$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft File: aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft (raw, json) Hash identifier: RIHE93B6/Qf+l1ag1nDBtoqBLD8i026uDFchHUfZxZQ= Subject key identifier: 6D:BB:FA:C0:5F:E3:98:B2:87:0A:32:A0:B9:FA:41:59:DA:C7:47:3E Authority key identifier: 69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03 Certificate issuer: /CN=A9122B85/serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft Manifest number: 0158 Signing time: Fri 19 Sep 2025 04:41:24 +0000 Manifest this update: Fri 19 Sep 2025 04:41:23 +0000 Manifest next update: Fri 26 Sep 2025 04:41:23 +0000 Files and hashes: 1: aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl (hash: AuuxmHJENzxLWHpmyVtTOrTcwWR7duIh8boteyG6cfk=) 2: 0287BD068A3D11EEADFABF09C4F9AE02.roa (hash: zthvVJ0xeL5J9gMyWu/Onbxvo/kp68K5vsS8CZ3Wqh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B85, serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103 Validity Not Before: Sep 19 04:41:23 2025 GMT Not After : Sep 26 04:41:23 2025 GMT Subject: CN=68ccdef3-21da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:50:0d:d9:59:44:28:ff:75:80:f2:b9:7d:ed: bf:53:56:d6:22:6c:d7:7f:e4:98:ab:cc:80:65:e3: c5:41:ca:ac:34:d1:31:69:50:cc:4b:e0:3e:7f:16: 47:80:ea:7f:3a:25:54:0e:43:80:ee:0f:a7:01:ba: 4b:b4:a5:1a:29:d3:55:91:54:13:56:d2:70:c5:f4: f6:5d:f2:5b:21:24:fa:d7:1b:07:2a:ca:44:b0:46: fb:91:cc:27:a4:6b:67:a1:ec:40:81:98:0f:2d:a9: 9c:74:f4:e4:9f:bd:0a:1c:a4:a9:f8:76:26:90:76: 3c:dd:cb:48:b5:ca:c5:64:e8:f6:1b:1b:62:4e:87: c1:55:f1:25:60:2e:56:a8:33:d8:f8:fd:e7:d2:37: bd:52:49:a2:99:0e:f9:9c:67:7e:e7:00:f7:82:5e: 41:60:b0:0a:29:36:53:36:5b:c7:c7:21:1c:ed:ba: 3b:7f:e1:90:0f:62:5f:cd:f1:af:ac:38:70:04:ad: 67:ba:5a:08:e9:2f:76:b4:ee:57:f1:c4:b6:d0:c8: 4d:0a:92:b4:66:62:06:ce:d5:0c:3c:2d:86:93:71: 70:f7:d0:0c:4a:e8:37:9a:65:4e:65:b2:05:26:86: 73:ef:4b:f5:bb:25:81:53:49:41:69:8e:50:85:f8: 26:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BB:FA:C0:5F:E3:98:B2:87:0A:32:A0:B9:FA:41:59:DA:C7:47:3E X509v3 Authority Key Identifier: keyid:69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:44:d2:82:cf:6b:23:5c:28:3c:1c:7e:f1:18:4c:cb:56:2b: f9:3a:9c:7e:dd:2a:44:a8:99:4f:17:e9:8a:fa:a3:a4:04:a7: 5e:e3:1e:93:55:08:2a:dd:bf:d2:5d:a0:8c:42:7f:5e:d2:53: f8:1a:99:9a:65:b8:8d:23:ab:f3:be:cd:16:20:ce:6e:21:62: 56:70:a8:d9:07:2b:54:ff:83:e8:d1:b4:d6:03:c0:36:b1:c5: bc:d0:d0:67:56:92:ac:f1:4c:e8:75:cd:b3:1c:a5:3c:b7:6f: bf:60:9a:6d:21:38:4b:9f:83:fd:d1:55:c2:c2:b4:5c:a1:4a: c8:5e:c6:66:b9:1d:3d:95:00:0d:d1:cb:64:79:71:8a:3d:c6: cb:f2:53:5b:fa:c9:f7:c9:de:d7:8e:82:fc:c1:09:61:47:0a: 48:f3:b5:0c:a5:a2:fa:26:49:0c:0f:ad:dd:a6:eb:83:7f:56: a1:d4:0c:4a:6f:45:2c:04:94:a5:03:e6:d1:13:95:2f:bf:f1: 40:c6:0b:d6:49:eb:e7:20:99:07:7a:ce:df:a3:ce:cc:b3:05: 6a:80:48:6c:75:75:28:e2:58:11:03:56:2c:df:e0:c2:7e:85: 71:52:ea:52:28:0a:5d:c5:1a:88:2a:3c:45:ee:2c:1e:ab:c4: a4:74:2d:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCODUxMTAvBgNVBAUTKDY5RUE2MkUzRjAzRTQ3QzAzNzE5QkVEQjE2QjRDQTI3 M0I4QjMxMDMwHhcNMjUwOTE5MDQ0MTIzWhcNMjUwOTI2MDQ0MTIzWjAYMRYwFAYD VQQDEw02OGNjZGVmMy0yMWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lAN2VlEKP91gPK5fe2/U1bWImzXf+SYq8yAZePFQcqsNNExaVDMS+A+fxZH gOp/OiVUDkOA7g+nAbpLtKUaKdNVkVQTVtJwxfT2XfJbIST61xsHKspEsEb7kcwn pGtnoexAgZgPLamcdPTkn70KHKSp+HYmkHY83ctItcrFZOj2GxtiTofBVfElYC5W qDPY+P3n0je9UkmimQ75nGd+5wD3gl5BYLAKKTZTNlvHxyEc7bo7f+GQD2JfzfGv rDhwBK1nuloI6S92tO5X8cS20MhNCpK0ZmIGztUMPC2Gk3Fw99AMSug3mmVOZbIF JoZz70v1uyWBU0lBaY5QhfgmTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG27+sBf 45iyhwoyoLn6QVnax0c+MB8GA1UdIwQYMBaAFGnqYuPwPkfANxm+2xa0yic7izED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkI4NS85MEU5N0Q3MDg5 QkUxMUVFQkNGMjlBNTVDNEY5QUUwMi9hZXBpNF9BLVI4QTNHYjdiRnJUS0p6dUxN UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlcGk0X0EtUjhBM0diN2JGclRLSnp1TE1RTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkI4NS85MEU5N0Q3MDg5QkUxMUVFQkNGMjlBNTVDNEY5QUUwMi9hZXBpNF9BLVI4 QTNHYjdiRnJUS0p6dUxNUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPRNKCz2sjXCg8HH7xGEzLViv5Opx+3SpEqJlPF+mK+qOkBKde4x6T VQgq3b/SXaCMQn9e0lP4GpmaZbiNI6vzvs0WIM5uIWJWcKjZBytU/4Po0bTWA8A2 scW80NBnVpKs8Uzodc2zHKU8t2+/YJptIThLn4P90VXCwrRcoUrIXsZmuR09lQAN 0ctkeXGKPcbL8lNb+sn3yd7XjoL8wQlhRwpI87UMpaL6JkkMD63dpuuDf1ah1AxK b0UsBJSlA+bRE5Uvv/FAxgvWSevnIJkHes7fo87MswVqgEhsdXUo4lgRA1Ys3+DC foVxUupSKApdxRqIKjxF7iweq8SkdC0p -----END CERTIFICATE-----Generated at Fri Sep 19 08:35:32 2025 by rpki-client