$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: foLk3Vg/uMCjq7w505LQE5cBu7GaQAsxr/VKRYb9wRA= Subject key identifier: 94:08:CB:81:EB:1E:5B:0A:37:32:9F:CE:32:21:EF:CB:D2:66:1E:C0 Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 07CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 07C4 Signing time: Sat 26 Jul 2025 21:21:04 +0000 Manifest this update: Sat 26 Jul 2025 21:21:03 +0000 Manifest next update: Sat 02 Aug 2025 21:21:03 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: em7X5speI4zDHSy8UcLGPkOgYOsxfF0M9yxbx8ooR0s=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: nebZkphHnCGcHsK4OPuyoN2DWSVg+M+V/082vsrCEns=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: tXMl2RtLfZvDGfhyJ5diezkCwv50p552Np4xQThv520=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 21:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1998 (0x7ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Jul 26 21:21:03 2025 GMT Not After : Aug 2 21:21:03 2025 GMT Subject: CN=688546bf-e404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c7:0f:dd:09:77:6f:62:e1:53:a8:47:b3:29: c8:8e:43:46:74:c0:66:ba:53:fb:4f:90:61:9c:4a: aa:5d:3f:89:7c:6b:fa:6b:cf:c4:7b:1c:e2:72:32: 2e:e8:1b:26:60:8c:63:46:27:c1:59:49:27:41:9e: 1d:c7:c0:34:23:71:37:cb:b6:f1:5e:c7:14:e1:0e: 89:70:77:22:2b:f2:26:5a:05:d7:09:d5:23:57:f2: 76:75:78:6a:07:ff:f1:14:5a:f1:f3:c0:61:05:9d: 72:e6:7b:22:d0:4c:d1:43:5b:27:83:9b:97:94:26: ce:45:b2:8f:f6:9c:12:8f:91:3f:af:2b:2e:ab:ef: c3:8c:41:3f:f4:17:ee:fa:48:c9:01:08:26:51:92: 9b:7c:8b:46:07:be:4c:9b:e8:49:76:14:b5:bc:6c: a7:32:c6:2c:86:03:dd:24:70:6d:7e:10:ed:49:0a: de:9a:5e:6b:44:5f:00:d6:3a:f9:a5:31:0b:05:a1: 93:11:5e:f4:a3:b8:c7:d3:8d:3e:40:1a:7a:5c:c2: d9:9e:6e:d7:a4:b9:02:53:fe:27:3d:1a:70:04:6c: 98:22:5f:b1:99:40:12:96:8f:a4:a4:4b:91:3c:23: e9:57:cc:a5:f5:db:f0:70:62:43:44:96:da:44:fa: d6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:08:CB:81:EB:1E:5B:0A:37:32:9F:CE:32:21:EF:CB:D2:66:1E:C0 X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ff:83:f3:44:79:4e:8d:86:2c:2f:d5:15:3f:28:02:8c:29: a2:16:6a:cb:a2:60:c4:36:e9:a4:f3:44:59:98:ed:e5:f0:cc: ac:f0:79:ab:9c:c5:15:25:84:05:1b:69:80:f6:ef:92:ff:b9: 1d:cc:78:6e:52:51:83:ab:a1:ef:22:61:a1:41:ca:cf:3f:d0: 53:af:8e:14:39:71:79:a7:10:00:81:4a:b6:7b:0d:d1:3e:cb: 07:9a:e2:51:6e:f2:ce:4b:df:82:75:5b:fc:a1:1c:ac:d5:38: ec:7c:4f:51:2f:e3:43:b0:15:71:cb:0e:bb:86:29:bd:24:b7: 50:4b:f2:4d:f7:07:4e:0b:b9:57:a5:0b:50:cb:d1:89:9b:3e: 96:eb:14:07:5e:d8:78:c4:b7:41:75:34:7d:8f:2f:e2:b8:93: 0f:b8:5e:cb:a7:0f:04:92:00:57:c2:45:33:a1:92:c3:48:9c: 59:7d:e8:60:65:57:02:3a:3d:f6:99:9c:ba:44:23:e1:93:da: fa:b7:ae:3b:e3:74:ae:df:e1:0c:d3:49:a8:df:ad:62:d3:56: 92:58:75:d6:2c:95:97:78:01:cb:17:02:aa:d8:6d:4c:61:ee: ed:9a:7f:a5:93:2f:b7:ea:4a:ad:14:21:0a:0e:47:51:6c:e2: c7:75:61:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjUwNzI2MjEyMTAzWhcNMjUwODAyMjEyMTAzWjAYMRYwFAYD VQQDEw02ODg1NDZiZi1lNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28cP3Ql3b2LhU6hHsynIjkNGdMBmulP7T5BhnEqqXT+JfGv6a8/EexzicjIu 6BsmYIxjRifBWUknQZ4dx8A0I3E3y7bxXscU4Q6JcHciK/ImWgXXCdUjV/J2dXhq B//xFFrx88BhBZ1y5nsi0EzRQ1sng5uXlCbORbKP9pwSj5E/rysuq+/DjEE/9Bfu +kjJAQgmUZKbfItGB75Mm+hJdhS1vGynMsYshgPdJHBtfhDtSQreml5rRF8A1jr5 pTELBaGTEV70o7jH040+QBp6XMLZnm7XpLkCU/4nPRpwBGyYIl+xmUASlo+kpEuR PCPpV8yl9dvwcGJDRJbaRPrWQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQIy4Hr HlsKNzKfzjIh78vSZh7AMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe/4PzRHlOjYYsL9UVPygCjCmiFmrLomDENumk80RZmO3l8Mys8Hmr nMUVJYQFG2mA9u+S/7kdzHhuUlGDq6HvImGhQcrPP9BTr44UOXF5pxAAgUq2ew3R PssHmuJRbvLOS9+CdVv8oRys1TjsfE9RL+NDsBVxyw67him9JLdQS/JN9wdOC7lX pQtQy9GJmz6W6xQHXth4xLdBdTR9jy/iuJMPuF7Lpw8EkgBXwkUzoZLDSJxZfehg ZVcCOj32mZy6RCPhk9r6t64743Su3+EM00mo361i01aSWHXWLJWXeAHLFwKq2G1M Ye7tmn+lky+36kqtFCEKDkdRbOLHdWG/ -----END CERTIFICATE-----Generated at Sun Jul 27 16:00:03 2025 by rpki-client