$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft File: V4hJyblKNVp2IKl0eXPSG77aP1M.mft (raw, json) Hash identifier: ywM1aCnPbF+0ilkIdn8e1InreCNYe7HC99jpHMohl7Y= Subject key identifier: 30:63:9D:93:5A:CC:16:F4:61:FE:60:18:50:A9:C2:29:47:60:E7:E6 Authority key identifier: 57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53 Certificate issuer: /CN=A91410C5/serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft Manifest number: 23 Signing time: Mon 25 Aug 2025 08:26:47 +0000 Manifest this update: Mon 25 Aug 2025 08:26:46 +0000 Manifest next update: Mon 01 Sep 2025 08:26:46 +0000 Files and hashes: 1: V4hJyblKNVp2IKl0eXPSG77aP1M.crl (hash: ZNjcWhuzRPIC6AIFJH3g+bxH0GN1buU9rVeEu9qKvZs=) 2: C7142BC6654E11F0903B1F31C4F9AE02.roa (hash: XoauRCIwuWIoX1GwsZQaTxmXOTaYLcGQZJg0Vv38Baw=) 3: 55418358654A11F09C239084C4F9AE02.roa (hash: udDF0+4Fbi+k+BtlmU9I90c7Zyi75cUJclDUUNYc0gY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 08:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91410C5, serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53 Validity Not Before: Aug 25 08:26:46 2025 GMT Not After : Sep 1 08:26:46 2025 GMT Subject: CN=68ac1e46-0040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:0c:95:d0:ee:81:1f:9e:4c:a2:99:5e:c9: 8a:74:89:2b:ba:9e:2b:bf:8a:30:28:18:b8:8d:2c: 7a:b1:f2:02:3b:b8:b7:d1:97:2d:7c:b3:07:8e:95: b8:03:7a:bc:64:61:42:53:bf:bf:5a:d7:aa:00:1b: e7:26:ae:14:16:51:80:72:22:66:5f:8e:a8:1e:38: 45:0a:22:e7:82:ad:17:95:6f:dc:05:81:fe:81:0e: 53:22:3e:e7:e5:54:c6:75:01:88:2d:24:d0:44:5f: cc:e7:ea:71:11:91:4f:6f:4d:37:6e:a1:2b:fe:62: 8a:7e:fc:6e:b6:3a:9d:42:c2:38:ea:73:9d:c6:b5: a4:b3:b8:63:ee:37:86:0d:9e:e0:cd:7b:fb:2a:0f: 94:3e:fd:32:b4:93:8a:3a:a2:7a:c9:ac:1a:8a:65: 2a:66:00:84:9f:d0:0b:68:d1:87:c3:6f:44:8e:75: 05:64:71:5a:36:63:01:68:9f:be:17:7c:10:5f:ab: 71:9c:21:d9:ee:2a:c4:fe:6e:ac:cc:35:46:85:5d: 80:e3:23:3b:09:42:b6:2c:13:01:af:78:e8:a8:d8: fe:c7:4c:c0:f1:9f:0c:90:5d:7e:a0:fe:e5:2d:e1: 24:d9:d0:db:d4:d8:b0:f7:48:b6:48:3f:07:70:7b: 78:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:63:9D:93:5A:CC:16:F4:61:FE:60:18:50:A9:C2:29:47:60:E7:E6 X509v3 Authority Key Identifier: keyid:57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1b:7e:07:95:62:a4:4f:19:4a:23:f5:26:46:d3:f9:17:22: