$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft File: 4uYwZnXV9U0ge2eCqWx6qWex_JE.mft (raw, json) Hash identifier: 4JGb+WXrDXC21I3e4qztUmnSppF03ulAh8YEtRPte20= Subject key identifier: AA:8D:15:6F:B8:66:7F:5B:CA:64:89:73:6F:69:66:EC:72:EE:40:CD Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 Certificate issuer: /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft Manifest number: 94 Signing time: Sun 07 Sep 2025 07:00:09 +0000 Manifest this update: Sun 07 Sep 2025 07:00:09 +0000 Manifest next update: Sun 14 Sep 2025 07:00:09 +0000 Files and hashes: 1: 4uYwZnXV9U0ge2eCqWx6qWex_JE.crl (hash: R7wr1ZqRnin+1EZx+g4dKz4wxP5j7uwi+p/rFbf/Zco=) 2: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (hash: +DamE3tU9Fo7eBYdyyuSzK/6/nm5KtgHW7yUMIG6MHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Validity Not Before: Sep 7 07:00:09 2025 GMT Not After : Sep 14 07:00:09 2025 GMT Subject: CN=68bd2d79-e799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b2:38:09:7f:58:73:0c:95:68:8f:c0:28:83: ef:0c:a2:89:1e:96:69:ae:2b:b5:db:84:fb:53:5c: 49:df:b4:4a:80:6e:2c:8f:f5:ca:14:02:cc:5e:c4: 88:ec:fd:ad:cf:c7:cc:e1:40:85:33:d7:83:e1:01: 22:cc:ad:b5:13:22:c2:c7:b5:93:31:77:ad:56:07: 9d:00:ad:35:3d:df:66:60:bc:7c:d0:10:3f:87:81: ae:3c:61:7a:f4:13:b2:58:50:f6:91:67:a7:74:f5: 1e:ca:1e:fc:7d:88:41:c2:e8:cd:a4:8c:d4:08:46: fc:bb:b3:18:fa:c6:8c:53:d4:69:10:4b:a1:22:4d: 32:09:2a:b9:cc:84:f9:44:0d:9a:5f:be:6b:a9:51: 2f:07:3a:a8:3a:3b:21:e1:27:f5:84:ec:04:be:03: bb:bb:a9:a0:3d:14:ba:90:42:20:af:dc:7b:fd:63: 4e:2f:a7:82:75:d7:5b:c3:84:7b:35:0c:e4:46:b8: 7a:36:f1:35:aa:b5:d8:81:9e:40:10:0c:93:60:cf: f6:c8:13:9d:c2:19:37:44:5d:e1:5f:34:b6:60:f9: d6:be:25:e2:98:ba:4f:f9:6d:f0:6a:5b:45:88:97: c5:35:6c:3b:11:17:ee:fb:31:de:75:e7:53:c5:a5: 96:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8D:15:6F:B8:66:7F:5B:CA:64:89:73:6F:69:66:EC:72:EE:40:CD X509v3 Authority Key Identifier: keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:96:6f:e1:40:4b:38:52:c6:dd:c4:67:ea:0f:0e:85:87:73: c3:b4:52:13:83:df:24:bd:ad:2c:f9:38:3b:da:e2:1d:13:62: d7:24:ac:c5:36:a4:0c:dc:14:a7:ae:95:ea:9f:94:fe:cf:87: c3:e2:4f:c8:9a:70:6c:10:b0:63:57:36:30:60:b8:ab:a8:e0: a8:14:6e:82:3d:b5:dc:fb:d8:5d:b4:37:4f:53:52:c3:55:74: 3c:c2:59:9d:13:6c:ac:32:4d:18:6a:2d:35:28:f4:74:b3:d6: 83:06:8d:20:64:43:4c:5b:f1:f8:89:59:01:7f:10:36:27:00: 90:bb:02:a1:3a:bb:ec:2e:94:a0:38:0d:7d:50:9b:7f:f9:40: 17:5e:d9:54:14:4d:03:a6:5f:f1:6e:5a:be:75:89:71:80:65: 19:cf:4b:31:ad:bd:7c:3e:bb:b5:9d:90:19:2d:71:d5:c5:11: c8:a7:c9:d3:41:9d:32:53:20:7e:48:de:39:79:d7:e4:3a:09: 9d:78:66:ce:d3:77:ea:95:01:3c:b4:77:c1:fd:63:c2:3e:d5: 54:7b:26:6a:ad:fd:f6:65:e2:69:66:e8:e9:60:73:60:ff:ec: de:49:c9:86:25:88:3b:8b:ab:36:98:09:51:8e:cf:08:a8:10: c2:d5:ae:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBQzgxMTAvBgNVBAUTKEUyRTYzMDY2NzVENUY1NEQyMDdCNjc4MkE5NkM3QUE5 NjdCMUZDOTEwHhcNMjUwOTA3MDcwMDA5WhcNMjUwOTE0MDcwMDA5WjAYMRYwFAYD VQQDEw02OGJkMmQ3OS1lNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8rI4CX9YcwyVaI/AKIPvDKKJHpZpriu124T7U1xJ37RKgG4sj/XKFALMXsSI 7P2tz8fM4UCFM9eD4QEizK21EyLCx7WTMXetVgedAK01Pd9mYLx80BA/h4GuPGF6 9BOyWFD2kWendPUeyh78fYhBwujNpIzUCEb8u7MY+saMU9RpEEuhIk0yCSq5zIT5 RA2aX75rqVEvBzqoOjsh4Sf1hOwEvgO7u6mgPRS6kEIgr9x7/WNOL6eCdddbw4R7 NQzkRrh6NvE1qrXYgZ5AEAyTYM/2yBOdwhk3RF3hXzS2YPnWviXimLpP+W3waltF iJfFNWw7ERfu+zHededTxaWW0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqNFW+4 Zn9bymSJc29pZuxy7kDNMB8GA1UdIwQYMBaAFOLmMGZ11fVNIHtngqlseqlnsfyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEFDOC9FOUJFMDVEQ0Ix M0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi80dVl3Wm5YVjlVMGdlMmVDcVd4NnFXZXhf SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1WXdablhWOVUwZ2UyZUNxV3g2cVdleF9KRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEFDOC9FOUJFMDVEQ0IxM0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi80dVl3Wm5YVjlV MGdlMmVDcVd4NnFXZXhfSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAelm/hQEs4UsbdxGfqDw6Fh3PDtFITg98kva0s+Tg72uIdE2LXJKzF NqQM3BSnrpXqn5T+z4fD4k/ImnBsELBjVzYwYLirqOCoFG6CPbXc+9hdtDdPU1LD VXQ8wlmdE2ysMk0Yai01KPR0s9aDBo0gZENMW/H4iVkBfxA2JwCQuwKhOrvsLpSg OA19UJt/+UAXXtlUFE0Dpl/xblq+dYlxgGUZz0sxrb18Pru1nZAZLXHVxRHIp8nT QZ0yUyB+SN45edfkOgmdeGbO03fqlQE8tHfB/WPCPtVUeyZqrf32ZeJpZujpYHNg /+zeScmGJYg7i6s2mAlRjs8IqBDC1a55 -----END CERTIFICATE-----Generated at Mon Sep 8 17:40:29 2025 by rpki-client