$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft File: 4Loijq-YEvBn0v87-AaJVpjJOXc.mft (raw, json) Hash identifier: 1VimO2AgFOW3I9UC49pwT2rv/wA/8pPvnS40ek1SGPo= Subject key identifier: 68:50:66:D4:C5:82:74:EA:89:AF:17:5C:E2:22:9F:BA:A9:02:38:30 Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Certificate serial: 06D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft Manifest number: 0676 Signing time: Mon 08 Sep 2025 22:51:33 +0000 Manifest this update: Mon 08 Sep 2025 22:51:32 +0000 Manifest next update: Mon 15 Sep 2025 22:51:32 +0000 Files and hashes: 1: 4Loijq-YEvBn0v87-AaJVpjJOXc.crl (hash: T5ngLOFa21eQ+jDDH7W00vBAUnEk0SpEGQ9gjz9S9WY=) 2: 5D81DB7C51B611ECA674F080C4F9AE02.roa (hash: P2a+kPtjJ6yhmcNIHbs+Vm7Ygg7MHd+sRsHHDgTnLWA=) 3: D396006E251C11EEAB8BE444C4F9AE02.roa (hash: aw/mMcLGZFpDDulSaY/b/FllgryrbPv9l31A9Fqr2ho=) 4: B91AACE86C8A11EEA934912FC4F9AE02.roa (hash: 2i7Zy6YTNDUm3q2k9+7q5qaY4ohOTEgm7A4bQdJMwCc=) 5: D304973AC1E011EE81429B3EC4F9AE02.roa (hash: 9FIxKZess48cgYzpbCKgWUSjt13PFUPPV98OXdhIeTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164D60, serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Validity Not Before: Sep 8 22:51:32 2025 GMT Not After : Sep 15 22:51:32 2025 GMT Subject: CN=68bf5df4-85db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:91:5b:a0:b7:06:bd:23:ab:0e:ca:7c:fc:03: 5a:09:4f:24:73:cc:39:b8:5c:44:1c:64:68:49:ae: f1:10:44:ae:c2:2d:f4:f3:02:be:1b:8b:eb:2d:f0: f8:f5:2d:bf:bf:96:1f:51:fe:e3:4a:65:21:08:fc: b3:d3:7c:b1:44:9e:21:9a:3d:cf:61:c2:22:f3:af: f5:3d:24:c4:46:6d:cc:28:af:b0:e9:d1:21:72:08: e8:d2:6d:64:91:fb:16:6b:ec:80:f3:93:b3:2d:bb: cc:69:1d:20:92:02:d8:79:d7:dc:b3:0a:63:d6:f8: 77:23:55:d7:69:5f:fc:b5:74:7f:b8:82:b5:be:3c: 22:e8:44:66:91:dd:6b:20:07:2a:5e:a4:4a:ce:06: f1:29:ea:07:91:16:30:79:0c:f0:29:19:a8:57:d3: b8:38:90:7c:86:39:b3:43:0b:9a:93:b8:1f:d5:5a: 1a:e1:cb:ac:59:25:bb:76:bd:31:58:08:fe:2d:5e: cd:8e:e0:74:02:30:6c:2b:ca:49:eb:71:5e:dd:71: 17:1d:ce:14:b4:f1:a9:35:c0:3f:38:f2:6c:93:88: 48:a1:ea:cb:06:05:36:9e:e6:30:f4:88:d9:e6:c9: 71:38:6a:f7:c8:25:2b:0c:62:99:98:9f:4a:56:59: a6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:50:66:D4:C5:82:74:EA:89:AF:17:5C:E2:22:9F:BA:A9:02:38:30 X509v3 Authority Key Identifier: keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:c1:06:4d:d7:cf:3f:af:d8:5e:99:8f:59:37:cd:02:58:12: 