$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: gOoCGiBk894Em68dmNYqc9eawF77tpHnHzVddJrovm8= Subject key identifier: 74:B3:57:31:CE:EB:48:FC:96:6C:D0:CE:67:E8:E0:FB:63:A2:1E:63 Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 07E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 07DD Signing time: Fri 12 Sep 2025 21:10:07 +0000 Manifest this update: Fri 12 Sep 2025 21:10:06 +0000 Manifest next update: Fri 19 Sep 2025 21:10:06 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: wcQljXjo4rRjiG4RsBHPOzeNwib/POeFvW+h/EmfjaU=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: nebZkphHnCGcHsK4OPuyoN2DWSVg+M+V/082vsrCEns=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: tXMl2RtLfZvDGfhyJ5diezkCwv50p552Np4xQThv520=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 22:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2023 (0x7e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Sep 12 21:10:06 2025 GMT Not After : Sep 19 21:10:06 2025 GMT Subject: CN=68c48c2e-3aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8e:bd:83:fb:96:4c:8d:6c:27:7d:c5:9b:cf: bb:bb:8d:3b:a9:47:ec:ae:d7:7e:83:c9:29:77:bb: d3:d8:2a:b3:37:fb:f3:47:84:c3:21:8e:f1:12:50: d1:6d:60:e9:89:8d:a9:42:60:37:c7:b2:dc:9a:1b: 66:dd:5d:43:b6:92:b0:10:e2:bd:94:64:10:1a:37: d3:24:f4:85:f8:b4:fd:fd:bb:6a:8f:01:30:81:8f: 24:ca:bb:16:02:9e:05:d7:a0:e5:76:74:a1:64:75: 3d:3c:4a:89:f5:bd:a7:c1:7f:46:d1:a1:2c:e7:63: 39:40:00:9b:9c:9b:fd:e0:0c:f3:f4:38:f7:15:7c: be:83:64:cf:17:b5:bb:aa:14:db:b3:da:ac:3e:4e: c6:80:58:cf:37:56:da:52:3c:67:32:f8:f0:05:1d: 56:de:c5:fe:01:6a:aa:c4:3d:f3:e3:1e:58:3b:52: db:bc:2f:7b:ca:67:cf:a9:14:7c:59:92:09:9b:6a: 95:32:8a:32:79:26:a5:13:76:51:ee:56:7d:71:ac: 36:8e:60:06:c5:49:aa:be:cb:db:af:c4:98:08:9a: 4b:d9:1f:7c:24:19:97:29:fe:e3:62:96:74:a2:24: 44:ab:eb:28:4a:3f:4c:52:c1:54:e8:13:3e:ac:8a: c2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B3:57:31:CE:EB:48:FC:96:6C:D0:CE:67:E8:E0:FB:63:A2:1E:63 X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:5f:e8:f3:68:68:6b:ad:c9:a3:6b:15:12:68:cb:be:9f:a5: d5:ca:d6:5d:7c:dd:ad:32:5d:fb:65:32:37:d5:86:6a:13:14: f4:6a:2e:ce:fb:f6:a1:f2:38:40:1b:8a:48:f5:a4:8b:cf:4e: c3:25:37:e5:2d:6b:6d:52:db:b9:5a:04:15:a7:d2:e5:23:16: 5c:25:ed:aa:b1:79:28:f0:dd:b9:ee:39:85:3a:ae:d9:35:d3: e1:78:38:d5:2f:5f:1f:f8:68:a3:7a:5a:0c:95:87:a0:68:28: 61:5f:72:bb:4b:f3:79:3d:4d:a0:76:87:28:b7:5f:ae:65:cf: e7:f1:b8:1c:41:83:10:c4:eb:f7:14:10:6b:2e:51:50:a4:13: 67:03:90:82:3b:cc:a6:9c:1c:28:ec:b7:d9:b4:0f:c7:cd:fd: 1a:3a:94:eb:c5:a7:ba:fd:89:6f:46:fa:a6:63:78:03:bf:86: 78:90:13:30:e7:26:8b:e2:e8:82:75:26:d0:d5:50:8c:26:e3: dd:01:ed:88:7c:31:84:05:4a:4e:c2:74:81:75:b7:86:48:a3: a7:f1:63:66:98:68:fd:b3:96:25:f9:97:47:d9:61:e9:cc:34: 30:20:b5:3f:8a:78:cf:d6:64:8f:55:92:94:f4:56:a3:d9:7a: c4:ed:d6:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjUwOTEyMjExMDA2WhcNMjUwOTE5MjExMDA2WjAYMRYwFAYD VQQDEw02OGM0OGMyZS0zYWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5o69g/uWTI1sJ33Fm8+7u407qUfsrtd+g8kpd7vT2CqzN/vzR4TDIY7xElDR bWDpiY2pQmA3x7Lcmhtm3V1DtpKwEOK9lGQQGjfTJPSF+LT9/btqjwEwgY8kyrsW Ap4F16DldnShZHU9PEqJ9b2nwX9G0aEs52M5QACbnJv94Azz9Dj3FXy+g2TPF7W7 qhTbs9qsPk7GgFjPN1baUjxnMvjwBR1W3sX+AWqqxD3z4x5YO1LbvC97ymfPqRR8 WZIJm2qVMooyeSalE3ZR7lZ9caw2jmAGxUmqvsvbr8SYCJpL2R98JBmXKf7jYpZ0 oiREq+soSj9MUsFU6BM+rIrCBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSzVzHO 60j8lmzQzmfo4Ptjoh5jMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACX+jzaGhrrcmjaxUSaMu+n6XVytZdfN2tMl37ZTI31YZqExT0ai7O +/ah8jhAG4pI9aSLz07DJTflLWttUtu5WgQVp9LlIxZcJe2qsXko8N257jmFOq7Z NdPheDjVL18f+GijeloMlYegaChhX3K7S/N5PU2gdocot1+uZc/n8bgcQYMQxOv3 FBBrLlFQpBNnA5CCO8ymnBwo7LfZtA/Hzf0aOpTrxae6/YlvRvqmY3gDv4Z4kBMw 5yaL4uiCdSbQ1VCMJuPdAe2IfDGEBUpOwnSBdbeGSKOn8WNmmGj9s5Yl+ZdH2WHp zDQwILU/injP1mSPVZKU9Faj2XrE7dan -----END CERTIFICATE-----Generated at Sun Sep 14 11:59:55 2025 by rpki-client