$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft File: F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json) Hash identifier: pM+x/7JCB5vDeU5Ga8+Id7Hc/hj56g7wyQIl6w3rzJU= Subject key identifier: DE:AB:FB:C9:0E:DC:B6:32:26:FA:D4:35:94:F4:02:67:8B:6F:53:32 Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 Certificate issuer: /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft Manifest number: 38 Signing time: Sat 06 Sep 2025 20:58:38 +0000 Manifest this update: Sat 06 Sep 2025 20:58:38 +0000 Manifest next update: Sat 13 Sep 2025 20:58:38 +0000 Files and hashes: 1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: XB6xxqN5UmgEBj3Yo3H4fU6S4+3dg8RVYGIiVQ2i96U=) 2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: 8eHBf/IW6Kdn5rzP/J/PseLHB5iblvBzJEKUGKo/wC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Validity Not Before: Sep 6 20:58:38 2025 GMT Not After : Sep 13 20:58:38 2025 GMT Subject: CN=68bca07e-0df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b8:32:b9:d0:a5:35:9d:cb:2b:1d:8e:81:c0: dd:4b:78:f1:ef:d6:9a:3b:bc:01:0d:c9:05:63:47: 9a:26:5c:30:12:cd:9d:c4:c0:6f:10:85:89:9b:3e: 2c:18:4a:26:49:bf:7d:5a:b2:0c:00:f6:50:03:fd: 4c:43:2a:b9:2f:42:e5:58:db:f4:64:50:3b:15:5b: 97:35:ef:a2:46:12:1f:4a:2a:20:cf:46:88:6e:2f: 15:3d:00:7e:e7:26:84:db:e4:4f:d1:51:43:4e:6c: f1:5d:ae:af:22:67:75:5c:b3:80:7c:4d:1f:e7:39: a5:3e:ec:93:3a:d1:85:37:84:7d:9b:64:fb:fe:bf: ad:71:d8:78:4b:85:1c:af:be:82:6f:f4:60:14:64: 27:25:6f:61:dd:13:17:b6:b3:47:78:57:a4:35:e3: 4a:80:72:d4:f8:fe:c3:7d:e3:e3:ca:11:6b:25:f5: 43:64:8e:0c:af:be:62:00:8f:6e:0c:d7:a8:99:2a: 2f:60:23:95:ff:a9:0d:9a:83:c3:9b:3d:e6:c9:29: fa:0c:f7:7d:a1:d8:f2:30:ba:6e:4d:5a:bf:9c:1c: 14:7e:05:f5:57:34:0c:38:cb:46:7e:36:74:fb:4f: c9:52:b4:fa:9d:b0:67:bb:2b:78:f0:57:a6:25:5f: 18:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AB:FB:C9:0E:DC:B6:32:26:FA:D4:35:94:F4:02:67:8B:6F:53:32 X509v3 Authority Key Identifier: keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:ff:a9:3b:b4:f8:08:bb:34:80:c4:c0:4b:3b:a2:dc:42:c1: 56:4f:15:74:9e:31:aa:4c:8b:ba:00:ab:00:bc:6d:93:1d:64: f8:c9:78:a6:6b:a4:b6:c8:60:ca:66:1c:25:b5:e2:1a:16:5f: f5:fa:00:b7:06:9c:cc:8d:7e:87:77:ab:27:10:77:76:d6:db: 5b:cb:86:78:14:e5:19:2b:ab:8f:90:eb:7a:f4:6e:6a:cb:97: 80:f0:99:e9:1d:70:d9:54:1a:d7:f0:63:74:b8:57:ec:53:3d: 86:b5:f9:60:f6:54:12:b2:d2:2f:84:17:97:03:e1:60:ca:5b: f5:0f:62:8a:25:07:53:9a:60:b9:b9:99:ad:4a:22:06:6c:fd: 0e:49:69:55:da:d8:8f:c4:94:92:51:9d:02:33:b4:3a:ab:3b: 89:5d:2f:c2:f9:c7:b4:c6:a9:82:bd:68:16:fc:5f:52:d8:e4: 79:96:dd:1f:33:cc:c7:90:d1:68:96:4d:2b:75:90:47:1c:19: b1:f8:6a:ac:06:c0:9c:ae:b3:a0:a5:ea:ba:41:f1:49:cb:69: f0:63:4d:56:74:3f:b6:de:fa:e1:11:02:53:51:8a:ee:6d:4c: a6:c5:9a:13:1b:fd:fa:c0:62:0a:27:94:b8:28:bf:3c:9c:64: 00:6e:c4:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDU0MzExMC8GA1UEBRMoMTc4MDA5NkNDOTBBQjZBRUFGMDhENzlBQjE4QzU0QzdC NzdBNTNBMDAeFw0yNTA5MDYyMDU4MzhaFw0yNTA5MTMyMDU4MzhaMBgxFjAUBgNV BAMTDTY4YmNhMDdlLTBkZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWuDK50KU1ncsrHY6BwN1LePHv1po7vAENyQVjR5omXDASzZ3EwG8QhYmbPiwY SiZJv31asgwA9lAD/UxDKrkvQuVY2/RkUDsVW5c176JGEh9KKiDPRohuLxU9AH7n JoTb5E/RUUNObPFdrq8iZ3Vcs4B8TR/nOaU+7JM60YU3hH2bZPv+v61x2HhLhRyv voJv9GAUZCclb2HdExe2s0d4V6Q140qActT4/sN94+PKEWsl9UNkjgyvvmIAj24M 16iZKi9gI5X/qQ2ag8ObPebJKfoM932h2PIwum5NWr+cHBR+BfVXNAw4y0Z+NnT7 T8lStPqdsGe7K3jwV6YlXxilAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3qv7yQ7c tjIm+tQ1lPQCZ4tvUzIwHwYDVR0jBBgwFoAUF4AJbMkKtq6vCNeasYxUx7d6U6Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NTQzL0FCNzE5RkNFM0I2 NTExRjA4NzQyREEzOUM0RjlBRTAyL0Y0QUpiTWtLdHE2dkNOZWFzWXhVeDdkNlU2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjRBSmJNa0t0cTZ2Q05lYXNZeFV4N2Q2VTZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 NTQzL0FCNzE5RkNFM0I2NTExRjA4NzQyREEzOUM0RjlBRTAyL0Y0QUpiTWtLdHE2 dkNOZWFzWXhVeDdkNlU2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHL/qTu0+Ai7NIDEwEs7otxCwVZPFXSeMapMi7oAqwC8bZMdZPjJeKZr pLbIYMpmHCW14hoWX/X6ALcGnMyNfod3qycQd3bW21vLhngU5Rkrq4+Q63r0bmrL l4DwmekdcNlUGtfwY3S4V+xTPYa1+WD2VBKy0i+EF5cD4WDKW/UPYoolB1OaYLm5 ma1KIgZs/Q5JaVXa2I/ElJJRnQIztDqrO4ldL8L5x7TGqYK9aBb8X1LY5HmW3R8z zMeQ0WiWTSt1kEccGbH4aqwGwJyus6Cl6rpB8UnLafBjTVZ0P7be+uERAlNRiu5t TKbFmhMb/frAYgonlLgovzycZABuxO4= -----END CERTIFICATE-----Generated at Sun Sep 7 16:32:07 2025 by rpki-client