$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft File: 4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json) Hash identifier: MJsDEanz8f1U+x+baXCfudHO/XVKC2nQf4dip93gP0g= Subject key identifier: 84:BB:DF:E1:C4:5C:B3:2A:25:2A:A4:AB:41:37:9C:24:6A:6C:B5:CE Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 Certificate issuer: /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Certificate serial: 0D19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft Manifest number: 0D0D Signing time: Wed 20 Aug 2025 18:09:39 +0000 Manifest this update: Wed 20 Aug 2025 18:09:38 +0000 Manifest next update: Wed 27 Aug 2025 18:09:38 +0000 Files and hashes: 1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: OZzE5WjdS7Xnx+8CO4LW1/LTrI5tJnme1kp096uwOK8=) 2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: qxCxFSPkCJMsK7i3RHMxc9Lr9Tcp57aZA1WThFY3ZFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC561, serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Validity Not Before: Aug 20 18:09:38 2025 GMT Not After : Aug 27 18:09:38 2025 GMT Subject: CN=68a60f62-9c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:70:70:91:5b:b5:a2:4f:5d:4e:5d:44:90: 73:76:c4:cd:83:2d:aa:4f:af:3b:8c:ab:57:e0:b4: 35:2a:71:68:03:9e:24:8b:00:5a:2f:8b:74:6c:c9: 1f:a3:5f:62:1c:ea:3a:dc:ad:93:a4:86:2d:0f:de: 10:51:ba:1b:89:58:24:b8:de:1b:8e:d1:f7:e8:e1: c0:38:3c:30:4e:a0:3b:00:85:f8:d2:7d:d1:00:ab: 9a:78:82:c6:67:28:06:fc:82:b9:cb:39:da:a9:0f: 8c:0e:e3:77:e2:8f:e0:c7:cc:df:d3:1e:4f:3e:c4: fb:74:c3:9d:c4:bd:fd:94:ab:05:2f:57:e8:4f:f0: a7:d0:a0:d6:b3:f4:d0:0b:94:79:2f:04:44:a8:ac: 42:bc:6c:66:0e:d6:75:e3:13:bd:dc:83:66:04:f8: a3:9f:50:77:25:83:32:57:b6:d5:ac:28:64:12:41: ce:0d:55:aa:5e:b9:45:35:29:b1:86:8f:97:49:cb: b2:63:53:50:a5:ac:1e:de:ff:d2:e4:c4:49:71:5a: 95:c2:5c:e0:76:c4:16:7d:29:e6:2b:f5:33:8c:b8: b1:b2:7f:df:34:1c:6c:c9:2e:5d:75:06:0d:4b:4c: e3:2e:46:3c:d6:c2:ae:b4:c4:a0:c1:8e:76:0e:e3: 02:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BB:DF:E1:C4:5C:B3:2A:25:2A:A4:AB:41:37:9C:24:6A:6C:B5:CE X509v3 Authority Key Identifier: keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:61:79:9f:60:88:d0:39:53:29:70:33:89:d4:11:11:dc:2c: cb:46:ca:62:ac:e6:86:26:ee:4a:8b:b1:a9:da:c8:d7:36:04: fa:4a:96:1c:d4:08:22:33:23:2b:e0:7d:68:8f:34:90:cb:d4: 67:cc:68:8b:ec:33:a9:e4:7f:0e:f7:e3:95:f1:7d:4f:b4:84: d5:35:2d:23:6b:5c:11:87:a7:df:2d:d0:c9:5c:b2:6f:08:5b: ad:f3:9d:8b:86:c9:70:a4:c9:4a:b7:b1:16:fa:d5:48:f4:54: ea:c8:cb:c4:9b:94:59:e5:3f:68:6d:6d:34:4e:7c:41:b2:3a: 12:85:32:ea:7f:1f:b1:ae:48:c7:ac:bc:40:f5:85:1f:d6:ac: 88:9a:b9:6a:48:27:82:96:e0:39:38:b9:4a:e2:14:24:9c:06: b6:38:3f:40:80:e3:2a:a5:79:7e:a8:fa:72:23:f6:17:40:4c: ec:78:7a:fb:20:72:b8:8f:1d:ce:bc:10:5c:01:46:a9:4f:f4: 63:4c:02:c1:56:c6:39:ff:74:f6:a0:f1:d3:c2:8c:91:55:ed: 93:b5:da:4c:33:29:af:56:67:36:51:89:b5:0c:92:87:c1:1a: 62:cd:d0:a4:7f:b0:bb:ea:a7:12:3b:44:7a:3e:d0:59:b6:60: c3:f3:e4:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjExMTAvBgNVBAUTKEUyMjc1QTg3NUE5MkNBRUIwMTA0Rjg5QzQ2RjRBNTg1 QjdBREY1QjYwHhcNMjUwODIwMTgwOTM4WhcNMjUwODI3MTgwOTM4WjAYMRYwFAYD VQQDEw02OGE2MGY2Mi05YzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKdwcJFbtaJPXU5dRJBzdsTNgy2qT687jKtX4LQ1KnFoA54kiwBaL4t0bMkf o19iHOo63K2TpIYtD94QUbobiVgkuN4bjtH36OHAODwwTqA7AIX40n3RAKuaeILG ZygG/IK5yznaqQ+MDuN34o/gx8zf0x5PPsT7dMOdxL39lKsFL1foT/Cn0KDWs/TQ C5R5LwREqKxCvGxmDtZ14xO93INmBPijn1B3JYMyV7bVrChkEkHODVWqXrlFNSmx ho+XScuyY1NQpawe3v/S5MRJcVqVwlzgdsQWfSnmK/UzjLixsn/fNBxsyS5ddQYN S0zjLkY81sKutMSgwY52DuMCrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS73+HE XLMqJSqkq0E3nCRqbLXOMB8GA1UdIwQYMBaAFOInWodaksrrAQT4nEb0pYW3rfW2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2MS84NkMzMDQ4MkU3 MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1c0JCUGljUnZTbGhiZXQ5 YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRpZGFoMXFTeXVzQkJQaWNSdlNsaGJldDliWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2MS84NkMzMDQ4MkU3MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1 c0JCUGljUnZTbGhiZXQ5YlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/YXmfYIjQOVMpcDOJ1BER3CzLRspirOaGJu5Ki7Gp2sjXNgT6SpYc 1AgiMyMr4H1ojzSQy9RnzGiL7DOp5H8O9+OV8X1PtITVNS0ja1wRh6ffLdDJXLJv CFut852LhslwpMlKt7EW+tVI9FTqyMvEm5RZ5T9obW00TnxBsjoShTLqfx+xrkjH rLxA9YUf1qyImrlqSCeCluA5OLlK4hQknAa2OD9AgOMqpXl+qPpyI/YXQEzseHr7 IHK4jx3OvBBcAUapT/RjTALBVsY5/3T2oPHTwoyRVe2TtdpMMymvVmc2UYm1DJKH wRpizdCkf7C76qcSO0R6PtBZtmDD8+Rm -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:13 2025 by rpki-client