$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft File: ck4fZGxFGwGeHNo21DRq25tf2_g.mft (raw, json) Hash identifier: CCbI+lMSkujEEaLPeYoy0htn0KT+Ox9H2p4whd3XBVI= Subject key identifier: FB:69:D2:95:FA:EE:AE:2A:DD:BC:EE:FA:8A:EF:16:EF:72:20:DA:30 Authority key identifier: 72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8 Certificate issuer: /CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft Manifest number: 0230 Signing time: Fri 19 Sep 2025 02:19:44 +0000 Manifest this update: Fri 19 Sep 2025 02:19:44 +0000 Manifest next update: Fri 26 Sep 2025 02:19:43 +0000 Files and hashes: 1: ck4fZGxFGwGeHNo21DRq25tf2_g.crl (hash: qIByUcp37sH8LrQOYexEDHv8YCwa7iqIvPRZai+85ss=) 2: A6789038400211ED808CCF0DC4F9AE02.roa (hash: tO/Vg+1jM6TnaROUPSYxvRElxqw/2z5ZN8ZDcSK7tnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 02:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E38, serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8 Validity Not Before: Sep 19 02:19:44 2025 GMT Not After : Sep 26 02:19:43 2025 GMT Subject: CN=68ccbdc0-d85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d0:c3:7b:7c:65:39:27:9a:e0:91:c5:d9:0c: a2:dd:2c:3d:21:c4:ef:69:28:58:cc:43:15:aa:e5: f6:d6:c8:c2:bb:8c:05:69:05:55:5f:be:9e:68:0b: 7c:34:2d:e7:1a:24:f2:bd:52:bc:ee:07:15:55:aa: 28:e8:9f:74:7a:c7:e1:0f:cc:09:6b:f8:5d:32:f3: 8f:4c:76:55:90:ee:74:69:19:bc:f6:66:df:7c:91: 92:80:73:f3:16:a8:dc:71:e9:93:08:c5:35:ed:ff: fc:3f:e5:fd:30:5c:63:26:c6:66:04:26:c2:c2:91: bd:73:a8:c3:f4:8d:9f:a6:7b:82:6e:d7:e7:c4:59: 3b:82:44:28:ab:f8:73:f3:77:4a:06:04:90:85:eb: 5f:ef:10:b8:4a:f9:9a:7d:f0:11:b3:6a:8b:be:39: 4f:13:1b:17:04:74:e8:59:a3:82:05:13:44:ac:9c: 05:b4:41:0c:79:11:49:2a:8c:06:ec:78:3e:31:34: c8:ad:37:d6:b1:0a:82:a6:7a:07:95:36:a6:60:ec: e1:2f:57:c0:c6:47:bd:f0:c1:91:54:4d:0b:5f:92: da:cf:e7:04:ef:7f:c4:8d:e6:38:9f:bb:e3:5c:84: f7:1c:24:94:38:e1:51:b1:76:5d:ea:42:55:d6:b2: 6b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:69:D2:95:FA:EE:AE:2A:DD:BC:EE:FA:8A:EF:16:EF:72:20:DA:30 X509v3 Authority Key Identifier: keyid:72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:8e:12:36:73:29:c9:8a:0f:38:18:c4:bf:4e:4b:71:fe:de: 07:d3:36:b7:f5:d0:eb:62:52:71:ce:b8:19:2f:9e:88:95:8c: fa:10:8e:a0:1d:da:17:41:bc:b9:63:f0:95:89:9d:da:1c:55: 2a:2d:5b:0c:66:09:83:18:38:61:46:94:4f:19:25:73:75:26: f8:cb:91:71:52:fa:f4:52:db:e0:d2:a8:1f:dc:99:86:96:29: 33:1e:29:39:eb:18:a0:eb:1e:f8:dd:e6:c4:a2:e8:0d:25:76: be:3c:01:03:1d:32:78:58:d4:89:da:70:f7:1d:4e:52:7c:de: 5b:61:09:8e:11:41:72:36:11:04:78:92:b1:8d:e0:f8:5c:35: e1:4d:e9:2c:0c:2b:cb:59:6e:05:f2:53:03:17:73:5e:4c:18: e1:fd:de:1d:fd:dc:b4:ca:48:aa:5c:44:0b:c4:70:59:bc:29: b0:bc:80:26:ef:00:00:62:d7:07:56:9d:ce:98:03:02:72:3f: e9:eb:c6:9d:cd:42:43:31:06:20:19:06:bc:29:be:aa:79:ef: 20:01:1b:df:bb:33:fd:47:b1:84:58:74:b4:d1:52:b8:2a:2a: 33:bb:b8:ca:43:47:6a:a3:34:87:41:90:7a:b5:50:4e:5e:24: 7c:fb:2c:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFMzgxMTAvBgNVBAUTKDcyNEUxRjY0NkM0NTFCMDE5RTFDREEzNkQ0MzQ2QURC OUI1RkRCRjgwHhcNMjUwOTE5MDIxOTQ0WhcNMjUwOTI2MDIxOTQzWjAYMRYwFAYD VQQDEw02OGNjYmRjMC1kODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztDDe3xlOSea4JHF2Qyi3Sw9IcTvaShYzEMVquX21sjCu4wFaQVVX76eaAt8 NC3nGiTyvVK87gcVVaoo6J90esfhD8wJa/hdMvOPTHZVkO50aRm89mbffJGSgHPz FqjccemTCMU17f/8P+X9MFxjJsZmBCbCwpG9c6jD9I2fpnuCbtfnxFk7gkQoq/hz 83dKBgSQhetf7xC4SvmaffARs2qLvjlPExsXBHToWaOCBRNErJwFtEEMeRFJKowG 7Hg+MTTIrTfWsQqCpnoHlTamYOzhL1fAxke98MGRVE0LX5Laz+cE73/EjeY4n7vj XIT3HCSUOOFRsXZd6kJV1rJrhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtp0pX6 7q4q3bzu+orvFu9yINowMB8GA1UdIwQYMBaAFHJOH2RsRRsBnhzaNtQ0atubX9v4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEUzOC81MUYwREIzQzNG RkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3R2VITm8yMURScTI1dGYy X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrNGZaR3hGR3dHZUhObzIxRFJxMjV0ZjJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEUzOC81MUYwREIzQzNGRkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3 R2VITm8yMURScTI1dGYyX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABjhI2cynJig84GMS/Tktx/t4H0za39dDrYlJxzrgZL56IlYz6EI6g HdoXQby5Y/CViZ3aHFUqLVsMZgmDGDhhRpRPGSVzdSb4y5FxUvr0Utvg0qgf3JmG likzHik56xig6x743ebEougNJXa+PAEDHTJ4WNSJ2nD3HU5SfN5bYQmOEUFyNhEE eJKxjeD4XDXhTeksDCvLWW4F8lMDF3NeTBjh/d4d/dy0ykiqXEQLxHBZvCmwvIAm 7wAAYtcHVp3OmAMCcj/p68adzUJDMQYgGQa8Kb6qee8gARvfuzP9R7GEWHS00VK4 Kiozu7jKQ0dqozSHQZB6tVBOXiR8+yxX -----END CERTIFICATE-----Generated at Fri Sep 19 13:59:46 2025 by rpki-client