cc:77:3b:d8:86:39:92:5a:b4:95:1b:56:1e:37:ef:1a:20:74: 02:1f:7d:6d:c0:c4:e7:b5:79:cd:22:8a:a3:1c:56:fd:4e:6e: ed:f1:15:53:d1:c9:41:6e:61:80:e8:6f:6e:26:f6:d7:a6:2f: 09:09:c0:e3:81:be:64:45:65:e9:7e:e5:41:5a:dd:19:55:d6: e6:ed:6a:4d:94:6e:8a:73:d4:8f:9f:8f:f7:67:62:bb:78:66: 38:b9:24:e6:bc:bd:79:a9:1a:b9:3b:11:01:35:d2:fa:96:04: 22:d3:49:39:48:49:97:77:57:cd:36:b0:28:cc:b9:c2:02:51: ed:cd:79:97:9d:d2:f1:60:64:8b:ac:4f:39:ec:b5:b8:12:cb: d7:cf:a7:db:d9:17:bf:ac:6f:6a:87:bd:68:62:ef:68:6e:85: 07:f3:87:6e:99:ca:40:6b:08:f8:71:0c:b8:c9:e3:f9:d7:9c: 69:50:4f:32:e5:ef:b4:6a:cf:27:77:fb:0a:ef:1a:3c:35:d0: 67:6f:9b:6b:3f:f1:8d:2c:41:9b:4c:50:f7:34:fb:e7:9e:ba: 31:97:dc:eb:bc:2c:ec:09:46:de:21:9d:6d:68:2b:38:89:19: 77:3d:b3:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTBDNTExMC8GA1UEBRMoNTc4ODQ5QzlCOTRBMzU1QTc2MjBBOTc0Nzk3M0QyMUJC RURBM0Y1MzAeFw0yNTA4MjUwODI2NDZaFw0yNTA5MDEwODI2NDZaMBgxFjAUBgNV BAMTDTY4YWMxZTQ2LTAwNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTyQyV0O6BH55MopleyYp0iSu6niu/ijAoGLiNLHqx8gI7uLfRly18sweOlbgD erxkYUJTv79a16oAG+cmrhQWUYByImZfjqgeOEUKIueCrReVb9wFgf6BDlMiPufl VMZ1AYgtJNBEX8zn6nERkU9vTTduoSv+Yop+/G62Op1Cwjjqc53GtaSzuGPuN4YN nuDNe/sqD5Q+/TK0k4o6onrJrBqKZSpmAISf0Ato0YfDb0SOdQVkcVo2YwFon74X fBBfq3GcIdnuKsT+bqzMNUaFXYDjIzsJQrYsEwGveOio2P7HTMDxnwyQXX6g/uUt 4STZ0NvU2LD3SLZIPwdwe3gdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMGOdk1rM FvRh/mAYUKnCKUdg5+YwHwYDVR0jBBgwFoAUV4hJyblKNVp2IKl0eXPSG77aP1Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMEM1L0QxMDlFQkQwNTcy RTExRjA5NUY3RkU0OEM0RjlBRTAyL1Y0aEp5YmxLTlZwMklLbDBlWFBTRzc3YVAx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVjRoSnlibEtOVnAySUtsMGVYUFNHNzdhUDFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx MEM1L0QxMDlFQkQwNTcyRTExRjA5NUY3RkU0OEM0RjlBRTAyL1Y0aEp5YmxLTlZw MklLbDBlWFBTRzc3YVAxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEsbfgeVYqRPGUoj9SZG0/kXIsx3O9iGOZJatJUbVh437xogdAIffW3A xOe1ec0iiqMcVv1Obu3xFVPRyUFuYYDob24m9temLwkJwOOBvmRFZel+5UFa3RlV 1ubtak2Ubopz1I+fj/dnYrt4Zji5JOa8vXmpGrk7EQE10vqWBCLTSTlISZd3V802 sCjMucICUe3NeZed0vFgZIusTznstbgSy9fPp9vZF7+sb2qHvWhi72huhQfzh26Z ykBrCPhxDLjJ4/nXnGlQTzLl77Rqzyd3+wrvGjw10Gdvm2s/8Y0sQZtMUPc0++ee ujGX3Ou8LOwJRt4hnW1oKziJGXc9szo= -----END CERTIFICATE-----Generated at Tue Aug 26 13:18:27 2025 by rpki-client