$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json) Hash identifier: Pd2aH7PDf38bYgOdmVJchOyujYVUHEAzAREYuzYKlR4= Subject key identifier: BA:D1:6E:D2:13:84:A1:46:9C:9B:5A:2B:9A:5D:F7:2E:CC:AC:87:F8 Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft Manifest number: 1F Signing time: Wed 23 Jul 2025 08:15:47 +0000 Manifest this update: Wed 23 Jul 2025 08:15:46 +0000 Manifest next update: Wed 30 Jul 2025 08:15:46 +0000 Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: hX8vlGLVJii+8wKq0gm9drgWgZqIpOiUhHRVE3+Z5FA=) 2: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: iR9RmJIaK9kKAtKzjMGd269EeycB0OEwfaUigxvrCq4=) 3: F88154843B9D11F091B39D67C4F9AE02.roa (hash: nNxkYkRl2gKLDvZBsXppHYQmBwtDL7vgL/l44dOoypk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 08:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Validity Not Before: Jul 23 08:15:46 2025 GMT Not After : Jul 30 08:15:46 2025 GMT Subject: CN=68809a33-75a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:ce:8a:ab:b9:42:bc:75:83:b6:eb:31:4e: e6:9d:23:a7:9f:cd:7b:17:30:e9:c7:e2:85:91:36: e9:9a:31:b0:88:90:07:3b:a9:98:74:37:90:19:8a: bb:99:57:87:b7:4c:38:a4:14:62:f4:b8:59:a5:65: 5b:75:fd:53:be:01:24:3f:6b:7f:fd:9d:48:1e:6a: 01:c6:25:7c:6f:15:ca:44:fa:d8:19:77:d8:aa:a4: f1:10:c3:11:31:30:de:2b:3f:b2:5a:07:50:c3:ed: e6:40:cf:6c:20:34:22:a3:44:a7:ae:48:cf:ba:e8: 79:92:17:d5:88:9a:53:64:17:3d:a0:dd:c8:fc:1b: ef:f9:1f:8c:f1:bb:c4:6b:1f:c2:45:6d:a0:75:1c: 7e:4f:69:a9:a3:75:4c:55:da:d6:50:e0:2e:ef:fd: d9:c7:e3:d2:1a:eb:4d:08:40:6b:25:60:3f:cf:05: 4c:cb:d0:78:d7:de:6c:3a:db:c1:a2:bc:99:af:8b: 07:53:44:03:5f:42:aa:31:37:a3:33:4d:be:6f:a0: 60:38:ce:29:39:b8:97:b5:12:79:54:e3:04:0d:52: 55:70:40:2b:e4:a4:73:37:32:22:8f:bb:12:f5:52: fb:6e:bd:ad:ad:8c:b4:14:a3:2f:66:b7:65:2a:39: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D1:6E:D2:13:84:A1:46:9C:9B:5A:2B:9A:5D:F7:2E:CC:AC:87:F8 X509v3 Authority Key Identifier: keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:dd:3f:b4:b9:bf:c2:1e:38:f3:fb:31:e0:4a:51:ec:5b:85: fa:16:ff:6e:a5:36:3c:b5:0c:7c:a3:80:12:b7:93:3a:e9:dc: e6:a0:cf:ed:7c:15:29:30:6c:2b:5a:25:aa:e4:9f:c5:51:94: 25:e5:97:22:7f:2c:05:a1:a5:0f:0e:70:2c:88:10:d0:0e:74: 23:50:64:cb:06:f9:f9:ba:49:70:94:fe:66:86:b8:75:88:31: f9:61:67:24:41:5f:b9:c4:d3:e7:57:3a:54:1a:39:38:40:91: 98:98:8b:f1:83:56:8e:4a:31:6a:19:5e:6e:68:ec:7f:37:68: 12:b8:34:9a:3a:f8:d9:cc:21:95:78:26:3d:71:d7:6e:76:a9: 8c:8e:10:7b:f2:a4:12:3f:d4:0e:79:46:15:bd:bf:25:69:c5: 8c:53:bf:60:fe:e9:46:3d:44:5c:87:67:91:96:9f:0b:12:24: f3:51:f1:cf:f7:2b:cb:3d:e5:b4:95:1c:e7:75:fe:2a:13:7d: 09:59:c6:4c:51:56:c4:01:02:fb:9f:1e:f4:74:2b:4b:9b:a5: 0c:1b:d6:bc:ce:5b:02:4f:de:e7:52:1a:8c:83:20:4e:64:c0: 7a:2d:c7:04:f7:ea:c2:47:59:f8:2a:9b:21:97:b7:17:f8:59: b8:83:3d:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NkMxMDExMC8GA1UEBRMoRTJCMERGQTY5MEQyQzdFQUM0MzYzNjc1NkU0MzdCN0My NjI2RjRCQjAeFw0yNTA3MjMwODE1NDZaFw0yNTA3MzAwODE1NDZaMBgxFjAUBgNV BAMTDTY4ODA5YTMzLTc1YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCow86Kq7lCvHWDtusxTuadI6efzXsXMOnH4oWRNumaMbCIkAc7qZh0N5AZiruZ V4e3TDikFGL0uFmlZVt1/VO+ASQ/a3/9nUgeagHGJXxvFcpE+tgZd9iqpPEQwxEx MN4rP7JaB1DD7eZAz2wgNCKjRKeuSM+66HmSF9WImlNkFz2g3cj8G+/5H4zxu8Rr H8JFbaB1HH5PaamjdUxV2tZQ4C7v/dnH49Ia600IQGslYD/PBUzL0HjX3mw628Gi vJmviwdTRANfQqoxN6MzTb5voGA4zik5uJe1EnlU4wQNUlVwQCvkpHM3MiKPuxL1 Uvtuva2tjLQUoy9mt2UqOYYVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUutFu0hOE oUacm1orml33Lsysh/gwHwYDVR0jBBgwFoAU4rDfppDSx+rENjZ1bkN7fCYm9Lsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2QzEwLzBFOTQwNUJBM0I5 RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlM cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNHJEZnBwRFN4LXJFTmpaMWJrTjdmQ1ltOUxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2 QzEwLzBFOTQwNUJBM0I5RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1y RU5qWjFia043ZkNZbTlMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACfdP7S5v8IeOPP7MeBKUexbhfoW/26lNjy1DHyjgBK3kzrp3Oagz+18 FSkwbCtaJarkn8VRlCXllyJ/LAWhpQ8OcCyIENAOdCNQZMsG+fm6SXCU/maGuHWI MflhZyRBX7nE0+dXOlQaOThAkZiYi/GDVo5KMWoZXm5o7H83aBK4NJo6+NnMIZV4 Jj1x1252qYyOEHvypBI/1A55RhW9vyVpxYxTv2D+6UY9RFyHZ5GWnwsSJPNR8c/3 K8s95bSVHOd1/ioTfQlZxkxRVsQBAvufHvR0K0ubpQwb1rzOWwJP3udSGoyDIE5k wHotxwT36sJHWfgqmyGXtxf4WbiDPdY= -----END CERTIFICATE-----Generated at Thu Jul 24 04:58:42 2025 by rpki-client