$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: pviOn5bS+QmrRmM0SsRpuWMIw5S6MvmQoktjV7BAe2I= Subject key identifier: 6E:82:E8:A7:D7:66:00:AB:17:6A:98:3D:A2:22:08:38:07:64:21:B0 Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 0193 Signing time: Fri 19 Sep 2025 03:59:00 +0000 Manifest this update: Fri 19 Sep 2025 03:59:00 +0000 Manifest next update: Fri 26 Sep 2025 03:59:00 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: nyXXuO8cRbGrCxuScoQ5vQPa6AEe5Ti0OPbBYrytju8=) 2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: glLqt8A+PG2i48HeZjmY7dCokn6j6eyQTAGv7a4dQe4=) 3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: cXsdzPTH/yRS7sygsATYiwsQyV1n0HK8W/wMQYfB7Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: Sep 19 03:59:00 2025 GMT Not After : Sep 26 03:59:00 2025 GMT Subject: CN=68ccd504-7321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:98:ed:f6:bf:bf:5f:14:7d:a7:74:39:af:d2: 08:5b:c4:1d:3b:a3:a2:b8:ab:a0:41:91:d7:fe:46: e6:f8:f2:40:4c:da:92:d4:e1:b5:89:f1:ac:ac:a4: 89:01:21:21:4a:8e:35:53:02:6f:69:fe:53:9d:e9: e3:35:71:35:5e:8b:62:ee:49:21:9f:90:73:74:63: 79:33:6d:8e:c6:b9:7d:8f:52:f7:13:b2:e6:6a:47: cf:bb:3e:d8:28:e9:ed:57:4c:94:32:2c:f3:7e:61: da:28:37:e4:69:5e:f2:34:b2:46:9c:af:96:b2:51: 84:d5:76:24:43:dd:fc:6b:2d:6b:ea:47:f9:bc:31: 14:70:7c:d3:8f:b0:53:73:e5:c3:c8:2c:85:cb:39: 59:69:70:0b:70:b2:4b:2d:37:f9:2d:05:88:c4:2c: d5:07:e7:d1:09:e3:ad:44:2e:54:de:d9:6a:90:e5: e0:09:4a:ea:b5:8e:4c:d3:a3:af:0a:54:8c:8b:e8: 32:a5:c2:14:3e:20:ef:c8:c8:f8:27:51:a2:17:22: f3:5c:dd:83:3b:98:70:33:62:26:e8:59:81:bd:2a: 0c:78:cc:9d:77:10:29:22:20:1d:77:62:f7:ce:3f: 6d:89:68:be:c6:9b:1d:b3:0d:ce:c6:ab:c3:cf:9d: b0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:82:E8:A7:D7:66:00:AB:17:6A:98:3D:A2:22:08:38:07:64:21:B0 X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:96:b0:8c:07:ea:5e:5d:e8:7e:52:c1:9a:2e:74:0f:88:82: 67:75:7a:94:a0:f3:c6:67:1a:cd:7f:d2:67:46:f5:0e:9b:91: 31:56:f1:32:cc:5b:05:2b:e0:41:28:5a:02:77:6a:98:4f:7a: 77:bb:b7:5d:c7:53:a2:91:e5:97:ad:b4:02:c4:d7:f0:00:68: 45:a7:22:92:7a:dc:35:e6:95:36:3b:3f:bf:0e:09:c5:f0:eb: 08:aa:f7:6c:4e:d1:b3:d4:87:b7:d4:f3:8d:37:7b:a2:31:bd: d3:eb:01:c8:e8:48:47:38:1c:e7:f0:ef:95:a5:9a:6f:94:ee: 10:58:44:4d:d3:ca:25:1e:57:90:da:99:3d:a2:37:30:58:3d: 60:aa:9d:89:3a:5f:fe:c8:14:65:70:73:3c:2d:51:7d:f6:47: 90:9e:0a:90:d7:22:82:61:73:4c:fd:06:98:95:a4:1f:6d:84: 85:10:b2:0d:7f:dd:d1:23:e6:93:ca:fd:29:e8:23:6a:b9:81: 5e:2d:85:93:7b:22:e9:ee:e3:05:c6:e9:f4:9c:b1:6b:16:61: 5a:89:fb:b9:4c:e5:bf:72:82:7b:55:6b:db:93:14:05:11:8e: 6d:36:6c:ef:bd:e1:c9:e0:66:dc:50:33:02:06:84:af:06:be: 5b:08:e6:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjUwOTE5MDM1OTAwWhcNMjUwOTI2MDM1OTAwWjAYMRYwFAYD VQQDEw02OGNjZDUwNC03MzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkpjt9r+/XxR9p3Q5r9IIW8QdO6OiuKugQZHX/kbm+PJATNqS1OG1ifGsrKSJ ASEhSo41UwJvaf5TnenjNXE1Xoti7kkhn5BzdGN5M22Oxrl9j1L3E7LmakfPuz7Y KOntV0yUMizzfmHaKDfkaV7yNLJGnK+WslGE1XYkQ938ay1r6kf5vDEUcHzTj7BT c+XDyCyFyzlZaXALcLJLLTf5LQWIxCzVB+fRCeOtRC5U3tlqkOXgCUrqtY5M06Ov ClSMi+gypcIUPiDvyMj4J1GiFyLzXN2DO5hwM2Im6FmBvSoMeMyddxApIiAdd2L3 zj9tiWi+xpsdsw3OxqvDz52wMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6C6KfX ZgCrF2qYPaIiCDgHZCGwMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLlrCMB+peXeh+UsGaLnQPiIJndXqUoPPGZxrNf9JnRvUOm5ExVvEy zFsFK+BBKFoCd2qYT3p3u7ddx1OikeWXrbQCxNfwAGhFpyKSetw15pU2Oz+/DgnF 8OsIqvdsTtGz1Ie31PONN3uiMb3T6wHI6EhHOBzn8O+VpZpvlO4QWERN08olHleQ 2pk9ojcwWD1gqp2JOl/+yBRlcHM8LVF99keQngqQ1yKCYXNM/QaYlaQfbYSFELIN f93RI+aTyv0p6CNquYFeLYWTeyLp7uMFxun0nLFrFmFaifu5TOW/coJ7VWvbkxQF EY5tNmzvveHJ4GbcUDMCBoSvBr5bCOYo -----END CERTIFICATE-----Generated at Fri Sep 19 10:40:51 2025 by rpki-client