$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json) Hash identifier: 4uhEXPeeve5wcY4nVip6YT22tT/aVpv/fAa7LSf01wY= Subject key identifier: 0B:A0:2A:B8:F6:9E:06:65:63:13:88:01:CF:55:F1:F5:F6:14:52:80 Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87 Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft Manifest number: 9C Signing time: Sat 19 Jul 2025 06:32:17 +0000 Manifest this update: Sat 19 Jul 2025 06:32:16 +0000 Manifest next update: Sat 26 Jul 2025 06:32:16 +0000 Files and hashes: 1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: 9R8jtwJsBpFtpG3FI5Nt+f2cpVbAmnupGBN+7XakhcY=) 2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: vFQI0/WMzcqMUL954AE6vlA2OPOfqfsgIiFbV+UqtL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087 Validity Not Before: Jul 19 06:32:16 2025 GMT Not After : Jul 26 06:32:16 2025 GMT Subject: CN=687b3bf1-fdec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a6:7a:27:c2:26:5f:2f:78:27:41:7e:1a:8b: ac:7a:33:9e:1c:79:fe:86:95:c0:e6:f8:84:21:58: 38:c6:1a:91:47:38:ef:b5:fe:e2:40:4e:96:7a:39: f9:43:d3:4f:f9:e3:11:08:45:2b:57:14:67:9b:e1: 96:08:d5:b1:46:38:82:94:fd:5f:cc:4e:4e:87:e6: 3d:c5:b3:21:5e:bc:28:38:c0:19:4e:14:11:c4:01: 9e:70:0d:70:69:e5:53:30:6e:57:b1:74:69:3c:55: 94:01:a4:06:0a:22:a0:35:d3:e7:9e:c3:10:ee:f0: a5:6b:11:50:c6:d4:0e:48:8f:8d:04:03:f3:f2:a3: 19:fe:82:19:31:d6:28:a5:aa:97:98:6b:d8:e7:54: c5:36:a6:a4:38:04:57:9a:92:65:e5:ad:20:54:c8: dd:6a:c3:6c:2d:8e:00:15:34:4e:61:ab:03:99:14: da:b0:70:07:01:c9:66:aa:3e:f8:10:94:62:4a:ea: b3:b1:f6:9c:9f:d5:51:de:9a:78:84:0f:e8:a2:c1: 8a:e9:de:6e:df:fa:75:91:47:30:4a:4a:56:8e:bf: 75:76:14:82:1f:f2:23:f1:a5:ba:e8:96:5e:00:4a: ce:ae:58:35:fc:80:63:4e:98:1d:a6:72:c8:55:83: 44:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A0:2A:B8:F6:9E:06:65:63:13:88:01:CF:55:F1:F5:F6:14:52:80 X509v3 Authority Key Identifier: keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:60:22:ad:39:e1:36:1d:3a:a6:b3:52:66:bb:e9:2f:54:36: 5a:25:f8:3d:de:1d:0d:33:d7:9b:d0:aa:23:64:8b:32:fb:f8: 43:05:55:1d:25:65:77:76:e7:fc:35:ea:3b:ae:e9:cc:ed:7c: c3:f6:3c:f3:ee:d0:96:84:99:03:16:f8:6e:99:e6:9a:90:56: 54:d7:dd:c6:2a:e1:e2:21:bc:44:d3:fc:36:78:d2:77:78:d3: 14:35:ea:5f:3b:39:dc:3f:a5:9d:f4:f2:b6:8a:26:f3:70:43: 9a:c4:b0:b2:da:cc:bf:fc:92:d4:0d:f0:b5:dc:8c:19:04:a8: f8:3e:7c:e1:aa:64:05:94:bf:b0:22:a2:44:2a:b7:5f:86:c3: b3:7a:b5:7f:e4:55:16:bb:7c:70:a4:32:d7:e4:23:eb:be:02: c6:fb:ef:d9:c1:29:19:5c:0e:55:ef:26:6f:e2:4a:73:af:e7: 00:1c:3c:0c:be:0d:e3:cb:11:95:05:d1:40:6a:77:50:de:cd: 16:06:79:de:aa:b5:59:0c:e4:05:49:c2:82:13:a5:cc:e0:24: 63:61:3b:ab:90:ce:0b:54:2c:b9:b0:6c:28:12:e5:4a:6a:36: 3c:fd:3a:6a:4b:1d:b7:0b:bb:d7:90:5e:f3:7c:5b:0a:93:00: b3:46:5d:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2MDAxMTAvBgNVBAUTKEUwQjk0NThGNjk4MjVGRjgyOTM4N0IxMzlFODhGRDNC RDY3NDAwODcwHhcNMjUwNzE5MDYzMjE2WhcNMjUwNzI2MDYzMjE2WjAYMRYwFAYD VQQDEw02ODdiM2JmMS1mZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKZ6J8ImXy94J0F+GousejOeHHn+hpXA5viEIVg4xhqRRzjvtf7iQE6Wejn5 Q9NP+eMRCEUrVxRnm+GWCNWxRjiClP1fzE5Oh+Y9xbMhXrwoOMAZThQRxAGecA1w aeVTMG5XsXRpPFWUAaQGCiKgNdPnnsMQ7vClaxFQxtQOSI+NBAPz8qMZ/oIZMdYo paqXmGvY51TFNqakOARXmpJl5a0gVMjdasNsLY4AFTROYasDmRTasHAHAclmqj74 EJRiSuqzsfacn9VR3pp4hA/oosGK6d5u3/p1kUcwSkpWjr91dhSCH/Ij8aW66JZe AErOrlg1/IBjTpgdpnLIVYNEOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAugKrj2 ngZlYxOIAc9V8fX2FFKAMB8GA1UdIwQYMBaAFOC5RY9pgl/4KTh7E56I/TvWdACH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTYwMC8yMjFCQUVCRTc3 RjExMUVGQUMxMTI5NDJDNEY5QUUwMi80TGxGajJtQ1hfZ3BPSHNUbm9qOU85WjBB SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRMbEZqMm1DWF9ncE9Ic1Rub2o5TzlaMEFJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTYwMC8yMjFCQUVCRTc3RjExMUVGQUMxMTI5NDJDNEY5QUUwMi80TGxGajJtQ1hf Z3BPSHNUbm9qOU85WjBBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQYCKtOeE2HTqms1Jmu+kvVDZaJfg93h0NM9eb0KojZIsy+/hDBVUd JWV3duf8Neo7runM7XzD9jzz7tCWhJkDFvhumeaakFZU193GKuHiIbxE0/w2eNJ3 eNMUNepfOzncP6Wd9PK2iibzcEOaxLCy2sy//JLUDfC13IwZBKj4PnzhqmQFlL+w IqJEKrdfhsOzerV/5FUWu3xwpDLX5CPrvgLG++/ZwSkZXA5V7yZv4kpzr+cAHDwM vg3jyxGVBdFAandQ3s0WBnneqrVZDOQFScKCE6XM4CRjYTurkM4LVCy5sGwoEuVK ajY8/TpqSx23C7vXkF7zfFsKkwCzRl0t -----END CERTIFICATE-----Generated at Sun Jul 20 11:18:08 2025 by rpki-client