$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft File: 4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json) Hash identifier: lZUw2nl4PTePdW5w6J7qlBV9yMeuwJPJbpWOWNbri0k= Subject key identifier: B1:51:0F:4D:B2:2C:BD:60:15:2C:E2:33:36:F6:90:BF:74:A1:EB:1F Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23 Certificate issuer: /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223 Certificate serial: 35B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft Manifest number: 3539 Signing time: Sun 20 Jul 2025 14:30:58 +0000 Manifest this update: Sun 20 Jul 2025 14:30:57 +0000 Manifest next update: Sun 27 Jul 2025 14:30:57 +0000 Files and hashes: 1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: f6c8AjH9TiimSiQnSC54dSzFxtTEDMynJ15zTMGKkJc=) 2: F33B0916E75611EFA2A35C73C4F9AE02.roa (hash: OpsjHp/vGysxlU1F4bwOY7eYj+17+oUTjlbccNSDCHo=) 3: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: GQiRmYNBeSXKrpj5tl9WCP7+ZUXAlVJOpyyBRx0JAi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13744 (0x35b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223 Validity Not Before: Jul 20 14:30:57 2025 GMT Not After : Jul 27 14:30:57 2025 GMT Subject: CN=687cfda1-59cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:10:63:a7:0f:d9:08:d5:4f:44:e3:8b:e3: 1c:1a:0a:d3:af:8e:ed:d5:9e:18:f3:f3:0f:03:d1: c6:71:e5:b1:35:fa:8f:f7:45:15:1e:20:6a:2f:a0: b7:dc:2d:0f:6c:96:d8:f7:07:33:ea:78:16:52:63: ee:74:73:09:b7:ec:03:10:30:7b:a8:2c:41:57:f1: 42:ae:50:c7:c2:a8:1c:a5:cd:c4:59:5d:bb:9d:52: 0e:41:9b:4c:1a:99:56:9f:5c:3c:52:0a:23:93:72: dc:2a:10:31:d1:83:19:89:2c:a2:ee:cc:f3:a2:53: af:f2:67:e5:17:49:bd:7f:04:9c:be:c7:0d:7a:9f: 1d:01:40:e2:f2:29:66:93:3c:a2:17:c0:e2:34:37: b4:fd:d9:c0:d8:0a:d7:58:f7:c6:f3:6a:1f:28:05: 10:d4:3f:9a:40:b5:9e:1a:ea:8e:65:5e:55:3d:45: 36:f3:c0:b1:08:2c:56:bf:81:61:08:ec:9a:3a:b6: 1c:de:1a:44:f2:b5:80:55:fa:48:bc:8f:2b:80:b4: b3:ee:c2:b4:bc:13:24:fc:ea:7f:22:d9:d6:a1:bc: 3d:94:c2:8f:a6:cf:e6:13:5d:5d:10:b8:ae:93:78: e7:ba:b6:f2:7c:fc:53:c7:a9:94:ae:65:f7:83:1f: 06:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:51:0F:4D:B2:2C:BD:60:15:2C:E2:33:36:F6:90:BF:74:A1:EB:1F X509v3 Authority Key Identifier: keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:e9:55:e5:5c:54:8b:6d:88:30:05:b9:62:44:26:32:34:dd: 01:8b:47:8a:08:15:db:32:7f:f5:53:32:8b:ff:b6:75:ad:fc: f9:98:e2:53:e7:44:e3:00:55:c6:d6:57:a4:2b:9e:c1:cb:c5: ba:84:7b:ae:b8:72:1f:0d:14:94:8f:0a:a3:71:e5:48:f3:ef: be:58:19:81:03:89:07:2b:0c:cf:ef:d2:8f:6e:82:20:ae:d4: cb:88:5d:11:5f:44:ce:b5:94:f7:5b:8d:3b:25:2e:a1:6d:aa: a1:0d:6a:30:b8:ce:d6:86:96:83:9f:0a:80:ab:f4:2b:71:c1: f8:15:25:b6:1e:43:be:43:9d:8d:66:e7:fe:3d:1b:14:2c:92: 8f:3b:a6:fe:56:0b:96:a6:be:74:1d:02:1f:2f:db:8e:92:db: 72:33:ad:26:40:2b:c5:c4:c2:a7:f8:ca:c3:1b:27:df:de:10: 73:95:3b:ff:25:5a:f8:6c:a4:fc:98:50:0e:79:7b:69:1e:54: 55:9c:f3:17:8c:3e:8f:10:12:61:c3:a6:b3:6b:a3:2b:d0:2a: df:af:5b:7a:be:90:f1:f2:1d:31:d2:bc:b9:c3:64:af:c2:8b: 9e:e3:3c:8e:4a:9b:32:4e:7f:eb:5b:4b:68:03:93:5d:d3:ef: f0:9c:15:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzMDAxMTAvBgNVBAUTKEUxNTY0RkRBNUNFRDVDQUU2OTQxNTMwOTdFRDE5NDI1 NTEyMDkyMjMwHhcNMjUwNzIwMTQzMDU3WhcNMjUwNzI3MTQzMDU3WjAYMRYwFAYD VQQDEw02ODdjZmRhMS01OWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPkQY6cP2QjVT0Tji+McGgrTr47t1Z4Y8/MPA9HGceWxNfqP90UVHiBqL6C3 3C0PbJbY9wcz6ngWUmPudHMJt+wDEDB7qCxBV/FCrlDHwqgcpc3EWV27nVIOQZtM GplWn1w8Ugojk3LcKhAx0YMZiSyi7szzolOv8mflF0m9fwScvscNep8dAUDi8ilm kzyiF8DiNDe0/dnA2ArXWPfG82ofKAUQ1D+aQLWeGuqOZV5VPUU288CxCCxWv4Fh COyaOrYc3hpE8rWAVfpIvI8rgLSz7sK0vBMk/Op/ItnWobw9lMKPps/mE11dELiu k3jnurbyfPxTx6mUrmX3gx8GRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFRD02y LL1gFSziMzb2kL90oesfMB8GA1UdIwQYMBaAFOFWT9pc7VyuaUFTCX7RlCVRIJIj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTMwMC9DRDIwMzdFMjFE ODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhLNXBRVk1KZnRHVUpWRWdr aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWWlAybHp0WEs1cFFWTUpmdEdVSlZFZ2tpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTMwMC9DRDIwMzdFMjFEODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhL NXBRVk1KZnRHVUpWRWdraU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB36VXlXFSLbYgwBbliRCYyNN0Bi0eKCBXbMn/1UzKL/7Z1rfz5mOJT 50TjAFXG1lekK57By8W6hHuuuHIfDRSUjwqjceVI8+++WBmBA4kHKwzP79KPboIg rtTLiF0RX0TOtZT3W407JS6hbaqhDWowuM7WhpaDnwqAq/QrccH4FSW2HkO+Q52N Zuf+PRsULJKPO6b+VguWpr50HQIfL9uOkttyM60mQCvFxMKn+MrDGyff3hBzlTv/ JVr4bKT8mFAOeXtpHlRVnPMXjD6PEBJhw6aza6Mr0Crfr1t6vpDx8h0x0ry5w2Sv woue4zyOSpsyTn/rW0toA5Nd0+/wnBVu -----END CERTIFICATE-----Generated at Tue Jul 22 00:01:25 2025 by rpki-client