$ rpki-client -vvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft File: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json) Hash identifier: 5I4y6uAsABw4cVYfmed1jpWMRyKrE9ls2lBKSOhQTGI= Subject key identifier: D9:0A:3B:63:BC:45:6D:84:26:25:2F:D6:F8:63:C6:B2:9F:A3:19:F2 Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C Certificate issuer: /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C Certificate serial: 07CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft Manifest number: 07C5 Signing time: Wed 20 Aug 2025 21:16:21 +0000 Manifest this update: Wed 20 Aug 2025 21:16:21 +0000 Manifest next update: Wed 27 Aug 2025 21:16:21 +0000 Files and hashes: 1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: VV55NeD50fkOsBQzxwwOgFEkXcFkBlRWMYBv5qAP978=) 2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: 04Yyac0X4yooHW+vSmS1SL3uVYlQ7JtEGZ1zzlU0iN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 21:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1996 (0x7cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C Validity Not Before: Aug 20 21:16:21 2025 GMT Not After : Aug 27 21:16:21 2025 GMT Subject: CN=68a63b25-78bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:b8:04:8a:0f:b1:0b:8c:c0:bd:59:84:37: 9e:05:d7:a1:9c:e6:45:4c:07:c3:38:79:d5:0e:32: 2d:26:52:bc:b5:36:25:7b:27:a7:6b:b7:2b:c6:d3: 78:51:02:17:d9:54:f9:1e:d9:24:93:a2:cd:08:0e: 07:88:2c:97:2d:43:72:93:aa:dd:3e:94:9f:a8:e0: ae:5b:7a:ff:9e:6c:f4:e5:7a:de:8b:1b:2a:e0:e4: 65:09:b4:d4:49:38:23:84:70:70:fe:53:02:dd:0c: 03:53:c3:d1:fc:75:5a:12:df:0c:29:a0:4b:d6:24: 51:7e:a1:43:54:9b:b1:92:3b:d0:15:07:ed:c4:6a: 67:a1:4e:7d:cf:27:bd:bf:de:83:eb:18:32:3d:56: fe:ef:09:74:6a:91:4c:18:dc:d9:3a:c5:cd:c6:b4: c3:11:9d:2b:f5:b2:a2:5f:44:41:30:79:39:f7:40: e6:cf:07:cd:b7:d1:70:2a:4e:de:d2:8b:c4:59:38: 90:80:4a:99:6c:a1:ea:eb:64:9e:f9:f1:bd:cd:26: a5:6e:ed:93:f4:e5:f5:59:61:64:cd:03:be:8b:4d: c6:7b:bc:f4:bb:7d:30:3a:fe:3b:41:40:1f:80:a3: ea:fb:89:d8:d8:f1:f4:8c:86:bd:cc:67:b7:66:0b: ce:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0A:3B:63:BC:45:6D:84:26:25:2F:D6:F8:63:C6:B2:9F:A3:19:F2 X509v3 Authority Key Identifier: keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:de:52:9e:5c:6e:b3:a9:26:aa:5e:1e:92:20:65:1b:b0:ae: 98:7a:5f:e0:cd:43:fe:64:7e:00:15:59:3f:e5:e9:b2:27:55: 41:15:47:4e:35:49:00:2a:f9:5a:3d:4e:3f:fc:15:f8:10:25: 63:b4:d7:54:52:cc:c3:be:3f:00:d1:9d:b9:70:7c:3a:52:c1: 12:33:a3:ad:93:77:f1:46:d9:c8:7b:40:b1:63:d8:d7:11:90: 7b:22:ff:3f:b7:f8:7f:cf:2e:42:4e:7e:32:1f:3f:9f:0c:fe: 36:4f:ae:56:c4:dc:b2:41:07:b3:0a:d8:47:c9:da:37:80:b0: 63:ee:cb:43:10:4f:30:b3:8d:21:93:d4:e4:dc:3d:0e:38:e8: b5:82:6d:60:29:e7:54:b1:a7:5f:24:c6:44:48:48:a2:a4:1c: 8a:cf:73:15:4b:52:d3:56:90:17:0a:30:dc:09:f0:9f:ea:9d: ff:14:1d:9f:a4:44:e8:c4:da:c1:e8:50:97:6a:ab:fc:33:c2: dc:00:99:65:5a:3f:ee:0a:59:1c:da:c9:c9:a9:2c:18:d9:1d: 4d:9a:9b:b3:ec:ce:73:5b:8e:1e:31:fc:f3:26:6b:3e:67:ea: df:9f:1f:f3:e5:9c:14:6b:91:03:62:93:05:a4:88:6a:11:2b: 8f:e7:4d:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwRDYxMTAvBgNVBAUTKEUyRDgxM0Q2NkNFNTBERDkzOEZDM0E1MzJEQjhFREUy QzVCQTc5NUMwHhcNMjUwODIwMjExNjIxWhcNMjUwODI3MjExNjIxWjAYMRYwFAYD VQQDEw02OGE2M2IyNS03OGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYO4BIoPsQuMwL1ZhDeeBdehnOZFTAfDOHnVDjItJlK8tTYleyena7crxtN4 UQIX2VT5Htkkk6LNCA4HiCyXLUNyk6rdPpSfqOCuW3r/nmz05Xreixsq4ORlCbTU STgjhHBw/lMC3QwDU8PR/HVaEt8MKaBL1iRRfqFDVJuxkjvQFQftxGpnoU59zye9 v96D6xgyPVb+7wl0apFMGNzZOsXNxrTDEZ0r9bKiX0RBMHk590DmzwfNt9FwKk7e 0ovEWTiQgEqZbKHq62Se+fG9zSalbu2T9OX1WWFkzQO+i03Ge7z0u30wOv47QUAf gKPq+4nY2PH0jIa9zGe3ZgvO4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkKO2O8 RW2EJiUv1vhjxrKfoxnyMB8GA1UdIwQYMBaAFOLYE9Zs5Q3ZOPw6Uy247eLFunlc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjBENi84OUEwRTdBMjA4 NkExMUVCOURGMzM4NDJDNEY5QUUwMi80dGdUMW16bERkazRfRHBUTGJqdDRzVzZl VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR0Z1QxbXpsRGRrNF9EcFRMYmp0NHNXNmVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjBENi84OUEwRTdBMjA4NkExMUVCOURGMzM4NDJDNEY5QUUwMi80dGdUMW16bERk azRfRHBUTGJqdDRzVzZlVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI3lKeXG6zqSaqXh6SIGUbsK6Yel/gzUP+ZH4AFVk/5emyJ1VBFUdO NUkAKvlaPU4//BX4ECVjtNdUUszDvj8A0Z25cHw6UsESM6Otk3fxRtnIe0CxY9jX EZB7Iv8/t/h/zy5CTn4yHz+fDP42T65WxNyyQQezCthHydo3gLBj7stDEE8ws40h k9Tk3D0OOOi1gm1gKedUsadfJMZESEiipByKz3MVS1LTVpAXCjDcCfCf6p3/FB2f pEToxNrB6FCXaqv8M8LcAJllWj/uClkc2snJqSwY2R1Nmpuz7M5zW44eMfzzJms+ Z+rfnx/z5ZwUa5EDYpMFpIhqESuP500d -----END CERTIFICATE-----Generated at Fri Aug 22 16:32:12 2025 by rpki-client