01:a9:ca:30:e7:d9:18:33:44:18:3e:9a:79:b0:92:e6:a0:ed: 25:5d:c1:77:89:ed:13:55:b0:42:77:d8:96:93:f3:af:ea:2e: da:ff:d1:74:c6:d5:18:25:25:a2:71:54:c2:98:b7:9b:fa:c5: 29:76:41:5b:e4:e8:2d:25:7f:51:7a:a7:d8:51:d2:ec:c0:65: f1:94:73:a4:76:62:00:d6:89:62:e9:02:b0:0a:04:36:2a:76: ce:14:ae:ed:fb:29:f9:5f:b8:2b:9a:94:7f:dd:5f:f8:77:e0: 1e:85:f1:0a:ce:22:c5:b0:8b:e1:01:13:4f:13:00:61:cf:29: 09:b5:53:8d:07:c1:e0:d4:31:e3:6c:83:1e:47:f8:05:5f:ad: 9c:bd:d0:ea:ef:72:ae:e6:fe:4b:43:4e:42:cc:a3:a0:20:20: 70:bf:d3:7f:53:2a:7b:28:ce:a1:56:6a:5b:22:0f:28:23:89: 59:ae:b1:1c:f5:11:37:de:3a:c1:26:b4:51:6d:62:ed:ea:6d: 60:11:00:6d:42:ba:b4:bc:0f:05:5b:a0:75:9b:31:6b:7a:77: ba:1f:57:e7:ed:a4:b9:b2:15:3a:a5:76:4e:e5:76:f4:56:17: ec:c8:37:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRENjAxMTAvBgNVBAUTKEUwQkEyMjhFQUY5ODEyRjA2N0QyRkYzQkY4MDY4OTU2 OThDOTM5NzcwHhcNMjUwOTA4MjI1MTMyWhcNMjUwOTE1MjI1MTMyWjAYMRYwFAYD VQQDEw02OGJmNWRmNC04NWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JFboLcGvSOrDsp8/ANaCU8kc8w5uFxEHGRoSa7xEESuwi308wK+G4vrLfD4 9S2/v5YfUf7jSmUhCPyz03yxRJ4hmj3PYcIi86/1PSTERm3MKK+w6dEhcgjo0m1k kfsWa+yA85OzLbvMaR0gkgLYedfcswpj1vh3I1XXaV/8tXR/uIK1vjwi6ERmkd1r IAcqXqRKzgbxKeoHkRYweQzwKRmoV9O4OJB8hjmzQwuak7gf1Voa4cusWSW7dr0x WAj+LV7NjuB0AjBsK8pJ63Fe3XEXHc4UtPGpNcA/OPJsk4hIoerLBgU2nuYw9IjZ 5slxOGr3yCUrDGKZmJ9KVlmmAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhQZtTF gnTqia8XXOIin7qpAjgwMB8GA1UdIwQYMBaAFOC6Io6vmBLwZ9L/O/gGiVaYyTl3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEQ2MC85RTBERTM5MkI0 NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2Qm4wdjg3LUFhSlZwakpP WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMb2lqcS1ZRXZCbjB2ODctQWFKVnBqSk9YYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEQ2MC85RTBERTM5MkI0NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2 Qm4wdjg3LUFhSlZwakpPWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXwQZN188/r9hemY9ZN80CWBIBqcow59kYM0QYPpp5sJLmoO0lXcF3 ie0TVbBCd9iWk/Ov6i7a/9F0xtUYJSWicVTCmLeb+sUpdkFb5OgtJX9ReqfYUdLs wGXxlHOkdmIA1oli6QKwCgQ2KnbOFK7t+yn5X7grmpR/3V/4d+AehfEKziLFsIvh ARNPEwBhzykJtVONB8Hg1DHjbIMeR/gFX62cvdDq73Ku5v5LQ05CzKOgICBwv9N/ Uyp7KM6hVmpbIg8oI4lZrrEc9RE33jrBJrRRbWLt6m1gEQBtQrq0vA8FW6B1mzFr ene6H1fn7aS5shU6pXZO5Xb0VhfsyDeV -----END CERTIFICATE-----Generated at Tue Sep 9 14:10:04 2025 by rpki-client