$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft File: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft (raw, json) Hash identifier: Vk00cGVjvcUS9LvlNsfQBubifdYeUFRzpqkEhvNOXvo= Subject key identifier: 66:4F:E1:0D:50:BE:61:3E:42:88:27:6E:12:4F:9A:7E:7C:F2:74:20 Authority key identifier: E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 Certificate issuer: /CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Certificate serial: 0AE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft Manifest number: 0AE2 Signing time: Sun 24 Aug 2025 19:24:32 +0000 Manifest this update: Sun 24 Aug 2025 19:24:32 +0000 Manifest next update: Sun 31 Aug 2025 19:24:32 +0000 Files and hashes: 1: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl (hash: M9cfE0sRds2B/tnn136q9QfxW0Vi8rhdIrZsK9TKQns=) 2: 29B9D5B8524111EABEF0A119C4F9AE02.roa (hash: XgnhviRQUKAkeu4itRmlPhHlV4kxqNIZcBKK2pdxl3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2793 (0xae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CA1, serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Validity Not Before: Aug 24 19:24:32 2025 GMT Not After : Aug 31 19:24:32 2025 GMT Subject: CN=68ab66f0-1626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ae:c5:5d:07:f7:ce:b5:d6:20:7c:03:91:e2: e3:4a:58:4c:90:12:69:c5:7a:1b:5f:3b:40:49:d2: ca:fd:77:7e:df:1a:ca:29:84:05:90:24:70:8a:59: 20:b8:6d:11:29:d8:c9:32:f2:ba:8e:26:86:88:8d: 7e:be:e0:07:5a:2c:2b:87:26:fe:e4:8e:7c:c9:a7: 32:c9:4a:27:b5:c3:46:2f:4a:58:0e:8f:37:5b:1b: f5:4a:5f:5c:43:36:44:58:4d:4b:a9:7c:ca:03:6b: d9:f0:cb:6b:7b:2b:13:06:b0:5c:34:21:10:fa:84: 6d:a6:47:af:fd:11:b6:ce:46:f5:a2:ad:fc:bd:fb: fc:0f:c2:cc:b0:f1:2d:d8:94:95:40:0e:7c:fb:ba: 7f:31:56:c2:34:97:d7:f1:f4:52:67:ee:3e:95:68: dc:10:84:d1:ef:a0:b6:07:c7:ea:6a:67:7f:02:e3: f6:55:78:08:ef:5f:70:55:2b:86:ef:df:fb:7f:26: af:6e:7b:ac:63:2a:5a:12:27:aa:21:12:e4:42:2a: 9a:91:33:41:5b:1e:a7:18:82:a5:ad:e3:13:ec:b0: 89:b9:cb:68:2a:6a:fc:75:01:28:2d:44:88:be:de: 2f:81:6c:c5:f6:6f:2a:3a:51:57:b5:1b:01:a9:51: 57:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4F:E1:0D:50:BE:61:3E:42:88:27:6E:12:4F:9A:7E:7C:F2:74:20 X509v3 Authority Key Identifier: keyid:E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:4c:43:fc:ef:ce:94:91:95:c5:c3:61:ca:a1:d5:33:93:f9: ab:1f:b6:c9:cb:05:63:81:63:b3:49:91:6a:b1:28:90:0f:f8: 85:bb:d5:a8:c8:f0:ab:3f:51:8a:f9:69:98:33:32:f9:3e:dd: 53:3c:34:ad:1d:07:60:87:d1:dc:46:5e:fd:73:09:16:43:cb: 00:a9:e5:8f:81:e2:6f:34:d5:14:0b:f7:8b:6e:6f:55:71:6d: 07:12:29:ae:a4:93:53:ff:ab:22:74:b1:16:64:88:60:10:b5: 13:26:fd:9f:c5:44:5f:bd:c4:9e:de:9f:9e:93:4b:8b:72:1e: 07:a3:98:ae:a2:77:15:08:83:96:a6:9f:9a:ae:90:7c:60:b2: 78:c2:82:c7:a1:5b:75:d7:14:e0:e0:bb:d6:b6:02:fa:19:41: 3a:ed:ac:16:e0:ba:a2:45:07:51:17:11:f1:6e:57:52:da:af: 3e:e4:dd:fe:7f:d5:28:34:1b:22:46:fd:97:db:a0:c5:a7:90: d2:6b:ee:81:e1:dc:82:e4:41:c7:18:a4:f1:29:9d:c9:f3:29: 52:24:b8:86:24:a6:dd:ce:79:c7:22:40:0f:77:b5:99:e7:b7: 74:8a:5d:39:14:ab:b4:43:42:bc:7d:b3:a3:ac:b6:db:d8:32: 18:d5:8e:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDQTExMTAvBgNVBAUTKEUxRDk1QTNDQkREOTIwMjlBRUJFMUUxMzA4MDk5RTYy NDlDRDM2MjQwHhcNMjUwODI0MTkyNDMyWhcNMjUwODMxMTkyNDMyWjAYMRYwFAYD VQQDEw02OGFiNjZmMC0xNjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwa7FXQf3zrXWIHwDkeLjSlhMkBJpxXobXztASdLK/Xd+3xrKKYQFkCRwilkg uG0RKdjJMvK6jiaGiI1+vuAHWiwrhyb+5I58yacyyUontcNGL0pYDo83Wxv1Sl9c QzZEWE1LqXzKA2vZ8MtreysTBrBcNCEQ+oRtpkev/RG2zkb1oq38vfv8D8LMsPEt 2JSVQA58+7p/MVbCNJfX8fRSZ+4+lWjcEITR76C2B8fqamd/AuP2VXgI719wVSuG 79/7fyavbnusYypaEieqIRLkQiqakTNBWx6nGIKlreMT7LCJuctoKmr8dQEoLUSI vt4vgWzF9m8qOlFXtRsBqVFXBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZP4Q1Q vmE+QognbhJPmn588nQgMB8GA1UdIwQYMBaAFOHZWjy92SAprr4eEwgJnmJJzTYk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS83MDYzRTQyNDUy M0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklDbXV2aDRUQ0FtZVlrbk5O aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkbGFQTDNaSUNtdXZoNFRDQW1lWWtuTk5pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENBMS83MDYzRTQyNDUyM0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklD bXV2aDRUQ0FtZVlrbk5OaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5TEP8786UkZXFw2HKodUzk/mrH7bJywVjgWOzSZFqsSiQD/iFu9Wo yPCrP1GK+WmYMzL5Pt1TPDStHQdgh9HcRl79cwkWQ8sAqeWPgeJvNNUUC/eLbm9V cW0HEimupJNT/6sidLEWZIhgELUTJv2fxURfvcSe3p+ek0uLch4Ho5iuoncVCIOW pp+arpB8YLJ4woLHoVt11xTg4LvWtgL6GUE67awW4LqiRQdRFxHxbldS2q8+5N3+ f9UoNBsiRv2X26DFp5DSa+6B4dyC5EHHGKTxKZ3J8ylSJLiGJKbdznnHIkAPd7WZ 57d0il05FKu0Q0K8fbOjrLbb2DIY1Y5P -----END CERTIFICATE-----Generated at Sun Aug 24 21:50:07 2025 by rpki-client