$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft File: a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json) Hash identifier: 6mWPIznqAqdlreLg+p3xK/oPFgGRB4OWTCstvZke1LI= Subject key identifier: 36:6C:6D:30:51:8B:19:21:B4:6E:02:07:9F:7C:C9:F7:77:F5:43:72 Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Certificate serial: 1B79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft Manifest number: 1B6C Signing time: Sun 24 Aug 2025 16:15:07 +0000 Manifest this update: Sun 24 Aug 2025 16:15:07 +0000 Manifest next update: Sun 31 Aug 2025 16:15:07 +0000 Files and hashes: 1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: aMjVd8iNaVUsOsdBKgqQ/P+mEtHYcLqERG6JmOh07m0=) 2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: ZmGMH4g7cGfub9A5Ucup2yr3pAIXwRpZ1v4yX9SvAOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7033 (0x1b79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAD6F, serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Validity Not Before: Aug 24 16:15:07 2025 GMT Not After : Aug 31 16:15:07 2025 GMT Subject: CN=68ab3a8b-7800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c4:c9:04:eb:3d:b1:92:81:8e:54:a9:66:17: 89:8f:14:1a:59:99:c8:c7:a1:7a:39:67:09:79:52: e2:2d:ca:a9:68:90:47:23:7e:b6:cf:ac:94:82:60: 22:88:5a:79:da:5d:b8:8a:7f:45:c6:b3:9b:3b:a6: 11:6f:9b:32:77:3e:68:60:a2:15:20:2d:58:8a:9c: 86:30:85:40:8d:b2:57:2d:73:38:76:1c:f7:b7:ae: fb:ad:09:7e:e4:f2:87:fa:1d:f6:89:6c:e9:57:c7: 4b:ab:60:e9:1f:ee:e8:69:cf:89:7c:f2:a2:81:b5: fb:0a:ed:c1:96:e5:e3:35:10:14:cc:cc:e6:03:79: cf:7e:69:5f:88:d8:57:45:39:7c:3f:ec:ad:25:3d: 40:c1:9c:fa:c7:0c:bd:63:56:54:08:70:21:36:59: 9b:39:2e:d6:ce:2c:d5:b1:4e:1c:b2:20:68:ba:22: be:5d:b4:fe:d6:45:e4:4f:bc:57:2c:ab:bc:af:16: dc:c2:cc:06:8c:41:12:82:a2:67:26:1c:0e:c0:e4: 26:f4:e7:61:d0:4a:f0:75:bd:de:8e:fb:59:6c:58: e4:e9:64:92:b7:9e:b3:09:8f:31:06:29:bc:e3:e1: 7e:1d:08:89:49:91:c5:aa:ec:43:c8:5a:ab:80:a2: ce:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6C:6D:30:51:8B:19:21:B4:6E:02:07:9F:7C:C9:F7:77:F5:43:72 X509v3 Authority Key Identifier: keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:9f:9e:46:23:ae:0c:8e:60:f5:04:1e:00:a9:38:7e:77:5b: 94:de:0d:be:d2:a8:fc:39:ca:c9:8f:c7:13:26:85:03:a1:2d: 62:e0:66:03:46:0c:c9:2a:59:bb:14:66:9e:69:dc:3c:53:36: 76:72:39:d1:f5:91:2c:99:cf:5a:36:49:61:ee:b2:d2:2a:3f: fc:09:c6:88:0f:bb:31:6f:0e:16:3d:78:e3:ec:90:52:fe:4f: 45:e1:cd:ad:7f:ec:dd:43:66:e5:04:b0:5c:cb:f2:8f:24:d3: c6:27:f7:43:67:9a:55:44:f6:e4:f0:65:f4:4f:33:e8:b6:34: 95:3f:fd:78:98:00:28:61:80:ef:da:b3:72:d2:f0:07:3e:ff: 0d:fe:f6:3f:72:85:b6:0e:1a:c0:78:ca:71:7a:7f:97:ad:3a: 8f:f0:3b:49:f2:b6:13:46:bd:1d:d6:ea:1c:3e:ec:b7:1f:12: 21:da:45:26:33:41:c6:a0:34:f1:e6:fd:4f:30:17:00:ca:94: a3:01:a4:d5:e2:a8:da:98:30:f9:5c:67:89:1e:7e:c9:04:92: b0:1f:1f:79:1e:37:c6:04:0e:a6:b9:66:32:2c:d6:8f:99:c9: 78:b1:05:7a:2d:b9:d9:9c:db:e4:25:c0:d1:04:22:5d:df:5a: e7:cd:c3:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFENkYxMTAvBgNVBAUTKDZCODY0MjQxREYwMTJGMjM5MjdBMDFDMEUzODZFMDdB QUI0OUM1MjIwHhcNMjUwODI0MTYxNTA3WhcNMjUwODMxMTYxNTA3WjAYMRYwFAYD VQQDEw02OGFiM2E4Yi03ODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsTJBOs9sZKBjlSpZheJjxQaWZnIx6F6OWcJeVLiLcqpaJBHI362z6yUgmAi iFp52l24in9FxrObO6YRb5sydz5oYKIVIC1YipyGMIVAjbJXLXM4dhz3t677rQl+ 5PKH+h32iWzpV8dLq2DpH+7oac+JfPKigbX7Cu3BluXjNRAUzMzmA3nPfmlfiNhX RTl8P+ytJT1AwZz6xwy9Y1ZUCHAhNlmbOS7WzizVsU4csiBouiK+XbT+1kXkT7xX LKu8rxbcwswGjEESgqJnJhwOwOQm9Odh0Erwdb3ejvtZbFjk6WSSt56zCY8xBim8 4+F+HQiJSZHFquxDyFqrgKLONwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZsbTBR ixkhtG4CB598yfd39UNyMB8GA1UdIwQYMBaAFGuGQkHfAS8jknoBwOOG4HqrScUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUQ2Ri80NkM5NDA5NDE0 NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5T1NlZ0hBNDRiZ2VxdEp4 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0WkNRZDhCTHlPU2VnSEE0NGJnZXF0SnhTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUQ2Ri80NkM5NDA5NDE0NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5 T1NlZ0hBNDRiZ2VxdEp4U0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIn55GI64MjmD1BB4AqTh+d1uU3g2+0qj8OcrJj8cTJoUDoS1i4GYD RgzJKlm7FGaeadw8UzZ2cjnR9ZEsmc9aNklh7rLSKj/8CcaID7sxbw4WPXjj7JBS /k9F4c2tf+zdQ2blBLBcy/KPJNPGJ/dDZ5pVRPbk8GX0TzPotjSVP/14mAAoYYDv 2rNy0vAHPv8N/vY/coW2DhrAeMpxen+XrTqP8DtJ8rYTRr0d1uocPuy3HxIh2kUm M0HGoDTx5v1PMBcAypSjAaTV4qjamDD5XGeJHn7JBJKwHx95HjfGBA6muWYyLNaP mcl4sQV6LbnZnNvkJcDRBCJd31rnzcNX -----END CERTIFICATE-----Generated at Sun Aug 24 21:33:07 2025 by rpki-client