$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft File: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json) Hash identifier: eYYbVhaE+b39B1rE0DcdJPCpngnzJg7dzO0SCbSdTHQ= Subject key identifier: 82:74:21:35:28:29:34:4A:91:84:24:03:25:34:01:47:4E:CC:84:8B Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F Certificate issuer: /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Certificate serial: 0DB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft Manifest number: 0DA7 Signing time: Mon 08 Sep 2025 17:57:08 +0000 Manifest this update: Mon 08 Sep 2025 17:57:07 +0000 Manifest next update: Mon 15 Sep 2025 17:57:07 +0000 Files and hashes: 1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: 4emfGVy8r8hxsE0ur3bxBQ05zQwVkxQ2E/wbqNv28BY=) 2: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: XfxZHGEC6L2I7lf4RHsiD8/699vyTVMdYrB6wZFXmUY=) 3: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: r12gsCo6iUFC5f/jSOBGicDzV0QxP8G0HCiUT+DfDFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 17:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3508 (0xdb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Validity Not Before: Sep 8 17:57:07 2025 GMT Not After : Sep 15 17:57:07 2025 GMT Subject: CN=68bf18f4-a878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:76:8b:db:f8:9a:3e:65:89:47:e2:09:2a:06: 6a:f0:f8:35:2d:68:95:22:f8:4d:73:84:8e:c0:b9: c7:b6:6f:0b:6c:2a:a7:92:f4:83:48:92:cf:37:dd: c4:81:cf:53:5b:9c:0c:e2:46:2d:af:44:75:03:9f: 94:63:a8:3a:e8:77:3c:44:40:12:78:48:e0:fc:f7: ae:2f:8d:2a:1d:57:38:10:0c:56:b2:14:fc:c1:69: 53:ab:b8:ab:a6:e6:c0:f2:85:6a:e4:9d:d0:ae:3f: d4:83:ef:ee:04:3a:a1:70:09:69:84:3f:59:c5:44: 98:26:f6:2c:03:c5:24:09:b7:ef:62:3f:f7:ce:60: cd:3a:5b:d3:f3:72:14:c3:b0:df:53:1b:f7:d6:fb: ce:d5:4b:98:3e:34:68:d9:92:0f:3a:35:c3:32:65: 88:45:0e:11:3e:4c:34:50:f9:36:35:4c:dc:b6:b2: f6:cd:ae:1d:9c:f6:ef:90:57:b9:e2:21:e4:d1:55: f3:3b:b5:23:53:f6:ec:15:fb:9d:66:ca:44:e7:5c: 17:0f:87:00:27:cf:f9:f1:b2:96:5f:e6:d0:31:f7: de:31:31:6b:7a:9b:68:06:10:c2:7a:08:8d:dd:4d: 03:57:99:81:a0:ba:a3:d0:21:d4:f3:18:3c:be:f2: e3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:74:21:35:28:29:34:4A:91:84:24:03:25:34:01:47:4E:CC:84:8B X509v3 Authority Key Identifier: keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:29:c6:bf:c3:5d:a3:6a:ed:f0:d9:b9:fe:a7:16:c4:9c:5e: 5a:2c:42:4a:4f:8d:05:75:05:bc:91:a6:10:77:ca:c2:20:99: 1e:a4:0d:8c:57:f0:ac:fb:37:b3:74:56:08:f4:8e:2e:cf:1b: 58:31:ff:66:dd:52:84:5b:83:d1:bd:1b:dd:d9:86:e2:bb:57: 99:d5:51:82:96:b3:01:f2:f6:0e:a9:2f:b0:0f:c4:1f:c5:79: b7:63:0c:8a:ba:7e:33:1a:e3:ba:40:7f:a7:69:bb:38:45:b1: 99:7b:e3:be:79:0a:9f:ab:98:a7:24:fe:4d:2a:5f:40:98:d4: 6a:ff:b4:01:42:40:4b:e7:a9:d4:06:96:ab:70:0c:c3:d5:fb: 2a:60:66:b5:29:ae:42:61:f7:bb:75:4e:83:bf:c4:a7:f9:dd: a0:9a:34:24:5c:3e:12:84:0c:0b:6e:d7:87:82:5a:1d:a5:1b: e5:93:97:ee:28:60:36:6b:d5:ba:5a:bc:a7:89:ab:9f:23:01: e6:4d:a3:d5:77:a5:cf:d9:fd:70:0c:a1:e9:32:ab:b3:e8:15: ce:d3:16:15:7b:68:a4:77:d2:50:d0:c3:1d:9a:4a:b0:ac:4a: d6:3f:da:19:20:c1:c0:d3:f0:fd:b9:32:9c:7c:5a:ac:95:30: 21:31:33:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIzNjExMTAvBgNVBAUTKEUwQjlBMkU5OTM5RDU1OEYxOEJFNjIxNzVDOTVENzY4 RDI0NUQzMUYwHhcNMjUwOTA4MTc1NzA3WhcNMjUwOTE1MTc1NzA3WjAYMRYwFAYD VQQDEw02OGJmMThmNC1hODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6naL2/iaPmWJR+IJKgZq8Pg1LWiVIvhNc4SOwLnHtm8LbCqnkvSDSJLPN93E gc9TW5wM4kYtr0R1A5+UY6g66Hc8REASeEjg/PeuL40qHVc4EAxWshT8wWlTq7ir pubA8oVq5J3Qrj/Ug+/uBDqhcAlphD9ZxUSYJvYsA8UkCbfvYj/3zmDNOlvT83IU w7DfUxv31vvO1UuYPjRo2ZIPOjXDMmWIRQ4RPkw0UPk2NUzctrL2za4dnPbvkFe5 4iHk0VXzO7UjU/bsFfudZspE51wXD4cAJ8/58bKWX+bQMffeMTFreptoBhDCegiN 3U0DV5mBoLqj0CHU8xg8vvLjEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJ0ITUo KTRKkYQkAyU0AUdOzISLMB8GA1UdIwQYMBaAFOC5oumTnVWPGL5iF1yV12jSRdMf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjM2MS83QzhEODAwQUNB MzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZOFl2bUlYWEpYWGFOSkYw eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMbWk2Wk9kVlk4WXZtSVhYSlhYYU5KRjB4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjM2MS83QzhEODAwQUNBMzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZ OFl2bUlYWEpYWGFOSkYweDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcKca/w12jau3w2bn+pxbEnF5aLEJKT40FdQW8kaYQd8rCIJkepA2M V/Cs+zezdFYI9I4uzxtYMf9m3VKEW4PRvRvd2Ybiu1eZ1VGClrMB8vYOqS+wD8Qf xXm3YwyKun4zGuO6QH+nabs4RbGZe+O+eQqfq5inJP5NKl9AmNRq/7QBQkBL56nU BparcAzD1fsqYGa1Ka5CYfe7dU6Dv8Sn+d2gmjQkXD4ShAwLbteHglodpRvlk5fu KGA2a9W6WryniaufIwHmTaPVd6XP2f1wDKHpMquz6BXO0xYVe2ikd9JQ0MMdmkqw rErWP9oZIMHA0/D9uTKcfFqslTAhMTOh -----END CERTIFICATE-----Generated at Tue Sep 9 17:28:49 2025 by rpki-client