$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft File: 4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json) Hash identifier: e7ulzAe8667hXRbAZ+E7NF3Sd4kwnsXlOYTZSCVPadE= Subject key identifier: 82:99:75:EB:F5:79:4B:74:5A:C5:39:16:D8:F6:82:65:9C:F8:50:21 Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft Manifest number: 0294 Signing time: Fri 05 Sep 2025 01:59:09 +0000 Manifest this update: Fri 05 Sep 2025 01:59:08 +0000 Manifest next update: Fri 12 Sep 2025 01:59:08 +0000 Files and hashes: 1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: Loy2l72xAscnHH/OmzQ/Qve6t6I4gWsYQaDXWAsdzBQ=) 2: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: axhlzcql8Um5s2iVqGj/BuPhDZVy8siOPCHeHdpqbOU=) 3: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: ldX/DKDOg9xZhESj3T5OZ1Y87w44jU1f3a2RytTmEgo=) 4: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: RgIHOi6o2CyuImHKbYCkxFcAJ9v5chcNqvLkjQHCgqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Validity Not Before: Sep 5 01:59:08 2025 GMT Not After : Sep 12 01:59:08 2025 GMT Subject: CN=68ba43ec-bb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ac:6f:78:9e:62:13:51:ac:39:3b:bf:fb:71: 04:7d:9c:a6:b4:7f:c6:57:01:f1:10:7d:c7:31:f9: a0:d6:53:04:41:e2:be:e4:51:84:08:05:48:87:de: 61:84:ed:d1:c2:e9:0b:e2:62:32:d5:10:66:1d:bb: f0:0c:fc:48:31:c1:bc:25:db:b2:f3:03:b0:5c:d2: c0:f4:91:fa:5f:95:f0:ca:ae:24:8f:c0:80:eb:d3: 59:81:ce:20:30:36:38:75:37:73:3c:47:12:d6:20: a2:9f:8d:8b:81:e1:68:cd:0c:61:a4:0b:e4:b9:cd: a3:31:e3:38:a8:a1:2e:1c:f9:3e:9e:21:cf:6c:11: b0:a7:b9:db:91:40:1b:0c:42:41:d2:c4:6a:05:3d: 64:6b:b3:70:2a:c7:e1:a1:58:6c:5c:5b:5f:98:69: f3:07:9e:e8:8f:c9:82:b3:d3:0a:ce:9f:4c:1e:86: 37:bb:09:17:8e:a2:b9:ad:83:f3:0d:4b:80:5a:32: 67:f6:05:e8:9f:5a:e1:b5:3a:af:10:33:6c:63:14: 8f:ed:14:a2:a3:80:40:f6:a9:4a:33:c4:f3:d0:74: 82:a1:6c:3a:c1:f6:94:6f:c2:19:b8:31:bf:ee:eb: 99:24:fb:4f:35:4e:25:9a:3c:e9:29:5f:54:5e:43: b0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:99:75:EB:F5:79:4B:74:5A:C5:39:16:D8:F6:82:65:9C:F8:50:21 X509v3 Authority Key Identifier: keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:5b:81:4e:3f:3e:b4:c4:ad:64:54:af:5f:0c:fb:64:29:2c: b3:c3:81:a7:e1:7b:1c:7d:35:40:42:1c:25:a4:5d:92:33:57: a1:c2:14:e2:74:43:82:c8:d0:48:60:d0:e2:8a:8a:57:d1:c4: 5a:b4:a2:d6:93:87:2a:67:66:c9:07:1e:8c:b7:1c:38:3c:bc: 58:35:38:df:2d:ee:c7:6e:41:cc:f9:73:93:d7:c2:02:0f:80: 38:52:60:ac:b1:da:bf:37:6c:69:66:70:db:e2:4a:a4:61:bc: 39:72:a6:97:e7:dd:10:84:e9:f6:82:94:c7:98:21:18:25:89: 41:f1:66:1e:c9:c2:0b:9b:61:3c:96:4c:dd:3a:a1:df:6e:33: 06:77:f4:3f:7a:cd:a9:46:01:31:8c:b1:3f:e6:81:f0:7b:51: 7f:2e:c0:ea:86:f2:fc:cd:51:9b:bc:65:73:a8:c4:ff:cb:5c: 5c:e2:14:37:31:87:86:6f:c7:57:ae:42:ce:4d:6e:1d:a1:3e: 1d:e7:81:4f:ae:ae:5c:f2:27:bd:1a:0e:ce:14:f0:73:6f:28: 8a:45:4a:0e:75:7e:81:71:e9:86:38:1e:13:38:32:08:a6:89: 1d:d6:e7:46:ef:e4:a3:dc:fa:14:00:e9:8a:1f:50:7d:df:80: 61:8d:05:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz Rjg2MDI5QTIwHhcNMjUwOTA1MDE1OTA4WhcNMjUwOTEyMDE1OTA4WjAYMRYwFAYD VQQDEw02OGJhNDNlYy1iYjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKxveJ5iE1GsOTu/+3EEfZymtH/GVwHxEH3HMfmg1lMEQeK+5FGECAVIh95h hO3RwukL4mIy1RBmHbvwDPxIMcG8Jduy8wOwXNLA9JH6X5Xwyq4kj8CA69NZgc4g MDY4dTdzPEcS1iCin42LgeFozQxhpAvkuc2jMeM4qKEuHPk+niHPbBGwp7nbkUAb DEJB0sRqBT1ka7NwKsfhoVhsXFtfmGnzB57oj8mCs9MKzp9MHoY3uwkXjqK5rYPz DUuAWjJn9gXon1rhtTqvEDNsYxSP7RSio4BA9qlKM8Tz0HSCoWw6wfaUb8IZuDG/ 7uuZJPtPNU4lmjzpKV9UXkOwzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKZdev1 eUt0WsU5Ftj2gmWc+FAhMB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2 QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc0MC8zNTI4QjBDQzE2QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9H ZE1hVW5zTzRvTGNfaGdLYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjW4FOPz60xK1kVK9fDPtkKSyzw4Gn4XscfTVAQhwlpF2SM1ehwhTi dEOCyNBIYNDiiopX0cRatKLWk4cqZ2bJBx6Mtxw4PLxYNTjfLe7HbkHM+XOT18IC D4A4UmCssdq/N2xpZnDb4kqkYbw5cqaX590QhOn2gpTHmCEYJYlB8WYeycILm2E8 lkzdOqHfbjMGd/Q/es2pRgExjLE/5oHwe1F/LsDqhvL8zVGbvGVzqMT/y1xc4hQ3 MYeGb8dXrkLOTW4doT4d54FPrq5c8ie9Gg7OFPBzbyiKRUoOdX6BcemGOB4TODII pokd1udG7+Sj3PoUAOmKH1B934BhjQVj -----END CERTIFICATE-----Generated at Fri Sep 5 11:33:09 2025 by rpki-client