$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft File: 4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft (raw, json) Hash identifier: s1rjI4A1KZMyuDhtOeeQNL11EkfbhLu0H+g1hyWlc6Y= Subject key identifier: D4:F4:4A:1F:25:3A:9F:4A:2E:09:41:B2:65:17:29:90:56:EE:E3:EF Authority key identifier: E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4 Certificate issuer: /CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4 Certificate serial: 03A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft Manifest number: 038C Signing time: Fri 25 Jul 2025 01:17:21 +0000 Manifest this update: Fri 25 Jul 2025 01:17:21 +0000 Manifest next update: Fri 01 Aug 2025 01:17:21 +0000 Files and hashes: 1: 4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl (hash: pVapmtlSKM57X79U+kC4gfLqzEipG7mgiesRsyVG5Cs=) 2: 9D5E76267A5B11EFAB107D22C4F9AE02.roa (hash: 9HTI4YsG+MVKk2SPKB83AXiFVagV7EoMAnUgolUkaKs=) 3: AF8F74D07A5B11EFAD45A522C4F9AE02.roa (hash: oZf6EaGqkiYgycEdcpRUWL54DKGgCS87nNNS1RZh6OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 01:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 930 (0x3a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DEF, serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4 Validity Not Before: Jul 25 01:17:21 2025 GMT Not After : Aug 1 01:17:21 2025 GMT Subject: CN=6882db21-042e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:74:1d:9b:6d:3c:ef:97:a8:d9:f1:c5:57: cc:25:22:96:60:73:45:69:f6:95:43:69:44:93:45: b9:7c:6c:ee:32:46:f0:93:97:80:5f:7d:81:cd:47: 5d:e9:8c:d9:bb:08:15:04:54:88:ca:d6:2f:3a:cf: 33:b8:75:89:4e:be:1c:05:b1:c6:78:2c:d3:dc:be: c2:e3:4c:55:ac:7b:27:54:e2:ae:aa:26:c3:2a:5f: f7:f6:6b:d4:c3:97:6e:a3:50:ba:0a:46:6e:29:fd: ee:37:85:25:a5:2e:aa:ee:f0:a2:30:fa:73:80:8e: 59:ab:25:3e:0f:a3:5f:4f:5e:9a:16:ef:f3:aa:20: c1:98:7a:b8:82:eb:7b:4d:3a:2f:f4:04:36:59:fc: 1b:e1:05:8c:0d:55:82:30:ea:14:61:2b:0e:93:fd: 6e:26:02:24:ad:0c:79:7b:86:25:7e:5e:72:f8:e3: 14:ad:d8:36:4b:b0:58:7b:31:a3:4a:5a:32:e0:f5: 00:7e:64:52:52:db:ea:02:cd:60:3e:ce:e8:fb:e0: 2e:7f:f5:16:09:2b:a3:96:84:f2:3d:2b:ca:67:fd: dd:05:a7:64:23:b8:4c:85:c3:37:d3:cb:c8:c1:54: 17:d5:15:e2:c7:50:a0:e6:1c:47:96:f5:3e:b8:3f: f6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F4:4A:1F:25:3A:9F:4A:2E:09:41:B2:65:17:29:90:56:EE:E3:EF X509v3 Authority Key Identifier: