$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft File: A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json) Hash identifier: cczAHEM3+VvPgmocfhMYOuElx3j4EGwJq/fH9CnUveQ= Subject key identifier: 07:69:7B:8D:CD:B5:9F:55:B7:A6:A7:53:A7:B7:48:AA:84:24:A7:7A Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63 Certificate issuer: /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263 Certificate serial: 0C2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft Manifest number: 0C16 Signing time: Thu 18 Sep 2025 18:56:12 +0000 Manifest this update: Thu 18 Sep 2025 18:56:12 +0000 Manifest next update: Thu 25 Sep 2025 18:56:12 +0000 Files and hashes: 1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: XDgeen7R+WMGD9GLoyVSJ8OALosb3usyMhGKGFG2jkE=) 2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: If6A0dtzlgPVB4CBNXQ4TMiF5xMEzeKvLljq5QFI3bk=) 3: 398848523A0011EFB7007939C4F9AE02.roa (hash: Zlhwy82VHpRYLPT4enDdRaV9Hjue+wnu8x2KNE0lTzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3115 (0xc2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4003, serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263 Validity Not Before: Sep 18 18:56:12 2025 GMT Not After : Sep 25 18:56:12 2025 GMT Subject: CN=68cc55cc-380e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:76:4e:ee:5b:de:bc:37:70:1e:a5:a0:12:18: c4:88:2b:07:d2:1d:68:40:8a:84:27:b9:2f:d9:14: a4:0a:1a:2a:58:c9:89:37:c6:9b:17:97:9f:04:5c: 4c:ef:ff:11:bf:36:35:29:f6:23:c3:0c:77:58:4d: 8b:29:98:e8:e9:31:a8:ee:d0:18:85:88:c3:89:7b: db:b4:54:7a:ef:2c:8b:36:08:22:6a:82:f8:4a:6f: 49:05:58:ea:4d:32:e8:ec:a1:be:37:0d:a0:8f:4c: a9:dd:bf:b9:c4:83:8c:7d:f2:94:bc:69:82:bd:7c: a1:cc:d2:e2:20:ff:53:42:81:c8:81:d8:d4:91:6c: fe:42:84:50:c6:5b:b5:3c:06:0d:56:cf:5f:83:f3: e3:8a:31:d3:c6:04:88:e5:42:a1:b9:93:07:01:f3: 80:2a:95:fb:a3:03:bf:d5:2e:f5:39:17:b9:d5:93: c8:43:57:69:1c:f9:c5:ca:2e:28:54:a3:11:c3:cb: b1:ef:85:62:15:7c:fc:1c:87:e2:27:2f:a7:c3:c4: f4:61:11:08:6d:1d:7b:8d:ae:2c:f9:0e:c6:19:6b: e4:9d:f0:97:bd:a0:f5:a7:46:53:af:5d:89:71:fc: 12:57:50:6e:8f:f6:10:2a:7f:04:79:13:17:36:db: 6c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:69:7B:8D:CD:B5:9F:55:B7:A6:A7:53:A7:B7:48:AA:84:24:A7:7A X509v3 Authority Key Identifier: keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:47:51:fe:e8:b5:ef:36:2c:c9:be:84:bb:05:10:12:c3:d7: d2:f9:f0:e2:76:e3:2f:57:81:74:c8:35:30:3a:b1:46:f2:3a: 08:78:bc:5e:48:5e:e3:13:66:07:25:ed:a3:2e:e1:4f:56:f0: 07:3b:5b:73:f1:f6:7a:5d:70:d2:a3:3e:5d:6d:61:9a:e7:43: d3:92:46:ae:02:40:af:a2:2a:64:a5:08:db:ca:1b:46:06:34: 9b:d5:45:e7:77:d6:cc:7c:5b:55:12:65:b5:af:3b:8c:ef:fe: 49:84:51:6d:6a:a8:75:7e:59:17:08:8c:61:71:7e:87:ce:4a: 9b:cc:3c:2e:00:6d:50:51:f3:13:1a:0b:e4:a3:b2:f8:06:f2: 9f:54:65:7d:b0:47:92:40:fa:e9:31:94:01:31:94:b5:78:b8: 1e:ee:1b:a3:95:3a:78:cd:5d:08:a0:3d:67:7c:1f:d5:78:6a: b9:b2:b2:dd:39:07:5d:14:1e:b9:7d:aa:b8:8c:79:03:eb:5f: 0b:c2:23:93:c3:a4:5a:3a:5b:f1:45:b1:8b:af:af:8c:bd:9b: 06:4a:5c:76:c8:2e:1e:dc:6b:9a:2e:67:45:e3:50:17:11:e3: e0:a3:b7:7b:74:88:12:53:16:59:d8:e8:5a:78:fa:4c:4e:6b: 70:fc:ef:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwMDMxMTAvBgNVBAUTKDAzOEE4NkYzNjJCMjU1N0Y5NEJFNzcyRUUwQzVGRDMx ODQ1RkUyNjMwHhcNMjUwOTE4MTg1NjEyWhcNMjUwOTI1MTg1NjEyWjAYMRYwFAYD VQQDEw02OGNjNTVjYy0zODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43ZO7lvevDdwHqWgEhjEiCsH0h1oQIqEJ7kv2RSkChoqWMmJN8abF5efBFxM 7/8RvzY1KfYjwwx3WE2LKZjo6TGo7tAYhYjDiXvbtFR67yyLNggiaoL4Sm9JBVjq TTLo7KG+Nw2gj0yp3b+5xIOMffKUvGmCvXyhzNLiIP9TQoHIgdjUkWz+QoRQxlu1 PAYNVs9fg/PjijHTxgSI5UKhuZMHAfOAKpX7owO/1S71ORe51ZPIQ1dpHPnFyi4o VKMRw8ux74ViFXz8HIfiJy+nw8T0YREIbR17ja4s+Q7GGWvknfCXvaD1p0ZTr12J cfwSV1Buj/YQKn8EeRMXNttsWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdpe43N tZ9Vt6anU6e3SKqEJKd6MB8GA1UdIwQYMBaAFAOKhvNislV/lL53LuDF/TGEX+Jj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDAwMy9COEU4QUQ3MjFB RDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZYLVV2bmN1NE1YOU1ZUmY0 bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0cUc4Mkt5VlgtVXZuY3U0TVg5TVlSZjRtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDAwMy9COEU4QUQ3MjFBRDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZY LVV2bmN1NE1YOU1ZUmY0bU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaR1H+6LXvNizJvoS7BRASw9fS+fDiduMvV4F0yDUwOrFG8joIeLxe SF7jE2YHJe2jLuFPVvAHO1tz8fZ6XXDSoz5dbWGa50PTkkauAkCvoipkpQjbyhtG BjSb1UXnd9bMfFtVEmW1rzuM7/5JhFFtaqh1flkXCIxhcX6HzkqbzDwuAG1QUfMT Ggvko7L4BvKfVGV9sEeSQPrpMZQBMZS1eLge7hujlTp4zV0IoD1nfB/VeGq5srLd OQddFB65faq4jHkD618LwiOTw6RaOlvxRbGLr6+MvZsGSlx2yC4e3GuaLmdF41AX EePgo7d7dIgSUxZZ2OhaePpMTmtw/O86 -----END CERTIFICATE-----Generated at Fri Sep 19 09:13:24 2025 by rpki-client