$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft File: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft (raw, json) Hash identifier: fAKKb7cIUtWKzjvfPMtrc4GmSrqUqmrtMMJEqzxoI6o= Subject key identifier: 33:FE:13:81:91:57:FE:95:EE:55:22:F3:D2:CB:C6:52:B9:B6:30:E1 Authority key identifier: E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C Certificate issuer: /CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft Manifest number: E3 Signing time: Fri 19 Sep 2025 06:03:42 +0000 Manifest this update: Fri 19 Sep 2025 06:03:41 +0000 Manifest next update: Fri 26 Sep 2025 06:03:41 +0000 Files and hashes: 1: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl (hash: mJN7E4rHjp+XDlySk5m6ZYWEVYw0j8oPg2qkiuRBk0E=) 2: 0B725F44496D11EF9F7F2116C4F9AE02.roa (hash: SsTEks9DzvfjnZoXdnmZIWjNSHqbFmVLR2wVP5eTyr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 06:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1604, serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C Validity Not Before: Sep 19 06:03:41 2025 GMT Not After : Sep 26 06:03:41 2025 GMT Subject: CN=68ccf23d-1cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:0f:c4:c2:0e:b3:82:17:34:7b:a3:17:f8: 51:3c:0f:9f:01:95:43:96:2d:ad:e7:69:1f:79:6c: c5:5f:03:56:1b:51:53:04:7a:b3:18:2f:bd:7e:fb: 35:a4:d3:34:d8:00:1e:a9:59:ae:d6:75:e4:07:b7: 60:3e:ed:41:f1:2e:40:52:44:69:46:ef:fa:00:a8: 71:f7:dc:5e:6c:d1:10:d6:f3:fb:7a:81:27:f5:3f: 87:3d:63:70:7e:6b:d7:dc:d8:52:19:af:86:79:5f: 04:e1:3e:ec:bb:52:48:ca:db:14:86:94:5f:e1:07: 95:de:c8:0d:f6:21:0f:ac:25:ef:a2:40:85:ec:e1: 79:a8:6c:0a:28:4b:16:c3:c6:d2:09:f4:9d:59:f4: e1:a5:24:c4:fd:21:45:ac:98:ac:b1:8e:6e:71:24: 0f:2e:34:45:98:8f:dc:ae:b7:63:92:5b:6a:55:d3: 7f:0a:89:26:ff:62:ed:67:03:2d:ee:8b:71:3d:ee: f2:b6:38:8d:19:98:09:81:36:d4:a3:a5:44:4b:9b: 3e:70:1b:89:b2:74:a7:bb:69:3b:ec:8e:d3:66:fd: c7:13:ec:b2:d8:43:05:ba:04:f7:a1:16:8e:49:e9: 98:9b:86:98:2f:16:1b:83:d2:0c:71:09:fa:49:5d: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FE:13:81:91:57:FE:95:EE:55:22:F3:D2:CB:C6:52:B9:B6:30:E1 X509v3 Authority Key Identifier: keyid:E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:90:82:cb:37:e1:2a:64:a6:ef:90:e9:07:54:3a:7c:d8:fa: 00:61:41:bb:07:d6:c5:dc:56:45:f1:5a:cb:60:bb:d8:f7:41: bc:d4:cd:fc:f9:5f:2b:2a:83:e9:42:37:85:34:b5:d7:50:78: 67:1a:0e:30:28:17:d4:18:d2:75:1c:09:2e:2d:1c:bc:60:6c: fc:9e:b3:c9:3d:f5:ec:90:52:79:24:b3:fb:ed:52:98:2c:d1: 45:e1:4c:40:ce:07:2a:b4:ff:71:6c:10:50:00:c0:cc:78:43: 5d:75:7d:1e:95:a4:39:12:79:22:e6:68:78:5f:b1:ed:37:1c: 59:83:f5:9f:80:db:44:7d:7b:de:ea:12:8e:22:85:9c:3d:87: 03:5e:a6:fc:db:3f:d6:cf:54:33:b2:32:e7:51:59:82:b8:30: 60:6d:a6:7e:4a:3c:05:a3:6a:91:9a:8f:ef:39:0e:e9:e9:ea: e4:a5:1a:43:34:a0:eb:66:52:84:d8:0d:de:fd:c6:92:13:a5: 51:d4:8e:f1:55:26:42:38:20:f5:06:5e:e5:c6:8a:68:a3:f6: bb:73:34:7b:a1:26:e0:db:45:24:12:ee:49:c0:7b:f5:7f:b0: 02:65:b5:a0:1d:37:d3:a4:3d:6c:01:75:2f:ee:e0:7e:91:fe: 7a:a1:82:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE2MDQxMTAvBgNVBAUTKEUyRjE3NzM3Qjg0QzFGNjc4NjlDMDNBNDdGOEM0MTlG RDQyMDAxNkMwHhcNMjUwOTE5MDYwMzQxWhcNMjUwOTI2MDYwMzQxWjAYMRYwFAYD VQQDEw02OGNjZjIzZC0xY2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywgPxMIOs4IXNHujF/hRPA+fAZVDli2t52kfeWzFXwNWG1FTBHqzGC+9fvs1 pNM02AAeqVmu1nXkB7dgPu1B8S5AUkRpRu/6AKhx99xebNEQ1vP7eoEn9T+HPWNw fmvX3NhSGa+GeV8E4T7su1JIytsUhpRf4QeV3sgN9iEPrCXvokCF7OF5qGwKKEsW w8bSCfSdWfThpSTE/SFFrJissY5ucSQPLjRFmI/crrdjkltqVdN/Cokm/2LtZwMt 7otxPe7ytjiNGZgJgTbUo6VES5s+cBuJsnSnu2k77I7TZv3HE+yy2EMFugT3oRaO SemYm4aYLxYbg9IMcQn6SV1ZCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDP+E4GR V/6V7lUi89LLxlK5tjDhMB8GA1UdIwQYMBaAFOLxdze4TB9nhpwDpH+MQZ/UIAFs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTYwNC8xMjBDMkM3NDND RUIxMUVGOTRFMjRGNTlDNEY5QUUwMi80dkYzTjdoTUgyZUduQU9rZjR4Qm45UWdB V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR2RjNON2hNSDJlR25BT2tmNHhCbjlRZ0FXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTYwNC8xMjBDMkM3NDNDRUIxMUVGOTRFMjRGNTlDNEY5QUUwMi80dkYzTjdoTUgy ZUduQU9rZjR4Qm45UWdBV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqkILLN+EqZKbvkOkHVDp82PoAYUG7B9bF3FZF8VrLYLvY90G81M38 +V8rKoPpQjeFNLXXUHhnGg4wKBfUGNJ1HAkuLRy8YGz8nrPJPfXskFJ5JLP77VKY LNFF4UxAzgcqtP9xbBBQAMDMeENddX0elaQ5Enki5mh4X7HtNxxZg/WfgNtEfXve 6hKOIoWcPYcDXqb82z/Wz1QzsjLnUVmCuDBgbaZ+SjwFo2qRmo/vOQ7p6erkpRpD NKDrZlKE2A3e/caSE6VR1I7xVSZCOCD1Bl7lxopoo/a7czR7oSbg20UkEu5JwHv1 f7ACZbWgHTfTpD1sAXUv7uB+kf56oYKJ -----END CERTIFICATE-----Generated at Fri Sep 19 15:16:29 2025 by rpki-client