$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft File: 4xZnlgSAzwfjwi15DeTiAe9wQNs.mft (raw, json) Hash identifier: I/CuhG7gf0z/+QzHpU3P5krD1Ua50HoSjMHpixcyBMk= Subject key identifier: 0C:51:A7:38:29:1F:10:0D:08:4D:FD:21:F2:37:CA:E2:1D:B3:47:B4 Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB Certificate issuer: /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft Manifest number: 01E8 Signing time: Tue 09 Sep 2025 02:41:58 +0000 Manifest this update: Tue 09 Sep 2025 02:41:57 +0000 Manifest next update: Tue 16 Sep 2025 02:41:57 +0000 Files and hashes: 1: 4xZnlgSAzwfjwi15DeTiAe9wQNs.crl (hash: V4yDDWWpZxw3rnvIAGbpmPufp8UsCIhgnhTTjzInAZE=) 2: 0ADA583C5DB911F0A54D4C6FC4F9AE02.roa (hash: YIHS3PAvaz4V4QmFJCk8b1AkmK5GNgS8/DelBF3BA28=) 3: 0BBC997C5DB911F0A54D4C6FC4F9AE02.roa (hash: g6pquqeh1IhUuquygrP9Vdo65/Zud1vKIjoHKRNQNOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B310, serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Validity Not Before: Sep 9 02:41:57 2025 GMT Not After : Sep 16 02:41:57 2025 GMT Subject: CN=68bf93f6-5b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:68:d9:d2:40:b2:04:6f:ee:22:79:93:90: 57:1d:b2:67:95:df:b6:6d:99:b7:87:0a:b3:aa:c1: ae:92:95:c4:bf:74:9b:32:87:d7:4a:e8:15:b3:37: f0:15:18:1f:f9:fe:e5:ad:1d:61:c2:47:6f:ea:26: 4c:36:c4:c8:58:a3:f5:6b:50:5b:6b:0b:c2:07:05: e6:13:d0:49:d5:41:81:9b:61:81:1b:ae:89:fe:7b: b5:a7:08:db:6c:9c:39:56:ee:0a:19:a2:1f:37:a8: bc:9c:40:35:3f:6d:f7:33:b6:17:7c:13:1d:16:f7: b7:98:e9:b5:86:f9:60:41:f9:48:e8:63:f6:15:36: d3:18:f1:a5:2b:fb:7e:56:5b:5e:c3:c2:9d:44:3c: 40:11:25:3b:64:e1:4e:7e:2d:c2:4e:f6:fb:eb:24: 34:27:97:19:cb:c4:f8:e9:d1:30:4e:7b:b2:93:b4: fa:79:8e:3b:13:41:f6:fb:75:d7:73:a9:bf:69:72: e5:e8:99:16:9a:fa:dc:8c:a5:07:54:1a:43:9e:54: e7:3a:3b:3b:75:0d:4c:3b:c8:59:36:22:10:c4:bb: 84:2a:07:a1:c9:71:67:9e:58:8f:13:23:28:e2:e7: fd:6e:38:4b:15:7b:b4:f1:a8:1b:85:42:0c:31:ca: a9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:51:A7:38:29:1F:10:0D:08:4D:FD:21:F2:37:CA:E2:1D:B3:47:B4 X509v3 Authority Key Identifier: keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:c3:77:ff:16:b9:38:ba:1b:21:4c:6b:5d:5c:75:08:55:26: e0:55:cc:c8:03:b5:3b:ac:65:5d:34:5c:e4:ad:78:47:8c:8d: c3:34:2c:15:d4:db:d9:ed:2f:87:14:f3:d6:35:b2:35:5b:36: bf:61:a5:95:67:e2:46:40:31:fc:5b:e3:ec:35:76:ca:ae:03: 93:da:01:fe:b3:5b:4f:da:d5:f7:a3:50:fe:ef:e6:dd:00:bd: 21:d9:66:3f:9e:35:6d:61:b9:55:43:e9:10:70:37:f7:c0:54: 9f:f6:0a:a7:2b:43:42:a9:ff:2b:42:55:78:dd:cd:38:90:c4: cd:c3:f4:d3:dd:96:75:bc:23:ab:65:48:9f:8b:03:9f:98:a1: 67:b1:d3:32:c3:04:f0:e8:b6:04:98:79:71:da:a5:c6:f5:d6: e0:72:06:71:19:82:96:b9:8c:a0:46:79:e0:e2:16:4a:80:f9: 27:86:27:d5:25:86:be:4b:5d:52:99:06:85:99:9b:15:b6:79: f2:b7:ab:6c:2e:48:d8:d4:ee:b3:e4:5d:d8:37:d2:8f:74:f1: ba:d6:41:45:12:f6:99:3c:9b:6f:f5:2d:35:73:e2:78:4d:15: 4a:35:53:b0:f1:0f:64:3d:5f:74:df:34:b6:23:54:92:e6:5c: 43:fa:8e:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIzMTAxMTAvBgNVBAUTKEUzMTY2Nzk2MDQ4MENGMDdFM0MyMkQ3OTBERTRFMjAx RUY3MDQwREIwHhcNMjUwOTA5MDI0MTU3WhcNMjUwOTE2MDI0MTU3WjAYMRYwFAYD VQQDEw02OGJmOTNmNi01YjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiho2dJAsgRv7iJ5k5BXHbJnld+2bZm3hwqzqsGukpXEv3SbMofXSugVszfw FRgf+f7lrR1hwkdv6iZMNsTIWKP1a1BbawvCBwXmE9BJ1UGBm2GBG66J/nu1pwjb bJw5Vu4KGaIfN6i8nEA1P233M7YXfBMdFve3mOm1hvlgQflI6GP2FTbTGPGlK/t+ Vltew8KdRDxAESU7ZOFOfi3CTvb76yQ0J5cZy8T46dEwTnuyk7T6eY47E0H2+3XX c6m/aXLl6JkWmvrcjKUHVBpDnlTnOjs7dQ1MO8hZNiIQxLuEKgehyXFnnliPEyMo 4uf9bjhLFXu08agbhUIMMcqp0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxRpzgp HxANCE39IfI3yuIds0e0MB8GA1UdIwQYMBaAFOMWZ5YEgM8H48IteQ3k4gHvcEDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjMxMC8zRUJEMTdDMkFE MTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3Zmp3aTE1RGVUaUFlOXdR TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4Wm5sZ1NBendmandpMTVEZVRpQWU5d1FOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjMxMC8zRUJEMTdDMkFEMTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3 Zmp3aTE1RGVUaUFlOXdRTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0w3f/Frk4uhshTGtdXHUIVSbgVczIA7U7rGVdNFzkrXhHjI3DNCwV 1NvZ7S+HFPPWNbI1Wza/YaWVZ+JGQDH8W+PsNXbKrgOT2gH+s1tP2tX3o1D+7+bd AL0h2WY/njVtYblVQ+kQcDf3wFSf9gqnK0NCqf8rQlV43c04kMTNw/TT3ZZ1vCOr ZUifiwOfmKFnsdMywwTw6LYEmHlx2qXG9dbgcgZxGYKWuYygRnng4hZKgPknhifV JYa+S11SmQaFmZsVtnnyt6tsLkjY1O6z5F3YN9KPdPG61kFFEvaZPJtv9S01c+J4 TRVKNVOw8Q9kPV903zS2I1SS5lxD+o5p -----END CERTIFICATE-----Generated at Tue Sep 9 18:43:19 2025 by rpki-client