$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json) Hash identifier: lOI7wZcg4SpX+6Cn61Qt549TGrta2jLJsSOPHrr5dY8= Subject key identifier: 04:2B:4F:4A:69:2B:53:6B:C0:5B:72:60:28:CA:43:5D:93:F4:B9:33 Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Certificate serial: 082C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft Manifest number: 07E7 Signing time: Sat 06 Sep 2025 21:32:16 +0000 Manifest this update: Sat 06 Sep 2025 21:32:16 +0000 Manifest next update: Sat 13 Sep 2025 21:32:16 +0000 Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: Sj+9KrI6quV+obgrE2i1iqN7aSLyyaFxwMqig3AgHBQ=) 2: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: JGXFZsvdAlPkzVwMIVDlhUnyxUdEjpH4xc3F+m/pQB0=) 3: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: yu9kaJ9SbaIghj5mweHVls+umbPvibjZ8k0y4rtHgrI=) 4: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: KYrgpq+j2JdiosQSHACv2bRMY5BVzOvfLnyNf5narws=) 5: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: Y/iBnK8ZipjxkATaALxABZ9CTEeJIdjjxY8Yxx9n9DM=) 6: 0989F3EE120911EB83107638C4F9AE02.roa (hash: ZN83zETo/fGZjHplsgi4LIPj/1+Cv9tK+RMfhDQAvcM=) 7: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: MIyFaAMcoVX+JijHyNBp9lzEprzyQwwRu4V9wwVXios=) 8: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: CoOgUqT0FD59n+BELVSjes/s0qoXYfrPfM4+T31Fkoo=) 9: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: Ej4Olhx/k6YWemdl2TV8Frzo1JOOuwGbcCqfJq8lBxg=) 10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: UjevdaGjYYh/fLHbv94Vi82GRHni+SflrmcRbP8Ltsg=) 11: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: BJy4+HNv8kQ6Lc2CH7nff6rHz79DtOyFMzKFxBbxH6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2092 (0x82c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Validity Not Before: Sep 6 21:32:16 2025 GMT Not After : Sep 13 21:32:16 2025 GMT Subject: CN=68bca860-c54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:80:b1:a3:2b:26:8f:4e:ba:d7:ce:26:be:67: ff:c8:83:58:92:04:a3:13:10:3f:58:d0:cf:01:67: ca:90:5e:3a:d4:1d:9c:eb:db:db:96:d2:ac:74:49: 25:10:1e:00:90:15:de:14:76:8b:21:df:16:44:27: b5:a2:62:83:a3:fd:f2:6b:b4:36:dc:0f:84:0e:88: 7f:46:0a:a0:b2:20:2b:f7:10:a6:e7:f0:40:b3:52: f3:86:76:c9:18:10:75:f3:df:92:75:84:ef:c4:dc: bb:87:25:09:26:f8:8d:55:eb:67:6d:3c:06:46:01: 66:57:2d:ed:2a:60:9e:f0:56:c4:13:10:3f:7f:24: 9f:f3:b2:08:63:e1:5c:8c:8c:63:b5:66:2d:7b:bc: 91:92:85:0d:2d:1c:72:86:cf:9f:8a:69:d7:96:4d: f1:f1:92:c4:0a:b3:94:48:f2:7e:e0:dd:c6:cd:18: 