$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft File: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft (raw, json) Hash identifier: PFOaLuChLmpU6V7c3vX9VjltJn3OXqNKqt+Xk0oussk= Subject key identifier: 03:2D:0E:93:5F:B5:72:97:D2:A0:D1:C7:5A:14:8A:14:F0:71:83:A8 Authority key identifier: 7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53 Certificate issuer: /CN=A914E600/serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft Manifest number: BC Signing time: Fri 05 Sep 2025 06:26:59 +0000 Manifest this update: Fri 05 Sep 2025 06:26:58 +0000 Manifest next update: Fri 12 Sep 2025 06:26:58 +0000 Files and hashes: 1: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl (hash: 52lVINsWaL9PwCGbktutlPOhkzV3HikNZGXhd1nHfvU=) 2: B47102FE77F211EFBA1E9F7EC4F9AE02.roa (hash: AW0AjmB1MBpf81Bbaj4obKJm9vXagVv8vcAISz8uehk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E600, serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953 Validity Not Before: Sep 5 06:26:58 2025 GMT Not After : Sep 12 06:26:58 2025 GMT Subject: CN=68ba82b3-4cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:52:68:df:2f:8c:6e:70:ff:b7:6d:92:ee: 4b:5a:60:7c:73:cc:4f:d6:ec:77:45:36:8b:3c:47: be:0c:c7:f6:6a:dd:67:2b:74:e6:72:8a:95:1a:5f: dc:4a:31:71:4a:e1:96:15:1e:01:48:d6:31:49:b5: 2e:28:1b:27:71:ce:40:75:29:e4:76:59:6e:44:51: 78:75:9d:74:6d:56:4a:c7:0e:6f:45:7a:e6:2c:f6: c2:a9:eb:da:dc:68:35:4e:ca:32:8c:d5:7b:da:df: 30:23:8e:b6:64:7e:df:4c:74:7d:31:0c:f1:19:0f: 6f:1e:0b:70:2b:84:5f:c3:f2:7d:dd:d2:05:05:f9: 38:24:df:c9:dd:a0:3e:bb:e5:88:31:c4:26:6f:92: 40:6b:d8:d1:f5:06:f1:b6:77:d5:81:5c:d2:3c:c6: ad:08:84:74:f8:62:28:5c:0b:85:06:99:05:0c:f9: 23:d7:94:b0:4f:ea:45:e9:7b:54:37:56:a0:c8:d9: d4:96:ac:fb:5f:1a:46:c9:b8:8f:e7:51:7c:de:32: f2:47:25:4f:e9:5a:66:96:99:8d:dd:28:5f:1f:d3: ee:09:86:c2:8a:cc:b0:15:d5:1a:4a:46:4f:a1:d2: ae:ba:c4:ea:77:9d:36:0c:0e:3f:df:b7:02:c8:e8: c6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2D:0E:93:5F:B5:72:97:D2:A0:D1:C7:5A:14:8A:14:F0:71:83:A8 X509v3 Authority Key Identifier: keyid:7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:54:f6:1b:6e:4b:6e:d1:09:f1:a8:18:83:fa:73:3d:72:57: 1c:84:8f:34:38:e5:e7:69:30:cb:6f:ba:df:6d:98:93:69:0a: 49:be:2a:49:5c:4b:e8:13:a1:b7:80:8b:bf:ac:ab:70:bf:75: 99:61:70:96:91:8f:09:a4:9f:b1:4e:b4:d1:c3:5f:2d:ac:17: b6:1e:95:b3:d2:ff:93:05:86:79:f4:32:f9:f3:5d:0a:7d:bd: d0:95:2e:3e:ca:aa:b7:be:17:0c:9d:62:fc:3d:60:8b:63:fd: a5:06:d5:f8:48:0b:b0:a8:db:71:c8:b2:64:9a:b6:a5:b6:6b: 58:1d:0c:63:2a:a0:d1:e7:89:de:6e:ba:34:4f:59:58:67:75: 44:fa:6b:89:bf:8d:ee:77:42:02:4e:eb:04:37:81:03:41:4f: b0:5b:31:7f:d9:e2:cf:76:be:1e:95:f4:69:e0:d5:23:27:79: 92:06:a6:61:a8:c8:f1:7f:d8:bf:4c:1d:cb:99:97:2b:dd:5a: 7b:cc:37:d4:5e:ed:ff:b7:e5:8e:8f:ea:90:a1:fd:9b:e3:a9: 65:65:b1:d6:7f:44:10:89:93:33:ef:49:f2:61:f2:7b:6c:f1: 3a:c1:48:aa:77:d5:82:70:9b:28:72:a1:68:fa:6a:8d:51:76: e4:90:7d:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2MDAxMTAvBgNVBAUTKDdGODI0NUJCRDRENDU5NzIxQjQxRDRGRjJCQkZCNDI1 RkYxMTg5NTMwHhcNMjUwOTA1MDYyNjU4WhcNMjUwOTEyMDYyNjU4WjAYMRYwFAYD VQQDEw02OGJhODJiMy00Y2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfxSaN8vjG5w/7dtku5LWmB8c8xP1ux3RTaLPEe+DMf2at1nK3TmcoqVGl/c SjFxSuGWFR4BSNYxSbUuKBsncc5AdSnkdlluRFF4dZ10bVZKxw5vRXrmLPbCqeva 3Gg1TsoyjNV72t8wI462ZH7fTHR9MQzxGQ9vHgtwK4Rfw/J93dIFBfk4JN/J3aA+ u+WIMcQmb5JAa9jR9QbxtnfVgVzSPMatCIR0+GIoXAuFBpkFDPkj15SwT+pF6XtU N1agyNnUlqz7XxpGybiP51F83jLyRyVP6VpmlpmN3ShfH9PuCYbCisywFdUaSkZP odKuusTqd502DA4/37cCyOjGBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMtDpNf tXKX0qDRx1oUihTwcYOoMB8GA1UdIwQYMBaAFH+CRbvU1FlyG0HU/yu/tCX/EYlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTYwMC8yQUE3RDQ1RTc3 RjExMUVGQUMxMTI5NDJDNEY5QUUwMi9mNEpGdTlUVVdYSWJRZFRfSzctMEpmOFJp Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y0SkZ1OVRVV1hJYlFkVF9LNy0wSmY4UmlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTYwMC8yQUE3RDQ1RTc3RjExMUVGQUMxMTI5NDJDNEY5QUUwMi9mNEpGdTlUVVdY SWJRZFRfSzctMEpmOFJpVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0VPYbbktu0QnxqBiD+nM9clcchI80OOXnaTDLb7rfbZiTaQpJvipJ XEvoE6G3gIu/rKtwv3WZYXCWkY8JpJ+xTrTRw18trBe2HpWz0v+TBYZ59DL5810K fb3QlS4+yqq3vhcMnWL8PWCLY/2lBtX4SAuwqNtxyLJkmraltmtYHQxjKqDR54ne bro0T1lYZ3VE+muJv43ud0ICTusEN4EDQU+wWzF/2eLPdr4elfRp4NUjJ3mSBqZh qMjxf9i/TB3LmZcr3Vp7zDfUXu3/t+WOj+qQof2b46llZbHWf0QQiZMz70nyYfJ7 bPE6wUiqd9WCcJsocqFo+mqNUXbkkH1b -----END CERTIFICATE-----Generated at Sat Sep 6 13:36:47 2025 by rpki-client