$ rpki-client -vvf rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft File: 4FxkVUXZ74a0UeUhnYMnYPQFyug.mft (raw, json) Hash identifier: RW/c1StP9efCEgdIQLWGPB6K8QV/tVsYBMaEm8zyI4w= Subject key identifier: 64:FA:18:66:F0:17:66:F6:AA:45:14:53:53:AB:AA:D7:C1:E5:CF:BE Authority key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8 Certificate issuer: /CN=A911E09E/serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft Manifest number: 16 Signing time: Thu 21 Aug 2025 08:14:20 +0000 Manifest this update: Thu 21 Aug 2025 08:14:20 +0000 Manifest next update: Thu 28 Aug 2025 08:14:20 +0000 Files and hashes: 1: 4FxkVUXZ74a0UeUhnYMnYPQFyug.crl (hash: NEhDPrpO+4pLqktXTcBHctCb4HU9GK9LnjItDaIZ36w=) 2: E1A91004624811F098E5B95AC4F9AE02.roa (hash: 1N1Nu5pcKDFIroX+rvuJL8XDBkDXCgLTCUyWTqRqaG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8 Validity Not Before: Aug 21 08:14:20 2025 GMT Not After : Aug 28 08:14:20 2025 GMT Subject: CN=68a6d55c-dfa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f2:2e:1b:53:b4:9e:08:26:d5:b3:c1:9d:c1: a1:85:f5:54:28:c1:3a:48:65:d3:52:28:57:1f:21: f7:c9:33:6f:a3:ff:5d:af:79:5f:f2:5f:b0:5d:54: 34:d6:ad:fc:c2:42:33:db:13:cc:c5:1f:c3:3f:8e: 19:42:bb:ac:37:9b:cd:15:49:be:0d:83:64:4d:42: 28:fe:94:41:3c:cc:55:6b:40:20:6d:e0:27:be:46: f4:2b:de:e2:2e:24:f3:a7:8a:4f:a8:89:69:07:e2: 42:74:9c:a3:ca:d4:e1:8e:47:fc:12:cd:3f:90:a5: c8:43:36:00:a8:c4:50:bc:be:ff:d6:4d:30:7c:1e: 43:d3:92:75:bf:f7:06:74:5e:6b:02:fa:40:e1:dd: af:80:4e:17:0f:a3:9c:3b:a4:a1:75:2c:63:c1:33: 16:2a:a6:12:0c:ff:ef:ed:a6:bf:95:82:e4:63:25: ca:8f:fd:9b:7f:23:70:22:a0:86:01:98:3d:52:68: f2:44:e0:fd:09:fd:84:2f:7d:f0:00:1b:50:f1:d4: 89:ac:61:f1:5d:05:53:0c:f9:e3:22:c5:48:96:81: 7a:15:65:ec:7c:ec:05:75:07:17:cf:19:f3:3c:1d: 73:ad:af:ca:79:e8:11:fa:96:1c:46:99:59:80:78: 14:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FA:18:66:F0:17:66:F6:AA:45:14:53:53:AB:AA:D7:C1:E5:CF:BE X509v3 Authority Key Identifier: keyid:E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:cd:f3:bf:f1:f6:c7:4a:41:54:e4:8f:65:31:23:77:a8:7a: 63:76:56:61:71:be:9a:cf:2b:6a:20:33:b5:3f:a7:f8:c3:c4: 81:a3:13:d5:c3:26:06:80:02:33:32:9f:eb:7b:49:4c:1b:c0: 3d:57:43:0c:f6:2d:c1:4c:db:cd:62:fa:b0:df:f7:50:b9:74: a6:70:7a:e1:01:27:fd:6f:50:f0:de:66:0a:32:16:0a:a6:93: 66:12:fc:be:60:82:ff:7e:56:b5:9f:72:16:2f:0b:51:73:a9: db:e9:9f:4c:9f:4d:2d:f2:5a:29:31:57:be:7c:b5:90:f4:07: 51:2d:4d:27:31:c6:f1:5a:e8:e8:7e:47:ec:fe:47:1a:69:14: 4b:3b:06:a8:c1:c5:b8:ae:a0:c5:4a:57:c4:72:c1:84:af:14: 88:58:70:61:ba:91:7d:24:b3:eb:77:b5:b4:40:88:29:d5:16: 14:09:84:9c:0e:9b:a9:91:5e:65:cf:97:f3:60:53:14:44:e3: 13:35:f7:52:1e:c6:55:23:9e:10:da:13:82:4c:ed:58:b0:b0: dc:5d:bd:49:9d:a6:d2:bf:9d:93:66:ef:5b:e0:29:09:f5:77: c4:67:a6:f5:6a:c1:39:d8:5e:5e:65:41:01:06:61:2c:ca:41: fb:e6:52:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTA5RTExMC8GA1UEBRMoRTA1QzY0NTU0NUQ5RUY4NkI0NTFFNTIxOUQ4MzI3NjBG NDA1Q0FFODAeFw0yNTA4MjEwODE0MjBaFw0yNTA4MjgwODE0MjBaMBgxFjAUBgNV BAMTDTY4YTZkNTVjLWRmYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA8i4bU7SeCCbVs8GdwaGF9VQowTpIZdNSKFcfIffJM2+j/12veV/yX7BdVDTW rfzCQjPbE8zFH8M/jhlCu6w3m80VSb4Ng2RNQij+lEE8zFVrQCBt4Ce+RvQr3uIu JPOnik+oiWkH4kJ0nKPK1OGOR/wSzT+QpchDNgCoxFC8vv/WTTB8HkPTknW/9wZ0 XmsC+kDh3a+AThcPo5w7pKF1LGPBMxYqphIM/+/tpr+VguRjJcqP/Zt/I3AioIYB mD1SaPJE4P0J/YQvffAAG1Dx1ImsYfFdBVMM+eMixUiWgXoVZex87AV1BxfPGfM8 HXOtr8p56BH6lhxGmVmAeBRjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZPoYZvAX ZvaqRRRTU6uq18Hlz74wHwYDVR0jBBgwFoAU4FxkVUXZ74a0UeUhnYMnYPQFyugw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFMDlFL0Q4QkIwRjM2NjFG QTExRjBCRDRGNjA2RUM0RjlBRTAyLzRGeGtWVVhaNzRhMFVlVWhuWU1uWVBRRnl1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEZ4a1ZVWFo3NGEwVWVVaG5ZTW5ZUFFGeXVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF MDlFL0Q4QkIwRjM2NjFGQTExRjBCRDRGNjA2RUM0RjlBRTAyLzRGeGtWVVhaNzRh MFVlVWhuWU1uWVBRRnl1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA7N87/x9sdKQVTkj2UxI3eoemN2VmFxvprPK2ogM7U/p/jDxIGjE9XD JgaAAjMyn+t7SUwbwD1XQwz2LcFM281i+rDf91C5dKZweuEBJ/1vUPDeZgoyFgqm k2YS/L5ggv9+VrWfchYvC1Fzqdvpn0yfTS3yWikxV758tZD0B1EtTScxxvFa6Oh+ R+z+RxppFEs7BqjBxbiuoMVKV8RywYSvFIhYcGG6kX0ks+t3tbRAiCnVFhQJhJwO m6mRXmXPl/NgUxRE4xM191IexlUjnhDaE4JM7ViwsNxdvUmdptK/nZNm71vgKQn1 d8RnpvVqwTnYXl5lQQEGYSzKQfvmUis= -----END CERTIFICATE-----Generated at Fri Aug 22 16:19:02 2025 by rpki-client