$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft File: 4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json) Hash identifier: MAAUqEZknPV8v+egc+Ts9BgqVLXLn9Eiq7YEWkf39G8= Subject key identifier: F3:67:D5:2C:4A:37:43:CD:B6:D0:2C:BB:F1:8D:53:03:46:53:2A:7B Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Certificate serial: 0B3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft Manifest number: 0B36 Signing time: Sun 24 Aug 2025 19:12:14 +0000 Manifest this update: Sun 24 Aug 2025 19:12:14 +0000 Manifest next update: Sun 31 Aug 2025 19:12:14 +0000 Files and hashes: 1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: EAS6Azs7nTd5F5hcPrNf1wjt8zu7EKkeszB111D7W3g=) 2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: NcQf930jPATr+5XDKM18U6rSGEkKZ2yaCI8MgpUcALY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2878 (0xb3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Validity Not Before: Aug 24 19:12:14 2025 GMT Not After : Aug 31 19:12:14 2025 GMT Subject: CN=68ab640e-064c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:84:5c:b7:47:bd:68:1c:4a:e7:4a:a6:92:1d: be:4a:2d:72:10:fa:f4:81:4b:0a:33:20:42:ad:18: 65:f7:67:ea:f5:b6:bf:cc:f0:0c:b2:9c:d8:01:19: fb:17:09:9e:48:9c:c5:46:20:05:9b:1c:e2:10:3b: 9c:23:d9:51:3f:c2:71:50:06:33:68:75:d8:a6:39: 15:1b:47:fd:87:28:d2:8d:2d:da:ec:80:2c:d5:c2: c3:e6:b9:94:2f:3d:b5:d4:2c:3f:af:61:d5:fb:4a: bc:4d:61:06:0c:2b:0a:ff:1a:4a:03:dc:c9:c4:e0: 84:9a:25:42:2f:70:ff:1d:ad:52:1e:ee:7a:eb:3c: 1f:8f:21:e9:72:d8:d5:4e:a0:0b:1b:d6:48:5d:21: 69:2c:55:c2:fb:40:4b:e0:c9:91:86:d4:03:7f:17: 96:a2:3d:ea:12:e7:8f:12:45:42:9b:bd:af:76:4c: 9d:94:4e:5d:3c:27:ba:70:38:f4:3c:5b:5b:d8:cc: 50:17:f4:f3:cb:7f:3b:03:a6:bf:e6:86:cf:fb:d6: 94:39:bc:2e:10:a6:e3:3b:92:12:af:8c:89:37:c2: 0d:69:ef:7f:b6:9d:9e:6d:64:13:c8:c2:de:7e:97: aa:8d:0b:f5:8a:42:39:ee:70:eb:6e:b5:19:58:6d: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:67:D5:2C:4A:37:43:CD:B6:D0:2C:BB:F1:8D:53:03:46:53:2A:7B X509v3 Authority Key Identifier: keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:ec:c8:6c:fe:13:a6:b9:ae:d4:b5:e3:d8:9c:66:11:00:71: c0:d6:fd:78:14:43:f7:73:0a:1d:f4:67:da:6d:40:46:c1:f6: c9:d9:ca:20:23:50:c9:ca:7b:ae:6d:8f:d5:6a:50:4a:81:bb: c3:b3:ae:c3:ee:f9:28:c4:9c:7a:a8:2a:a4:ce:96:fe:09:5d: 9a:f9:25:92:ee:b9:b6:f4:79:bb:33:19:c0:4d:3c:50:dc:81: dc:c3:c5:5c:0b:de:04:e1:7e:eb:ea:f0:e1:07:28:8c:e2:32: cb:c9:23:6a:42:85:74:cd:7b:71:4e:6e:21:72:ea:f3:76:f7: be:39:a7:e3:7c:48:25:25:ef:e4:39:5e:1a:18:c3:6e:e6:dc: 31:9a:e5:db:23:5b:e4:8c:e3:66:a9:54:0f:e6:fa:a8:38:f3: 52:eb:cc:a2:af:c9:00:34:bc:dc:3d:1d:dc:07:89:0e:55:3a: 76:6e:87:29:a9:1a:fe:5a:99:67:e1:9c:de:63:d0:67:5d:2e: d1:0d:0c:7e:de:b4:6e:7a:2d:4b:d0:f8:ec:6e:f4:6c:d5:fc: 4c:57:b7:6e:6d:40:0b:f1:a2:2b:f0:0a:89:6e:f7:ab:4a:4b: 07:93:d0:b2:90:58:43:e1:70:a8:dd:33:c4:1f:c0:e7:bf:dc: 93:0e:2b:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFNDkxMTAvBgNVBAUTKEUwOTIzQjBBNUY3RDVDNjhCQUVBQ0U0MTQxNUY0MkE1 MjBENzRCMkEwHhcNMjUwODI0MTkxMjE0WhcNMjUwODMxMTkxMjE0WjAYMRYwFAYD VQQDEw02OGFiNjQwZS0wNjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoRct0e9aBxK50qmkh2+Si1yEPr0gUsKMyBCrRhl92fq9ba/zPAMspzYARn7 FwmeSJzFRiAFmxziEDucI9lRP8JxUAYzaHXYpjkVG0f9hyjSjS3a7IAs1cLD5rmU Lz211Cw/r2HV+0q8TWEGDCsK/xpKA9zJxOCEmiVCL3D/Ha1SHu566zwfjyHpctjV TqALG9ZIXSFpLFXC+0BL4MmRhtQDfxeWoj3qEuePEkVCm72vdkydlE5dPCe6cDj0 PFtb2MxQF/Tzy387A6a/5obP+9aUObwuEKbjO5ISr4yJN8INae9/tp2ebWQTyMLe fpeqjQv1ikI57nDrbrUZWG0z6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNn1SxK N0PNttAsu/GNUwNGUyp7MB8GA1UdIwQYMBaAFOCSOwpffVxouurOQUFfQqUg10sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUU0OS8wNDA0OUQwODQx QTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhHaTY2czVCUVY5Q3BTRFhT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKSTdDbDk5WEdpNjZzNUJRVjlDcFNEWFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUU0OS8wNDA0OUQwODQxQTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhH aTY2czVCUVY5Q3BTRFhTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk7Mhs/hOmua7UtePYnGYRAHHA1v14FEP3cwod9GfabUBGwfbJ2cog I1DJynuubY/ValBKgbvDs67D7vkoxJx6qCqkzpb+CV2a+SWS7rm29Hm7MxnATTxQ 3IHcw8VcC94E4X7r6vDhByiM4jLLySNqQoV0zXtxTm4hcurzdve+OafjfEglJe/k OV4aGMNu5twxmuXbI1vkjONmqVQP5vqoOPNS68yir8kANLzcPR3cB4kOVTp2bocp qRr+Wpln4ZzeY9BnXS7RDQx+3rRuei1L0PjsbvRs1fxMV7dubUAL8aIr8AqJbver SksHk9CykFhD4XCo3TPEH8Dnv9yTDiuR -----END CERTIFICATE-----Generated at Sun Aug 24 21:38:47 2025 by rpki-client