$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json) Hash identifier: 7i/DVxIE9o1N1hViBGBgbulKFSk634rXj09K+KqknSU= Subject key identifier: 0B:F7:67:14:9A:2C:A6:99:E5:C9:87:F1:E6:C2:E4:05:30:71:BF:74 Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft Manifest number: 06 Signing time: Sat 19 Jul 2025 08:28:56 +0000 Manifest this update: Sat 19 Jul 2025 08:28:55 +0000 Manifest next update: Sat 26 Jul 2025 08:28:55 +0000 Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: RPhfyNMCPlhRv5KKw1qDiuGkCihR72OtOAVSh0l3hGI=) 2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: SdgAZZ52cjGHFYLx6r6iySsbR8aD22mEVfk3u39V65w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Validity Not Before: Jul 19 08:28:55 2025 GMT Not After : Jul 26 08:28:55 2025 GMT Subject: CN=687b5748-9e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ee:6f:bf:43:34:9a:22:c5:d6:2c:72:10:97: 94:e6:26:d0:c2:97:63:2e:8f:3e:80:a3:2c:a6:b2: 90:e8:7c:d8:df:b0:d8:f5:f5:2e:41:f5:e9:28:92: df:49:67:0d:f5:76:95:76:49:cf:9d:65:d6:a0:73: 84:6d:9d:17:d1:10:71:75:ce:da:19:23:67:cc:ac: 32:9e:0c:f4:fe:e9:42:ad:b2:8e:d6:1a:f9:e0:43: 9d:b0:6f:8a:89:c3:62:e4:69:26:f0:d0:e5:cb:88: a2:83:81:55:b8:db:3e:fa:88:de:d0:fb:1a:53:a8: b9:36:12:08:a9:e3:5e:f4:ca:78:e3:07:bb:8d:50: 86:d6:5f:20:e6:c9:f8:02:69:96:f9:01:56:96:4c: ca:d7:49:72:66:a5:f2:29:0f:64:e1:c9:3a:3c:da: be:2d:5d:cb:7d:ea:d3:dd:15:1d:91:40:83:0b:be: 7e:ed:3f:29:e9:67:b9:6d:27:e7:3a:54:b1:6f:fa: 71:d7:bd:5f:0a:18:a7:6a:5c:63:51:c7:a1:2e:cc: 3a:b9:b5:f0:1c:85:78:29:02:98:98:d0:28:34:8d: 99:18:79:a1:73:66:34:9b:8b:ff:49:4b:b9:ba:26: 51:e1:40:4f:d9:0c:17:8e:6e:85:89:93:7d:64:85: e5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F7:67:14:9A:2C:A6:99:E5:C9:87:F1:E6:C2:E4:05:30:71:BF:74 X509v3 Authority Key Identifier: keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:2f:58:67:d5:33:47:00:d6:d4:fc:58:33:02:a3:14:ee:0d: 90:91:22:da:4e:32:c1:ce:3d:4e:2c:96:0c:27:95:bc:19:64: 3e:2f:2a:36:ee:cc:36:19:e0:37:ee:5d:17:ba:22:73:69:77: e2:fc:6e:86:cf:cd:5c:33:f6:d5:05:fd:d0:3b:50:89:59:29: 05:9c:29:ab:00:d9:03:be:66:06:3e:6a:f3:f6:f4:79:e5:d7: 3c:9b:fc:2b:06:5f:96:7b:d3:40:11:35:d7:cd:4f:58:b3:70: 7d:3e:b3:7c:15:e0:37:ee:2a:b0:f4:db:23:a4:28:10:10:00: 6c:dd:cc:d3:f1:0e:24:58:c8:01:7d:ed:04:9a:b9:f0:6a:7b: 56:b2:00:3e:37:ae:48:a8:81:bc:8f:6a:da:9b:87:6b:23:8f: 83:df:c8:e9:67:e2:80:88:1f:d4:02:7f:58:23:3d:03:df:89: 68:28:bf:b5:d2:f1:81:c0:46:26:de:dc:e2:2a:28:b1:18:9a: 37:29:d2:41:f8:bb:07:84:bb:a0:e8:aa:29:49:ca:b2:c0:5e: f3:3c:cd:43:94:3d:fc:2a:bb:e1:19:8b:f3:39:eb:96:8c:c8: d4:5e:52:27:b9:7c:93:aa:a9:90:0c:0e:9d:ec:a2:34:f3:15: f3:c1:f7:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTFERTExMC8GA1UEBRMoNkI4Mjk2QTU4MTU0MzAyNzhFQzMxMUI1RTlDQkVCN0ZG MEE5MERDNjAeFw0yNTA3MTkwODI4NTVaFw0yNTA3MjYwODI4NTVaMBgxFjAUBgNV BAMTDTY4N2I1NzQ4LTllNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDr7m+/QzSaIsXWLHIQl5TmJtDCl2Mujz6AoyymspDofNjfsNj19S5B9ekokt9J Zw31dpV2Sc+dZdagc4RtnRfREHF1ztoZI2fMrDKeDPT+6UKtso7WGvngQ52wb4qJ w2LkaSbw0OXLiKKDgVW42z76iN7Q+xpTqLk2Egip4170ynjjB7uNUIbWXyDmyfgC aZb5AVaWTMrXSXJmpfIpD2ThyTo82r4tXct96tPdFR2RQIMLvn7tPynpZ7ltJ+c6 VLFv+nHXvV8KGKdqXGNRx6EuzDq5tfAchXgpApiY0Cg0jZkYeaFzZjSbi/9JS7m6 JlHhQE/ZDBeOboWJk31kheVZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC/dnFJos ppnlyYfx5sLkBTBxv3QwHwYDVR0jBBgwFoAUa4KWpYFUMCeOwxG16cvrf/CpDcYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1MURFLzg3MUZEQTM2NjBC NDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNlT3d4RzE2Y3ZyZl9DcERj WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYTRLV3BZRlVNQ2VPd3hHMTZjdnJmX0NwRGNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 MURFLzg3MUZEQTM2NjBCNDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNl T3d4RzE2Y3ZyZl9DcERjWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEgvWGfVM0cA1tT8WDMCoxTuDZCRItpOMsHOPU4slgwnlbwZZD4vKjbu zDYZ4DfuXRe6InNpd+L8bobPzVwz9tUF/dA7UIlZKQWcKasA2QO+ZgY+avP29Hnl 1zyb/CsGX5Z700ARNdfNT1izcH0+s3wV4DfuKrD02yOkKBAQAGzdzNPxDiRYyAF9 7QSaufBqe1ayAD43rkiogbyPatqbh2sjj4PfyOln4oCIH9QCf1gjPQPfiWgov7XS 8YHARibe3OIqKLEYmjcp0kH4uweEu6DoqilJyrLAXvM8zUOUPfwqu+EZi/M565aM yNReUie5fJOqqZAMDp3sojTzFfPB97Y= -----END CERTIFICATE-----Generated at Mon Jul 21 00:32:21 2025 by rpki-client