$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft File: R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json) Hash identifier: boMUktHSHAbtdt/6d/J1i/XonfPXgmxtgp+IaxkaDjo= Subject key identifier: 17:C2:C7:6F:14:7B:E9:FC:26:E3:F9:A9:A2:ED:08:84:A3:40:6F:54 Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft Manifest number: 028D Signing time: Mon 21 Jul 2025 01:56:29 +0000 Manifest this update: Mon 21 Jul 2025 01:56:29 +0000 Manifest next update: Mon 28 Jul 2025 01:56:29 +0000 Files and hashes: 1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: w/YMJPUfsFPkglenOxzUQ/AeFncFKZHt6Z7hUzecFTs=) 2: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: GG/AMsbpEzm/NFjGRgk+JWg1MGNbtO4+De0JwZLDbdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Validity Not Before: Jul 21 01:56:29 2025 GMT Not After : Jul 28 01:56:29 2025 GMT Subject: CN=687d9e4d-e844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:03:d7:aa:ef:1c:0b:90:dc:30:f6:23:ac: 32:95:7d:d3:7d:ed:39:96:8c:82:65:08:d3:1e:4a: 45:d7:3d:2d:82:ee:54:41:97:61:9f:cc:8b:77:0d: 2a:17:83:79:3d:80:bc:91:35:6f:3d:f8:ed:46:37: e3:1b:c3:cb:8c:ca:15:15:44:57:3e:87:60:12:f1: 09:ad:28:3d:d0:33:cd:ce:2f:24:fc:8a:0e:3f:d6: 1f:fe:83:0c:ed:1c:1c:26:11:95:c0:44:8f:83:50: af:87:84:59:db:72:12:4b:19:5f:99:25:03:52:9b: 81:4a:3e:f0:3f:99:32:ad:04:6b:67:b0:5c:50:e0: 32:8d:c7:66:ed:7a:e1:cf:f0:36:87:61:5e:91:56: 52:fb:43:bb:34:bf:9e:ff:9f:64:99:79:d5:cd:64: 98:cb:5f:3d:b1:ee:d1:f6:08:5a:90:ca:26:b2:01: 96:84:75:cc:c9:94:39:e6:a0:f6:25:cc:a1:88:7c: dd:fe:f0:01:98:01:1b:c9:80:dc:a6:4f:95:8f:76: da:68:98:72:51:80:97:35:0a:8c:d0:89:0e:20:d8: 45:ad:29:38:c7:47:5b:69:5c:d2:12:25:14:ae:bc: 6e:67:e5:d3:e5:bf:00:88:86:51:26:01:53:c9:5f: 70:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C2:C7:6F:14:7B:E9:FC:26:E3:F9:A9:A2:ED:08:84:A3:40:6F:54 X509v3 Authority Key Identifier: keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:93:9e:41:38:7b:8a:d8:5a:46:f6:ad:7f:97:04:0a:a1:09: 69:25:1d:a3:8e:f6:38:d0:4a:d3:fa:fe:0c:a7:d9:1e:be:6c: 53:7b:3b:40:91:f9:d5:d1:34:7f:58:1b:0d:63:5c:ec:6e:23: e4:73:01:80:cd:0a:c0:95:4e:f2:92:8f:ea:1d:24:2c:84:67: 75:c9:5d:62:00:a0:2a:73:33:b5:1f:2d:15:f1:3e:42:47:14: 5c:6c:0a:80:e5:37:cd:d2:37:72:10:bf:9b:fc:50:97:4a:5b: 47:c5:87:a2:be:fb:c9:a9:01:a6:19:3f:ff:83:4b:fc:ef:65: 87:2e:d4:91:82:cb:b1:a2:c6:1e:2a:f3:b5:1e:da:b5:99:38: c5:f6:ca:4a:39:a8:84:8e:39:a7:eb:7b:21:5c:bc:65:e7:a9: 08:a0:55:ba:9d:8e:58:ce:3d:00:44:74:f9:2f:3e:e2:c4:9c: 0a:17:0a:09:ee:03:ef:e2:27:ec:fe:de:2d:a5:ab:e6:8d:03: 96:0d:bd:1f:9c:ce:df:fc:3d:74:64:c9:17:7c:ff:6e:35:da: 00:e7:53:f4:60:0a:a0:5c:3e:3f:a9:d4:87:dc:7d:00:16:17: ef:63:6b:a8:6a:08:87:2f:45:79:69:f0:31:45:a6:85:1b:a3: 39:4a:9a:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThEQzYxMTAvBgNVBAUTKDQ3ODZEQkNDQjVDQzI5NkIxREFCMTc1RTgzQ0M0ODEx QTYzNjE3QzcwHhcNMjUwNzIxMDE1NjI5WhcNMjUwNzI4MDE1NjI5WjAYMRYwFAYD VQQDEw02ODdkOWU0ZC1lODQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKgD16rvHAuQ3DD2I6wylX3Tfe05loyCZQjTHkpF1z0tgu5UQZdhn8yLdw0q F4N5PYC8kTVvPfjtRjfjG8PLjMoVFURXPodgEvEJrSg90DPNzi8k/IoOP9Yf/oMM 7RwcJhGVwESPg1Cvh4RZ23ISSxlfmSUDUpuBSj7wP5kyrQRrZ7BcUOAyjcdm7Xrh z/A2h2FekVZS+0O7NL+e/59kmXnVzWSYy189se7R9ghakMomsgGWhHXMyZQ55qD2 JcyhiHzd/vABmAEbyYDcpk+Vj3baaJhyUYCXNQqM0IkOINhFrSk4x0dbaVzSEiUU rrxuZ+XT5b8AiIZRJgFTyV9wdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfCx28U e+n8JuP5qaLtCISjQG9UMB8GA1UdIwQYMBaAFEeG28y1zClrHasXXoPMSBGmNhfH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OERDNi80QTAxMjI3QzBG RjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtXc2RxeGRlZzh4SUVhWTJG OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0YmJ6TFhNS1dzZHF4ZGVnOHhJRWFZMkY4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OERDNi80QTAxMjI3QzBGRjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtX c2RxeGRlZzh4SUVhWTJGOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEk55BOHuK2FpG9q1/lwQKoQlpJR2jjvY40ErT+v4Mp9kevmxTeztA kfnV0TR/WBsNY1zsbiPkcwGAzQrAlU7yko/qHSQshGd1yV1iAKAqczO1Hy0V8T5C RxRcbAqA5TfN0jdyEL+b/FCXSltHxYeivvvJqQGmGT//g0v872WHLtSRgsuxosYe KvO1Htq1mTjF9spKOaiEjjmn63shXLxl56kIoFW6nY5Yzj0ARHT5Lz7ixJwKFwoJ 7gPv4ifs/t4tpavmjQOWDb0fnM7f/D10ZMkXfP9uNdoA51P0YAqgXD4/qdSH3H0A FhfvY2uoagiHL0V5afAxRaaFG6M5SppH -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:10 2025 by rpki-client