$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft File: 4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json) Hash identifier: GhQN2ezq7mDElZGlQIcr+6678vu8NKtN8mBm0P2FaWA= Subject key identifier: E9:EF:62:0E:EA:F8:6A:63:98:D6:B5:07:FC:95:51:4C:2A:11:39:68 Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 0906 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft Manifest number: 08ED Signing time: Sun 20 Jul 2025 20:32:08 +0000 Manifest this update: Sun 20 Jul 2025 20:32:07 +0000 Manifest next update: Sun 27 Jul 2025 20:32:07 +0000 Files and hashes: 1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: 0JRXhK3VT42N0kERpLmZqF3xsGdEM8dlJ2iRV3X1pkg=) 2: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: YmROt2RnH3UdNIAXBylk68JRdbwoGmgzkhxTYT8yZZA=) 3: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: jI9GJ3mUj7/g+UDfOOrVVqKbgOohmwcRp94iSUpENxA=) 4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: 65R5M+eBFk+Sri4/ilXTe6yj4G3UYq+q394nSZKR7qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2310 (0x906) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Jul 20 20:32:07 2025 GMT Not After : Jul 27 20:32:07 2025 GMT Subject: CN=687d5247-c9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6e:8e:e7:c2:ce:08:57:6d:55:b3:43:88:2a: ea:15:1b:61:36:e3:ad:5e:82:67:4a:7d:2f:45:d6: 1e:1b:da:7d:c9:53:8a:56:e8:bb:44:16:af:a9:fc: 3a:c3:ab:a8:4b:d2:b7:a0:e5:67:02:8e:43:2a:ec: 4a:af:dd:f3:ab:ad:2b:79:61:19:2a:a7:e1:26:16: e1:21:0c:c7:73:5f:90:d3:d5:b6:35:75:ba:b3:0a: ae:2d:8d:3e:08:b5:84:3e:6b:c3:40:11:79:59:88: b6:d7:04:a7:97:61:ed:ae:ee:94:28:90:69:2a:a1: 5b:0f:12:8f:08:c4:ff:2f:14:cb:d9:18:02:c0:ee: 74:c3:c6:39:89:2e:9d:38:f0:8a:1a:0b:14:8a:51: d8:fd:96:ad:65:85:90:00:54:4c:96:24:9f:a2:80: 01:18:4f:6d:c9:c2:48:18:a9:a1:8e:97:69:69:8f: 12:d7:69:d4:5a:0c:b6:c6:7e:8f:b2:8a:2f:98:e0: 1a:01:ba:ce:22:c7:68:1b:7c:4a:02:e6:f5:cb:78: ad:19:0c:c0:69:d8:14:f7:4a:50:2e:de:6a:74:79: 5e:e7:e2:bb:1d:df:5d:43:ea:23:64:11:2a:32:f9: 9d:3e:5c:65:71:69:dc:49:17:7b:31:f0:ed:a4:ee: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EF:62:0E:EA:F8:6A:63:98:D6:B5:07:FC:95:51:4C:2A:11:39:68 X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:52:4f:36:c8:21:32:70:8a:a1:03:f2:5e:9c:38:e0:62:e8: b3:b5:11:b7:b8:d2:3c:22:bf:38:0b:a5:3c:9b:90:3b:13:04: 1f:62:6e:ab:ea:49:36:f7:60:eb:a8:45:c4:69:27:89:ba:ad: 43:06:72:d5:9e:ed:09:04:62:1d:07:ab:33:70:c1:7e:8b:05: bd:3c:1b:54:70:34:e4:11:a7:8b:65:88:e0:e2:9d:71:21:6d: 8b:c2:30:2d:a4:cc:30:04:47:3c:9b:98:c8:58:5e:55:02:9d: 6f:e0:ac:78:a7:4f:7d:19:8b:98:29:9b:e2:2e:11:ae:77:64: f0:e4:67:23:da:63:74:8c:71:cf:dc:eb:39:f7:4b:37:bd:40: 31:18:d7:3a:63:a8:61:bc:a0:53:9a:f2:b6:94:aa:d9:ea:5f: 8a:11:eb:cc:2e:c0:8e:73:fb:97:13:fa:22:89:f8:08:0b:b7: 72:68:04:60:de:83:c7:b9:85:fb:2f:0a:2c:fa:6d:02:4d:74: ed:d9:f5:90:68:41:4d:0e:95:67:1b:73:ff:2c:1f:ee:64:d6: 55:05:5a:10:46:6c:dd:5f:67:c1:ea:c4:c7:7b:35:85:c0:a7: 5c:c7:7d:03:fe:7f:59:cd:50:48:12:29:ef:e2:74:13:a3:46: e2:a2:14:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjUwNzIwMjAzMjA3WhcNMjUwNzI3MjAzMjA3WjAYMRYwFAYD VQQDEw02ODdkNTI0Ny1jOWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkG6O58LOCFdtVbNDiCrqFRthNuOtXoJnSn0vRdYeG9p9yVOKVui7RBavqfw6 w6uoS9K3oOVnAo5DKuxKr93zq60reWEZKqfhJhbhIQzHc1+Q09W2NXW6swquLY0+ CLWEPmvDQBF5WYi21wSnl2Htru6UKJBpKqFbDxKPCMT/LxTL2RgCwO50w8Y5iS6d OPCKGgsUilHY/ZatZYWQAFRMliSfooABGE9tycJIGKmhjpdpaY8S12nUWgy2xn6P soovmOAaAbrOIsdoG3xKAub1y3itGQzAadgU90pQLt5qdHle5+K7Hd9dQ+ojZBEq MvmdPlxlcWncSRd7MfDtpO6zzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnvYg7q +GpjmNa1B/yVUUwqETloMB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTEyRi80QjhCRkZFQ0I0NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhi a25WRjhrU1pLSEt0Q3Z3d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfUk82yCEycIqhA/JenDjgYuiztRG3uNI8Ir84C6U8m5A7EwQfYm6r 6kk292DrqEXEaSeJuq1DBnLVnu0JBGIdB6szcMF+iwW9PBtUcDTkEaeLZYjg4p1x IW2LwjAtpMwwBEc8m5jIWF5VAp1v4Kx4p099GYuYKZviLhGud2Tw5Gcj2mN0jHHP 3Os590s3vUAxGNc6Y6hhvKBTmvK2lKrZ6l+KEevMLsCOc/uXE/oiifgIC7dyaARg 3oPHuYX7Lwos+m0CTXTt2fWQaEFNDpVnG3P/LB/uZNZVBVoQRmzdX2fB6sTHezWF wKdcx30D/n9ZzVBIEinv4nQTo0biohRY -----END CERTIFICATE-----Generated at Tue Jul 22 20:40:03 2025 by rpki-client