$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft File: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft (raw, json) Hash identifier: 90kcYSTAsN3PhB2WZGmwQx63fY6L4qRhZxeDFLErS9g= Subject key identifier: 2D:43:25:F8:B8:4C:B6:38:2B:94:20:B8:59:48:6A:99:56:30:57:1B Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Certificate serial: 0C69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft Manifest number: 0C46 Signing time: Sat 06 Sep 2025 18:47:55 +0000 Manifest this update: Sat 06 Sep 2025 18:47:54 +0000 Manifest next update: Sat 13 Sep 2025 18:47:54 +0000 Files and hashes: 1: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl (hash: ALSkYHANRO7qEqfrmByjE7f3ya8G8yGOZVoq/j/DAEA=) 2: 183DE570057A11EC822F230EC4F9AE02.roa (hash: bEfFzY9ERkUCouk5XoaucvDsVkrzcwabTIVAnbK3Eko=) 3: B32668C4D98C11EB905D7281C4F9AE02.roa (hash: +CpW1CaKQXu6MhTzl4JHCslaYOAYJXQr9xAkDiD0lq0=) 4: B688C61E2A7411F09C50DF45C4F9AE02.roa (hash: PvI9nhg15RMbIrPmzo33E5WP1sio6iu2Cas5ym98pTY=) 5: 89EA369C2A7411F09A757F45C4F9AE02.roa (hash: F9UOwIl8TIxEFQqKFxE/ZQxprBW29nR8LDsUajtcNxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 18:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3177 (0xc69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CBF3, serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Validity Not Before: Sep 6 18:47:54 2025 GMT Not After : Sep 13 18:47:54 2025 GMT Subject: CN=68bc81da-19b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:37:67:57:a7:e5:46:72:34:f7:78:7a:49: c0:9e:c0:43:c9:d2:b9:5c:72:5a:48:ca:d7:79:81: 85:23:46:99:ef:ab:5d:91:78:f7:33:f1:46:09:2e: 9f:93:a1:a0:3e:0b:f9:01:48:8c:8a:7c:78:6a:65: c7:9c:1d:c6:cc:9e:c8:b4:bb:59:71:82:a5:33:6f: 97:5c:86:6b:4e:09:97:0c:eb:db:7d:66:5d:7a:79: df:bc:c5:76:cd:6d:16:85:08:14:c1:66:a7:e0:8f: cd:ce:64:f8:16:b7:24:bd:62:12:5e:42:1f:cf:d3: e4:45:98:ff:bd:f8:4b:5a:5a:62:5f:3b:ac:a3:b3: be:0b:7b:8d:d3:cc:d1:e5:95:e4:5e:01:da:d6:57: 7f:90:37:2f:50:d7:46:26:fd:99:9f:b9:fd:5f:9e: 68:10:7d:e8:10:99:45:a5:1f:58:a1:0b:a8:a2:a6: f0:b5:c0:67:ab:ad:3f:ac:ad:2f:76:5d:fe:f9:0f: 6b:ee:b6:3e:e1:01:95:00:30:bc:10:26:41:4d:8d: c4:28:d6:bf:40:86:e4:20:8e:b0:85:ea:f5:46:a3: 75:62:27:14:79:88:01:0b:ed:1e:39:f0:1e:23:07: 2f:0e:9b:3d:bb:4d:4a:ad:74:f9:2e:3e:6d:02:02: 4f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:43:25:F8:B8:4C:B6:38:2B:94:20:B8:59:48:6A:99:56:30:57:1B X509v3 Authority Key Identifier: keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:58:c5:61:0d:8a:71:7d:58:93:a0:3e:67:87:c8:5c:e0:4e: 89:56:95:c7:b5:fd:18:34:ff:87:39:25:3c:ce:1d:71:18:53: 50:da:8a:9a:2d:39:00:b8:9a:db:a8:77:f0:20:81:be:0d:b4: 58:64:9f:18:51:83:28:c5:6e:39:2b:51:23:5d:f3:73:1f:c3: 30:b3:21:0a:0e:e9:e6:12:c7:b0:f6:6f:c6:c2:7d:ca:09:81: 7e:2e:6a:72:c6:03:26:c2:4f:2a:96:77:fb:1c:a1:2b:9b:4e: c0:b5:19:04:d9:42:0c:20:2b:44:c2:f5:02:61:0a:25:ba:1f: bd:ba:71:eb:28:3c:9f:4c:60:c9:ea:64:8d:28:a5:8d:1c:83: f2:2f:76:bb:33:2f:c6:11:ad:6e:8a:46:e5:88:8c:b8:3f:fc: db:91:8e:b8:0d:78:12:92:40:05:60:a5:66:d5:f2:ab:c0:e1: d8:7e:03:ff:02:62:f3:3c:6c:2c:9e:4e:0c:54:69:fb:da:e5: 49:0f:b0:05:f8:2b:88:ac:01:07:23:56:b9:1a:85:00:e8:4f: d0:4a:5a:55:85:4f:25:5b:31:5c:11:8b:c2:66:a0:8f:df:d6: 7c:d3:f7:e2:5b:4a:a1:5f:00:2d:9e:b3:10:f4:a2:f9:89:cc: 21:bc:22:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQyQzdDQ0M2REQx OTM1MTA3MDcwHhcNMjUwOTA2MTg0NzU0WhcNMjUwOTEzMTg0NzU0WjAYMRYwFAYD VQQDEw02OGJjODFkYS0xOWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbE3Z1en5UZyNPd4eknAnsBDydK5XHJaSMrXeYGFI0aZ76tdkXj3M/FGCS6f k6GgPgv5AUiMinx4amXHnB3GzJ7ItLtZcYKlM2+XXIZrTgmXDOvbfWZdennfvMV2 zW0WhQgUwWan4I/NzmT4FrckvWISXkIfz9PkRZj/vfhLWlpiXzuso7O+C3uN08zR 5ZXkXgHa1ld/kDcvUNdGJv2Zn7n9X55oEH3oEJlFpR9YoQuooqbwtcBnq60/rK0v dl3++Q9r7rY+4QGVADC8ECZBTY3EKNa/QIbkII6wher1RqN1YicUeYgBC+0eOfAe IwcvDps9u01KrXT5Lj5tAgJPNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1DJfi4 TLY4K5QguFlIaplWMFcbMB8GA1UdIwQYMBaAFOJEnjEiIBMeLnbELHzMbdGTUQcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0JGMy8xQkM2RUIyMDEx RTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4NHVkc1FzZk14dDBaTlJC d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrU2VNU0lnRXg0dWRzUXNmTXh0MFpOUkJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0JGMy8xQkM2RUIyMDExRTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4 NHVkc1FzZk14dDBaTlJCd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsWMVhDYpxfViToD5nh8hc4E6JVpXHtf0YNP+HOSU8zh1xGFNQ2oqa LTkAuJrbqHfwIIG+DbRYZJ8YUYMoxW45K1EjXfNzH8MwsyEKDunmEsew9m/Gwn3K CYF+LmpyxgMmwk8qlnf7HKErm07AtRkE2UIMICtEwvUCYQoluh+9unHrKDyfTGDJ 6mSNKKWNHIPyL3a7My/GEa1uikbliIy4P/zbkY64DXgSkkAFYKVm1fKrwOHYfgP/ AmLzPGwsnk4MVGn72uVJD7AF+CuIrAEHI1a5GoUA6E/QSlpVhU8lWzFcEYvCZqCP 39Z80/fiW0qhXwAtnrMQ9KL5icwhvCJa -----END CERTIFICATE-----Generated at Mon Sep 8 10:16:20 2025 by rpki-client