBvPtIJooSeWX2oxJfAZWL98hJbuTgmWsJqsB68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3771 (0xebb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Validity Not Before: Jul 18 17:50:46 2025 GMT Not After : Jul 25 17:50:46 2025 GMT Subject: CN=687a8977-5a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:61:35:64:2e:04:57:f9:46:fd:a9:c4:4d:a1: 0f:1f:c7:77:be:a8:f9:7c:75:05:fd:fe:09:0e:fb: 21:61:f2:a3:60:55:95:b8:2e:af:d6:fb:b6:59:b8: 22:1c:66:64:ac:b8:f6:10:48:3c:29:8f:ea:d6:f1: 8f:fc:8b:8f:4a:a8:f4:de:6d:13:a4:1b:24:7e:21: 00:a4:25:ae:2d:f0:7e:dc:ae:84:74:9c:22:69:82: c7:f8:87:f1:f5:1e:42:20:22:32:47:7f:33:9b:c6: f3:a6:56:62:74:b7:b4:74:d2:b4:db:f5:38:2f:2d: de:2c:87:9c:c1:54:8a:c3:ac:de:5f:ef:74:78:c5: 78:e7:c1:bb:96:64:bf:94:19:2a:af:dc:46:25:ee: 74:2c:e8:36:8b:99:fb:84:ef:c9:76:8c:8f:c1:e6: 07:50:aa:96:ac:74:96:32:b5:c6:23:db:e9:93:cf: 0a:9f:50:3d:66:d9:5a:be:69:51:21:4c:59:08:90: a9:42:1d:78:ea:dc:8c:a5:5b:31:2c:f5:cb:cb:3d: d1:9d:a3:c9:f2:ab:2f:82:52:83:e1:e3:3a:2f:87: c6:da:24:bc:d0:24:4d:0a:5d:a0:1f:e6:8a:73:49: 0c:31:5c:72:8a:47:0c:95:42:90:e6:7e:5a:6d:d0: 0f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:19:95:FD:34:04:3C:49:68:6E:8A:83:04:21:FE:F6:3F:AE:F8:4A X509v3 Authority Key Identifier: keyid:1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:b5:e0:02:ed:02:74:64:67:e2:d0:50:eb:c6:91:05:7d:f6: 76:62:ac:47:44:e7:99:9b:51:8b:7a:3f:c2:ac:90:3b:2f:9c: f2:d6:3a:5a:84:0a:99:5e:d7:42:29:b8:bb:b2:fb:51:99:43: 21:3e:83:3e:66:50:51:42:28:7d:38:ff:58:ac:72:b3:af:d2: 4a:4c:83:b9:9a:a7:4f:b0:1e:92:d4:3c:02:8a:a7:0a:d9:44: 36:d3:69:83:6e:b2:cc:82:24:ba:79:c5:ed:81:f7:71:88:6c: d5:ad:12:1b:11:c5:d2:09:5c:5e:82:ca:2e:7c:44:2c:12:7c: fa:e5:ff:79:1c:a5:4d:89:53:91:57:44:d2:6c:69:90:fb:12: 83:00:ff:d7:98:a1:14:47:12:13:b0:53:42:ca:ce:9b:40:83: b1:4b:bf:19:4c:a4:7b:77:04:28:1d:8a:90:62:85:7e:8c:23: 7c:8d:99:25:1f:dd:ac:79:8b:bd:9a:be:73:e0:e8:8e:b8:b3: 77:cd:03:92:c7:61:80:b1:38:fd:bb:f6:f3:17:ef:41:11:62: 64:06:11:52:0a:7c:42:9e:33:0a:15:55:29:f7:89:42:34:41: be:af:f8:72:54:bc:94:c0:f3:e6:e5:df:64:5e:aa:c3:fe:c7: 43:20:ec:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKDFGOEZBMEFCRkE4RDdGN0Y3RTdFQTAwRDU2RUEwMUM3 MDkzMkU2MDcwHhcNMjUwNzE4MTc1MDQ2WhcNMjUwNzI1MTc1MDQ2WjAYMRYwFAYD VQQDEw02ODdhODk3Ny01YTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9mE1ZC4EV/lG/anETaEPH8d3vqj5fHUF/f4JDvshYfKjYFWVuC6v1vu2Wbgi HGZkrLj2EEg8KY/q1vGP/IuPSqj03m0TpBskfiEApCWuLfB+3K6EdJwiaYLH+Ifx 9R5CICIyR38zm8bzplZidLe0dNK02/U4Ly3eLIecwVSKw6zeX+90eMV458G7lmS/ lBkqr9xGJe50LOg2i5n7hO/JdoyPweYHUKqWrHSWMrXGI9vpk88Kn1A9ZtlavmlR IUxZCJCpQh146tyMpVsxLPXLyz3RnaPJ8qsvglKD4eM6L4fG2iS80CRNCl2gH+aK c0kMMVxyikcMlUKQ5n5abdAPEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYZlf00 BDxJaG6KgwQh/vY/rvhKMB8GA1UdIwQYMBaAFB+PoKv6jX9/fn6gDVbqAccJMuYH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYzOS1mcUFOVnVvQnh3a3k1 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g0LWdxX3FOZjM5LWZxQU5WdW9CeHdreTVnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYz OS1mcUFOVnVvQnh3a3k1Z2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASteAC7QJ0ZGfi0FDrxpEFffZ2YqxHROeZm1GLej/CrJA7L5zy1jpa hAqZXtdCKbi7svtRmUMhPoM+ZlBRQih9OP9YrHKzr9JKTIO5mqdPsB6S1DwCiqcK 2UQ202mDbrLMgiS6ecXtgfdxiGzVrRIbEcXSCVxegsoufEQsEnz65f95HKVNiVOR V0TSbGmQ+xKDAP/XmKEURxITsFNCys6bQIOxS78ZTKR7dwQoHYqQYoV+jCN8jZkl H92seYu9mr5z4OiOuLN3zQOSx2GAsTj9u/bzF+9BEWJkBhFSCnxCnjMKFVUp94lC NEG+r/hyVLyUwPPm5d9kXqrD/sdDIOz4 -----END CERTIFICATE-----Generated at Sun Jul 20 07:38:29 2025 by rpki-client