$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft File: 4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json) Hash identifier: EnubTBj4mK6j0ciHpYgz/V1H3j6iZWNQwJon28QPAzI= Subject key identifier: 28:20:34:D2:E0:65:9E:8A:DA:4B:51:7A:8C:3F:AE:F4:49:85:B6:10 Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft Manifest number: 0294 Signing time: Mon 21 Jul 2025 01:54:02 +0000 Manifest this update: Mon 21 Jul 2025 01:54:01 +0000 Manifest next update: Mon 28 Jul 2025 01:54:01 +0000 Files and hashes: 1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: NLwKAYXIQJPK5w/OI4EzmXK/jPfrS2yxgpJKeNewsZM=) 2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: h+ue+R5DGdF0uaqUXBTnmoh/DYvzHxp90t2bN+4sANk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Validity Not Before: Jul 21 01:54:01 2025 GMT Not After : Jul 28 01:54:01 2025 GMT Subject: CN=687d9db9-b655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bb:10:b0:f6:70:cd:19:d8:08:a1:bc:74:8c: eb:cb:62:60:dc:c0:5e:a6:99:aa:0a:de:93:54:c0: d2:35:05:70:74:a5:70:5d:f9:31:2d:70:a4:8c:6c: 0c:08:33:e7:8b:13:61:72:cf:1a:d8:bf:8d:90:97: 53:45:4d:c9:cc:c1:80:e7:00:80:ef:5b:24:56:5b: c1:3c:16:bb:c5:d3:70:4d:db:e4:3f:fc:d2:5c:dd: 20:23:3b:68:bf:8c:e6:59:e3:25:27:48:16:fe:35: c1:01:8e:1f:45:98:32:95:11:02:f8:35:4a:5d:38: 07:a6:4a:36:4b:87:fd:1b:e1:20:3f:03:23:80:5d: 81:70:4b:ee:06:53:f0:9d:83:7e:c3:22:26:89:84: 9c:53:f5:3a:98:23:ff:ac:13:2b:cc:a8:82:96:6a: a2:ad:0c:53:4b:fb:30:db:1c:dc:b4:8a:00:d2:19: ae:52:fa:e5:14:e2:35:d6:f4:00:4b:0e:ee:76:c6: 9c:b0:a8:db:ac:5d:a3:bc:04:f5:11:8e:53:5a:c7: e3:18:3b:ee:21:b3:73:4d:e3:80:09:8f:e1:df:38: 67:0f:09:07:34:a9:aa:b1:d9:84:10:7e:8c:03:e6: 20:6a:38:b7:81:54:73:81:74:46:5a:2d:dc:f0:16: db:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:20:34:D2:E0:65:9E:8A:DA:4B:51:7A:8C:3F:AE:F4:49:85:B6:10 X509v3 Authority Key Identifier: keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:19:2e:d0:08:1f:e3:3f:ec:aa:dd:76:1c:4c:95:b0:d1:3c: 88:36:5c:17:84:51:a2:55:b4:42:c7:bb:a9:13:c2:ae:75:3f: 1f:f4:4b:42:57:b3:1e:06:62:35:ae:65:ed:17:fd:a1:f2:e9: 74:70:4f:2e:59:5b:e6:fd:a9:20:18:53:56:41:f6:2e:cd:20: 19:3e:3a:b5:ac:80:b8:77:84:2d:3c:c0:10:24:86:6f:bd:99: 0c:76:1b:9c:d4:3a:ca:07:57:4b:c3:16:76:22:99:7b:3b:24: b5:b6:44:76:0a:23:da:58:be:21:cf:33:91:ee:66:fc:e3:6d: 17:bc:64:c4:f5:69:81:f1:b6:13:5c:79:e0:57:23:2d:d1:11: de:17:0a:ca:03:d7:66:7d:8b:1a:4e:d4:c0:8e:7b:c6:4f:6e: 0d:9b:15:c9:01:5f:a9:b2:e1:75:0d:68:26:b3:00:86:96:92: 90:25:9c:14:20:26:4b:c7:de:c3:b2:f4:ba:c4:cf:b6:0a:fc: e7:db:90:f3:1b:44:b6:68:c4:4f:7c:75:1f:18:d2:b9:c6:d9: 96:53:17:c9:6b:a2:e1:7e:9c:99:a2:b2:73:93:6c:ab:30:c6: 47:4f:66:5a:cc:1a:ca:7f:44:b2:48:9b:97:32:dd:5d:4e:94: 1d:62:74:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1RDkxMTAvBgNVBAUTKEUzMUU2N0NBMEU1QkVEQjI0OEY5N0E2NTdERUZGNjJF Qzg2RjUyNEIwHhcNMjUwNzIxMDE1NDAxWhcNMjUwNzI4MDE1NDAxWjAYMRYwFAYD VQQDEw02ODdkOWRiOS1iNjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rsQsPZwzRnYCKG8dIzry2Jg3MBeppmqCt6TVMDSNQVwdKVwXfkxLXCkjGwM CDPnixNhcs8a2L+NkJdTRU3JzMGA5wCA71skVlvBPBa7xdNwTdvkP/zSXN0gIzto v4zmWeMlJ0gW/jXBAY4fRZgylREC+DVKXTgHpko2S4f9G+EgPwMjgF2BcEvuBlPw nYN+wyImiYScU/U6mCP/rBMrzKiClmqirQxTS/sw2xzctIoA0hmuUvrlFOI11vQA Sw7udsacsKjbrF2jvAT1EY5TWsfjGDvuIbNzTeOACY/h3zhnDwkHNKmqsdmEEH6M A+Ygaji3gVRzgXRGWi3c8BbbQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCggNNLg ZZ6K2ktReow/rvRJhbYQMB8GA1UdIwQYMBaAFOMeZ8oOW+2ySPl6ZX3v9i7Ib1JL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDVEOS84OUU4N0ZFMDBD QzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1YjdiSkktWHBsZmVfMkxzaHZV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4NW55ZzViN2JKSS1YcGxmZV8yTHNodlVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDVEOS84OUU4N0ZFMDBDQzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1Yjdi SkktWHBsZmVfMkxzaHZVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8GS7QCB/jP+yq3XYcTJWw0TyINlwXhFGiVbRCx7upE8KudT8f9EtC V7MeBmI1rmXtF/2h8ul0cE8uWVvm/akgGFNWQfYuzSAZPjq1rIC4d4QtPMAQJIZv vZkMdhuc1DrKB1dLwxZ2Ipl7OyS1tkR2CiPaWL4hzzOR7mb8420XvGTE9WmB8bYT XHngVyMt0RHeFwrKA9dmfYsaTtTAjnvGT24NmxXJAV+psuF1DWgmswCGlpKQJZwU ICZLx97DsvS6xM+2Cvzn25DzG0S2aMRPfHUfGNK5xtmWUxfJa6LhfpyZorJzk2yr MMZHT2ZazBrKf0SySJuXMt1dTpQdYnRT -----END CERTIFICATE-----Generated at Mon Jul 21 07:06:55 2025 by rpki-client