$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft File: hM4p-GFBrPuKdekE8CcjhS3mMzg.mft (raw, json) Hash identifier: 0Bvyz1gBN++suLki7QZpTGw7/pRw7Pys+6gpGt9/gC4= Subject key identifier: CC:1A:42:8B:F9:23:59:C1:70:E1:42:22:19:32:6A:EC:87:1B:C4:4B Authority key identifier: 84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 Certificate issuer: /CN=A9114FFB/serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Certificate serial: 0A5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft Manifest number: 0A55 Signing time: Sun 24 Aug 2025 19:41:53 +0000 Manifest this update: Sun 24 Aug 2025 19:41:52 +0000 Manifest next update: Sun 31 Aug 2025 19:41:52 +0000 Files and hashes: 1: hM4p-GFBrPuKdekE8CcjhS3mMzg.crl (hash: 4iOBsaINeWW8l8tYkzjMkatVhv+eqt5oa/RT37z6Lmo=) 2: 267A24046E7D11EAADB09659C4F9AE02.roa (hash: 3bopi4jiFY/1Loa4aKzVKdm1Wqw6EWIsHmdkMoO5oMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2654 (0xa5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114FFB, serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Validity Not Before: Aug 24 19:41:52 2025 GMT Not After : Aug 31 19:41:52 2025 GMT Subject: CN=68ab6b01-eb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6d:ff:33:fa:e3:2c:fd:85:b3:4e:87:d4:20: 32:90:cb:ed:b8:3b:32:48:15:89:c1:ef:84:b3:fc: 44:78:d4:be:7d:c2:fe:fa:43:48:e6:35:98:af:90: 21:32:14:ff:7d:bd:2e:87:4f:7a:3c:45:a7:49:89: 9a:74:11:92:bd:01:15:8a:6e:47:79:55:5b:c8:a1: de:68:6d:18:b2:b9:45:63:13:39:59:db:8e:30:43: e1:03:0d:88:ce:ab:2e:4c:5c:15:d6:d7:66:47:94: 6e:ef:78:32:86:4f:a6:bf:43:e0:eb:47:57:06:c8: 92:5b:f1:0f:34:41:e9:6a:9e:6f:98:4a:bb:b2:4d: dc:49:59:27:c2:e5:5e:0f:65:3c:9f:74:d0:38:8e: 9e:fc:1a:a5:83:0e:9e:29:45:55:79:cc:87:bd:8a: 86:8c:39:5c:53:0a:1a:fc:ae:3c:e1:b5:d3:22:7e: c0:4d:88:34:f4:92:4f:66:67:a9:73:e8:77:eb:8a: 1b:1a:a2:dc:51:bc:23:8e:eb:48:c1:3e:cf:ed:32: aa:db:bc:c5:9c:18:26:7b:b1:9f:39:dd:6d:36:61: 20:db:88:09:5d:50:49:a2:fc:8f:69:45:8f:c0:86: 80:df:e0:4b:96:9d:3f:16:53:da:d5:10:3d:96:56: 4b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1A:42:8B:F9:23:59:C1:70:E1:42:22:19:32:6A:EC:87:1B:C4:4B X509v3 Authority Key Identifier: keyid:84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:fa:2d:d5:13:0d:7b:fe:3a:11:38:87:3f:82:d3:0a:17:ab: bc:40:d4:91:90:c7:73:04:c7:b2:f3:b8:09:77:68:8a:71:bc: 08:14:2d:f7:9b:82:74:1f:42:f2:42:d0:60:85:c1:6e:a0:ed: 4e:4f:58:b0:06:7b:4c:fa:d3:d8:d3:a9:3b:ea:2d:de:55:ad: fe:35:db:b1:37:45:4a:0b:66:25:6c:ce:0e:19:34:a1:57:0a: 5d:83:36:e9:19:47:6d:b1:2a:9f:d6:cf:41:7e:b2:a5:a1:44: c5:b4:d5:e0:ea:72:64:2e:e3:42:e4:1a:b7:49:05:ca:64:e6: 70:be:6e:b1:c8:5a:7b:bc:34:ae:ab:05:73:3d:b4:72:3b:b9: b6:c5:28:aa:23:ad:06:fc:71:47:70:41:d4:47:2e:d9:71:9f: 3b:51:63:29:d9:8d:32:92:21:22:79:66:84:bb:ef:ad:cb:54: db:9e:f6:36:7b:fd:ff:85:9c:12:15:d9:95:c2:12:dc:b7:46: cc:b2:6d:d0:cc:37:50:92:cc:0a:82:01:d4:d9:ab:21:b9:55: 92:53:4d:3c:3a:be:ff:29:20:ba:04:54:87:b5:0a:fc:56:33: 77:12:38:db:9a:f3:a3:31:35:ca:96:fd:46:34:c9:66:27:03: 76:4d:43:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGRkIxMTAvBgNVBAUTKDg0Q0UyOUY4NjE0MUFDRkI4QTc1RTkwNEYwMjcyMzg1 MkRFNjMzMzgwHhcNMjUwODI0MTk0MTUyWhcNMjUwODMxMTk0MTUyWjAYMRYwFAYD VQQDEw02OGFiNmIwMS1lYjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7W3/M/rjLP2Fs06H1CAykMvtuDsySBWJwe+Es/xEeNS+fcL++kNI5jWYr5Ah MhT/fb0uh096PEWnSYmadBGSvQEVim5HeVVbyKHeaG0YsrlFYxM5WduOMEPhAw2I zqsuTFwV1tdmR5Ru73gyhk+mv0Pg60dXBsiSW/EPNEHpap5vmEq7sk3cSVknwuVe D2U8n3TQOI6e/Bqlgw6eKUVVecyHvYqGjDlcUwoa/K484bXTIn7ATYg09JJPZmep c+h364obGqLcUbwjjutIwT7P7TKq27zFnBgme7GfOd1tNmEg24gJXVBJovyPaUWP wIaA3+BLlp0/FlPa1RA9llZL3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwaQov5 I1nBcOFCIhkyauyHG8RLMB8GA1UdIwQYMBaAFITOKfhhQaz7inXpBPAnI4Ut5jM4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEZGQi82QUMxRjE2QTZF N0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQdUtkZWtFOENjamhTM21N emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hNNHAtR0ZCclB1S2Rla0U4Q2NqaFMzbU16Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEZGQi82QUMxRjE2QTZFN0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQ dUtkZWtFOENjamhTM21NemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6+i3VEw17/joROIc/gtMKF6u8QNSRkMdzBMey87gJd2iKcbwIFC33 m4J0H0LyQtBghcFuoO1OT1iwBntM+tPY06k76i3eVa3+NduxN0VKC2YlbM4OGTSh VwpdgzbpGUdtsSqf1s9BfrKloUTFtNXg6nJkLuNC5Bq3SQXKZOZwvm6xyFp7vDSu qwVzPbRyO7m2xSiqI60G/HFHcEHURy7ZcZ87UWMp2Y0ykiEieWaEu++ty1TbnvY2 e/3/hZwSFdmVwhLct0bMsm3QzDdQkswKggHU2ashuVWSU008Or7/KSC6BFSHtQr8 VjN3EjjbmvOjMTXKlv1GNMlmJwN2TUOv -----END CERTIFICATE-----Generated at Sun Aug 24 21:56:22 2025 by rpki-client