$ rpki-client -vvf rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft File: p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft (raw, json) Hash identifier: zALW6ZxPlBNwiqvNnOIWmMDw2jQT1KTd6w7iCHY+Ijs= Subject key identifier: 1F:45:86:6A:13:B1:86:8A:DA:A1:F8:5E:C7:E9:35:14:9C:8D:D9:F4 Authority key identifier: A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 Certificate issuer: /CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Certificate serial: 074A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft Manifest number: 0745 Signing time: Thu 18 Sep 2025 21:59:05 +0000 Manifest this update: Thu 18 Sep 2025 21:59:05 +0000 Manifest next update: Thu 25 Sep 2025 21:59:05 +0000 Files and hashes: 1: p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl (hash: sgDJej1ZcYuE+OUPUV9V0uZhzRTEamY5/UmTtRcvyog=) 2: F2A90B8C3ECD11EBADC7D32AC4F9AE02.roa (hash: H0kHP8pBoH+bwHmlcJ0nDAtlDVRXDuWl/zy2MYQJc/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1866 (0x74a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132933, serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Validity Not Before: Sep 18 21:59:05 2025 GMT Not After : Sep 25 21:59:05 2025 GMT Subject: CN=68cc80a9-4ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:6f:2b:7e:2d:ce:dc:07:a6:71:87:4d:86: 2e:9d:0a:ff:8a:c5:bd:dc:63:2e:44:ad:09:a3:c0: c8:58:6d:e3:96:9e:ce:bd:9c:a9:21:1a:04:7b:7f: ca:b7:fb:dc:03:05:f7:a7:77:e0:22:45:36:70:5c: 4e:5f:f0:bc:59:cf:2d:05:6e:29:c2:7b:67:d6:9d: 40:34:75:30:d8:03:d3:94:91:0e:8a:5e:eb:41:6b: 06:39:02:19:81:be:c8:90:19:a0:29:ba:1b:b9:ec: 9f:78:52:18:e4:8d:40:b8:cf:9e:6c:b7:fc:6b:1b: 5d:28:6f:1b:ea:49:32:ab:ee:8b:2e:86:8e:11:64: d0:9c:6b:19:66:fd:63:10:1b:0e:09:b1:78:3c:f8: 40:74:6a:a9:0e:3e:f4:0c:03:c5:03:39:02:1d:c9: ea:d6:46:8a:fe:96:f1:da:da:02:17:11:61:1c:b7: 4c:20:41:97:ac:21:d5:49:cd:de:9e:47:f7:19:34: 0a:00:58:e3:36:86:9d:5b:4f:d5:29:96:ab:e1:6a: a7:8e:eb:a8:a1:70:28:29:8a:50:e0:cb:ba:14:87: 96:c6:34:fd:49:5c:e8:18:34:04:07:e4:bd:40:50: 2c:e1:14:76:54:02:6c:35:8b:89:4d:2a:2a:a4:da: ae:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:45:86:6A:13:B1:86:8A:DA:A1:F8:5E:C7:E9:35:14:9C:8D:D9:F4 X509v3 Authority Key Identifier: keyid:A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:ea:20:27:64:23:16:4f:20:13:89:d9:8d:a2:fc:ce:37:89: c1:9b:bc:9c:69:58:94:8c:55:ce:98:f7:ce:cf:21:07:e3:5e: c2:43:6e:06:ae:bd:30:4f:77:d8:32:77:24:ed:7c:c2:58:db: 1a:c0:0c:40:59:d1:19:e7:f1:6d:2d:f3:62:2d:ee:38:f3:2b: 38:61:ed:e1:3c:00:e6:13:16:ca:86:df:e4:6b:fe:6c:6a:b6: 75:5d:b7:55:5a:3e:4a:23:28:7a:eb:7b:27:bd:7b:18:bc:b2: d3:e3:2f:ff:f7:7f:cc:e1:3a:6e:f7:0e:c3:38:43:29:cf:61: 32:0f:80:d9:f1:15:1c:ed:3c:dc:b5:c2:b2:81:56:67:a2:64: 34:2c:92:4d:a8:3b:a2:a1:71:82:99:aa:50:52:9e:54:fc:79: 02:29:ee:98:4c:d8:30:5a:13:11:64:cb:75:57:f3:87:c3:91: c4:f1:43:b0:ea:61:7b:6a:a0:02:9c:63:16:f3:3e:58:92:67: 0f:02:ec:f4:c4:24:3b:c2:df:e5:f2:17:8c:3e:59:9e:83:c5: c0:19:94:04:1d:3c:28:f3:20:34:75:f0:a0:04:33:ec:f3:6d: 42:fb:88:27:f4:5a:56:fa:53:b8:f3:c0:c7:75:32:a7:49:ce: b2:ec:ba:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI5MzMxMTAvBgNVBAUTKEE3RkUxMjg2NTY4MjJGMjYyMUE0QTBGRjk1NjM0Mjc4 MDc5OEM0RjAwHhcNMjUwOTE4MjE1OTA1WhcNMjUwOTI1MjE1OTA1WjAYMRYwFAYD VQQDEw02OGNjODBhOS00Y2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZNvK34tztwHpnGHTYYunQr/isW93GMuRK0Jo8DIWG3jlp7OvZypIRoEe3/K t/vcAwX3p3fgIkU2cFxOX/C8Wc8tBW4pwntn1p1ANHUw2APTlJEOil7rQWsGOQIZ gb7IkBmgKbobueyfeFIY5I1AuM+ebLf8axtdKG8b6kkyq+6LLoaOEWTQnGsZZv1j EBsOCbF4PPhAdGqpDj70DAPFAzkCHcnq1kaK/pbx2toCFxFhHLdMIEGXrCHVSc3e nkf3GTQKAFjjNoadW0/VKZar4WqnjuuooXAoKYpQ4Mu6FIeWxjT9SVzoGDQEB+S9 QFAs4RR2VAJsNYuJTSoqpNquwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9FhmoT sYaK2qH4XsfpNRScjdn0MB8GA1UdIwQYMBaAFKf+EoZWgi8mIaSg/5VjQngHmMTw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjkzMy9GOTEyRjY5QTNF QzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5WWhwS0RfbFdOQ2VBZVl4 UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfNFNobGFDTHlZaHBLRF9sV05DZUFlWXhQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjkzMy9GOTEyRjY5QTNFQzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5 WWhwS0RfbFdOQ2VBZVl4UEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH6iAnZCMWTyATidmNovzON4nBm7ycaViUjFXOmPfOzyEH417CQ24G rr0wT3fYMnck7XzCWNsawAxAWdEZ5/FtLfNiLe448ys4Ye3hPADmExbKht/ka/5s arZ1XbdVWj5KIyh663snvXsYvLLT4y//93/M4Tpu9w7DOEMpz2EyD4DZ8RUc7Tzc tcKygVZnomQ0LJJNqDuioXGCmapQUp5U/HkCKe6YTNgwWhMRZMt1V/OHw5HE8UOw 6mF7aqACnGMW8z5YkmcPAuz0xCQ7wt/l8heMPlmeg8XAGZQEHTwo8yA0dfCgBDPs 821C+4gn9FpW+lO488DHdTKnSc6y7Lok -----END CERTIFICATE-----Generated at Fri Sep 19 01:29:52 2025 by rpki-client