$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft File: 4UpZOzEqmIVz16Xd-uB_kSaTyII.mft (raw, json) Hash identifier: r3Yg9m7ptgxItu3AEMP55dk/+FlxvUa4glnz4Rrig3A= Subject key identifier: 7D:5B:2B:7A:26:4C:4E:5E:ED:EB:FC:2F:A5:7C:1E:64:A3:02:06:B5 Authority key identifier: E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 Certificate issuer: /CN=A91D4ACD/serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft Manifest number: B2 Signing time: Sat 23 Aug 2025 06:18:29 +0000 Manifest this update: Sat 23 Aug 2025 06:18:29 +0000 Manifest next update: Sat 30 Aug 2025 06:18:29 +0000 Files and hashes: 1: 4UpZOzEqmIVz16Xd-uB_kSaTyII.crl (hash: AjtSzMCozHtz7SvHBH+C78aDQUnGFtYDZbX2dnBhH8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4ACD, serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Validity Not Before: Aug 23 06:18:29 2025 GMT Not After : Aug 30 06:18:29 2025 GMT Subject: CN=68a95d35-3f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:50:b3:8e:78:1b:d0:f2:12:a5:c9:bb:b0:10: e8:17:58:3a:45:19:ad:35:8b:13:fb:bc:19:c2:99: d6:a4:77:4a:7f:6b:d0:d4:24:bd:cf:ef:66:9d:5b: f8:55:3f:f8:1b:72:1b:28:5c:7b:f1:d1:8c:c2:2b: e5:38:48:93:c0:bb:23:03:a4:4a:d2:fe:98:ac:cb: 12:6d:53:62:64:b6:73:bd:dd:89:7e:fa:8d:56:65: 40:71:67:c1:f3:99:22:6e:1c:5f:a7:2d:94:89:3b: 0a:41:9b:e0:3c:1e:99:bf:14:01:76:a8:af:9c:2b: dd:b2:b0:e8:30:92:a0:e4:a7:70:b7:f8:e9:5c:ac: 39:26:93:69:01:90:ed:0e:3d:fb:96:43:fd:a3:f8: 47:d5:53:dd:ba:a9:82:a6:25:42:a6:c0:88:48:30: a9:93:14:d9:6f:39:51:86:c3:44:66:e0:90:d5:e0: a1:45:ca:ab:b6:27:f8:14:8a:f1:ec:e8:31:c8:7e: 32:29:09:3d:44:fa:9b:21:b2:d0:8f:e0:86:0c:6d: 2c:8b:c8:6d:c4:fa:ee:89:12:2f:92:db:48:70:75: ef:d8:d8:15:5e:10:ea:eb:d2:bd:75:fe:a3:f1:76: b7:a7:de:39:89:4a:cc:34:e1:90:d2:2a:76:47:7f: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5B:2B:7A:26:4C:4E:5E:ED:EB:FC:2F:A5:7C:1E:64:A3:02:06:B5 X509v3 Authority Key Identifier: keyid:E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:06:ba:0c:32:2b:ce:80:1c:47:a5:e0:ac:ec:e5:fd:cd:21: fb:4d:09:4e:26:f4:ce:f5:e5:6c:5d:2b:10:ad:c0:03:63:78: 42:01:75:f3:26:48:5c:14:8f:17:67:02:48:ba:3a:e5:cc:09: 1c:eb:53:0d:bc:72:86:34:6a:43:3e:b1:06:54:7d:12:0a:4f: 49:8a:8a:95:64:57:45:0e:77:01:b1:bd:99:03:f6:c0:ae:ea: 6e:7c:a1:5b:5e:13:e3:86:61:04:8f:94:55:58:f3:a9:a7:3f: 8d:61:15:95:7e:e7:fd:13:e6:5f:96:f6:bc:63:2b:cd:3b:76: 9f:20:3e:8c:b2:14:1f:7d:ad:54:e0:1b:fe:49:e6:85:52:02: 7c:95:32:67:2a:63:5c:00:a9:0f:aa:0a:cc:ca:63:b0:33:50: eb:d5:ef:06:41:8e:1d:9e:78:ce:d5:e8:5d:b4:a5:83:97:4c: 88:14:b2:21:e1:81:dd:71:d4:f8:d4:31:ce:15:89:93:92:94: 23:11:e4:7b:41:4a:c8:60:bb:ec:5a:9d:67:1d:e2:75:54:48: 6b:42:5b:d8:da:55:34:a4:c4:62:c2:9e:ff:41:dc:bb:c3:e1: 5d:53:2f:38:1c:d3:03:ba:f8:1a:61:b0:f1:97:36:9c:93:aa: 2d:80:ba:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBQ0QxMTAvBgNVBAUTKEUxNEE1OTNCMzEyQTk4ODU3M0Q3QTVEREZBRTA3Rjkx MjY5M0M4ODIwHhcNMjUwODIzMDYxODI5WhcNMjUwODMwMDYxODI5WjAYMRYwFAYD VQQDEw02OGE5NWQzNS0zZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVCzjngb0PISpcm7sBDoF1g6RRmtNYsT+7wZwpnWpHdKf2vQ1CS9z+9mnVv4 VT/4G3IbKFx78dGMwivlOEiTwLsjA6RK0v6YrMsSbVNiZLZzvd2JfvqNVmVAcWfB 85kibhxfpy2UiTsKQZvgPB6ZvxQBdqivnCvdsrDoMJKg5Kdwt/jpXKw5JpNpAZDt Dj37lkP9o/hH1VPduqmCpiVCpsCISDCpkxTZbzlRhsNEZuCQ1eChRcqrtif4FIrx 7OgxyH4yKQk9RPqbIbLQj+CGDG0si8htxPruiRIvkttIcHXv2NgVXhDq69K9df6j 8Xa3p945iUrMNOGQ0ip2R3+GDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1bK3om TE5e7ev8L6V8HmSjAga1MB8GA1UdIwQYMBaAFOFKWTsxKpiFc9el3frgf5Emk8iC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEFDRC8yOTAzMUEzQTc1 NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi80VXBaT3pFcW1JVnoxNlhkLXVCX2tTYVR5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVcFpPekVxbUlWejE2WGQtdUJfa1NhVHlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEFDRC8yOTAzMUEzQTc1NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi80VXBaT3pFcW1J VnoxNlhkLXVCX2tTYVR5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXBroMMivOgBxHpeCs7OX9zSH7TQlOJvTO9eVsXSsQrcADY3hCAXXz JkhcFI8XZwJIujrlzAkc61MNvHKGNGpDPrEGVH0SCk9JioqVZFdFDncBsb2ZA/bA rupufKFbXhPjhmEEj5RVWPOppz+NYRWVfuf9E+Zflva8YyvNO3afID6MshQffa1U 4Bv+SeaFUgJ8lTJnKmNcAKkPqgrMymOwM1Dr1e8GQY4dnnjO1ehdtKWDl0yIFLIh 4YHdcdT41DHOFYmTkpQjEeR7QUrIYLvsWp1nHeJ1VEhrQlvY2lU0pMRiwp7/Qdy7 w+FdUy84HNMDuvgaYbDxlzack6otgLr4 -----END CERTIFICATE-----Generated at Sun Aug 24 21:54:13 2025 by rpki-client