$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft File: 4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json) Hash identifier: VfNDSKQNoUPxXpU0zUq96KoOsc7RGdW2DhujLjjU544= Subject key identifier: C7:F7:75:5F:88:7C:3A:95:82:75:7B:B5:34:02:71:DD:8B:5D:E9:5F Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft Manifest number: 02B3 Signing time: Fri 19 Sep 2025 01:56:16 +0000 Manifest this update: Fri 19 Sep 2025 01:56:15 +0000 Manifest next update: Fri 26 Sep 2025 01:56:15 +0000 Files and hashes: 1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: gci/N45YgcSI5dnYnjVNYBa8GybVoQa+9b4q3rzyUqg=) 2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: h+ue+R5DGdF0uaqUXBTnmoh/DYvzHxp90t2bN+4sANk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Validity Not Before: Sep 19 01:56:15 2025 GMT Not After : Sep 26 01:56:15 2025 GMT Subject: CN=68ccb83f-d9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b3:69:b9:e3:a0:c9:93:c4:5e:f7:0d:1f:3e: d2:7d:72:74:64:09:dc:01:ec:31:0d:73:a8:c9:61: b2:4f:93:ca:bc:94:c5:f4:c7:73:a7:0e:34:08:c7: 0e:64:de:28:cb:ce:3d:ae:fa:00:de:2a:8f:72:2f: b8:d3:27:03:01:78:33:b7:08:17:68:59:eb:9d:3d: 9e:cc:a8:04:4e:df:f7:1b:6a:fc:5f:33:66:7d:22: f2:bf:4f:00:8c:75:46:7b:2a:ce:6a:42:13:d3:b1: 6c:8e:99:a6:f2:a0:1d:4e:0a:5b:7f:f6:9b:b3:7a: eb:d8:ef:b8:71:51:a1:1f:1b:cf:bd:98:4c:31:64: 6f:bb:0f:b2:3f:06:57:05:f6:7e:a6:80:97:de:dc: d2:c9:a6:47:3f:ee:aa:14:85:6b:7c:aa:86:e5:88: 4c:0c:57:fb:14:e9:0b:ed:0c:25:fd:a1:e3:67:3d: 6f:96:c3:35:59:9f:be:64:a0:81:d0:7c:c8:42:e4: 42:71:5a:d7:3c:35:2e:53:91:56:49:60:51:67:9e: a7:6f:bf:21:86:1b:ad:e9:b3:4e:98:59:c2:5d:b5: 2f:93:6d:a0:26:c9:04:7f:d7:2d:93:c1:05:00:4f: cd:2f:7b:31:e5:e7:be:29:d7:3a:24:a4:c3:93:3c: 13:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F7:75:5F:88:7C:3A:95:82:75:7B:B5:34:02:71:DD:8B:5D:E9:5F X509v3 Authority Key Identifier: keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:44:bb:8f:07:bb:11:9e:18:10:e2:f9:17:53:a1:46:74:11: 81:70:8e:81:64:d2:55:a3:ae:6b:0d:f6:0b:05:87:bf:13:0a: 20:bc:69:56:71:cd:a8:ca:4d:ac:f9:23:b1:e3:ba:1d:c7:b7: fb:dd:d3:4d:6d:42:55:09:3b:a3:78:58:00:21:95:fd:21:2b: 5c:38:9c:28:5a:db:69:4d:80:88:70:d8:a3:cf:d7:84:c8:96: 1b:84:2e:89:75:f4:d9:ed:87:8c:56:a9:8f:87:f5:f5:f6:58: 9a:13:d8:1a:73:e9:e9:66:1c:c3:b9:3c:69:d8:fe:f6:09:31: 46:bd:4c:d6:ee:2d:eb:ce:59:2e:e5:38:db:f8:43:63:11:e0: 02:04:46:32:14:85:4a:89:70:0e:dd:24:ec:f5:c9:19:ec:98: 97:fa:b1:34:bc:7a:e7:06:ba:56:5b:07:86:ea:9c:e1:39:6d: 70:71:01:66:3e:f6:82:91:ec:8f:d1:46:52:09:bb:98:b5:ca: 6f:e1:4a:92:0e:a8:c7:5e:04:e4:70:88:4d:c3:3b:fe:8c:bc: 7e:99:89:e8:1a:08:25:db:b7:c0:3e:b1:08:03:9d:42:70:4d: de:38:0e:ef:3f:13:77:f1:c2:d6:85:a0:08:01:c4:c4:69:ff: 3c:9b:c5:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1RDkxMTAvBgNVBAUTKEUzMUU2N0NBMEU1QkVEQjI0OEY5N0E2NTdERUZGNjJF Qzg2RjUyNEIwHhcNMjUwOTE5MDE1NjE1WhcNMjUwOTI2MDE1NjE1WjAYMRYwFAYD VQQDEw02OGNjYjgzZi1kOWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbNpueOgyZPEXvcNHz7SfXJ0ZAncAewxDXOoyWGyT5PKvJTF9Mdzpw40CMcO ZN4oy849rvoA3iqPci+40ycDAXgztwgXaFnrnT2ezKgETt/3G2r8XzNmfSLyv08A jHVGeyrOakIT07Fsjpmm8qAdTgpbf/abs3rr2O+4cVGhHxvPvZhMMWRvuw+yPwZX BfZ+poCX3tzSyaZHP+6qFIVrfKqG5YhMDFf7FOkL7Qwl/aHjZz1vlsM1WZ++ZKCB 0HzIQuRCcVrXPDUuU5FWSWBRZ56nb78hhhut6bNOmFnCXbUvk22gJskEf9ctk8EF AE/NL3sx5ee+Kdc6JKTDkzwTkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMf3dV+I fDqVgnV7tTQCcd2LXelfMB8GA1UdIwQYMBaAFOMeZ8oOW+2ySPl6ZX3v9i7Ib1JL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDVEOS84OUU4N0ZFMDBD QzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1YjdiSkktWHBsZmVfMkxzaHZV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4NW55ZzViN2JKSS1YcGxmZV8yTHNodlVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDVEOS84OUU4N0ZFMDBDQzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1Yjdi SkktWHBsZmVfMkxzaHZVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0RLuPB7sRnhgQ4vkXU6FGdBGBcI6BZNJVo65rDfYLBYe/EwogvGlW cc2oyk2s+SOx47odx7f73dNNbUJVCTujeFgAIZX9IStcOJwoWttpTYCIcNijz9eE yJYbhC6JdfTZ7YeMVqmPh/X19liaE9gac+npZhzDuTxp2P72CTFGvUzW7i3rzlku 5Tjb+ENjEeACBEYyFIVKiXAO3STs9ckZ7JiX+rE0vHrnBrpWWweG6pzhOW1wcQFm PvaCkeyP0UZSCbuYtcpv4UqSDqjHXgTkcIhNwzv+jLx+mYnoGggl27fAPrEIA51C cE3eOA7vPxN38cLWhaAIAcTEaf88m8VU -----END CERTIFICATE-----Generated at Fri Sep 19 07:34:55 2025 by rpki-client