$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft File: D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft (raw, json) Hash identifier: Zmxp/HbGnimzUN+6erbNhEZvqCX6YnR0VnWuh80NCcA= Subject key identifier: 6B:96:94:9A:76:37:58:E5:70:E6:89:93:08:63:23:AB:CB:89:54:BC Authority key identifier: 0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 Certificate issuer: /CN=A915D4EA/serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Certificate serial: 049F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft Manifest number: 0499 Signing time: Fri 19 Sep 2025 00:21:08 +0000 Manifest this update: Fri 19 Sep 2025 00:21:08 +0000 Manifest next update: Fri 26 Sep 2025 00:21:08 +0000 Files and hashes: 1: D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl (hash: 10gGhWFLGpmoo97cVQ3Nlu97rC1V+mrg9dJEgx/vOCY=) 2: B5A6646A4EA211EC9AEBA24CC4F9AE02.roa (hash: r7hd+udE0/uxVbv9WvLHX+58InN/53D6sx7FMyN6tO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1183 (0x49f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4EA, serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Validity Not Before: Sep 19 00:21:08 2025 GMT Not After : Sep 26 00:21:08 2025 GMT Subject: CN=68cca1f4-7d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:93:d8:15:82:27:20:b9:78:c9:e1:33:1e:3b: 61:14:fd:57:11:f6:db:fd:6f:79:57:5e:fb:75:d2: 96:08:47:17:68:c1:17:cc:8a:b0:a3:31:94:55:ac: 6e:ad:88:18:c9:36:77:f7:2f:15:d8:81:ed:58:b4: 48:4c:4b:29:44:c2:2a:ac:ee:8a:a3:bb:13:b3:11: 97:b9:7c:d4:49:60:b5:fd:32:dc:1a:a9:ae:be:63: ef:b8:85:9a:38:55:96:d8:b1:84:24:f8:55:a8:eb: c4:f9:43:1d:d1:dc:6c:5f:19:88:14:f0:57:12:35: 86:6d:80:61:5a:d4:32:ab:2d:bf:81:0d:84:3b:29: 5d:5a:d7:bd:7b:6b:ac:ee:d7:19:f8:33:52:5a:82: f5:c8:74:9c:66:ae:f2:70:56:9e:a0:b1:ca:87:8d: d0:27:4e:2b:eb:c7:f4:4e:1c:8a:f9:5e:f4:6a:8a: 76:31:e4:82:3c:a9:5a:57:a9:a5:87:6e:76:d8:44: 7e:2f:bd:2f:cb:12:7d:9a:1a:c8:a7:af:d4:74:f2: 12:99:b6:3e:bc:e7:b3:27:4b:8a:1f:b4:58:4a:c3: 76:9b:e6:0e:a8:aa:6f:f2:1f:46:2b:1b:e0:5d:a8: 82:5e:5b:0b:00:eb:10:b7:18:9d:57:60:20:5b:24: a6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:96:94:9A:76:37:58:E5:70:E6:89:93:08:63:23:AB:CB:89:54:BC X509v3 Authority Key Identifier: keyid:0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:7a:ac:a0:57:00:5a:ab:bf:c2:67:4b:74:4d:d2:02:89:5f: 09:d7:60:e4:92:31:a0:fe:5b:55:6f:f6:6f:8a:dd:5b:8a:d3: 05:73:d3:2b:24:b8:65:e0:e2:a4:46:5d:32:e3:ca:00:3b:07: bd:55:ee:07:62:9a:19:6d:7f:5e:4b:fa:72:10:08:60:f3:95: d3:39:67:4c:b7:bd:db:c3:85:48:4d:c0:cd:cc:8c:b0:29:49: b2:d3:06:31:0d:f3:71:b1:9b:83:24:f3:93:e2:26:3e:ad:04: 73:e4:46:70:6f:70:e5:a3:3f:85:03:04:ef:f6:a6:ed:e5:3a: 55:f3:ab:ba:6f:ea:34:29:3d:62:7f:21:72:e5:da:11:06:f3: 72:3d:dd:79:e4:26:c1:0c:68:46:26:1a:56:58:ba:4d:8a:f6: 3c:35:b4:60:c5:41:86:93:80:1a:86:51:03:62:e6:cf:ed:46: e3:93:0b:07:fe:55:93:c6:e8:5f:d6:1a:e1:60:45:37:dc:14: 5e:a5:4b:d5:f5:6f:5c:8c:e7:bb:bf:78:b1:43:8f:f4:f7:ef: e3:83:f4:ed:22:b5:37:9d:19:4c:d8:e9:06:23:0f:84:75:ab: 9e:08:db:16:47:b5:20:ba:14:14:bf:bc:0c:34:02:6c:27:79: 38:f6:b8:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RUExMTAvBgNVBAUTKDBGODA0RjE3RUMzNTdDQkYzMDBEM0JCMkZBOUNDRDJB MzYwQUQ1RTIwHhcNMjUwOTE5MDAyMTA4WhcNMjUwOTI2MDAyMTA4WjAYMRYwFAYD VQQDEw02OGNjYTFmNC03ZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZPYFYInILl4yeEzHjthFP1XEfbb/W95V177ddKWCEcXaMEXzIqwozGUVaxu rYgYyTZ39y8V2IHtWLRITEspRMIqrO6Ko7sTsxGXuXzUSWC1/TLcGqmuvmPvuIWa OFWW2LGEJPhVqOvE+UMd0dxsXxmIFPBXEjWGbYBhWtQyqy2/gQ2EOyldWte9e2us 7tcZ+DNSWoL1yHScZq7ycFaeoLHKh43QJ04r68f0ThyK+V70aop2MeSCPKlaV6ml h2522ER+L70vyxJ9mhrIp6/UdPISmbY+vOezJ0uKH7RYSsN2m+YOqKpv8h9GKxvg XaiCXlsLAOsQtxidV2AgWySmIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuWlJp2 N1jlcOaJkwhjI6vLiVS8MB8GA1UdIwQYMBaAFA+ATxfsNXy/MA07svqczSo2CtXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRFQS83MDBGQ0YyODRF OUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZMOHdEVHV5LXB6TktqWUsx ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q0QlBGLXcxZkw4d0RUdXktcHpOS2pZSzFlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRFQS83MDBGQ0YyODRFOUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZM OHdEVHV5LXB6TktqWUsxZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgeqygVwBaq7/CZ0t0TdICiV8J12DkkjGg/ltVb/Zvit1bitMFc9Mr JLhl4OKkRl0y48oAOwe9Ve4HYpoZbX9eS/pyEAhg85XTOWdMt73bw4VITcDNzIyw KUmy0wYxDfNxsZuDJPOT4iY+rQRz5EZwb3Dloz+FAwTv9qbt5TpV86u6b+o0KT1i fyFy5doRBvNyPd155CbBDGhGJhpWWLpNivY8NbRgxUGGk4AahlEDYubP7UbjkwsH /lWTxuhf1hrhYEU33BRepUvV9W9cjOe7v3ixQ4/09+/jg/TtIrU3nRlM2OkGIw+E daueCNsWR7UguhQUv7wMNAJsJ3k49rjR -----END CERTIFICATE-----Generated at Fri Sep 19 05:28:05 2025 by rpki-client