$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json) Hash identifier: YORHvR83keItttQ73Spj1kE7/CVI+9UtBrrg9yGvWEU= Subject key identifier: 75:32:C4:FC:50:1B:52:58:C7:CD:AD:DD:25:8D:7C:9F:64:39:49:D6 Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Certificate serial: 0475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft Manifest number: 046E Signing time: Sat 23 Aug 2025 00:22:51 +0000 Manifest this update: Sat 23 Aug 2025 00:22:50 +0000 Manifest next update: Sat 30 Aug 2025 00:22:50 +0000 Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: jeiSIMX/jGXCctHPoKPEV6ai5FxvlZpwA60d7gh/qFs=) 2: 9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (hash: 6uFvpip5xKUGRghNdeTpeBy3R93KivQ5uvgIzsfjzEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1141 (0x475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Validity Not Before: Aug 23 00:22:50 2025 GMT Not After : Aug 30 00:22:50 2025 GMT Subject: CN=68a909da-7689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a4:4f:44:8d:4b:3d:a8:34:cf:f7:2b:81:22: 1f:23:59:9b:c7:2c:cc:35:d7:e9:2c:6c:38:09:47: e1:9b:de:29:04:ad:04:54:f3:44:65:d3:c3:f7:ee: d5:76:1d:62:af:e4:07:7c:0b:a0:69:65:7d:0c:4c: 6e:e9:4d:17:59:e2:69:5c:55:53:d0:8f:4b:be:b5: 39:52:1b:ae:f2:8e:5c:7c:c3:fa:0f:53:17:f1:6e: 45:62:42:c0:ae:fd:c7:41:2d:86:e4:a7:60:b5:79: de:80:37:b6:1f:ad:c0:1e:09:0b:66:d2:66:a2:62: 7b:7a:4f:04:f0:9d:fd:87:8f:d0:56:f4:49:04:4b: 22:14:45:b1:81:49:01:14:7c:5d:de:44:01:db:ba: 34:4d:f3:ad:69:77:6f:57:23:53:fc:1c:ec:e4:78: 05:a3:59:70:4f:d8:a7:d3:2a:c8:07:b1:3f:69:db: 04:9f:86:08:8c:a3:86:a8:26:7a:79:52:57:13:d9: bf:f6:08:25:66:26:e2:15:ba:bd:e8:66:71:b7:4e: f2:dc:c3:4e:3e:3e:d0:9d:0d:0f:e6:a5:41:77:96: 4f:ce:b3:ec:82:3f:c7:5c:e4:30:26:26:b0:5d:5e: 58:0b:03:61:a7:a8:69:23:3b:8b:89:17:79:cb:1b: 9f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:32:C4:FC:50:1B:52:58:C7:CD:AD:DD:25:8D:7C:9F:64:39:49:D6 X509v3 Authority Key Identifier: keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:4b:f3:38:4a:ac:a3:5f:2d:fa:25:2b:da:fa:d0:8d:31:a2: 3b:de:5e:1b:9f:ed:c2:17:92:0f:87:0d:c2:38:7d:71:d7:1e: 76:ad:49:11:51:1f:15:46:1d:8f:2d:a8:1a:46:a6:35:bb:16: 6a:0c:d3:ad:20:a2:e3:fa:a9:df:8d:3d:9b:b9:04:42:82:7b: 2c:c6:d2:5d:ae:e2:5b:3a:ed:d2:0b:d4:63:3e:15:3f:b5:c0: 05:5f:27:a6:02:66:42:0b:1a:2f:2d:1a:46:70:4f:88:6d:aa: 50:0c:91:ce:28:7f:13:5c:82:8c:1a:7b:f0:ef:64:64:3b:0d: 73:99:8e:51:7f:6d:f3:88:9b:46:9d:a9:8b:65:9d:39:f5:c7: f0:9e:c4:d6:c7:29:61:2b:67:1f:18:99:37:2d:88:2f:2c:fc: 31:2d:27:92:61:b8:4c:d7:0e:02:c2:ce:1a:27:3c:06:74:04: 75:99:cd:c1:05:a5:ea:66:eb:76:fa:37:de:d2:e7:57:af:27: 43:16:71:34:4c:8a:31:3b:65:43:e7:0d:5a:b9:f6:ce:47:cd: bd:4c:28:31:d4:9f:08:ea:7b:1d:63:2d:64:05:f3:b4:db:73: 28:02:fd:dc:0e:96:0a:3b:4d:d8:6e:40:5f:09:53:2d:37:00: ba:07:1d:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0 OEUxQUZCNDkwHhcNMjUwODIzMDAyMjUwWhcNMjUwODMwMDAyMjUwWjAYMRYwFAYD VQQDEw02OGE5MDlkYS03Njg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3aRPRI1LPag0z/crgSIfI1mbxyzMNdfpLGw4CUfhm94pBK0EVPNEZdPD9+7V dh1ir+QHfAugaWV9DExu6U0XWeJpXFVT0I9LvrU5Uhuu8o5cfMP6D1MX8W5FYkLA rv3HQS2G5KdgtXnegDe2H63AHgkLZtJmomJ7ek8E8J39h4/QVvRJBEsiFEWxgUkB FHxd3kQB27o0TfOtaXdvVyNT/Bzs5HgFo1lwT9in0yrIB7E/adsEn4YIjKOGqCZ6 eVJXE9m/9gglZibiFbq96GZxt07y3MNOPj7QnQ0P5qVBd5ZPzrPsgj/HXOQwJiaw XV5YCwNhp6hpIzuLiRd5yxuf2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUyxPxQ G1JYx82t3SWNfJ9kOUnWMB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243 ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjS/M4SqyjXy36JSva+tCNMaI73l4bn+3CF5IPhw3COH1x1x52rUkR UR8VRh2PLagaRqY1uxZqDNOtIKLj+qnfjT2buQRCgnssxtJdruJbOu3SC9RjPhU/ tcAFXyemAmZCCxovLRpGcE+IbapQDJHOKH8TXIKMGnvw72RkOw1zmY5Rf23ziJtG namLZZ059cfwnsTWxylhK2cfGJk3LYgvLPwxLSeSYbhM1w4Cws4aJzwGdAR1mc3B BaXqZut2+jfe0udXrydDFnE0TIoxO2VD5w1aufbOR829TCgx1J8I6nsdYy1kBfO0 23MoAv3cDpYKO03YbkBfCVMtNwC6Bx0r -----END CERTIFICATE-----Generated at Sun Aug 24 21:52:06 2025 by rpki-client