$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json) Hash identifier: 2+e+IqkWQZdbWFSoPu27MoQyvhbBSfQXlicBVDigAvY= Subject key identifier: CB:41:2A:0E:9C:58:7F:F9:D7:E8:4E:22:E4:8B:7F:2F:8E:AF:AB:15 Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Certificate serial: 0DBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft Manifest number: 0DA1 Signing time: Sun 24 Aug 2025 17:54:20 +0000 Manifest this update: Sun 24 Aug 2025 17:54:20 +0000 Manifest next update: Sun 31 Aug 2025 17:54:20 +0000 Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: Y+zgLKwxk+Cw9l6QqgNyt13CBAnooF/L940rRIa0FYo=) 2: 4E98421A162311EB90D1657AC4F9AE02.roa (hash: WuP8PbwAvn5ZuVpPVwFIOAD7pGpuzCnA4Z3ircNjmXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3515 (0xdbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Validity Not Before: Aug 24 17:54:20 2025 GMT Not After : Aug 31 17:54:20 2025 GMT Subject: CN=68ab51cc-abd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:69:a2:d8:9f:c6:01:43:6f:ea:e2:65:29:21: fc:7b:b5:df:5c:61:90:87:90:26:35:51:bc:97:72: d2:5a:da:92:99:65:ef:ec:4a:07:9e:fb:96:f7:99: b4:f7:e6:4e:46:98:d1:b0:68:e6:d8:e3:30:f6:99: 5e:3a:8e:8d:1a:50:67:75:56:f6:3f:28:01:fb:dc: 3c:2d:db:3e:30:d4:1e:07:ef:ce:0f:c4:4c:06:04: 62:4c:8a:6e:d8:8d:78:85:f3:bf:3e:82:e8:8f:27: 68:17:06:df:16:69:fc:83:23:6f:03:4c:20:11:36: ab:cf:87:a3:a9:76:06:ec:77:79:7e:c7:d1:57:aa: 3f:9a:71:80:7e:6f:ed:95:b0:38:c6:1e:01:f2:ef: ef:10:1d:5e:be:c3:74:f2:3f:1f:4d:3e:67:f8:f6: 96:8e:a9:c1:0f:ab:c7:74:e2:36:38:4f:09:f6:d1: c0:f3:da:26:6e:07:59:5f:12:5a:0c:3f:a2:73:9f: b2:32:23:f9:ea:66:35:28:53:9f:0d:2b:93:24:31: b8:cf:88:76:33:48:8d:4f:fb:45:ea:2a:0a:3e:f8: 26:4b:3d:1a:f9:4a:d9:52:35:6f:95:92:5d:b7:6d: 5f:39:78:81:79:ce:12:17:7f:fe:ca:63:39:c3:87: eb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:41:2A:0E:9C:58:7F:F9:D7:E8:4E:22:E4:8B:7F:2F:8E:AF:AB:15 X509v3 Authority Key Identifier: keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c7:53:8b:bb:38:14:30:85:df:94:61:77:59:3a:64:d4:c2: d5:4b:bc:50:3b:51:09:94:d8:fc:97:01:00:af:7c:52:fe:74: db:7b:d9:56:2b:57:ea:72:ec:14:c1:23:90:c3:54:fd:9f:79: 8b:82:f0:f5:29:cc:06:3f:77:da:71:e7:67:6f:1a:83:ab:ec: 8a:ca:9f:bd:8b:98:1d:c2:9e:6f:8a:e0:34:f0:ab:73:75:fd: cf:f1:3b:7d:97:2c:0a:6f:6c:1b:80:63:b7:5b:33:4a:59:29: 0d:63:68:f1:25:e9:b6:14:56:77:3b:93:53:21:ea:b7:0e:f3: 31:e6:bd:32:7c:3d:45:c5:e9:8d:46:49:e6:a2:e1:06:4f:47: 4b:0c:67:1a:4d:fd:e9:17:bf:c2:b7:c0:7d:cf:63:a8:85:1b: c2:0c:0f:53:a1:ac:3b:99:9a:10:30:8b:10:52:74:27:09:7d: 6d:45:6f:b7:4c:63:b1:27:c0:ca:2b:d9:24:5e:1e:da:fc:f4: 03:75:7a:08:13:c1:43:58:d0:34:c3:4d:f4:9d:be:c9:fd:f0: 04:15:fe:49:3b:26:b7:d5:fa:4a:15:04:8e:c7:6f:0d:d1:8d: 46:28:5d:80:68:e3:51:fa:da:e6:1e:09:0a:3d:ba:d1:c1:ab: 99:6b:82:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdGNDcxMTAvBgNVBAUTKEUzMEE0Q0RERjZDMjY5QUNCQTM5Q0E1OEFBOTU5MkQ4 OTg2NDAxRjQwHhcNMjUwODI0MTc1NDIwWhcNMjUwODMxMTc1NDIwWjAYMRYwFAYD VQQDEw02OGFiNTFjYy1hYmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Gmi2J/GAUNv6uJlKSH8e7XfXGGQh5AmNVG8l3LSWtqSmWXv7EoHnvuW95m0 9+ZORpjRsGjm2OMw9pleOo6NGlBndVb2PygB+9w8Lds+MNQeB+/OD8RMBgRiTIpu 2I14hfO/PoLojydoFwbfFmn8gyNvA0wgETarz4ejqXYG7Hd5fsfRV6o/mnGAfm/t lbA4xh4B8u/vEB1evsN08j8fTT5n+PaWjqnBD6vHdOI2OE8J9tHA89ombgdZXxJa DD+ic5+yMiP56mY1KFOfDSuTJDG4z4h2M0iNT/tF6ioKPvgmSz0a+UrZUjVvlZJd t21fOXiBec4SF3/+ymM5w4fr7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtBKg6c WH/51+hOIuSLfy+Or6sVMB8GA1UdIwQYMBaAFOMKTN32wmmsujnKWKqVktiYZAH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0Y0Ny8zMzBBMDA4Q0NF NTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2FheTZPY3BZcXBXUzJKaGtB ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR3cE0zZmJDYWF5Nk9jcFlxcFdTMkpoa0FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0Y0Ny8zMzBBMDA4Q0NFNTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2Fh eTZPY3BZcXBXUzJKaGtBZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBex1OLuzgUMIXflGF3WTpk1MLVS7xQO1EJlNj8lwEAr3xS/nTbe9lW K1fqcuwUwSOQw1T9n3mLgvD1KcwGP3facednbxqDq+yKyp+9i5gdwp5viuA08Ktz df3P8Tt9lywKb2wbgGO3WzNKWSkNY2jxJem2FFZ3O5NTIeq3DvMx5r0yfD1FxemN RknmouEGT0dLDGcaTf3pF7/Ct8B9z2OohRvCDA9Toaw7mZoQMIsQUnQnCX1tRW+3 TGOxJ8DKK9kkXh7a/PQDdXoIE8FDWNA0w030nb7J/fAEFf5JOya31fpKFQSOx28N 0Y1GKF2AaONR+trmHgkKPbrRwauZa4LY -----END CERTIFICATE-----Generated at Sun Aug 24 21:46:25 2025 by rpki-client