$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft File: R4tJDpOd3d8hrKx4y5MZinuBRIU.mft (raw, json) Hash identifier: jDhvnsRBEy3WhISnckiAzpUmbwjoceIUiOn9yyviwig= Subject key identifier: 0A:D3:EB:FB:8A:EB:84:BE:FA:51:3F:82:EB:21:5F:C9:98:69:30:BF Authority key identifier: 47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 Certificate issuer: /CN=A91427E2/serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft Manifest number: 9D Signing time: Thu 21 Aug 2025 06:44:38 +0000 Manifest this update: Thu 21 Aug 2025 06:44:37 +0000 Manifest next update: Thu 28 Aug 2025 06:44:37 +0000 Files and hashes: 1: R4tJDpOd3d8hrKx4y5MZinuBRIU.crl (hash: X16Sr7c4FZOcUswmlLw45xTbuuBLJTHWWePvAglbA8Y=) 2: 534DAEB2935111EF98AA8C86C4F9AE02.roa (hash: X0a7N8BetaJpt9FlsdkHj3TgLJmVFX/78zUcVbqMhpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Validity Not Before: Aug 21 06:44:37 2025 GMT Not After : Aug 28 06:44:37 2025 GMT Subject: CN=68a6c056-decc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:20:d0:66:41:64:10:03:2f:c7:67:19:a1: 21:58:1c:09:11:c1:bf:fe:96:8a:23:75:62:e3:e3: 50:14:9a:83:04:8f:3d:b4:cb:29:cf:41:f9:54:74: 55:52:4f:af:87:4b:7d:80:20:97:90:7c:b5:c7:b8: b8:e7:5e:f7:78:cb:28:37:15:f4:ed:ef:de:92:97: 5f:01:5f:3e:7a:2c:e8:cc:91:7b:a3:e8:e1:b1:9e: 85:2a:3c:8b:ea:a3:36:d9:94:2c:69:32:96:26:24: a8:8c:cf:40:30:d5:ec:95:16:3f:19:56:1e:fb:44: aa:1a:5c:4b:31:30:8a:b9:41:b6:8a:4f:a7:e4:e3: 67:31:96:e7:61:d9:7a:c0:f8:29:56:ff:99:b5:32: 5c:d3:2c:00:d1:e2:08:ae:5b:69:11:1b:15:c5:11: 88:14:da:81:fe:d3:5b:08:16:3c:48:8d:84:d6:cc: 79:7c:06:38:06:72:ee:09:83:a7:44:5b:65:ae:08: 4c:22:b9:65:18:7d:ec:8b:45:4f:f6:61:63:b8:e6: c2:90:6f:54:2e:4f:79:8a:aa:f0:ca:bb:42:90:33: 24:09:b7:ee:dc:93:07:0b:b6:6a:6f:2a:b1:06:2d: 61:58:ab:7f:13:8c:24:17:f3:23:48:5e:4f:c8:f8: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D3:EB:FB:8A:EB:84:BE:FA:51:3F:82:EB:21:5F:C9:98:69:30:BF X509v3 Authority Key Identifier: keyid:47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b6:11:ce:fc:21:96:93:d1:dc:19:ad:aa:7f:0c:f5:f9:2e: 8e:f5:c4:c1:48:67:8d:3a:66:cd:d1:99:91:6d:15:a3:a2:88: db:d6:25:d2:cb:e9:05:6d:ef:a6:ed:ba:1b:db:a6:7c:cc:37: ce:d3:10:65:f2:89:b9:35:91:a7:c3:3e:91:c6:b1:47:db:9d: 15:26:22:d7:52:ea:ce:ac:56:a1:75:0e:f1:2f:cb:7f:15:61: 7d:a2:00:8f:e4:1b:44:5e:c7:fb:bf:43:91:7d:41:9e:6c:16: f2:ce:ba:fa:eb:af:38:23:9c:38:ab:3f:ce:19:7c:17:4b:ad: 26:49:fc:04:3b:fe:cc:df:41:50:dd:5e:35:72:7c:28:2f:6a: 9a:ba:01:fd:d0:ef:eb:96:7c:73:6f:c9:3d:9b:37:a1:e6:6c: cf:27:a0:fb:90:28:77:a0:4e:35:79:fe:21:23:dc:92:d5:4a: 48:05:61:9a:22:84:14:f9:69:94:74:06:ca:28:0f:9a:e9:2f: 7a:c1:1d:d6:b3:bf:1a:db:51:14:21:e3:53:d6:eb:86:45:f6: 53:a5:ef:77:87:8a:fb:af:8a:8c:0c:12:d3:82:f1:bf:6f:61: 18:17:08:9d:b4:8c:57:ca:98:ee:fa:c6:35:21:47:76:c2:21: 06:f3:51:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3RTIxMTAvBgNVBAUTKDQ3OEI0OTBFOTM5REREREYyMUFDQUM3OENCOTMxOThB N0I4MTQ0ODUwHhcNMjUwODIxMDY0NDM3WhcNMjUwODI4MDY0NDM3WjAYMRYwFAYD VQQDEw02OGE2YzA1Ni1kZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnAg0GZBZBADL8dnGaEhWBwJEcG//paKI3Vi4+NQFJqDBI89tMspz0H5VHRV Uk+vh0t9gCCXkHy1x7i45173eMsoNxX07e/ekpdfAV8+eizozJF7o+jhsZ6FKjyL 6qM22ZQsaTKWJiSojM9AMNXslRY/GVYe+0SqGlxLMTCKuUG2ik+n5ONnMZbnYdl6 wPgpVv+ZtTJc0ywA0eIIrltpERsVxRGIFNqB/tNbCBY8SI2E1sx5fAY4BnLuCYOn RFtlrghMIrllGH3si0VP9mFjuObCkG9ULk95iqrwyrtCkDMkCbfu3JMHC7Zqbyqx Bi1hWKt/E4wkF/MjSF5PyPgdmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArT6/uK 64S++lE/gushX8mYaTC/MB8GA1UdIwQYMBaAFEeLSQ6Tnd3fIayseMuTGYp7gUSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83ODNERkJDNDkz NTAxMUVGQkFDRTAwNENDNEY5QUUwMi9SNHRKRHBPZDNkOGhyS3g0eTVNWmludUJS SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0dEpEcE9kM2Q4aHJLeDR5NU1aaW51QlJJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdFMi83ODNERkJDNDkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi9SNHRKRHBPZDNk OGhyS3g0eTVNWmludUJSSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnthHO/CGWk9HcGa2qfwz1+S6O9cTBSGeNOmbN0ZmRbRWjoojb1iXS y+kFbe+m7bob26Z8zDfO0xBl8om5NZGnwz6RxrFH250VJiLXUurOrFahdQ7xL8t/ FWF9ogCP5BtEXsf7v0ORfUGebBbyzrr66684I5w4qz/OGXwXS60mSfwEO/7M30FQ 3V41cnwoL2qaugH90O/rlnxzb8k9mzeh5mzPJ6D7kCh3oE41ef4hI9yS1UpIBWGa IoQU+WmUdAbKKA+a6S96wR3Ws78a21EUIeNT1uuGRfZTpe93h4r7r4qMDBLTgvG/ b2EYFwidtIxXypju+sY1IUd2wiEG81G4 -----END CERTIFICATE-----Generated at Fri Aug 22 16:15:47 2025 by rpki-client