$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: Abw4Tczo7rk7fhr/2wM3cK/CKdp6BwKWLLT2zouNjMU= Subject key identifier: 1F:2E:50:69:7C:00:58:7E:AB:5F:E3:04:D8:03:4F:D4:34:C7:B3:5E Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 020C Signing time: Sun 07 Sep 2025 02:32:48 +0000 Manifest this update: Sun 07 Sep 2025 02:32:48 +0000 Manifest next update: Sun 14 Sep 2025 02:32:48 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: V/V3Fd7oaEUjwuGp1LjUkzTZ9S98YhU3mzX5PNscvlM=) 2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: Ple4OYydaAojanyJwx7ZWPyKox9DD4lFfc6gQi2CwTI=) 3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: iBZ0Vc5oqFw84Bi0mykH6jGLVo3+N0cmUjqo5T+vIIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: Sep 7 02:32:48 2025 GMT Not After : Sep 14 02:32:48 2025 GMT Subject: CN=68bceed0-1310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1f:e0:a7:0c:ff:43:c2:8a:68:9a:bb:08:b0: c1:34:69:b8:5e:d1:0a:f8:4a:39:d7:30:ef:01:9a: 2d:85:5f:09:03:5a:5b:0e:dd:f0:8e:ca:e9:7f:9a: 84:f1:01:ac:6d:c8:98:ee:54:be:27:57:b9:a1:31: 79:1b:b1:cf:68:d1:2c:8b:df:4b:fd:32:7e:b4:4b: cc:94:dc:4d:1e:11:bc:e1:8d:ce:1d:95:08:0b:85: 49:97:e3:c2:38:34:91:fd:7d:5a:b5:07:c0:ed:d6: 46:24:7c:6d:f4:e9:5a:bc:7c:f2:46:bc:89:e5:50: 6f:98:06:17:7d:d3:0b:75:92:b2:c1:0c:ad:e3:a2: 1a:0a:65:91:71:8c:3c:49:9f:40:d4:bb:5c:b0:c4: a1:93:3d:e5:04:1d:ba:8d:46:7c:57:3a:ef:bb:6c: 48:72:d5:ab:2c:d6:17:56:e6:55:4b:56:fb:ff:e8: 3d:e0:d1:a9:59:34:c0:31:a8:bd:b5:bd:22:83:66: 8b:ab:e5:7d:40:62:dc:07:be:1d:fd:2e:0d:3d:63: 5b:0a:87:95:5d:3a:cb:59:49:e8:7d:a0:42:8c:f0: ca:32:08:f7:64:9b:7e:f1:be:e0:b6:a1:57:11:14: 68:68:85:a0:c4:60:17:f1:08:4e:a3:5c:ba:f7:7e: 67:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2E:50:69:7C:00:58:7E:AB:5F:E3:04:D8:03:4F:D4:34:C7:B3:5E X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d4:26:a8:d1:6e:91:29:08:8f:d1:33:d7:5f:4a:9b:95:36: 2d:bc:8f:a4:05:e6:46:b5:d8:80:6f:36:b9:09:ec:c0:95:cb: 64:b6:c2:22:d1:b0:66:e3:91:2b:02:60:c4:d4:09:c7:38:12: 64:5f:7a:af:f7:2d:aa:35:31:df:76:06:84:d6:07:85:ab:78: f9:3c:84:24:67:0e:57:af:e3:26:a4:11:94:c3:e7:3f:24:4b: fb:f7:ac:88:21:3f:53:4c:72:24:9a:52:1c:ac:77:fe:5d:95: 91:ce:38:9f:ad:9f:a2:b8:de:5c:d5:77:f4:9e:31:c5:b1:f4: 55:36:46:8b:ed:9e:70:00:8f:1b:d5:ec:ad:66:9f:1b:ed:e1: 29:8c:a0:2a:5f:e3:36:92:c2:c6:af:1d:8a:7b:05:52:51:12: 10:48:65:fa:0a:1c:b4:b5:ae:dd:cb:19:bc:82:47:e3:5d:07: 23:9d:88:70:9c:36:47:0f:7a:89:33:5c:03:23:ab:ee:bb:d8: f3:62:ce:c0:6d:04:d9:ac:2d:5f:2a:d1:43:03:b2:25:29:02: 9f:72:4e:d5:41:ae:64:58:91:ba:8d:ae:67:35:9a:1f:d5:99: 03:1d:3c:4c:eb:6b:63:7f:65:d5:d9:c8:14:ef:77:ca:a7:6c: 58:e6:21:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjUwOTA3MDIzMjQ4WhcNMjUwOTE0MDIzMjQ4WjAYMRYwFAYD VQQDEw02OGJjZWVkMC0xMzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzx/gpwz/Q8KKaJq7CLDBNGm4XtEK+Eo51zDvAZothV8JA1pbDt3wjsrpf5qE 8QGsbciY7lS+J1e5oTF5G7HPaNEsi99L/TJ+tEvMlNxNHhG84Y3OHZUIC4VJl+PC ODSR/X1atQfA7dZGJHxt9OlavHzyRryJ5VBvmAYXfdMLdZKywQyt46IaCmWRcYw8 SZ9A1LtcsMShkz3lBB26jUZ8Vzrvu2xIctWrLNYXVuZVS1b7/+g94NGpWTTAMai9 tb0ig2aLq+V9QGLcB74d/S4NPWNbCoeVXTrLWUnofaBCjPDKMgj3ZJt+8b7gtqFX ERRoaIWgxGAX8QhOo1y6935n+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8uUGl8 AFh+q1/jBNgDT9Q0x7NeMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD1Cao0W6RKQiP0TPXX0qblTYtvI+kBeZGtdiAbza5CezAlctktsIi 0bBm45ErAmDE1AnHOBJkX3qv9y2qNTHfdgaE1geFq3j5PIQkZw5Xr+MmpBGUw+c/ JEv796yIIT9TTHIkmlIcrHf+XZWRzjifrZ+iuN5c1Xf0njHFsfRVNkaL7Z5wAI8b 1eytZp8b7eEpjKAqX+M2ksLGrx2KewVSURIQSGX6Chy0ta7dyxm8gkfjXQcjnYhw nDZHD3qJM1wDI6vuu9jzYs7AbQTZrC1fKtFDA7IlKQKfck7VQa5kWJG6ja5nNZof 1ZkDHTxM62tjf2XV2cgU73fKp2xY5iEj -----END CERTIFICATE-----Generated at Mon Sep 8 10:07:58 2025 by rpki-client