$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json) Hash identifier: XQVJJTg24bPrg/UiHBGOu6FcROfr+6JEnyEPVwAn/Fw= Subject key identifier: 1D:64:C5:C6:FF:DB:79:2A:3B:E1:C4:0D:75:E6:9C:88:27:57:F6:E7 Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Certificate serial: 02B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft Manifest number: 02AC Signing time: Wed 03 Sep 2025 01:54:32 +0000 Manifest this update: Wed 03 Sep 2025 01:54:31 +0000 Manifest next update: Wed 10 Sep 2025 01:54:31 +0000 Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: /o9C0Op4Rgp0yqPt5eL7i1J++KI/HOOU/NkPEnv471o=) 2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: cG28lDeyahzWWkmTahaq+sCJHYmimDEkICh6+dm+qWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 01:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 688 (0x2b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Validity Not Before: Sep 3 01:54:31 2025 GMT Not After : Sep 10 01:54:31 2025 GMT Subject: CN=68b79fd8-41bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1a:ac:42:90:fc:b1:c6:91:e9:e7:76:a3:24: 83:c7:e2:ec:7d:00:5f:6e:f7:34:34:79:fe:c7:7f: 14:a0:b9:40:47:11:9a:06:a2:9b:89:38:58:d6:36: 32:b8:e3:13:50:4a:a1:fb:dc:f5:84:eb:01:ae:a0: 2c:da:ac:84:86:7f:3e:dd:b1:50:1d:6d:65:9c:68: 7e:21:00:2e:32:a8:66:71:63:e6:db:a9:3b:dd:6f: 52:92:00:04:97:87:9a:7a:75:7f:be:54:4d:e9:dd: be:9a:dc:01:48:38:aa:51:de:10:d8:bb:91:b7:21: fa:5e:41:69:a4:5f:b7:32:f8:d8:90:00:1a:13:2d: 37:e0:ed:8c:40:bc:64:ca:c5:19:dd:6e:3f:c7:48: df:98:7f:ea:c3:6c:0b:86:f3:73:a1:b1:f2:19:bf: 15:c2:74:f2:ed:9b:28:65:17:fb:02:13:ac:ba:97: 10:6c:50:1b:b0:b5:6d:0a:55:e2:a2:f0:62:7e:21: ac:e2:c7:5e:f9:3f:67:0b:3e:d8:59:ce:fb:18:10: 56:e9:00:f3:18:2a:12:15:ff:c3:e9:6a:9b:d2:8c: f5:67:2c:ff:a4:d5:6c:32:dc:7e:62:cf:5a:69:1b: ab:4f:a9:f5:ac:4f:87:f4:46:0a:22:71:88:2f:2f: ce:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:64:C5:C6:FF:DB:79:2A:3B:E1:C4:0D:75:E6:9C:88:27:57:F6:E7 X509v3 Authority Key Identifier: keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:14:02:a7:47:72:22:c5:9c:d6:73:88:a4:59:06:ab:3a:f0: 91:d0:92:d7:af:03:0a:a4:74:0f:29:d7:0b:d9:c5:43:92:24: 84:56:55:a0:dc:9f:af:8a:51:8c:c2:12:a2:0e:96:8f:a7:a6: 00:dd:18:42:cc:72:81:e5:85:d1:56:b2:a2:ea:70:7b:cb:6f: 18:ff:84:1b:21:92:cb:6b:ed:41:00:e9:91:be:20:1f:1a:27: 22:b1:d7:9f:aa:eb:58:03:ba:a1:7e:05:ee:53:14:26:16:02: 11:04:9b:28:a2:58:1f:97:80:6c:57:e6:26:78:6f:91:6a:b3: 27:8a:03:2c:2f:c4:30:8c:ac:03:4f:fa:18:bc:5d:fd:24:24: 91:89:55:b8:45:66:fc:76:26:bd:84:ac:1e:8d:91:da:e8:6e: c0:27:20:a6:92:ab:2f:96:14:90:c1:3d:af:62:56:7c:48:b9: 6b:38:50:4d:fd:52:ab:16:1b:4d:8c:21:be:17:76:13:8e:d6: 9e:d0:42:6c:5f:88:61:b8:af:e1:9e:8a:dd:07:b9:85:41:68: d9:19:16:70:ed:ee:aa:4d:d1:cd:7c:cf:92:c8:e5:f3:af:c9: 41:80:4c:11:f9:b6:9d:d4:8b:3f:83:0b:d0:1e:01:72:fd:8d: 42:79:4a:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKEUxREIyRkM4MjVFQzNCQkJFNzI4NTdBNzNFQzA4NkEw ODIxRTIwRkQwHhcNMjUwOTAzMDE1NDMxWhcNMjUwOTEwMDE1NDMxWjAYMRYwFAYD VQQDEw02OGI3OWZkOC00MWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBqsQpD8scaR6ed2oySDx+LsfQBfbvc0NHn+x38UoLlARxGaBqKbiThY1jYy uOMTUEqh+9z1hOsBrqAs2qyEhn8+3bFQHW1lnGh+IQAuMqhmcWPm26k73W9SkgAE l4eaenV/vlRN6d2+mtwBSDiqUd4Q2LuRtyH6XkFppF+3MvjYkAAaEy034O2MQLxk ysUZ3W4/x0jfmH/qw2wLhvNzobHyGb8VwnTy7ZsoZRf7AhOsupcQbFAbsLVtClXi ovBifiGs4sde+T9nCz7YWc77GBBW6QDzGCoSFf/D6Wqb0oz1Zyz/pNVsMtx+Ys9a aRurT6n1rE+H9EYKInGILy/OFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1kxcb/ 23kqO+HEDXXmnIgnV/bnMB8GA1UdIwQYMBaAFOHbL8gl7Du75yhXpz7AhqCCHiD9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS8zN0UzOTBBMDBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083dm5LRmVuUHNDR29JSWVJ UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRkc3Z5Q1hzTzd2bktGZW5Qc0NHb0lJZUlQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS8zN0UzOTBBMDBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083 dm5LRmVuUHNDR29JSWVJUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7FAKnR3IixZzWc4ikWQarOvCR0JLXrwMKpHQPKdcL2cVDkiSEVlWg 3J+vilGMwhKiDpaPp6YA3RhCzHKB5YXRVrKi6nB7y28Y/4QbIZLLa+1BAOmRviAf GicisdefqutYA7qhfgXuUxQmFgIRBJsoolgfl4BsV+YmeG+RarMnigMsL8QwjKwD T/oYvF39JCSRiVW4RWb8dia9hKwejZHa6G7AJyCmkqsvlhSQwT2vYlZ8SLlrOFBN /VKrFhtNjCG+F3YTjtae0EJsX4hhuK/hnordB7mFQWjZGRZw7e6qTdHNfM+SyOXz r8lBgEwR+bad1Is/gwvQHgFy/Y1CeUqW -----END CERTIFICATE-----Generated at Thu Sep 4 13:58:37 2025 by rpki-client