keyid:E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:f0:a5:8f:ad:51:75:ad:bf:cc:5d:2b:d7:ba:40:ef:c8:80: 16:82:2c:c7:22:84:0d:0c:74:54:ac:8a:58:e0:47:47:b8:2d: dd:83:6a:28:e5:c4:51:2b:98:df:27:d2:fd:f0:7b:51:77:fe: dc:8c:c6:41:7d:e2:f0:06:9d:65:d7:c2:88:3b:ee:72:c9:f6: 25:6c:6f:ff:77:ef:0e:a0:18:7c:19:b7:1b:25:22:d5:f0:29: 22:c5:54:b3:6b:03:32:ce:6b:66:66:4c:f4:0c:31:a3:bf:70: 0b:7d:d9:c1:b9:f9:c0:91:78:13:e8:a2:72:5a:f7:19:ed:8c: 04:dc:c8:bc:0b:63:17:d2:ef:65:b1:cf:e7:1f:ca:98:db:1d: d8:9c:71:24:99:4c:f9:13:ce:3e:24:a0:b9:e2:29:bf:28:2c: c6:7b:eb:54:44:36:e9:fb:33:25:4c:16:bd:9c:a7:b9:b1:ab: a6:d3:1a:9c:e8:2f:d3:30:b2:db:2a:2e:1a:52:fc:25:ad:bc: 1f:6e:6b:dd:26:57:f9:90:de:52:d8:96:b4:66:72:65:e9:77: d4:bd:38:7b:58:49:2f:8d:01:8d:8f:32:e6:6d:c1:55:e4:ec: e2:7d:93:cb:9a:c2:81:eb:15:fc:8b:11:52:96:67:7f:bc:c9: 68:27:e6:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJERUYxMTAvBgNVBAUTKEUzRUI5NTRCNDQ3MjFFNDExQUFGMDkzODMxMENDMTAz RUE0QzhCQjQwHhcNMjUwNzI1MDExNzIxWhcNMjUwODAxMDExNzIxWjAYMRYwFAYD VQQDEw02ODgyZGIyMS0wNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdh0HZttPO+XqNnxxVfMJSKWYHNFafaVQ2lEk0W5fGzuMkbwk5eAX32BzUdd 6YzZuwgVBFSIytYvOs8zuHWJTr4cBbHGeCzT3L7C40xVrHsnVOKuqibDKl/39mvU w5duo1C6CkZuKf3uN4UlpS6q7vCiMPpzgI5ZqyU+D6NfT16aFu/zqiDBmHq4gut7 TTov9AQ2Wfwb4QWMDVWCMOoUYSsOk/1uJgIkrQx5e4Ylfl5y+OMUrdg2S7BYezGj Sloy4PUAfmRSUtvqAs1gPs7o++Auf/UWCSujloTyPSvKZ/3dBadkI7hMhcM308vI wVQX1RXix1Cg5hxHlvU+uD/2BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNT0Sh8l Op9KLglBsmUXKZBW7uPvMB8GA1UdIwQYMBaAFOPrlUtEch5BGq8JODEMwQPqTIu0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRFRi8xOEY2OTg3Q0Iz RDUxMUVDQjNBMEE4ODJDNEY5QUUwMi80LXVWUzBSeUhrRWFyd2s0TVF6QkEtcE1p N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtdVZTMFJ5SGtFYXJ3azRNUXpCQS1wTWk3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkRFRi8xOEY2OTg3Q0IzRDUxMUVDQjNBMEE4ODJDNEY5QUUwMi80LXVWUzBSeUhr RWFyd2s0TVF6QkEtcE1pN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw8KWPrVF1rb/MXSvXukDvyIAWgizHIoQNDHRUrIpY4EdHuC3dg2oo 5cRRK5jfJ9L98HtRd/7cjMZBfeLwBp1l18KIO+5yyfYlbG//d+8OoBh8GbcbJSLV 8CkixVSzawMyzmtmZkz0DDGjv3ALfdnBufnAkXgT6KJyWvcZ7YwE3Mi8C2MX0u9l sc/nH8qY2x3YnHEkmUz5E84+JKC54im/KCzGe+tURDbp+zMlTBa9nKe5saum0xqc 6C/TMLLbKi4aUvwlrbwfbmvdJlf5kN5S2Ja0ZnJl6XfUvTh7WEkvjQGNjzLmbcFV 5OzifZPLmsKB6xX8ixFSlmd/vMloJ+ZM -----END CERTIFICATE-----Generated at Sat Jul 26 10:36:00 2025 by rpki-client