$ rpki-client -vvf rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft File: 4WPw_lTxea9MbAlwmP774tQ4Wxk.mft (raw, json) Hash identifier: K92h2A6ytKq7UGwpzT17no2RggBWR5YW0OcyG4ZXZ7M= Subject key identifier: 0B:89:40:E9:3F:4A:2F:5B:3D:A8:75:FF:2D:1F:DA:B6:BA:6B:5E:0F Authority key identifier: E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 Certificate issuer: /CN=A91F54CD/serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft Manifest number: 46 Signing time: Sat 19 Jul 2025 07:41:46 +0000 Manifest this update: Sat 19 Jul 2025 07:41:46 +0000 Manifest next update: Sat 26 Jul 2025 07:41:46 +0000 Files and hashes: 1: 4WPw_lTxea9MbAlwmP774tQ4Wxk.crl (hash: bmgJoLf5uYvzrEhEt0X1oBo/MhjNw78QY66bayAwdbI=) 2: 2CA96408FD8811EF9404CD48C4F9AE02.roa (hash: ijzYb1r/oyAKx1Hjreuyv8IcJPnhFB/m1NQeL+FUTHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F54CD, serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Validity Not Before: Jul 19 07:41:46 2025 GMT Not After : Jul 26 07:41:46 2025 GMT Subject: CN=687b4c3a-1039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e3:ec:97:c0:8c:59:b2:c3:fc:76:d4:5c:52: 0e:87:dd:64:8b:8d:9d:db:de:dd:bb:d9:9f:c8:c9: aa:08:1b:bf:2f:dd:ff:68:e0:a9:98:22:ae:4c:be: c9:1a:ae:6b:b4:f1:a3:80:2b:c7:0c:6f:04:e9:8d: 37:6f:ca:e4:74:1f:89:b5:a2:39:b8:60:bb:fa:a0: bb:54:6e:a3:3e:7a:30:9f:56:41:cf:10:74:93:70: 02:a7:21:fe:15:af:3d:ee:9e:50:cd:e8:74:15:0c: 70:ce:76:b4:04:7b:f1:6b:17:f5:b8:9d:90:9a:06: 39:e6:d7:1f:b8:ed:98:e6:22:d2:e8:02:b4:17:bc: 3d:3b:15:8f:14:26:1a:ef:49:5b:d7:35:a7:4c:5b: d2:3b:93:4f:ce:3b:90:89:e9:da:e5:10:af:cb:e9: d4:67:7f:e0:ed:0a:b2:13:ab:1b:4c:69:58:a4:0c: 02:73:c0:02:a7:e0:50:e9:1f:90:0b:5f:85:ca:2e: c8:cf:65:f0:db:6e:23:e6:06:d0:af:9e:16:1c:4f: 9f:97:5c:19:83:9d:53:ea:3d:ad:8d:9a:1b:97:d6: 01:1b:61:5b:48:fc:bc:5b:42:42:c4:0f:c6:9b:f6: 08:bc:89:b8:66:10:01:ca:a0:97:eb:16:8d:e3:93: 37:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:89:40:E9:3F:4A:2F:5B:3D:A8:75:FF:2D:1F:DA:B6:BA:6B:5E:0F X509v3 Authority Key Identifier: keyid:E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e9:89:22:2a:1a:cf:31:6a:e9:c2:92:24:32:a3:55:58:1f: de:a5:bf:c7:8a:97:4c:91:4a:46:aa:f5:9c:0e:10:ee:7d:98: a1:ab:3b:61:45:89:e5:ed:c4:1d:93:1d:17:d4:2b:ea:14:e5: 93:1e:1b:aa:a6:2c:77:51:77:d0:dc:76:50:5c:b2:d3:c9:17: 89:4e:eb:74:5e:57:be:1e:91:b5:03:55:c6:75:11:ea:15:fe: 64:7b:e8:1b:78:e7:0e:e4:60:d9:91:90:60:7c:42:31:d0:41: a9:8d:85:f7:fe:f3:7a:22:00:20:26:72:15:f4:fa:6a:00:a9: d8:e0:13:f4:4b:df:39:2c:79:7d:6a:d4:83:88:46:40:ba:39: de:65:88:e7:39:5c:c4:d5:42:87:ee:eb:82:f5:2d:34:3a:84: d8:2e:84:98:c8:36:c4:c2:eb:ef:56:19:c6:c7:56:d6:e7:7e: f3:a6:6c:dc:01:17:3e:4f:22:25:a8:9c:ad:1f:e7:3d:e1:3f: a4:8a:09:67:60:fd:31:23:b8:4f:ee:a5:19:11:0d:93:77:56: 4a:ba:ce:53:e8:1d:4a:f5:dc:9b:55:57:bf:8a:c0:82:a5:13: 03:6b:91:e0:eb:7c:15:77:da:f0:61:17:b6:45:f8:ee:9d:6d: 5e:e3:d8:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTRDRDExMC8GA1UEBRMoRTE2M0YwRkU1NEYxNzlBRjRDNkMwOTcwOThGRUZCRTJE NDM4NUIxOTAeFw0yNTA3MTkwNzQxNDZaFw0yNTA3MjYwNzQxNDZaMBgxFjAUBgNV BAMTDTY4N2I0YzNhLTEwMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC24+yXwIxZssP8dtRcUg6H3WSLjZ3b3t272Z/IyaoIG78v3f9o4KmYIq5Mvska rmu08aOAK8cMbwTpjTdvyuR0H4m1ojm4YLv6oLtUbqM+ejCfVkHPEHSTcAKnIf4V rz3unlDN6HQVDHDOdrQEe/FrF/W4nZCaBjnm1x+47ZjmItLoArQXvD07FY8UJhrv SVvXNadMW9I7k0/OO5CJ6drlEK/L6dRnf+DtCrITqxtMaVikDAJzwAKn4FDpH5AL X4XKLsjPZfDbbiPmBtCvnhYcT5+XXBmDnVPqPa2NmhuX1gEbYVtI/LxbQkLED8ab 9gi8ibhmEAHKoJfrFo3jkzfbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC4lA6T9K L1s9qHX/LR/atrprXg8wHwYDVR0jBBgwFoAU4WPw/lTxea9MbAlwmP774tQ4Wxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NENEL0QyRTJDQTdDRkQ4 NzExRUZCNjYyNEEyOEM0RjlBRTAyLzRXUHdfbFR4ZWE5TWJBbHdtUDc3NHRRNFd4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFdQd19sVHhlYTlNYkFsd21QNzc0dFE0V3hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NENEL0QyRTJDQTdDRkQ4NzExRUZCNjYyNEEyOEM0RjlBRTAyLzRXUHdfbFR4ZWE5 TWJBbHdtUDc3NHRRNFd4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA3piSIqGs8xaunCkiQyo1VYH96lv8eKl0yRSkaq9ZwOEO59mKGrO2FF ieXtxB2THRfUK+oU5ZMeG6qmLHdRd9DcdlBcstPJF4lO63ReV74ekbUDVcZ1EeoV /mR76Bt45w7kYNmRkGB8QjHQQamNhff+83oiACAmchX0+moAqdjgE/RL3zkseX1q 1IOIRkC6Od5liOc5XMTVQofu64L1LTQ6hNguhJjINsTC6+9WGcbHVtbnfvOmbNwB Fz5PIiWonK0f5z3hP6SKCWdg/TEjuE/upRkRDZN3Vkq6zlPoHUr13JtVV7+KwIKl EwNrkeDrfBV32vBhF7ZF+O6dbV7j2KM= -----END CERTIFICATE-----Generated at Sun Jul 20 11:06:46 2025 by rpki-client