$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft File: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft (raw, json) Hash identifier: 5bmUClJzJlLwecRUnfQp8F5laGpFTnfOem2DK0ByuVI= Subject key identifier: 1D:C4:6C:C9:F5:E0:2A:06:86:0C:21:AB:22:CA:FB:D4:E0:00:B4:60 Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A Certificate issuer: /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft Manifest number: 01EB Signing time: Tue 09 Sep 2025 02:36:58 +0000 Manifest this update: Tue 09 Sep 2025 02:36:57 +0000 Manifest next update: Tue 16 Sep 2025 02:36:57 +0000 Files and hashes: 1: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl (hash: nbfVV71C062m/OOPF3vdOiDoswsyo+uDWGAXRZmESEI=) 2: 38702E769AF611ED8D41985BC4F9AE02.roa (hash: ZhWBxmhvIB+43KRBVHlsXZ7qRlNDQ90SpnXAY8rEx0A=) 3: D076B1A49F2911ED937CF05AC4F9AE02.roa (hash: DMBYC+/NRUlRPJuHXxC2cxoOT1tZHI2lI1sjea+2JhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A Validity Not Before: Sep 9 02:36:57 2025 GMT Not After : Sep 16 02:36:57 2025 GMT Subject: CN=68bf92c9-59f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:3f:0a:e4:b1:38:1a:cb:37:d2:cd:0b:57: 4d:69:23:3f:9a:c1:69:5e:96:2d:48:8b:9a:1d:e2: 66:81:31:42:e9:29:7c:66:39:e6:4f:9b:96:2d:4a: 37:c2:ef:b3:09:1f:63:96:bf:fa:6c:d9:53:ba:b5: 45:9b:f2:4f:e5:0c:68:bc:dd:65:b2:a4:77:77:3e: 5d:54:1d:10:f5:28:38:bb:d0:40:82:07:03:4b:25: e8:18:93:b1:e1:7a:ae:e0:a1:ed:b7:ee:4c:26:26: 4f:be:0f:80:30:81:90:58:c6:23:7d:0a:9f:b1:55: 92:2c:5e:4f:43:7a:27:82:73:e8:8a:22:80:0d:08: 18:07:14:87:0d:bb:86:46:3b:ab:3f:b8:1e:3b:6e: e7:78:7c:c8:cf:49:59:19:bb:0a:2f:13:2a:ad:a3: e7:fe:5e:36:53:16:ca:13:1a:30:11:23:fe:b2:54: 68:5d:5d:7a:32:be:50:fc:e3:ed:b8:66:9c:f6:79: 2f:af:26:8f:14:e3:fa:82:1b:80:a9:fc:73:a9:22: 98:1a:0c:da:5a:bc:83:06:53:9e:44:6e:3c:fc:32: fd:73:1b:69:c3:f5:48:dc:e2:ce:af:bf:4a:ce:d1: 17:81:e2:be:91:ff:f4:51:0b:18:76:77:25:9b:f6: 0a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C4:6C:C9:F5:E0:2A:06:86:0C:21:AB:22:CA:FB:D4:E0:00:B4:60 X509v3 Authority Key Identifier: keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:38:6a:d0:b9:1c:db:f7:dd:b5:eb:82:b3:20:3b:8b:24:87: 58:28:5b:54:cb:cb:15:a4:e5:8c:cd:95:4c:66:f7:1a:96:5c: c1:65:90:fe:78:ac:39:33:e4:f7:c4:f5:53:3e:7b:ea:d9:f7: de:86:60:dc:bb:1e:f5:4d:e7:51:d5:7b:a4:16:fe:8a:6f:3d: 0d:c9:97:82:5b:fb:5d:69:18:7c:bc:a1:ab:db:d5:98:0c:ac: 0a:de:a5:ef:da:6c:d3:0a:c5:fc:7b:42:3c:ad:6f:fe:7b:57: 9e:10:e3:18:07:46:f7:b2:02:a9:9c:67:68:a1:4e:9c:b0:1f: 04:a4:0e:cd:f2:55:c7:1b:9b:fe:7b:ea:49:99:9c:c7:df:7d: 51:19:2c:ce:c8:f5:1b:4b:97:41:bc:ad:5e:8e:5b:a3:95:aa: 8f:2d:ba:a8:34:91:5c:fd:48:0e:27:05:9e:75:b5:8d:66:54: ec:55:a3:45:27:d3:5b:b2:7e:e7:69:2c:9f:1d:7f:35:a1:45: 9e:1b:5f:c3:0a:fb:ce:37:78:a3:58:80:c5:7a:49:fa:60:d6: 56:b0:2a:c1:ab:b9:f7:4c:f1:8c:66:e5:18:b6:25:0f:cf:ba: c1:2d:6a:fa:e6:b7:80:a1:4f:5c:c3:87:2f:f1:f1:3e:36:f5: 22:bf:92:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzRkMxMTAvBgNVBAUTKEUxQzFDNzJCNjc5M0E5MDNCQTNERTAzMTAyNzUxOUI0 MzAyMTc1NkEwHhcNMjUwOTA5MDIzNjU3WhcNMjUwOTE2MDIzNjU3WjAYMRYwFAYD VQQDEw02OGJmOTJjOS01OWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpo/CuSxOBrLN9LNC1dNaSM/msFpXpYtSIuaHeJmgTFC6Sl8ZjnmT5uWLUo3 wu+zCR9jlr/6bNlTurVFm/JP5QxovN1lsqR3dz5dVB0Q9Sg4u9BAggcDSyXoGJOx 4Xqu4KHtt+5MJiZPvg+AMIGQWMYjfQqfsVWSLF5PQ3ongnPoiiKADQgYBxSHDbuG RjurP7geO27neHzIz0lZGbsKLxMqraPn/l42UxbKExowESP+slRoXV16Mr5Q/OPt uGac9nkvryaPFOP6ghuAqfxzqSKYGgzaWryDBlOeRG48/DL9cxtpw/VI3OLOr79K ztEXgeK+kf/0UQsYdnclm/YKCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3EbMn1 4CoGhgwhqyLK+9TgALRgMB8GA1UdIwQYMBaAFOHBxytnk6kDuj3gMQJ1GbQwIXVq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNGQy9BOTZGNEI3ODlB RjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFRTzZQZUF4QW5VWnREQWhk V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjSEhLMmVUcVFPNlBlQXhBblVadERBaGRXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNGQy9BOTZGNEI3ODlBRjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFR TzZQZUF4QW5VWnREQWhkV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZOGrQuRzb992164KzIDuLJIdYKFtUy8sVpOWMzZVMZvcallzBZZD+ eKw5M+T3xPVTPnvq2ffehmDcux71TedR1XukFv6Kbz0NyZeCW/tdaRh8vKGr29WY DKwK3qXv2mzTCsX8e0I8rW/+e1eeEOMYB0b3sgKpnGdooU6csB8EpA7N8lXHG5v+ e+pJmZzH331RGSzOyPUbS5dBvK1ejlujlaqPLbqoNJFc/UgOJwWedbWNZlTsVaNF J9Nbsn7naSyfHX81oUWeG1/DCvvON3ijWIDFekn6YNZWsCrBq7n3TPGMZuUYtiUP z7rBLWr65reAoU9cw4cv8fE+NvUiv5Ic -----END CERTIFICATE-----Generated at Tue Sep 9 17:13:23 2025 by rpki-client