$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft File: R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json) Hash identifier: ySPJ6rgbc3K/JWLVFkbwspZcVPIuPkQEzqu4PB+OBIM= Subject key identifier: 47:4B:63:63:45:B1:01:0B:64:F9:75:E2:81:C8:54:E9:02:16:D9:EE Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft Manifest number: 02A5 Signing time: Fri 05 Sep 2025 01:54:52 +0000 Manifest this update: Fri 05 Sep 2025 01:54:51 +0000 Manifest next update: Fri 12 Sep 2025 01:54:51 +0000 Files and hashes: 1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: LwA+8Uo0Hf1z+lMtiwGuRo6kob9+uyg9qYyJ8RauX24=) 2: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: GG/AMsbpEzm/NFjGRgk+JWg1MGNbtO4+De0JwZLDbdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Validity Not Before: Sep 5 01:54:51 2025 GMT Not After : Sep 12 01:54:51 2025 GMT Subject: CN=68ba42eb-4730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5f:8d:57:1e:c7:f8:72:b8:54:78:29:04:8d: d3:d5:e3:cf:9d:da:30:41:66:2e:3c:97:16:f3:41: fe:67:a0:51:d6:1c:f6:f1:9e:a9:9d:1e:22:0f:2a: fc:0b:33:c1:5a:11:3c:de:09:0b:13:83:4e:b4:33: c5:41:6a:41:d5:1b:21:80:f1:e7:84:f4:45:a8:90: ae:8e:0f:86:53:69:a2:50:b7:72:c4:21:a9:68:bf: a9:d5:38:d6:9a:75:6d:17:d2:93:aa:87:f3:6b:17: d9:b5:4d:1b:03:84:a5:ef:43:b0:0f:46:16:b0:97: 56:15:18:88:31:b9:52:54:08:f8:f8:69:65:d9:a4: 1c:6b:43:ca:6f:ba:cf:01:2a:34:53:61:61:34:6a: 53:e2:e8:b0:8d:b2:3b:cc:a9:ce:2e:5f:d5:59:da: 42:f1:03:38:31:82:0a:79:64:88:d3:81:57:36:81: e5:7b:26:83:d2:82:d7:10:f7:9f:23:5f:76:37:54: 2b:2a:78:48:13:60:fb:07:0b:6f:2c:1a:99:a5:02: af:fe:10:42:ab:02:85:fe:76:0d:1a:75:e1:d0:5b: c6:0f:06:e7:f1:a9:a7:09:5f:69:ef:48:bc:08:c7: 10:8d:95:b1:fc:3d:72:ac:d5:9a:44:7d:f5:a1:20: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4B:63:63:45:B1:01:0B:64:F9:75:E2:81:C8:54:E9:02:16:D9:EE X509v3 Authority Key Identifier: keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:16:2f:66:5d:46:fa:db:af:22:3d:91:8b:1c:b2:6d:0f:ba: 14:84:4e:fe:9f:f8:fd:af:69:f4:23:23:50:de:17:29:05:5b: 93:84:54:3b:e1:d5:74:10:a5:47:cc:a6:45:d8:ff:be:b9:b1: 36:5f:d4:69:e9:be:92:95:8b:01:50:0a:26:7a:dd:a2:a3:01: 0a:8f:e7:a7:64:ff:58:86:07:ad:2f:02:a8:5b:a1:44:e9:36: 5c:d9:9a:8e:84:63:3a:6d:68:e1:fc:79:93:a1:01:83:5a:c0: 9e:5d:e8:1a:d3:55:48:36:4b:23:e8:04:da:a9:2a:f5:fe:59: 11:64:2d:9a:ed:50:cf:eb:22:b9:5d:8f:f9:93:1c:f8:c9:70: 17:c9:a3:83:74:b6:48:6a:d7:87:12:06:9f:3a:fd:84:af:7b: d5:ab:74:c2:e9:f9:cf:a7:45:20:14:dc:d6:09:10:e5:26:12: 5b:93:1a:86:5b:04:59:2c:1c:a9:ed:e5:56:87:40:d4:b3:f4: 38:44:96:5a:82:67:08:a2:fb:9b:86:97:17:93:48:70:f3:dd: 4b:9d:0d:be:db:44:c2:ac:a7:19:81:65:73:4b:2c:6a:1f:8a: 50:39:13:ec:9c:73:c5:80:d0:da:d4:e0:ba:2d:67:14:19:4e: eb:91:6e:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThEQzYxMTAvBgNVBAUTKDQ3ODZEQkNDQjVDQzI5NkIxREFCMTc1RTgzQ0M0ODEx QTYzNjE3QzcwHhcNMjUwOTA1MDE1NDUxWhcNMjUwOTEyMDE1NDUxWjAYMRYwFAYD VQQDEw02OGJhNDJlYi00NzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF+NVx7H+HK4VHgpBI3T1ePPndowQWYuPJcW80H+Z6BR1hz28Z6pnR4iDyr8 CzPBWhE83gkLE4NOtDPFQWpB1RshgPHnhPRFqJCujg+GU2miULdyxCGpaL+p1TjW mnVtF9KTqofzaxfZtU0bA4Sl70OwD0YWsJdWFRiIMblSVAj4+Gll2aQca0PKb7rP ASo0U2FhNGpT4uiwjbI7zKnOLl/VWdpC8QM4MYIKeWSI04FXNoHleyaD0oLXEPef I192N1QrKnhIE2D7BwtvLBqZpQKv/hBCqwKF/nYNGnXh0FvGDwbn8amnCV9p70i8 CMcQjZWx/D1yrNWaRH31oSCJ9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdLY2NF sQELZPl14oHIVOkCFtnuMB8GA1UdIwQYMBaAFEeG28y1zClrHasXXoPMSBGmNhfH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OERDNi80QTAxMjI3QzBG RjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtXc2RxeGRlZzh4SUVhWTJG OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0YmJ6TFhNS1dzZHF4ZGVnOHhJRWFZMkY4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OERDNi80QTAxMjI3QzBGRjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtX c2RxeGRlZzh4SUVhWTJGOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3Fi9mXUb6268iPZGLHLJtD7oUhE7+n/j9r2n0IyNQ3hcpBVuThFQ7 4dV0EKVHzKZF2P++ubE2X9Rp6b6SlYsBUAomet2iowEKj+enZP9YhgetLwKoW6FE 6TZc2ZqOhGM6bWjh/HmToQGDWsCeXega01VINksj6ATaqSr1/lkRZC2a7VDP6yK5 XY/5kxz4yXAXyaODdLZIateHEgafOv2Er3vVq3TC6fnPp0UgFNzWCRDlJhJbkxqG WwRZLByp7eVWh0DUs/Q4RJZagmcIovubhpcXk0hw891LnQ2+20TCrKcZgWVzSyxq H4pQORPsnHPFgNDa1OC6LWcUGU7rkW5v -----END CERTIFICATE-----Generated at Sat Sep 6 11:59:11 2025 by rpki-client