$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft File: k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft (raw, json) Hash identifier: Z9mNzIyszFJKbGAXlrbsRxXBmRkmd5SAhwhUwpogtnc= Subject key identifier: E4:57:4B:D8:73:A0:08:A8:97:3E:96:18:99:B7:D3:3D:6E:97:A6:58 Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft Manifest number: 0172 Signing time: Fri 01 Aug 2025 05:15:57 +0000 Manifest this update: Fri 01 Aug 2025 05:15:56 +0000 Manifest next update: Fri 08 Aug 2025 05:15:56 +0000 Files and hashes: 1: k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl (hash: +8xiKtZotDeEgQgENL50YXot2EjTW3jqpTN72hHekgg=) 2: F5E4AAFA2A2711F0A842B012C4F9AE02.roa (hash: H1nmQizGEmHz5b1T7forLlMV8zzneRcv/1eW8nb3RPQ=) 3: E0FF171A440411EF85685B0DC4F9AE02.roa (hash: KnSSA1Qq59sJxgKVj3jP8KkbnpUbCwhj2IXQBg8sTYM=) 4: 9442231871C311EEB4110C83C4F9AE02.roa (hash: cPScC0gg9JYSO4uN11odfRIjDwaRFAK9tItwdJFOomM=) 5: 9AE3D69A31ED11EFA537871BC4F9AE02.roa (hash: NLAG2+hX7/iP2bhjkSZBj6P2IECcGb9YySRKnQ4sPC0=) 6: 1E121F0E4E3111EFB88CF076C4F9AE02.roa (hash: wQut+szNL5vwSeq5waVGRK6ZNGbvz3meY2xD3T/hUuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 05:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Validity Not Before: Aug 1 05:15:56 2025 GMT Not After : Aug 8 05:15:56 2025 GMT Subject: CN=688c4d8c-8384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4f:a4:d9:87:6d:40:a4:b7:1f:7b:3a:48:64: 23:37:7d:d9:8a:92:fe:4c:d4:b7:25:78:82:42:02: 7b:40:c3:b5:85:b8:1c:aa:ca:2c:fa:bf:d0:7a:40: f1:c5:df:41:d0:30:05:f0:14:a1:93:00:80:60:b5: 7f:2b:9f:02:e2:94:11:77:94:2b:01:79:2c:a4:be: 1b:90:43:3a:86:49:6e:0e:43:be:25:05:d9:26:68: 0f:51:24:e2:ea:55:70:fa:a9:46:43:e5:22:25:c2: df:ec:be:5b:c8:e1:4a:6a:7a:05:ee:f6:af:39:55: 21:b9:b6:da:4a:6e:e6:ec:90:d4:ed:9e:72:26:ce: 17:6d:6d:fd:0d:34:7e:97:84:82:2e:0d:5d:59:0c: 21:c4:55:43:ee:36:75:00:8a:49:79:51:dd:ff:c2: 6f:fa:4c:e2:9c:90:63:0f:f6:7a:cc:09:5f:26:3e: b2:18:53:1b:bf:00:36:99:1e:61:7f:33:11:dd:7d: f0:db:b7:2f:2b:d2:1b:1a:70:cd:28:81:e0:4b:ed: b7:7c:8a:ef:53:62:a8:4b:b5:0e:f7:81:08:ea:84: d8:49:74:61:c3:01:da:b7:c8:f7:75:2f:7a:94:04: 88:5a:7e:90:0b:b7:15:e8:64:09:46:7b:9e:75:62: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:57:4B:D8:73:A0:08:A8:97:3E:96:18:99:B7:D3:3D:6E:97:A6:58 X509v3 Authority Key Identifier: keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b2:13:82:cb:d5:df:d2:6b:31:8d:c1:d6:38:00:c2:56:12: