$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft File: E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft (raw, json) Hash identifier: YCImCIWrOikWXuTuISyKktW5830iil9Kn7FX9Xzja30= Subject key identifier: 5A:C9:BC:0C:F0:1A:D3:C4:D0:E8:B0:32:C7:A8:BC:6D:F5:C8:04:59 Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C Certificate issuer: /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Certificate serial: 0548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft Manifest number: 0540 Signing time: Sun 20 Jul 2025 23:40:37 +0000 Manifest this update: Sun 20 Jul 2025 23:40:36 +0000 Manifest next update: Sun 27 Jul 2025 23:40:36 +0000 Files and hashes: 1: E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl (hash: Ce0uAYp1ioQfV5zpPUIwVn4K+j4FE1d5+slu/Bz3hCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1352 (0x548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8B5, serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Validity Not Before: Jul 20 23:40:36 2025 GMT Not After : Jul 27 23:40:36 2025 GMT Subject: CN=687d7e74-fe44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:14:b5:24:9e:1a:48:3c:4d:17:87:bc:bc: e5:80:19:34:02:c6:24:71:25:b8:84:d7:a8:6e:3d: 03:43:40:14:7a:f6:87:b6:ce:5d:2c:cc:82:75:69: 10:a7:0f:fd:f8:22:3f:b3:a0:05:6c:dd:45:98:ac: e8:85:bf:8d:7d:cd:26:b1:52:65:d2:e5:0d:00:52: c6:09:da:cd:a7:54:06:1b:c5:da:96:88:7d:b3:bb: 4a:26:79:3d:b7:e6:4e:40:fb:d6:68:bf:cb:40:99: 42:68:e5:ad:95:0a:45:1d:9c:ac:3e:de:3e:07:da: 7f:22:2e:84:1b:f3:ad:4a:77:f4:62:4c:d8:80:30: b1:51:76:60:59:ab:89:b5:89:15:dc:62:ed:f8:2a: 07:57:71:4d:b2:31:0e:27:53:db:01:8b:7f:9d:57: 37:2f:5e:53:29:ff:e2:5e:a6:c3:84:af:88:47:ef: a1:c2:b2:b2:1d:cf:97:f2:f4:38:3e:88:76:0c:f8: d3:d9:6d:7d:72:4f:ba:05:6b:75:b6:40:1f:9b:82: 4e:91:99:7b:3c:55:eb:7d:cc:ea:04:07:52:f5:d1: 2d:9c:1a:30:d7:f5:43:de:41:d0:ec:19:cc:e4:a4: d0:50:ea:9a:3a:b2:58:0c:79:e2:1b:8e:e1:5c:09: 43:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C9:BC:0C:F0:1A:D3:C4:D0:E8:B0:32:C7:A8:BC:6D:F5:C8:04:59 X509v3 Authority Key Identifier: keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c0:fc:62:75:77:ef:1f:64:6e:71:2c:16:29:2d:9d:1b:65: 87:34:45:7a:f2:26:fe:69:b4:29:8c:6e:7f:52:00:8d:d0:a4: 22:83:d2:22:11:11:19:96:f0:f9:47:bf:63:a7:fd:a1:12:d7: 82:8c:37:77:5c:8c:54:ad:50:b3:66:23:ec:0e:66:e1:5f:18: 79:cf:d7:c3:b5:90:ba:15:8a:63:74:2b:d7:05:76:b7:ab:25: 53:0b:f6:c8:8c:7a:22:0a:80:b4:35:bb:7a:4d:93:c7:14:9e: 07:bd:7d:9e:0d:87:45:a6:ee:eb:00:b9:a9:6a:24:1c:26:b7: e8:c9:37:92:b7:9a:00:68:31:bf:09:17:77:c2:c7:c8:b1:27: f1:f2:9a:1c:37:42:17:06:68:18:41:92:00:a5:4f:81:25:9c: 1d:a6:13:73:88:d6:6f:80:f5:6c:26:ec:da:15:bf:39:75:e8: 10:54:32:61:ea:da:a7:31:fa:1b:83:80:a9:bd:8e:80:94:cb: a8:5a:d0:b7:4f:2e:7a:c1:4f:f1:58:3d:c2:ca:ce:33:61:9c: 9a:cc:05:95:d3:4d:c3:dc:dc:af:4f:3d:ce:cc:1b:01:69:fb: 67:75:11:bd:8f:61:5b:e7:c1:f6:90:16:24:c6:6d:dd:1c:57: 1c:eb:a8:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4QjUxMTAvBgNVBAUTKDEzOEY5QThDRjIwN0RBMDA4QjQwMUM2REU4RDkxMzEw RkUyNUVBNEMwHhcNMjUwNzIwMjM0MDM2WhcNMjUwNzI3MjM0MDM2WjAYMRYwFAYD VQQDEw02ODdkN2U3NC1mZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5EUtSSeGkg8TReHvLzlgBk0AsYkcSW4hNeobj0DQ0AUevaHts5dLMyCdWkQ pw/9+CI/s6AFbN1FmKzohb+Nfc0msVJl0uUNAFLGCdrNp1QGG8Xaloh9s7tKJnk9 t+ZOQPvWaL/LQJlCaOWtlQpFHZysPt4+B9p/Ii6EG/OtSnf0YkzYgDCxUXZgWauJ tYkV3GLt+CoHV3FNsjEOJ1PbAYt/nVc3L15TKf/iXqbDhK+IR++hwrKyHc+X8vQ4 Poh2DPjT2W19ck+6BWt1tkAfm4JOkZl7PFXrfczqBAdS9dEtnBow1/VD3kHQ7BnM 5KTQUOqaOrJYDHniG47hXAlD3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrJvAzw GtPE0OiwMseovG31yARZMB8GA1UdIwQYMBaAFBOPmozyB9oAi0AcbejZExD+JepM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCNS8yMzlEMkE0MkZG RjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJnQ0xRQnh0Nk5rVEVQNGw2 a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0LWFqUElIMmdDTFFCeHQ2TmtURVA0bDZrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhCNS8yMzlEMkE0MkZGRjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJn Q0xRQnh0Nk5rVEVQNGw2a3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKwPxidXfvH2RucSwWKS2dG2WHNEV68ib+abQpjG5/UgCN0KQig9Ii EREZlvD5R79jp/2hEteCjDd3XIxUrVCzZiPsDmbhXxh5z9fDtZC6FYpjdCvXBXa3 qyVTC/bIjHoiCoC0Nbt6TZPHFJ4HvX2eDYdFpu7rALmpaiQcJrfoyTeSt5oAaDG/ CRd3wsfIsSfx8pocN0IXBmgYQZIApU+BJZwdphNziNZvgPVsJuzaFb85degQVDJh 6tqnMfobg4CpvY6AlMuoWtC3Ty56wU/xWD3Cys4zYZyazAWV003D3NyvTz3OzBsB aftndRG9j2Fb58H2kBYkxm3dHFcc66hL -----END CERTIFICATE-----Generated at Mon Jul 21 06:50:12 2025 by rpki-client