$ rpki-client -vvf rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft File: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft (raw, json) Hash identifier: k+1qnSjuuqs6+bcfAo687RhgrYsM8xDh6y5Zbp9HyWU= Subject key identifier: 1F:1F:44:61:67:12:0C:4D:3F:93:7F:ED:C1:D8:6D:7F:64:2F:91:53 Authority key identifier: E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E Certificate issuer: /CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Certificate serial: 195E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft Manifest number: 194F Signing time: Wed 20 Aug 2025 16:29:22 +0000 Manifest this update: Wed 20 Aug 2025 16:29:21 +0000 Manifest next update: Wed 27 Aug 2025 16:29:21 +0000 Files and hashes: 1: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl (hash: sx5ajOywslC30mruTHQDgWOl4oetiQ+YK4myfuWA5uA=) 2: 99AB821E859C11E7A1FEC80AC4F9AE02.roa (hash: P4Ek16t0ZEw/MnJDtAJSlLMC0jHATAWAbBg4OWQTq78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 16:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6494 (0x195e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118799, serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Validity Not Before: Aug 20 16:29:21 2025 GMT Not After : Aug 27 16:29:21 2025 GMT Subject: CN=68a5f7e2-1e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:6c:4e:d9:50:11:17:7b:9c:39:bf:dd:ec: 55:eb:2f:c8:33:8c:70:9b:b7:31:ce:92:29:ed:1d: 66:9f:5d:e4:44:53:22:c3:b1:3b:2b:76:0d:2d:7d: 15:3e:8e:f3:60:46:7d:29:7a:a2:bc:db:7e:ad:eb: 6d:46:08:ea:cc:ba:07:50:e1:2f:4f:3d:e3:7a:f5: 8e:5f:44:bc:99:91:8d:8b:91:c0:bd:f3:d4:7a:b5: ea:f7:59:83:ad:5a:6f:a4:3b:97:3c:63:e1:f7:27: d3:03:db:cb:1b:2f:2f:c6:18:31:d9:a1:6f:bb:fb: 2c:93:06:a4:48:23:67:77:76:3e:d3:e4:3a:dd:f7: 8b:55:0f:20:dc:81:00:bb:96:10:2f:6b:4e:39:7c: a5:03:d1:df:7e:c1:f7:b8:53:22:7d:cd:aa:30:bb: fc:ea:3e:5e:65:49:d8:f9:09:83:ad:8c:4c:9a:87: e8:25:f1:1e:1b:5d:11:a6:4e:1a:5b:7e:05:cc:c1: c3:8a:46:64:c9:82:17:f8:c6:83:7b:ae:23:30:ae: d9:f7:58:cf:d8:35:44:81:8b:f1:b1:2f:8c:e7:8e: ab:30:c9:2e:98:f1:42:31:9c:f4:bd:b3:f4:a2:b1: 86:b5:98:26:48:06:d4:f8:79:dd:58:8e:38:7c:f7: fc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1F:44:61:67:12:0C:4D:3F:93:7F:ED:C1:D8:6D:7F:64:2F:91:53 X509v3 Authority Key Identifier: keyid:E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:10:49:21:36:4e:4d:1b:f2:4b:53:5d:19:ca:e1:69:6c:f0: d7:a0:be:7f:81:b6:88:b5:14:43:58:b1:bf:b3:e6:9d:1a:bf: 72:4b:d9:7f:9e:db:35:0a:09:e7:4a:f5:58:6f:61:71:f6:0f: a6:02:b2:eb:a5:37:0c:2e:3d:88:1c:49:3c:23:84:cb:c7:ce: 87:10:18:eb:8e:94:d9:a3:43:37:e4:f2:0c:1d:82:bf:73:23: db:1c:d5:85:35:af:d1:5b:1f:7d:42:cf:d6:a2:d8:68:d9:c0: 3d:13:ce:b6:e7:92:4e:91:89:61:ed:8e:d6:36:b7:4e:de:78: f7:bd:73:f8:ad:82:31:6f:1e:17:99:c9:ca:f3:7e:ed:4b:71: 31:5f:93:2f:84:f7:1e:b8:31:56:5d:25:da:a8:6a:74:97:f2: e5:78:11:e4:e2:02:58:e0:88:0a:30:9c:52:3d:64:2f:bd:7d: 9a:76:cb:69:36:a5:38:8d:75:4a:e8:f9:9b:c7:d3:71:8b:b6: cd:62:0e:c7:de:65:74:1f:4e:67:3e:9f:63:fe:87:a1:11:cf: f8:80:f3:f5:3d:17:03:01:55:7b:25:6a:c3:3f:07:5c:1c:d9: 2d:69:99:f1:3e:80:07:d0:81:0d:0f:3a:5f:c0:e1:a6:7a:aa: 1f:32:9d:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3OTkxMTAvBgNVBAUTKEUwQ0FBRDE3QzA2OEQ4NjAyQkNDRUI0NjdCNDU1NTEw QkM1MjM5MEUwHhcNMjUwODIwMTYyOTIxWhcNMjUwODI3MTYyOTIxWjAYMRYwFAYD VQQDEw02OGE1ZjdlMi0xZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtflsTtlQERd7nDm/3exV6y/IM4xwm7cxzpIp7R1mn13kRFMiw7E7K3YNLX0V Po7zYEZ9KXqivNt+rettRgjqzLoHUOEvTz3jevWOX0S8mZGNi5HAvfPUerXq91mD rVpvpDuXPGPh9yfTA9vLGy8vxhgx2aFvu/sskwakSCNnd3Y+0+Q63feLVQ8g3IEA u5YQL2tOOXylA9HffsH3uFMifc2qMLv86j5eZUnY+QmDrYxMmofoJfEeG10Rpk4a W34FzMHDikZkyYIX+MaDe64jMK7Z91jP2DVEgYvxsS+M546rMMkumPFCMZz0vbP0 orGGtZgmSAbU+HndWI44fPf82wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8fRGFn EgxNP5N/7cHYbX9kL5FTMB8GA1UdIwQYMBaAFODKrRfAaNhgK8zrRntFVRC8UjkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODc5OS8zMjg3QkZBMjdF QzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJHQXJ6T3RHZTBWVkVMeFNP UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNcXRGOEJvMkdBcnpPdEdlMFZWRUx4U09RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODc5OS8zMjg3QkZBMjdFQzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJH QXJ6T3RHZTBWVkVMeFNPUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCREEkhNk5NG/JLU10ZyuFpbPDXoL5/gbaItRRDWLG/s+adGr9yS9l/ nts1CgnnSvVYb2Fx9g+mArLrpTcMLj2IHEk8I4TLx86HEBjrjpTZo0M35PIMHYK/ cyPbHNWFNa/RWx99Qs/Wotho2cA9E86255JOkYlh7Y7WNrdO3nj3vXP4rYIxbx4X mcnK837tS3ExX5MvhPceuDFWXSXaqGp0l/LleBHk4gJY4IgKMJxSPWQvvX2adstp NqU4jXVK6Pmbx9Nxi7bNYg7H3mV0H05nPp9j/oehEc/4gPP1PRcDAVV7JWrDPwdc HNktaZnxPoAH0IENDzpfwOGmeqofMp2V -----END CERTIFICATE-----Generated at Fri Aug 22 16:20:35 2025 by rpki-client