$ rpki-client -vvf rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft File: 4VLg53x5W1Qih9ZcHk4L8obU1eA.mft (raw, json) Hash identifier: rAkH1mb46+aSHtmLafhYI5Yk6zBobQxI+6GpnUiKVVM= Subject key identifier: 3C:0C:BC:81:67:E6:14:4D:44:28:B9:85:34:8C:80:87:9A:38:7D:A8 Authority key identifier: E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0 Certificate issuer: /CN=A912763C/serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0 Certificate serial: 081C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft Manifest number: 0815 Signing time: Thu 18 Sep 2025 21:07:35 +0000 Manifest this update: Thu 18 Sep 2025 21:07:34 +0000 Manifest next update: Thu 25 Sep 2025 21:07:34 +0000 Files and hashes: 1: 4VLg53x5W1Qih9ZcHk4L8obU1eA.crl (hash: 8s3CD5UN0L0isFLYeJpCTAZE56Pqv7l0qkXB37YNmEo=) 2: 22329D14EE6511EAA50E8052C4F9AE02.roa (hash: CrTXUk46Qs0+2Fg8G1Szn+PXGeNBfOdVzoZfC6kMiL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2076 (0x81c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912763C, serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0 Validity Not Before: Sep 18 21:07:34 2025 GMT Not After : Sep 25 21:07:34 2025 GMT Subject: CN=68cc7496-bfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:12:64:d2:a1:76:18:1b:1a:84:55:68:d1:aa: eb:a6:de:92:7c:ad:85:eb:39:15:87:09:fc:12:bc: 92:c9:9d:b6:88:84:9a:29:ac:66:e4:c2:93:8e:f2: e5:9b:98:3a:be:96:7d:71:b9:35:fd:9b:d1:7a:18: e0:37:23:ab:60:80:e0:19:1d:5b:ec:9f:d3:eb:18: e4:10:4a:17:c0:a2:49:32:67:80:32:8d:c2:b4:ff: 79:05:c8:f1:dd:17:5e:b0:a7:ea:03:21:f1:12:ee: a3:76:dc:7b:c5:7e:f5:0f:94:84:04:23:ef:71:f2: aa:00:f8:7f:ad:bf:9b:d8:7d:1d:3b:3a:f7:65:93: 68:a7:ea:1e:60:a5:3f:5c:48:58:54:61:bb:51:c8: d5:f5:a7:9a:7e:bd:e1:26:7e:04:61:42:90:03:e3: 91:42:4a:72:c2:93:58:87:f1:67:b6:b9:22:06:f6: 7d:63:a7:c6:20:73:94:76:7f:f1:4d:31:b2:43:f4: 01:b6:90:99:6c:b3:1b:5c:a0:4d:20:25:22:e2:ba: 30:58:5a:e6:2e:48:c7:6d:15:9b:32:d2:77:29:88: 90:a2:1d:81:8d:99:65:08:d3:b8:07:ec:2b:ae:7f: a2:0d:ee:e4:04:de:c4:6d:8a:73:b5:cc:9e:cb:ea: b9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0C:BC:81:67:E6:14:4D:44:28:B9:85:34:8C:80:87:9A:38:7D:A8 X509v3 Authority Key Identifier: keyid:E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:f1:63:b1:4b:81:80:fb:df:ea:07:bc:f6:ee:f5:ae:54:c4: 0b:26:ff:af:89:e5:31:2d:f8:36:8c:48:1e:af:18:e1:a2:1d: b0:18:0b:7c:de:1a:c6:ce:02:20:d9:fe:15:bb:a1:33:a2:cc: 27:bd:03:38:b5:ee:6a:78:87:64:0b:6e:b2:ea:31:aa:07:8d: 87:ee:09:b4:4e:f9:27:c1:65:5c:95:d6:15:de:f4:dc:a7:ee: e1:b8:8a:42:01:ca:18:c8:3a:65:70:55:67:f8:52:f0:c4:7a: a3:9c:1f:c3:e0:86:2c:22:90:6c:49:5e:15:63:79:8b:b2:2c: 69:1d:e9:df:60:e5:e8:33:d9:46:cd:81:29:73:6f:53:9f:7d: 5a:17:3c:92:b5:18:75:74:17:64:23:bd:99:ed:e3:b3:bb:db: fa:87:28:87:04:96:aa:01:80:32:56:41:5f:53:c0:10:25:dc: b5:e5:83:3e:91:89:00:8b:64:42:75:cf:bd:5a:23:cc:8b:31: f8:58:47:59:e2:2e:45:8a:58:99:07:a2:71:4a:88:63:b9:14: bd:56:e4:3a:ba:54:d2:ea:88:66:da:c9:1c:03:10:42:5e:0c: 17:bd:75:29:94:23:68:93:24:e5:92:28:4e:e9:68:e8:5e:65: 61:24:08:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2M0MxMTAvBgNVBAUTKEUxNTJFMEU3N0M3OTVCNTQyMjg3RDY1QzFFNEUwQkYy ODZENEQ1RTAwHhcNMjUwOTE4MjEwNzM0WhcNMjUwOTI1MjEwNzM0WjAYMRYwFAYD VQQDEw02OGNjNzQ5Ni1iZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRJk0qF2GBsahFVo0arrpt6SfK2F6zkVhwn8ErySyZ22iISaKaxm5MKTjvLl m5g6vpZ9cbk1/ZvRehjgNyOrYIDgGR1b7J/T6xjkEEoXwKJJMmeAMo3CtP95Bcjx 3RdesKfqAyHxEu6jdtx7xX71D5SEBCPvcfKqAPh/rb+b2H0dOzr3ZZNop+oeYKU/ XEhYVGG7UcjV9aeafr3hJn4EYUKQA+ORQkpywpNYh/FntrkiBvZ9Y6fGIHOUdn/x TTGyQ/QBtpCZbLMbXKBNICUi4rowWFrmLkjHbRWbMtJ3KYiQoh2BjZllCNO4B+wr rn+iDe7kBN7EbYpztcyey+q5BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwMvIFn 5hRNRCi5hTSMgIeaOH2oMB8GA1UdIwQYMBaAFOFS4Od8eVtUIofWXB5OC/KG1NXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzYzQy9GMjBBQjMxQ0VF NjIxMUVBQTc2NjY0NEVDNEY5QUUwMi80VkxnNTN4NVcxUWloOVpjSGs0TDhvYlUx ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWTGc1M3g1VzFRaWg5WmNIazRMOG9iVTFlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzYzQy9GMjBBQjMxQ0VFNjIxMUVBQTc2NjY0NEVDNEY5QUUwMi80VkxnNTN4NVcx UWloOVpjSGs0TDhvYlUxZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm8WOxS4GA+9/qB7z27vWuVMQLJv+vieUxLfg2jEgerxjhoh2wGAt8 3hrGzgIg2f4Vu6EzoswnvQM4te5qeIdkC26y6jGqB42H7gm0TvknwWVcldYV3vTc p+7huIpCAcoYyDplcFVn+FLwxHqjnB/D4IYsIpBsSV4VY3mLsixpHenfYOXoM9lG zYEpc29Tn31aFzyStRh1dBdkI72Z7eOzu9v6hyiHBJaqAYAyVkFfU8AQJdy15YM+ kYkAi2RCdc+9WiPMizH4WEdZ4i5FiliZB6JxSohjuRS9VuQ6ulTS6ohm2skcAxBC XgwXvXUplCNokyTlkihO6WjoXmVhJAjy -----END CERTIFICATE-----Generated at Thu Sep 18 23:27:06 2025 by rpki-client