$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json) Hash identifier: OwNBNYCV2ANtYZ622aGs/5NwklYpmh3iKfZj5W9YXO8= Subject key identifier: 89:11:F8:92:B0:40:53:6A:EE:FD:74:CC:BA:2D:CA:14:35:E6:4B:B9 Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft Manifest number: 1F Signing time: Fri 05 Sep 2025 08:24:25 +0000 Manifest this update: Fri 05 Sep 2025 08:24:24 +0000 Manifest next update: Fri 12 Sep 2025 08:24:24 +0000 Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: IBYUpD5ranKcNIVzRpUl91hzMw2aB9XX4VjhnGqiltY=) 2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: SdgAZZ52cjGHFYLx6r6iySsbR8aD22mEVfk3u39V65w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Validity Not Before: Sep 5 08:24:24 2025 GMT Not After : Sep 12 08:24:24 2025 GMT Subject: CN=68ba9e38-2e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9c:6f:c4:4f:0d:af:d5:80:1d:09:29:43:7a: bf:d6:c9:76:cc:8b:80:4b:1f:d8:57:54:e7:5c:10: 58:8a:be:5d:83:3a:6f:3c:7a:9d:e2:ca:9a:a1:2a: ba:c4:ae:ff:16:27:8b:3d:95:c8:54:ca:04:ab:0c: 85:e1:9e:3d:72:18:db:ed:8b:28:f9:b3:96:54:f1: 15:dc:c3:13:12:68:84:af:b5:e6:e5:46:62:41:a0: 83:ab:0e:17:4d:87:fe:ef:f0:3b:a0:2f:40:07:7d: f3:2a:0e:9b:d7:4f:09:a8:19:e2:65:93:45:b6:9a: f4:16:c3:15:b7:00:ba:2c:58:e4:07:e0:1d:c8:f8: b7:8d:ab:12:e1:1f:59:08:cb:fa:29:27:fd:15:7d: dc:b3:6f:9b:3e:dd:18:78:26:45:61:f7:99:fd:1b: 3c:9b:ab:0d:be:42:00:d1:cc:59:a0:7a:58:18:f6: 13:f0:9b:b9:95:b4:23:64:5a:7c:32:ef:52:23:e6: 9f:e2:30:3d:c3:60:47:6d:02:a4:a5:4a:cd:7d:9d: 7a:d0:93:be:26:05:85:2d:1c:f2:38:20:a2:74:06: f2:7e:18:b6:eb:cc:f8:24:27:3f:3a:f5:4e:52:41: 8c:3a:7e:21:21:b5:fa:b3:b1:dd:32:53:45:71:8a: 2a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:11:F8:92:B0:40:53:6A:EE:FD:74:CC:BA:2D:CA:14:35:E6:4B:B9 X509v3 Authority Key Identifier: keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8b:31:6f:ae:cc:e4:8f:65:f6:9c:97:f9:0c:b3:80:cf:a7: bb:1f:08:ff:0f:12:c6:c5:39:f6:ab:d9:b0:1d:5c:d7:ff:f3: f3:e3:bd:30:ff:45:99:9c:44:04:be:00:39:b7:35:0e:af:43: fa:61:c7:6d:0d:0c:eb:e6:0f:68:e8:f7:ab:3f:a5:30:ff:04: 1b:e2:43:3b:6c:5e:39:bc:23:44:c5:1b:4e:fe:af:88:cb:34: 1c:ad:87:4c:94:8f:35:6c:e8:bf:6e:78:12:cb:41:0c:05:ed: 64:b2:cd:a2:88:f1:91:87:45:40:22:6e:46:1b:7d:43:51:e0: 79:9b:11:5e:75:a0:b9:40:e1:e0:6a:73:ad:2d:1a:96:8b:6c: 83:72:e1:d9:94:8d:c8:83:5b:e8:87:bd:8c:7a:84:c6:81:50: 80:30:66:8f:03:b3:8d:36:b7:62:58:93:80:48:33:79:77:77: 8b:02:ac:58:6a:09:89:91:47:57:c4:c8:ac:55:88:70:0a:ac: 49:99:65:99:d3:39:3c:44:c9:c9:f1:89:30:fe:dd:f9:41:d8: 28:a4:b0:99:62:cf:7a:c6:3a:2a:3d:09:8a:3a:9b:0f:cc:cd: c8:47:18:b4:f2:ab:af:b8:d8:5f:03:fb:33:ca:82:96:5a:08: f7:80:2f:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTFERTExMC8GA1UEBRMoNkI4Mjk2QTU4MTU0MzAyNzhFQzMxMUI1RTlDQkVCN0ZG MEE5MERDNjAeFw0yNTA5MDUwODI0MjRaFw0yNTA5MTIwODI0MjRaMBgxFjAUBgNV BAMTDTY4YmE5ZTM4LTJlMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcnG/ETw2v1YAdCSlDer/WyXbMi4BLH9hXVOdcEFiKvl2DOm88ep3iypqhKrrE rv8WJ4s9lchUygSrDIXhnj1yGNvtiyj5s5ZU8RXcwxMSaISvteblRmJBoIOrDhdN h/7v8DugL0AHffMqDpvXTwmoGeJlk0W2mvQWwxW3ALosWOQH4B3I+LeNqxLhH1kI y/opJ/0Vfdyzb5s+3Rh4JkVh95n9Gzybqw2+QgDRzFmgelgY9hPwm7mVtCNkWnwy 71Ij5p/iMD3DYEdtAqSlSs19nXrQk74mBYUtHPI4IKJ0BvJ+GLbrzPgkJz869U5S QYw6fiEhtfqzsd0yU0Vxiip/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiRH4krBA U2ru/XTMui3KFDXmS7kwHwYDVR0jBBgwFoAUa4KWpYFUMCeOwxG16cvrf/CpDcYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1MURFLzg3MUZEQTM2NjBC NDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNlT3d4RzE2Y3ZyZl9DcERj WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYTRLV3BZRlVNQ2VPd3hHMTZjdnJmX0NwRGNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 MURFLzg3MUZEQTM2NjBCNDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNl T3d4RzE2Y3ZyZl9DcERjWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA2LMW+uzOSPZfacl/kMs4DPp7sfCP8PEsbFOfar2bAdXNf/8/PjvTD/ RZmcRAS+ADm3NQ6vQ/phx20NDOvmD2jo96s/pTD/BBviQztsXjm8I0TFG07+r4jL NByth0yUjzVs6L9ueBLLQQwF7WSyzaKI8ZGHRUAibkYbfUNR4HmbEV51oLlA4eBq c60tGpaLbINy4dmUjciDW+iHvYx6hMaBUIAwZo8Ds402t2JYk4BIM3l3d4sCrFhq CYmRR1fEyKxViHAKrEmZZZnTOTxEycnxiTD+3flB2CiksJliz3rGOio9CYo6mw/M zchHGLTyq6+42F8D+zPKgpZaCPeALx8= -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:09 2025 by rpki-client