$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft File: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft (raw, json) Hash identifier: SxMd6o/dSslSbJqaqEbLxzUz6Yz9NM16l6I92ROUHG0= Subject key identifier: 6C:8D:37:AB:0F:8C:24:78:77:55:F2:D6:E9:29:B9:9E:F3:15:15:E8 Authority key identifier: E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D Certificate issuer: /CN=A91F2B47/serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft Manifest number: 0258 Signing time: Sun 07 Sep 2025 02:14:42 +0000 Manifest this update: Sun 07 Sep 2025 02:14:41 +0000 Manifest next update: Sun 14 Sep 2025 02:14:41 +0000 Files and hashes: 1: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl (hash: oZPSJelMOcdp/zB9wi/6b1LGr2Nt3sFrscL99YZczGc=) 2: 909F94F070F911EDBA42F056C4F9AE02.roa (hash: J59LrtIyPPPdrZKXDpKJBMgQFNUlF3OmhLoyAq20BcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D Validity Not Before: Sep 7 02:14:41 2025 GMT Not After : Sep 14 02:14:41 2025 GMT Subject: CN=68bcea92-c4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0d:27:d4:fa:ba:8a:5c:43:93:e1:62:b0:9e: 28:fc:91:5c:84:d3:56:8d:6d:dc:d0:8f:1e:09:bd: e8:15:b8:11:58:55:0f:7f:78:48:cd:23:ae:44:b7: eb:d9:6c:20:f4:37:bd:08:c3:04:b9:58:1f:5f:6e: 3f:aa:b4:3f:f8:69:45:0b:03:6b:cb:c4:fb:b3:c3: e8:4a:fa:8d:25:bd:39:0e:77:d4:fe:3f:fd:14:03: fe:bb:19:2e:73:a8:d5:3c:17:61:e9:d8:cd:39:ec: c2:69:9e:18:bd:a2:20:8c:62:df:f3:dd:0a:d0:0f: b2:a8:04:c9:f3:5e:be:97:75:04:a8:43:6d:24:57: 5a:5e:82:88:89:6d:54:36:ae:5d:13:93:07:e4:4d: 79:ee:90:18:e2:c3:00:49:c7:0a:32:c6:97:12:67: 45:70:bb:f8:ba:1a:fd:f4:4e:18:fe:68:35:2b:87: ba:f9:df:d9:ee:2f:6f:70:d1:f8:a8:25:76:12:20: 8b:6a:d1:63:f0:36:33:f3:ee:14:51:48:cb:e1:95: 1b:1e:4e:c6:52:12:93:9b:e0:f3:c8:64:91:9a:a4: 4b:4e:9f:78:81:b7:15:eb:18:f8:67:49:07:f9:ef: 75:69:e0:e3:eb:33:fe:86:37:64:90:a8:7b:1a:c8: a7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8D:37:AB:0F:8C:24:78:77:55:F2:D6:E9:29:B9:9E:F3:15:15:E8 X509v3 Authority Key Identifier: keyid:E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:8b:b0:e9:b5:34:ee:2b:c5:ff:f7:42:98:37:44:31:18:e5: d6:ce:96:7f:2c:0d:38:33:be:95:01:33:08:51:dd:bb:38:01: 28:46:60:34:9d:26:21:50:e2:ed:65:22:46:2d:64:f4:12:42: 47:b2:f8:ed:9a:9d:43:9f:9c:b2:f2:91:cf:7e:4c:04:55:c7: c9:59:3f:52:50:10:69:0c:bf:30:0d:32:85:f3:cb:83:a5:1a: d6:21:03:8c:85:d0:cc:1e:02:1a:e3:65:96:c2:ac:42:bf:15: 74:16:52:19:9b:0a:21:36:4a:5c:f6:b5:76:93:d1:5c:0d:09: ac:1c:40:f1:f1:ba:fc:09:52:db:0e:a5:1d:ac:b3:37:b9:cf: 84:ed:03:8c:ee:7d:30:1c:23:03:02:5e:71:30:bc:4d:9d:f1: 1a:13:55:f0:af:46:7a:e4:50:03:fe:9a:7a:d7:1f:74:85:93: da:67:3c:bf:1f:1f:39:b1:36:e3:74:d5:cc:2a:40:09:65:bf: 70:9f:38:f0:cc:07:35:09:f7:e3:47:25:3a:f3:5c:3d:70:25: 84:dc:68:28:3c:0f:73:d4:40:43:6a:c6:b7:d7:8c:f7:2f:10: 00:5a:3a:9c:99:69:f2:2b:67:3b:12:ff:3d:81:ff:d9:61:3e: ea:1f:15:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKEUxMTg5NkIwMEM5NDg2RTQzRUU3NDgwMkQyMTk2OUY4 ODhFRTRFMkQwHhcNMjUwOTA3MDIxNDQxWhcNMjUwOTE0MDIxNDQxWjAYMRYwFAYD VQQDEw02OGJjZWE5Mi1jNGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Q0n1Pq6ilxDk+FisJ4o/JFchNNWjW3c0I8eCb3oFbgRWFUPf3hIzSOuRLfr 2Wwg9De9CMMEuVgfX24/qrQ/+GlFCwNry8T7s8PoSvqNJb05DnfU/j/9FAP+uxku c6jVPBdh6djNOezCaZ4YvaIgjGLf890K0A+yqATJ816+l3UEqENtJFdaXoKIiW1U Nq5dE5MH5E157pAY4sMASccKMsaXEmdFcLv4uhr99E4Y/mg1K4e6+d/Z7i9vcNH4 qCV2EiCLatFj8DYz8+4UUUjL4ZUbHk7GUhKTm+DzyGSRmqRLTp94gbcV6xj4Z0kH +e91aeDj6zP+hjdkkKh7GsinVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyNN6sP jCR4d1Xy1ukpuZ7zFRXoMB8GA1UdIwQYMBaAFOEYlrAMlIbkPudIAtIZafiI7k4t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9GMUZFMzJCQTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi80UmlXc0F5VWh1US01MGdDMGhscC1JanVU aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSaVdzQXlVaHVRLTUwZ0MwaGxwLUlqdVRpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9GMUZFMzJCQTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi80UmlXc0F5VWh1 US01MGdDMGhscC1JanVUaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUi7DptTTuK8X/90KYN0QxGOXWzpZ/LA04M76VATMIUd27OAEoRmA0 nSYhUOLtZSJGLWT0EkJHsvjtmp1Dn5yy8pHPfkwEVcfJWT9SUBBpDL8wDTKF88uD pRrWIQOMhdDMHgIa42WWwqxCvxV0FlIZmwohNkpc9rV2k9FcDQmsHEDx8br8CVLb DqUdrLM3uc+E7QOM7n0wHCMDAl5xMLxNnfEaE1Xwr0Z65FAD/pp61x90hZPaZzy/ Hx85sTbjdNXMKkAJZb9wnzjwzAc1CffjRyU681w9cCWE3GgoPA9z1EBDasa314z3 LxAAWjqcmWnyK2c7Ev89gf/ZYT7qHxW5 -----END CERTIFICATE-----Generated at Mon Sep 8 07:50:56 2025 by rpki-client