$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft File: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json) Hash identifier: dTbmmwT3qRD71hXiFhJHEilANq5HxroTSbJCKfwGvyU= Subject key identifier: 76:C7:D8:00:37:F4:29:05:4E:1C:C5:7D:53:5A:A7:6E:16:F8:A8:E4 Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft Manifest number: 0208 Signing time: Thu 21 Aug 2025 02:29:52 +0000 Manifest this update: Thu 21 Aug 2025 02:29:51 +0000 Manifest next update: Thu 28 Aug 2025 02:29:51 +0000 Files and hashes: 1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: oTotjE1aSmukusGirY97yLC6PRLsixzZgDEnHk8QhFk=) 2: 13BC244C61A311F0A6E3910CC4F9AE02.roa (hash: PZ/Rcq3UjWrVkjq/myGAfI/HR3kWEFWwoh0XtDhdPhA=) 3: E8F2B1C224E911F0B5C26715C4F9AE02.roa (hash: G8jsJ+mpJjx+P09daIjyz9j+xHd4TGz4K0la+7J5BHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Validity Not Before: Aug 21 02:29:51 2025 GMT Not After : Aug 28 02:29:51 2025 GMT Subject: CN=68a684a0-54d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:17:0a:e5:38:a1:e7:7a:02:04:cd:e1:4a:55: 08:f2:d9:b2:7f:9f:d6:c8:0c:c2:f1:3a:56:44:8a: cf:11:b3:a6:b5:30:bc:af:5e:de:51:37:29:ca:90: dd:6a:1f:10:f1:d2:b0:0d:50:aa:1f:12:fc:31:ab: c7:5e:fc:a0:38:de:b9:53:b7:55:d0:91:85:c1:f0: ce:28:c0:22:88:3e:ff:7c:a6:59:fc:7d:21:f8:37: 16:46:91:56:71:ad:b7:cd:49:ce:c8:4e:e4:44:a9: 94:df:0c:ec:01:b9:1f:bf:8f:bc:ff:47:d2:f9:2c: 79:3a:c1:9d:5b:85:32:e1:5c:55:7d:97:d1:85:61: a4:b2:84:05:5c:0a:38:79:74:1e:c7:17:d5:7a:d6: 16:92:bc:50:92:29:89:4b:c1:89:e8:8a:17:d1:42: 24:d0:37:00:1a:db:b1:20:f1:dd:af:38:7d:ba:ce: 51:d4:e1:fb:8e:0c:03:6d:cb:a8:57:de:d2:ab:d1: b6:6a:f5:08:d0:29:d3:15:cb:a2:45:e7:3f:1d:6a: 59:1e:07:4d:cd:c3:b7:dd:de:52:9c:77:4f:06:05: 28:4d:ad:ab:61:32:ab:18:b6:db:ab:00:fd:e0:90: 3d:ad:79:4c:85:b5:63:a5:8e:a8:cb:57:31:53:aa: 60:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C7:D8:00:37:F4:29:05:4E:1C:C5:7D:53:5A:A7:6E:16:F8:A8:E4 X509v3 Authority Key Identifier: keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4d:f2:92:a5:12:2a:f8:c6:7a:65:77:78:1b:bf:5a:a3:19: 59:42:aa:15:9d:c5:6b:da:29:60:9e:3f:cd:13:a9:6f:72:01: 95:88:dc:4f:19:b6:d2:f0:12:14:19:99:2a:db:e4:37:c0:b2: 88:0c:31:cf:46:f9:48:73:76:99:c0:b0:5e:af:d6:90:1e:18: ff:4b:0a:d7:40:9a:ea:b0:5c:85:fd:21:99:00:ee:1e:11:36: 0a:a1:ea:81:d2:11:c6:15:21:a9:0c:64:cc:be:bc:76:c1:5e: 39:71:11:05:44:9d:98:31:8e:67:f8:ef:d4:11:d3:b7:e3:3b: b9:e1:0f:b6:f7:c1:c4:cf:19:9b:86:a8:9d:01:64:57:a5:0f: b2:57:0b:22:56:bb:e4:a0:6a:6e:cb:ee:2d:bb:1d:ac:32:11: 68:c6:41:d5:18:ad:a8:99:0c:28:fb:08:14:bf:6f:e9:6c:96: 0e:d4:4b:98:e8:0a:f2:a2:76:99:b4:a9:23:47:8c:0d:0b:d7: cb:6e:60:b5:a9:0a:69:7b:3f:08:9e:72:c4:07:83:e3:30:58: a6:90:2c:16:72:85:30:9e:7d:03:a1:b5:52:c3:28:65:c4:1b: d0:1e:ac:b9:80:e5:05:78:c3:0b:ee:b3:5a:aa:cc:a9:6e:f5: 1c:fe:b8:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEREYxMTAvBgNVBAUTKEUzRTFDQ0NGODNENTJDQjhBM0M5ODdBODExRTFGODA3 RjMzOTNFN0YwHhcNMjUwODIxMDIyOTUxWhcNMjUwODI4MDIyOTUxWjAYMRYwFAYD VQQDEw02OGE2ODRhMC01NGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlBcK5Tih53oCBM3hSlUI8tmyf5/WyAzC8TpWRIrPEbOmtTC8r17eUTcpypDd ah8Q8dKwDVCqHxL8MavHXvygON65U7dV0JGFwfDOKMAiiD7/fKZZ/H0h+DcWRpFW ca23zUnOyE7kRKmU3wzsAbkfv4+8/0fS+Sx5OsGdW4Uy4VxVfZfRhWGksoQFXAo4 eXQexxfVetYWkrxQkimJS8GJ6IoX0UIk0DcAGtuxIPHdrzh9us5R1OH7jgwDbcuo V97Sq9G2avUI0CnTFcuiRec/HWpZHgdNzcO33d5SnHdPBgUoTa2rYTKrGLbbqwD9 4JA9rXlMhbVjpY6oy1cxU6pgbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbH2AA3 9CkFThzFfVNap24W+KjkMB8GA1UdIwQYMBaAFOPhzM+D1Sy4o8mHqBHh+AfzOT5/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRERi9BMjEyNzY4Qzc2 MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxMaWp5WWVvRWVINEJfTTVQ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtSE16NFBWTExpanlZZW9FZUg0Ql9NNVBuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRERi9BMjEyNzY4Qzc2MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxM aWp5WWVvRWVINEJfTTVQbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfTfKSpRIq+MZ6ZXd4G79aoxlZQqoVncVr2ilgnj/NE6lvcgGViNxP GbbS8BIUGZkq2+Q3wLKIDDHPRvlIc3aZwLBer9aQHhj/SwrXQJrqsFyF/SGZAO4e ETYKoeqB0hHGFSGpDGTMvrx2wV45cREFRJ2YMY5n+O/UEdO34zu54Q+298HEzxmb hqidAWRXpQ+yVwsiVrvkoGpuy+4tux2sMhFoxkHVGK2omQwo+wgUv2/pbJYO1EuY 6AryonaZtKkjR4wNC9fLbmC1qQppez8InnLEB4PjMFimkCwWcoUwnn0DobVSwyhl xBvQHqy5gOUFeMML7rNaqsypbvUc/rjo -----END CERTIFICATE-----Generated at Fri Aug 22 16:15:48 2025 by rpki-client