61:64:40:5e:dd:e6:1f:e6:29:33:5b:a4:c7:d2:af: c1:17:ae:58:ac:14:0a:e9:9c:3b:55:61:66:e5:d6: 67:8e:2a:63:95:1f:59:53:dc:b6:00:98:35:94:bc: dc:2d:5f:68:7f:cc:8d:b6:8c:2b:0c:d4:30:72:c2: f7:98:2d:cf:9c:69:17:3a:2a:37:c6:a4:75:64:c7: ab:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2B:4F:4A:69:2B:53:6B:C0:5B:72:60:28:CA:43:5D:93:F4:B9:33 X509v3 Authority Key Identifier: keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:43:80:94:38:2b:59:24:6c:89:7e:ee:f6:bf:01:f1:2f:47: 54:8d:53:1f:cc:0b:2a:54:18:0b:27:5b:f4:f3:64:97:de:4b: 7c:8f:2d:ac:5a:cb:96:14:61:e5:51:84:6a:d1:fe:35:6e:f7: 63:d1:f4:85:33:bd:f1:85:46:45:6e:c4:54:02:50:bc:41:35: 99:05:ff:be:4c:45:42:fe:14:6b:af:42:1d:d2:fc:5c:e5:9d: 07:09:d8:fd:98:0c:52:2f:c1:4d:7c:3a:9a:ce:02:72:4c:dd: ce:a5:77:81:6b:13:22:d6:c8:c5:83:26:b1:56:44:5f:58:4c: ea:c0:fd:9b:c9:ed:28:e5:e2:eb:8d:ab:52:20:79:93:57:0f: 7b:65:3e:13:60:5c:ea:72:e1:3a:5e:ce:48:6d:c9:64:10:39: 7b:05:03:6d:ac:43:68:d1:43:36:ef:98:fe:fa:2e:ee:af:c7: c9:34:23:85:a8:65:a3:4f:ba:38:b1:98:f3:74:5b:43:c4:fa: 82:12:8f:8a:24:7b:83:f3:5b:ec:0e:88:80:c1:fd:10:89:5f: 29:e9:7c:8d:48:66:b3:d1:a9:eb:86:25:fe:9c:87:bb:af:76: 44:7d:af:67:8d:ed:54:55:d9:14:e2:13:fd:e6:ed:61:52:c2: 00:e0:bf:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3 NDRBQUY0ODAwHhcNMjUwOTA2MjEzMjE2WhcNMjUwOTEzMjEzMjE2WjAYMRYwFAYD VQQDEw02OGJjYTg2MC1jNTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA94Cxoysmj066184mvmf/yINYkgSjExA/WNDPAWfKkF461B2c69vbltKsdEkl EB4AkBXeFHaLId8WRCe1omKDo/3ya7Q23A+EDoh/RgqgsiAr9xCm5/BAs1LzhnbJ GBB189+SdYTvxNy7hyUJJviNVetnbTwGRgFmVy3tKmCe8FbEExA/fySf87IIY+Fc jIxjtWYte7yRkoUNLRxyhs+fimnXlk3x8ZLECrOUSPJ+4N3GzRhhZEBe3eYf5ikz W6TH0q/BF65YrBQK6Zw7VWFm5dZnjipjlR9ZU9y2AJg1lLzcLV9of8yNtowrDNQw csL3mC3PnGkXOio3xqR1ZMer9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQrT0pp K1NrwFtyYCjKQ12T9LkzMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI1Ri8yMkQ5MUY3MjExQ0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pv ZDJBdm1VLVBfVDUwU3E5SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMQ4CUOCtZJGyJfu72vwHxL0dUjVMfzAsqVBgLJ1v082SX3kt8jy2s WsuWFGHlUYRq0f41bvdj0fSFM73xhUZFbsRUAlC8QTWZBf++TEVC/hRrr0Id0vxc 5Z0HCdj9mAxSL8FNfDqazgJyTN3OpXeBaxMi1sjFgyaxVkRfWEzqwP2bye0o5eLr jatSIHmTVw97ZT4TYFzqcuE6Xs5IbclkEDl7BQNtrENo0UM275j++i7ur8fJNCOF qGWjT7o4sZjzdFtDxPqCEo+KJHuD81vsDoiAwf0QiV8p6XyNSGaz0anrhiX+nIe7 r3ZEfa9nje1UVdkU4hP95u1hUsIA4L8t -----END CERTIFICATE-----Generated at Sun Sep 7 23:29:25 2025 by rpki-client