$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft File: 4_FvnXPM7iaTkVokT0S1U6TbPcw.mft (raw, json) Hash identifier: cEwcg2EQqHggkpkRAur+7g20PqocEmEiSjpITUHjdZM= Subject key identifier: C2:71:86:A4:CA:45:6C:FA:3F:0A:E4:B0:64:9F:6B:E9:B3:06:5B:83 Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC Certificate issuer: /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft Manifest number: 85 Signing time: Tue 19 Aug 2025 07:06:25 +0000 Manifest this update: Tue 19 Aug 2025 07:06:25 +0000 Manifest next update: Tue 26 Aug 2025 07:06:25 +0000 Files and hashes: 1: 4_FvnXPM7iaTkVokT0S1U6TbPcw.crl (hash: Z4mwKa9RtHDSsKu/mqgizKw+40/a7xmT+0bQBLQL5Bk=) 2: 05E4CBECB12911EF993BC12DC4F9AE02.roa (hash: 6bS2IOUFxNL/dxgXXkv7hlgTjA3VB1/wSeyQ+zl4/9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Validity Not Before: Aug 19 07:06:25 2025 GMT Not After : Aug 26 07:06:25 2025 GMT Subject: CN=68a42271-6519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:4b:c1:ef:f8:18:51:8c:b1:f0:d1:5f:9d: 0d:2f:a9:e4:b3:59:67:60:40:e2:95:65:7c:70:c7: da:e5:ae:d1:5d:36:bd:6e:14:b9:6a:b6:cb:1b:51: a8:19:22:51:ed:a6:5a:74:6e:a6:13:fc:9b:ec:5b: 92:0c:a8:e1:b7:dc:cd:c6:b0:11:b0:1b:39:04:48: f4:c1:98:6e:94:08:0c:a8:8f:a2:29:1d:7f:e9:6f: 93:15:13:a6:7d:4d:14:e5:51:22:f5:b9:2b:ec:fd: 6b:fb:ad:d3:f8:5a:ef:63:45:4a:b0:82:0c:e9:44: 8e:3f:b2:0e:26:ea:51:d3:d0:50:f4:57:9a:e0:d0: 60:71:96:96:64:ed:43:12:b7:5f:e5:d4:29:fe:df: ff:db:81:0d:89:33:d8:76:b8:93:26:5c:41:1f:ec: 94:ac:63:c0:9b:f2:5f:bb:c8:da:97:e4:81:2e:60: c8:67:a0:65:c0:d7:02:6f:3d:58:58:21:4a:6a:d3: 00:95:fa:d1:e3:82:9d:e4:fc:a6:f7:9b:80:84:43: 07:02:b7:c7:03:d4:31:6d:94:12:3f:e2:2d:96:ae: fe:bc:77:71:8b:dd:34:25:b2:31:d3:dc:23:c4:d0: 2a:0e:1a:8d:d6:00:22:ca:c6:66:0e:cc:c4:8f:f3: 76:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:71:86:A4:CA:45:6C:FA:3F:0A:E4:B0:64:9F:6B:E9:B3:06:5B:83 X509v3 Authority Key Identifier: keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:77:1d:d8:ec:a5:5f:2e:d1:24:56:8b:1d:4b:3b:46:6d:93: e9:a0:e6:52:8b:63:36:9b:02:a9:62:a8:83:e9:63:11:d6:1d: 41:cf:a2:56:64:3b:b9:a2:0a:76:c3:a8:a8:c9:c6:48:0c:fd: e5:a0:15:df:01:57:ff:42:a2:46:28:f8:c3:c0:22:2d:c7:b4: fc:13:f2:a2:e5:0b:cf:84:13:23:09:08:9a:57:12:8f:e9:ad: 10:a7:ab:c6:22:95:f8:e1:5c:08:d0:91:ec:76:dd:8f:26:17: a3:42:5d:73:18:df:04:a9:c5:2a:36:af:53:b7:d0:37:94:fd: 6e:a6:b6:41:f6:15:9e:28:d3:e9:8d:27:29:75:05:05:b5:c6: 3f:15:9d:8b:b9:4d:25:fa:d6:c3:4f:0f:04:e3:5f:8a:86:ac: 27:fb:a5:66:f3:fd:1d:47:74:b1:f8:a1:5c:2b:3b:bf:a9:37: db:c1:9b:ce:ea:3c:a1:77:2f:ea:b8:f8:c3:34:9d:94:a4:f0: 66:22:5f:67:43:0e:07:22:13:a9:99:25:c6:80:50:45:47:8d: 7c:73:cc:53:81:6d:76:d6:bb:a6:e5:5c:be:84:f3:58:9b:b1: 0d:ec:7a:1c:33:7d:b9:82:65:28:71:ca:12:8a:54:4a:01:4e: fb:10:15:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCMTMxMTAvBgNVBAUTKEUzRjE2RjlENzNDQ0VFMjY5MzkxNUEyNDRGNDRCNTUz QTREQjNEQ0MwHhcNMjUwODE5MDcwNjI1WhcNMjUwODI2MDcwNjI1WjAYMRYwFAYD VQQDEw02OGE0MjI3MS02NTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt21Lwe/4GFGMsfDRX50NL6nks1lnYEDilWV8cMfa5a7RXTa9bhS5arbLG1Go GSJR7aZadG6mE/yb7FuSDKjht9zNxrARsBs5BEj0wZhulAgMqI+iKR1/6W+TFROm fU0U5VEi9bkr7P1r+63T+FrvY0VKsIIM6USOP7IOJupR09BQ9Fea4NBgcZaWZO1D Erdf5dQp/t//24ENiTPYdriTJlxBH+yUrGPAm/Jfu8jal+SBLmDIZ6BlwNcCbz1Y WCFKatMAlfrR44Kd5Pym95uAhEMHArfHA9QxbZQSP+Itlq7+vHdxi900JbIx09wj xNAqDhqN1gAiysZmDszEj/N2OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJxhqTK RWz6PwrksGSfa+mzBluDMB8GA1UdIwQYMBaAFOPxb51zzO4mk5FaJE9EtVOk2z3M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUIxMy80NjM3RkJGMkIx MjgxMUVGQjc1MEE1MkJDNEY5QUUwMi80X0Z2blhQTTdpYVRrVm9rVDBTMVU2VGJQ Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRfRnZuWFBNN2lhVGtWb2tUMFMxVTZUYlBjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUIxMy80NjM3RkJGMkIxMjgxMUVGQjc1MEE1MkJDNEY5QUUwMi80X0Z2blhQTTdp YVRrVm9rVDBTMVU2VGJQY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRdx3Y7KVfLtEkVosdSztGbZPpoOZSi2M2mwKpYqiD6WMR1h1Bz6JW ZDu5ogp2w6ioycZIDP3loBXfAVf/QqJGKPjDwCItx7T8E/Ki5QvPhBMjCQiaVxKP 6a0Qp6vGIpX44VwI0JHsdt2PJhejQl1zGN8EqcUqNq9Tt9A3lP1uprZB9hWeKNPp jScpdQUFtcY/FZ2LuU0l+tbDTw8E41+Khqwn+6Vm8/0dR3Sx+KFcKzu/qTfbwZvO 6jyhdy/quPjDNJ2UpPBmIl9nQw4HIhOpmSXGgFBFR418c8xTgW121rum5Vy+hPNY m7EN7HocM325gmUoccoSilRKAU77EBXV -----END CERTIFICATE-----Generated at Thu Aug 21 07:27:09 2025 by rpki-client