$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json) Hash identifier: 7Hfzjk4FXqcAgOBtl9AAs0Fwu4UaDB6wDJ+cowo834M= Subject key identifier: 45:5A:4B:77:69:62:CE:AB:C5:36:B9:6C:53:EF:42:F9:31:CB:51:94 Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft Manifest number: 0158 Signing time: Thu 21 Aug 2025 04:14:22 +0000 Manifest this update: Thu 21 Aug 2025 04:14:21 +0000 Manifest next update: Thu 28 Aug 2025 04:14:21 +0000 Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: 8OOvc53RhNBsMhdUm9ufCQl9+uYJAGtCbKu/ke4ldQI=) 2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: 1MgG7WTwswH0kCn616eOpfwXJOyuod5SbIGbahzjBCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Validity Not Before: Aug 21 04:14:21 2025 GMT Not After : Aug 28 04:14:21 2025 GMT Subject: CN=68a69d1e-089b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1a:46:f2:f5:65:68:6f:d9:6b:45:30:50:0c: f9:c7:64:5e:31:06:a4:12:d9:17:86:63:77:19:c1: 11:1c:54:73:54:8d:02:9b:76:73:a2:93:0d:24:4f: e4:f8:86:57:c7:6a:e4:c3:30:ec:6d:8e:93:45:58: 16:0e:82:dd:ee:06:bb:de:da:5e:15:38:99:8f:79: 5c:c2:a4:6f:56:69:af:7b:29:48:58:04:18:eb:2e: 89:df:07:50:00:31:13:6f:37:f7:73:02:15:55:89: c4:34:e6:fa:42:af:5a:56:86:6a:13:d2:c0:3a:36: 56:10:1b:ba:79:55:d6:f3:6a:c9:ca:f3:ba:d8:a2: dc:cb:63:49:5b:8b:fb:5d:82:28:92:a4:de:b9:51: 14:b5:3b:5a:e3:fb:30:b4:e0:93:3d:5c:e2:87:1d: 62:34:bf:36:9d:53:09:eb:87:9c:59:50:c1:7b:84: ee:ee:55:48:25:87:a8:b2:f0:f0:18:67:47:28:6d: dc:08:3e:47:36:82:19:14:3e:49:99:06:3a:59:2d: ad:b3:3b:86:a7:34:fe:59:83:96:45:8c:30:2a:7f: 3c:1c:5e:f6:79:f8:5e:b9:18:15:f6:45:cf:bd:62: 18:46:18:6c:76:10:21:d4:ea:ba:74:f4:43:36:a3: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5A:4B:77:69:62:CE:AB:C5:36:B9:6C:53:EF:42:F9:31:CB:51:94 X509v3 Authority Key Identifier: keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a5:9a:d6:d7:3c:0f:7a:85:f4:78:64:ea:b5:5e:c6:a2:c7: e4:a4:9e:25:5f:5c:f7:a2:0f:5a:c5:18:50:ce:67:be:4c:19: 05:ed:7d:f4:96:9a:f1:92:0c:71:96:ae:25:95:aa:da:cd:aa: 01:4d:25:d1:5f:48:21:01:25:e5:6d:56:39:b6:07:d0:de:2d: fb:05:bb:33:ae:52:9e:12:c4:71:45:51:6e:db:d9:13:50:67: b0:71:0b:19:c7:9e:56:bf:5d:a0:63:b7:67:db:ed:dc:35:a7: 63:d9:d1:f0:c7:13:10:4c:40:1b:59:c9:ad:c0:1b:2e:6e:c5: d0:be:8e:e1:c6:ed:1f:da:e9:0e:a8:ae:e7:c3:d5:47:e1:7e: 38:d8:50:2a:b3:3b:7e:44:4c:b7:5c:4f:48:bf:89:c5:9b:1d: 77:57:5a:25:fc:59:4d:fc:ca:12:ae:7f:26:e4:e6:9b:7b:8b: b2:33:60:58:b7:49:6a:50:96:3b:17:9d:50:bb:67:1e:ff:de: a3:54:08:1a:e0:f5:66:3d:bd:49:8e:5f:37:b3:c2:b3:e5:63: 9f:4a:83:bc:60:8e:9c:a1:f8:d2:bb:eb:fd:a5:0e:02:01:59: a4:51:bc:5f:de:f4:a7:92:f1:fa:ac:60:6c:b5:4c:74:ec:ed: ce:c3:76:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMDcxMTAvBgNVBAUTKDczODREQzY2N0I0RDQ5QTVBQ0Q1MEE1OEI0ODkxNkEx NUFDMjYxNkIwHhcNMjUwODIxMDQxNDIxWhcNMjUwODI4MDQxNDIxWjAYMRYwFAYD VQQDEw02OGE2OWQxZS0wODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xpG8vVlaG/Za0UwUAz5x2ReMQakEtkXhmN3GcERHFRzVI0Cm3ZzopMNJE/k +IZXx2rkwzDsbY6TRVgWDoLd7ga73tpeFTiZj3lcwqRvVmmveylIWAQY6y6J3wdQ ADETbzf3cwIVVYnENOb6Qq9aVoZqE9LAOjZWEBu6eVXW82rJyvO62KLcy2NJW4v7 XYIokqTeuVEUtTta4/swtOCTPVzihx1iNL82nVMJ64ecWVDBe4Tu7lVIJYeosvDw GGdHKG3cCD5HNoIZFD5JmQY6WS2tszuGpzT+WYOWRYwwKn88HF72efheuRgV9kXP vWIYRhhsdhAh1Oq6dPRDNqPrLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVaS3dp Ys6rxTa5bFPvQvkxy1GUMB8GA1UdIwQYMBaAFHOE3GZ7TUmlrNUKWLSJFqFawmFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQwNy81MDU1NjBCNjZF N0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNhV3MxUXBZdElrV29WckNZ V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQwNy81MDU1NjBCNjZFN0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNh V3MxUXBZdElrV29WckNZV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/pZrW1zwPeoX0eGTqtV7GosfkpJ4lX1z3og9axRhQzme+TBkF7X30 lprxkgxxlq4llarazaoBTSXRX0ghASXlbVY5tgfQ3i37BbszrlKeEsRxRVFu29kT UGewcQsZx55Wv12gY7dn2+3cNadj2dHwxxMQTEAbWcmtwBsubsXQvo7hxu0f2ukO qK7nw9VH4X442FAqszt+REy3XE9Iv4nFmx13V1ol/FlN/MoSrn8m5Oabe4uyM2BY t0lqUJY7F51Qu2ce/96jVAga4PVmPb1Jjl83s8Kz5WOfSoO8YI6cofjSu+v9pQ4C AVmkUbxf3vSnkvH6rGBstUx07O3Ow3ZK -----END CERTIFICATE-----Generated at Fri Aug 22 16:16:43 2025 by rpki-client