$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft File: H4-gq_qNf39-fqANVuoBxwky5gc.mft (raw, json) Hash identifier: ZmHgF+sH8gzRCrfpS8HULslPo3EufD6nIRaobKL+vnQ= Subject key identifier: 0F:F6:EA:1E:E1:DB:A1:DF:F8:37:D6:6C:59:FA:E1:C1:B0:B8:F9:65 Authority key identifier: 1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 Certificate issuer: /CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Certificate serial: 0EDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft Manifest number: 1047 Signing time: Thu 18 Sep 2025 17:49:41 +0000 Manifest this update: Thu 18 Sep 2025 17:49:40 +0000 Manifest next update: Thu 25 Sep 2025 17:49:40 +0000 Files and hashes: 1: H4-gq_qNf39-fqANVuoBxwky5gc.crl (hash: /ZTkP8EhpywBfOrRWINxcNKcrzT5uk84ZWvpRJy8Ivs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3804 (0xedc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Validity Not Before: Sep 18 17:49:40 2025 GMT Not After : Sep 25 17:49:40 2025 GMT Subject: CN=68cc4634-9ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:b5:7d:bf:9a:1c:96:f4:92:eb:f4:b3:4e: 47:c5:c4:cc:1f:ab:ed:d6:ae:36:ec:f8:78:f5:17: c7:19:25:0c:80:a0:4a:82:65:00:e4:91:90:54:23: d8:00:d6:32:59:c8:12:3e:18:f1:40:f1:66:e5:df: 2b:38:50:b0:c4:8d:2e:04:3a:a0:21:11:1a:70:46: 4e:ea:91:12:cd:a5:e8:78:9b:7a:a3:3b:0a:fa:d1: 5e:2e:e6:83:27:81:a9:6a:9b:05:2a:0d:ae:28:a9: 2a:bb:65:d3:16:e4:62:5d:2d:84:de:67:96:08:a2: 2d:76:0c:c3:79:37:98:1f:43:b7:f9:ee:3c:60:1f: 21:9d:4e:b0:20:ec:b7:db:5a:cf:82:63:24:42:82: d2:f3:9b:03:cc:2d:63:81:e0:80:cc:9f:8d:9b:79: e6:f3:40:7c:1a:03:92:88:87:36:2f:5c:71:8f:37: 24:dc:73:75:26:5b:d7:2b:7e:67:2e:0a:fd:61:7f: bb:33:cc:39:c6:dd:78:ac:8b:83:fc:ed:67:67:9c: f2:53:21:eb:d4:19:da:f3:5e:f4:fe:c1:03:a7:54: 1d:7c:1c:b5:38:20:5d:d2:77:c1:e1:83:6c:5b:c0: b9:fd:3b:b7:bc:ee:fe:81:41:e5:ae:d1:41:97:e6: b7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F6:EA:1E:E1:DB:A1:DF:F8:37:D6:6C:59:FA:E1:C1:B0:B8:F9:65 X509v3 Authority Key Identifier: keyid:1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:fe:8d:e5:f2:7c:26:b6:34:b2:56:0b:c6:7d:b1:81:d8:9a: ea:fa:40:18:b8:90:2c:fc:99:0d:cd:63:de:d0:3a:e5:da:f0: 4a:55:66:10:5a:f3:6b:1f:1a:68:b8:dc:a3:4e:48:04:ed:2d: c3:12:cc:03:1c:a3:ec:7a:98:50:f2:fb:1b:b1:24:00:5b:ae: 86:d0:62:32:98:a8:c4:ba:71:03:b2:ae:7d:68:b8:9a:96:2e: fd:01:bf:2d:41:04:da:7a:b5:f5:be:f8:25:a7:17:be:d0:97: 89:43:57:d6:d2:69:98:c4:23:57:82:43:8e:6f:da:3e:40:32: 53:be:95:21:54:08:24:7f:19:f8:0a:a2:05:da:a2:d8:dc:42: 12:34:02:16:d2:dd:b8:a1:9c:37:aa:89:02:05:08:73:8e:79: e8:da:59:9f:18:bd:bf:6d:3a:e3:41:55:8c:69:35:c5:a2:16: 7d:5a:69:f9:12:bd:c7:a2:20:19:06:1d:23:22:ca:ca:29:e1: 9e:01:99:97:4d:4f:21:49:43:e0:fd:8c:06:8f:94:2d:a7:96: 88:8d:86:06:13:af:67:a3:80:3d:68:cc:ca:2a:5f:9b:99:9d: f5:9d:f0:28:0e:08:f3:c6:79:e9:46:ee:24:40:ec:0d:0c:9a: 86:15:52:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKDFGOEZBMEFCRkE4RDdGN0Y3RTdFQTAwRDU2RUEwMUM3 MDkzMkU2MDcwHhcNMjUwOTE4MTc0OTQwWhcNMjUwOTI1MTc0OTQwWjAYMRYwFAYD VQQDEw02OGNjNDYzNC05YWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAK1fb+aHJb0kuv0s05HxcTMH6vt1q427Ph49RfHGSUMgKBKgmUA5JGQVCPY ANYyWcgSPhjxQPFm5d8rOFCwxI0uBDqgIREacEZO6pESzaXoeJt6ozsK+tFeLuaD J4GpapsFKg2uKKkqu2XTFuRiXS2E3meWCKItdgzDeTeYH0O3+e48YB8hnU6wIOy3 21rPgmMkQoLS85sDzC1jgeCAzJ+Nm3nm80B8GgOSiIc2L1xxjzck3HN1JlvXK35n Lgr9YX+7M8w5xt14rIuD/O1nZ5zyUyHr1Bna8170/sEDp1QdfBy1OCBd0nfB4YNs W8C5/Tu3vO7+gUHlrtFBl+a3RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/26h7h 26Hf+DfWbFn64cGwuPllMB8GA1UdIwQYMBaAFB+PoKv6jX9/fn6gDVbqAccJMuYH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYzOS1mcUFOVnVvQnh3a3k1 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g0LWdxX3FOZjM5LWZxQU5WdW9CeHdreTVnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYz OS1mcUFOVnVvQnh3a3k1Z2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj/o3l8nwmtjSyVgvGfbGB2Jrq+kAYuJAs/JkNzWPe0Drl2vBKVWYQ WvNrHxpouNyjTkgE7S3DEswDHKPsephQ8vsbsSQAW66G0GIymKjEunEDsq59aLia li79Ab8tQQTaerX1vvglpxe+0JeJQ1fW0mmYxCNXgkOOb9o+QDJTvpUhVAgkfxn4 CqIF2qLY3EISNAIW0t24oZw3qokCBQhzjnno2lmfGL2/bTrjQVWMaTXFohZ9Wmn5 Er3HoiAZBh0jIsrKKeGeAZmXTU8hSUPg/YwGj5Qtp5aIjYYGE69no4A9aMzKKl+b mZ31nfAoDgjzxnnpRu4kQOwNDJqGFVI9 -----END CERTIFICATE-----Generated at Thu Sep 18 23:28:15 2025 by rpki-client