a1:dc:bb:88:c2:f0:64:6c:c2:1a:c4:9e:9f:74:85:02:db:21: 3b:a2:fa:d7:b9:11:e7:d1:d9:99:3a:43:61:e4:8e:ce:3e:54: 7f:6c:8d:c6:77:9f:e1:4e:ca:b4:61:75:5a:a6:84:90:a5:13: ee:36:e5:19:7c:6c:e2:17:b8:2d:d7:8f:5c:e3:d0:00:83:87: ee:f7:b2:01:96:da:b7:8f:35:1c:bd:49:77:74:fe:e6:1a:c8: a9:c0:ab:10:b1:a2:e9:c9:2c:90:df:45:ad:c4:8a:eb:88:28: d2:9c:f1:60:92:05:69:8c:c3:b1:35:aa:1d:b7:93:39:6b:cb: cf:24:a5:2a:8d:45:1e:26:25:a1:90:4a:f6:ff:2f:cc:4f:a8: b4:44:d9:72:73:46:14:98:5e:3f:5e:7a:10:df:68:36:48:cb: 6e:c2:4d:cf:4b:b4:13:56:de:a7:fa:30:bb:31:3e:4f:c1:c2: 0b:d7:a6:66:93:7b:8e:17:39:3d:ea:61:dc:52:d4:28:d3:20: e0:3b:bd:4f:d8:fb:5b:6f:22:07:4f:bf:58:d8:9b:42:2f:fa: 7d:e9:57:bf:f3:88:95:77:20:ce:88:2f:e2:f0:80:27:6f:94: 26:d6:82:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKDkzODc5QjAwRTRCN0ZCQzAxMjYwNzA3Qjc2RDVEMTIw RjQ1QjUzNUIwHhcNMjUwODAxMDUxNTU2WhcNMjUwODA4MDUxNTU2WjAYMRYwFAYD VQQDEw02ODhjNGQ4Yy04Mzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxk+k2YdtQKS3H3s6SGQjN33ZipL+TNS3JXiCQgJ7QMO1hbgcqsos+r/QekDx xd9B0DAF8BShkwCAYLV/K58C4pQRd5QrAXkspL4bkEM6hkluDkO+JQXZJmgPUSTi 6lVw+qlGQ+UiJcLf7L5byOFKanoF7vavOVUhubbaSm7m7JDU7Z5yJs4XbW39DTR+ l4SCLg1dWQwhxFVD7jZ1AIpJeVHd/8Jv+kzinJBjD/Z6zAlfJj6yGFMbvwA2mR5h fzMR3X3w27cvK9IbGnDNKIHgS+23fIrvU2KoS7UO94EI6oTYSXRhwwHat8j3dS96 lASIWn6QC7cV6GQJRnuedWI6hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORXS9hz oAiolz6WGJm30z1ul6ZYMB8GA1UdIwQYMBaAFJOHmwDkt/vAEmBwe3bV0SD0W1Nb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8yODIzMTVEMDUy MDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04QVNZSEI3ZHRYUklQUmJV MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s0ZWJBT1MzLThBU1lIQjdkdFhSSVBSYlUxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Njc4Qy8yODIzMTVEMDUyMDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04 QVNZSEI3ZHRYUklQUmJVMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5shOCy9Xf0msxjcHWOADCVhKh3LuIwvBkbMIaxJ6fdIUC2yE7ovrX uRHn0dmZOkNh5I7OPlR/bI3Gd5/hTsq0YXVapoSQpRPuNuUZfGziF7gt149c49AA g4fu97IBltq3jzUcvUl3dP7mGsipwKsQsaLpySyQ30WtxIrriCjSnPFgkgVpjMOx Naodt5M5a8vPJKUqjUUeJiWhkEr2/y/MT6i0RNlyc0YUmF4/XnoQ32g2SMtuwk3P S7QTVt6n+jC7MT5PwcIL16Zmk3uOFzk96mHcUtQo0yDgO71P2PtbbyIHT79Y2JtC L/p96Ve/84iVdyDOiC/i8IAnb5Qm1oKK -----END CERTIFICATE-----Generated at Sat Aug 2 14:01:47 2025 by rpki-client