$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: Tfgtdvl6VeMTQDyBdHORj2IlJtYz0FcVY0DZM0b2utU= Subject key identifier: E7:B1:4A:2A:23:C2:BB:55:EC:C6:A1:B2:F8:C2:54:E0:C2:1F:C2:D4 Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 0173 Signing time: Sat 19 Jul 2025 04:01:30 +0000 Manifest this update: Sat 19 Jul 2025 04:01:30 +0000 Manifest next update: Sat 26 Jul 2025 04:01:30 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: zMKpW34pPQBm0Kw3qT2CZVo51shJPErAdslWk/LEMAI=) 2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: glLqt8A+PG2i48HeZjmY7dCokn6j6eyQTAGv7a4dQe4=) 3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: cXsdzPTH/yRS7sygsATYiwsQyV1n0HK8W/wMQYfB7Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: Jul 19 04:01:30 2025 GMT Not After : Jul 26 04:01:30 2025 GMT Subject: CN=687b189a-686c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0e:4d:87:82:6b:1d:63:ac:ba:7c:fd:e3:55: 57:f8:f5:54:3c:b5:d0:33:dc:11:ce:11:95:1c:c1: 43:c6:65:e4:5c:c7:6c:2f:75:dc:ef:ff:8e:a3:70: f4:80:b3:15:c1:fc:5e:0c:37:b8:d0:d7:8d:28:16: f2:8f:f9:31:88:d2:82:12:a9:9b:fb:10:1e:4d:11: f4:2e:a3:95:59:1c:b0:03:13:bd:1a:21:4f:40:a0: 2f:65:97:91:68:04:31:28:d1:a6:aa:93:d1:0e:de: 9e:56:c0:14:00:b3:5b:44:d0:58:5e:11:d8:81:48: db:cb:34:3b:a5:f9:f3:46:93:1a:fa:c0:8c:d3:02: 24:05:1d:d7:02:e4:d9:77:ce:ac:80:00:4e:ae:b4: d2:ea:6a:a9:01:1d:91:18:f0:15:91:d7:90:ec:0d: ba:8e:ad:85:08:b4:57:f8:5b:15:1b:df:75:14:d4: 7f:e8:8c:7f:77:f5:cf:46:11:d4:de:ea:75:7c:67: 41:ab:72:1c:ad:6e:77:f0:68:a1:69:dd:d5:fe:b3: 19:72:eb:61:22:e3:b2:2b:ac:0d:2a:d2:fd:89:ed: 16:0a:65:99:b6:47:0b:f7:af:e8:68:5c:fc:9b:88: bd:d8:ff:ee:7c:31:b5:bc:36:df:f7:04:05:06:75: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B1:4A:2A:23:C2:BB:55:EC:C6:A1:B2:F8:C2:54:E0:C2:1F:C2:D4 X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7e:fc:2b:30:b2:4f:ea:d3:ee:11:06:d9:ee:bb:4e:9f:93: e8:fe:96:c3:4d:60:3e:b1:41:0e:ce:e2:8d:0a:c7:f0:86:66: 90:82:c1:23:4a:c9:f6:43:8c:a4:b4:76:0b:de:be:84:bc:e0: 59:7c:28:e8:30:1f:85:0f:07:60:96:47:d6:64:bb:cf:19:92: e8:dc:ee:eb:e1:a6:5a:e7:eb:11:67:ee:7d:b9:9e:f7:65:31: e2:eb:20:17:a5:c3:8f:50:36:1d:cf:61:52:44:81:d1:1c:08: c0:6d:4a:6b:10:92:53:2d:4a:76:36:4d:86:29:25:0d:2c:9b: 00:89:ba:dd:ea:73:3c:d5:77:5f:a3:b7:1d:1a:67:95:e8:a2: 07:f6:4f:dd:2a:78:36:a6:b5:07:59:66:d9:1a:f8:bf:f2:f7: 94:9a:b6:e7:8f:14:2e:6c:a5:70:69:93:98:3e:a8:43:84:00: f3:5c:c0:45:4f:df:6a:d9:0c:21:c6:ea:8a:3c:c2:3c:72:23: c0:19:ce:77:d8:ea:a7:17:e1:88:ec:c3:d3:78:cb:fc:d9:6b: 74:2b:10:15:90:0c:b5:b6:95:9f:47:38:3c:7f:ed:08:62:49: 27:5f:d0:f3:80:76:ad:3c:5b:4b:88:6d:86:42:27:63:45:ec: b3:95:9a:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjUwNzE5MDQwMTMwWhcNMjUwNzI2MDQwMTMwWjAYMRYwFAYD VQQDEw02ODdiMTg5YS02ODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQ5Nh4JrHWOsunz941VX+PVUPLXQM9wRzhGVHMFDxmXkXMdsL3Xc7/+Oo3D0 gLMVwfxeDDe40NeNKBbyj/kxiNKCEqmb+xAeTRH0LqOVWRywAxO9GiFPQKAvZZeR aAQxKNGmqpPRDt6eVsAUALNbRNBYXhHYgUjbyzQ7pfnzRpMa+sCM0wIkBR3XAuTZ d86sgABOrrTS6mqpAR2RGPAVkdeQ7A26jq2FCLRX+FsVG991FNR/6Ix/d/XPRhHU 3up1fGdBq3IcrW538Gihad3V/rMZcuthIuOyK6wNKtL9ie0WCmWZtkcL96/oaFz8 m4i92P/ufDG1vDbf9wQFBnUITQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOexSioj wrtV7MahsvjCVODCH8LUMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPfvwrMLJP6tPuEQbZ7rtOn5Po/pbDTWA+sUEOzuKNCsfwhmaQgsEj Ssn2Q4yktHYL3r6EvOBZfCjoMB+FDwdglkfWZLvPGZLo3O7r4aZa5+sRZ+59uZ73 ZTHi6yAXpcOPUDYdz2FSRIHRHAjAbUprEJJTLUp2Nk2GKSUNLJsAibrd6nM81Xdf o7cdGmeV6KIH9k/dKng2prUHWWbZGvi/8veUmrbnjxQubKVwaZOYPqhDhADzXMBF T99q2QwhxuqKPMI8ciPAGc532OqnF+GI7MPTeMv82Wt0KxAVkAy1tpWfRzg8f+0I YkknX9DzgHatPFtLiG2GQidjReyzlZqJ -----END CERTIFICATE-----Generated at Sun Jul 20 04:21:25 2025 by rpki-client