$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft File: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft (raw, json) Hash identifier: R1apCxXXAxtC+R2T4+ezX7SxNjW45oRr/nHwmZbzWm8= Subject key identifier: 9E:41:61:D7:E4:B4:31:34:96:23:60:0D:9F:BB:95:05:3D:71:5C:61 Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Certificate serial: 0C51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft Manifest number: 0C2E Signing time: Tue 22 Jul 2025 18:53:40 +0000 Manifest this update: Tue 22 Jul 2025 18:53:40 +0000 Manifest next update: Tue 29 Jul 2025 18:53:40 +0000 Files and hashes: 1: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl (hash: U1O63uGdRlkROoxqc13QOb7Mz0I50tcxv2x8xRJUJCA=) 2: 183DE570057A11EC822F230EC4F9AE02.roa (hash: bEfFzY9ERkUCouk5XoaucvDsVkrzcwabTIVAnbK3Eko=) 3: B32668C4D98C11EB905D7281C4F9AE02.roa (hash: +CpW1CaKQXu6MhTzl4JHCslaYOAYJXQr9xAkDiD0lq0=) 4: B688C61E2A7411F09C50DF45C4F9AE02.roa (hash: PvI9nhg15RMbIrPmzo33E5WP1sio6iu2Cas5ym98pTY=) 5: 89EA369C2A7411F09A757F45C4F9AE02.roa (hash: F9UOwIl8TIxEFQqKFxE/ZQxprBW29nR8LDsUajtcNxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 18:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3153 (0xc51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CBF3, serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Validity Not Before: Jul 22 18:53:40 2025 GMT Not After : Jul 29 18:53:40 2025 GMT Subject: CN=687fde34-8ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c8:e0:fe:4a:ef:ce:5e:8e:78:ea:8c:d0:d0: fd:2d:83:4f:f0:ad:b6:a9:55:de:66:18:0d:b2:9b: 05:1b:97:81:b1:a4:53:b4:32:fa:f1:1e:ee:20:cc: b0:8c:4e:f6:da:d4:dc:8a:84:f0:41:a0:a8:bd:93: a3:45:2e:9e:fd:a5:bb:de:d5:ea:7b:8d:ea:d9:9d: ba:06:f4:55:dd:b3:c8:64:22:94:6b:56:84:41:0c: 6c:1e:e8:fd:6f:0b:29:7c:76:79:4b:0a:6f:1f:82: 02:43:73:12:d7:4a:dd:88:6f:23:d0:52:b6:ef:b3: 17:ac:0d:7a:aa:e3:8c:1e:42:67:cd:29:7b:18:93: 29:12:f8:eb:75:f6:93:32:5d:4b:1b:6b:e2:59:e6: c1:72:0c:cd:1f:e1:7a:46:d2:29:4c:1c:79:d1:52: fb:5d:03:2f:b0:94:57:e4:06:bb:47:81:c5:f2:f5: 40:2f:41:fe:78:e9:0c:52:22:5a:e7:ca:a8:f1:76: 7b:e6:52:0d:29:5f:96:64:ab:f1:5c:f9:e2:aa:dc: 8e:c8:36:d0:82:e5:c9:fa:65:c9:aa:74:c7:ea:37: 0c:4c:b5:d0:48:ce:3b:2b:a9:28:f7:8f:55:73:a1: dd:59:1f:6c:15:31:cd:d2:d9:b0:10:80:f5:40:5b: 41:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:41:61:D7:E4:B4:31:34:96:23:60:0D:9F:BB:95:05:3D:71:5C:61 X509v3 Authority Key Identifier: keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:70:5a:f9:f0:64:6c:b3:45:da:07:d8:c4:6c:91:56:2f:8e: d7:a2:49:1a:a2:e3:91:e4:54:72:a9:90:06:b6:a4:dc:b8:95: a0:09:e0:05:a7:53:d6:0f:6f:02:ab:c1:13:5b:2a:a0:47:4e: 55:50:d6:42:19:cc:84:12:35:41:cf:a5:01:b4:ce:da:b5:1b: 2e:8e:28:47:0d:d7:09:c7:e9:21:3f:52:42:95:df:ee:38:59: f0:7a:61:86:74:60:02:2e:2a:4b:15:2a:a5:d7:20:fb:6e:32: 7e:87:9a:77:1d:c3:7d:ea:0b:21:d7:6f:e4:c0:79:db:ae:db: 8b:c6:b6:18:89:01:86:8a:90:df:cc:45:68:23:b3:a8:00:0c: ac:f3:90:ea:e5:b7:02:a5:c3:02:29:2e:53:c0:3d:c8:bc:d6: f7:a9:74:17:3e:ce:56:cf:1f:f9:98:65:5f:63:4f:f9:5c:ea: cb:ee:1b:56:d2:ab:e3:ec:dc:fc:e6:9f:36:d0:58:b5:f3:f2: ca:30:94:1c:70:87:24:f8:26:41:29:83:84:b1:f0:37:a3:44: e6:56:18:28:8a:8c:37:25:95:15:c9:cd:6c:21:9c:3f:f4:14: 9b:34:24:24:34:96:68:66:55:c2:0e:21:84:b6:c1:57:cc:6a: cd:47:9e:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQyQzdDQ0M2REQx OTM1MTA3MDcwHhcNMjUwNzIyMTg1MzQwWhcNMjUwNzI5MTg1MzQwWjAYMRYwFAYD VQQDEw02ODdmZGUzNC04ZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8cjg/krvzl6OeOqM0ND9LYNP8K22qVXeZhgNspsFG5eBsaRTtDL68R7uIMyw jE722tTcioTwQaCovZOjRS6e/aW73tXqe43q2Z26BvRV3bPIZCKUa1aEQQxsHuj9 bwspfHZ5SwpvH4ICQ3MS10rdiG8j0FK277MXrA16quOMHkJnzSl7GJMpEvjrdfaT Ml1LG2viWebBcgzNH+F6RtIpTBx50VL7XQMvsJRX5Aa7R4HF8vVAL0H+eOkMUiJa 58qo8XZ75lINKV+WZKvxXPniqtyOyDbQguXJ+mXJqnTH6jcMTLXQSM47K6ko949V c6HdWR9sFTHN0tmwEID1QFtBhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5BYdfk tDE0liNgDZ+7lQU9cVxhMB8GA1UdIwQYMBaAFOJEnjEiIBMeLnbELHzMbdGTUQcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0JGMy8xQkM2RUIyMDEx RTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4NHVkc1FzZk14dDBaTlJC d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrU2VNU0lnRXg0dWRzUXNmTXh0MFpOUkJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0JGMy8xQkM2RUIyMDExRTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4 NHVkc1FzZk14dDBaTlJCd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkcFr58GRss0XaB9jEbJFWL47XokkaouOR5FRyqZAGtqTcuJWgCeAF p1PWD28Cq8ETWyqgR05VUNZCGcyEEjVBz6UBtM7atRsujihHDdcJx+khP1JCld/u OFnwemGGdGACLipLFSql1yD7bjJ+h5p3HcN96gsh12/kwHnbrtuLxrYYiQGGipDf zEVoI7OoAAys85Dq5bcCpcMCKS5TwD3IvNb3qXQXPs5Wzx/5mGVfY0/5XOrL7htW 0qvj7Nz85p820Fi18/LKMJQccIck+CZBKYOEsfA3o0TmVhgoiow3JZUVyc1sIZw/ 9BSbNCQkNJZoZlXCDiGEtsFXzGrNR568 -----END CERTIFICATE-----Generated at Wed Jul 23 14:41:18 2025 by rpki-client