$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft File: 4YMttqUeSiWekP7IHkfFRpxSpok.mft (raw, json) Hash identifier: m7UiEgysn0bjSUmt2nkxFSQaLzvvpsvC1JMRkI7S1zI= Subject key identifier: 6E:07:34:D2:9B:67:6B:6D:4A:8E:FB:63:38:A3:99:AA:FD:DE:63:8B Authority key identifier: E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89 Certificate issuer: /CN=A916814B/serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689 Certificate serial: 163D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft Manifest number: 1631 Signing time: Mon 18 Aug 2025 16:55:01 +0000 Manifest this update: Mon 18 Aug 2025 16:55:00 +0000 Manifest next update: Mon 25 Aug 2025 16:55:00 +0000 Files and hashes: 1: 4YMttqUeSiWekP7IHkfFRpxSpok.crl (hash: 3QO0m6gYb4a/j+1AkSP2fJBg0r21iL37l5VNatBBaYs=) 2: B4FED5FC8E5311EBB81E6C70C4F9AE02.roa (hash: kDacZR8moKTX56aD4xPOhhoyt0qIcn1U0w7VaT9wQjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5693 (0x163d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689 Validity Not Before: Aug 18 16:55:00 2025 GMT Not After : Aug 25 16:55:00 2025 GMT Subject: CN=68a35ae4-f66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4b:8a:84:18:4a:03:d9:54:99:67:9c:3a:59: 8d:7b:8b:ea:9a:20:01:c2:1b:c6:f3:14:16:1d:a0: da:8b:c2:64:b4:b3:22:60:e3:af:d7:f0:d4:c8:b7: 02:57:ba:af:ea:d4:2d:b0:e3:35:c7:9b:dc:85:7c: 99:58:8b:33:7f:e3:1c:71:86:f1:43:1e:62:01:5f: 1f:9c:0f:92:11:30:bb:d6:b4:b6:6c:e3:2c:a9:93: aa:bb:6a:23:53:f6:70:3f:82:d4:bd:0d:71:55:10: de:1e:6c:a2:35:db:90:aa:6e:4b:d2:58:d1:95:c6: 40:e5:30:ba:7f:ca:a3:70:0d:b7:60:72:51:c9:49: 4f:fb:8f:50:af:77:8e:47:b4:2a:5c:dc:a6:4b:ee: 0d:00:d3:e1:ae:22:d4:5f:d8:ee:0c:f8:d1:51:f9: c8:9f:6b:16:1a:37:48:44:7e:c9:01:84:16:9b:4c: 6a:df:22:d6:16:64:d7:48:aa:e7:6a:3d:7d:06:fb: 5f:6a:2c:f9:91:f5:a1:1a:c4:97:66:27:60:b3:50: 10:10:08:70:f4:6d:f4:6f:0c:3c:9a:38:0e:ec:b6: 49:10:85:d4:9b:ba:2a:fd:d5:4e:61:7e:69:eb:90: 40:6b:35:10:b4:93:11:b0:0b:c2:ac:59:a3:ab:2e: bd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:07:34:D2:9B:67:6B:6D:4A:8E:FB:63:38:A3:99:AA:FD:DE:63:8B X509v3 Authority Key Identifier: keyid:E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:cb:58:3c:e2:f5:9b:3e:3e:6a:ef:34:af:0b:1c:27:19:34: 3d:ab:4e:ba:99:00:c1:5e:db:9a:d5:fe:25:e4:79:3e:60:aa: f5:43:c4:34:57:ed:eb:a9:da:39:c3:4e:b5:c3:57:b7:0b:e8: e0:82:01:8d:43:a2:48:78:1a:07:99:2f:a0:76:51:bc:3b:bb: 64:be:23:c1:c2:d0:82:83:9d:15:68:80:72:af:8c:b5:a2:08: a9:05:6d:77:47:45:1e:3a:60:f8:5d:f5:f2:7e:fc:57:2f:3d: ca:db:6c:17:b9:eb:3d:24:4a:02:00:d6:c9:18:11:09:43:c1: 23:c8:8d:26:63:17:74:ee:f3:68:3a:29:83:2a:3a:f3:47:cf: 53:1a:0f:84:1f:b7:21:23:bd:12:41:32:92:fc:dc:64:e8:63: dd:fe:95:f0:e6:93:25:26:d8:09:07:57:d0:c4:38:c2:bf:49: 4a:b0:d1:ff:93:90:77:d3:e2:85:f4:e9:cb:4c:5d:1c:ea:fe: f3:1d:05:fe:6b:64:aa:05:1c:46:f1:70:6c:0d:ed:11:cc:46: 99:7a:25:35:9c:cd:08:43:f3:62:84:c0:59:32:d5:51:b1:cd: 86:df:50:ad:53:14:f1:46:8f:74:61:e0:15:2f:90:51:8e:55: f6:0d:a6:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKEUxODMyREI2QTUxRTRBMjU5RTkwRkVDODFFNDdDNTQ2 OUM1MkE2ODkwHhcNMjUwODE4MTY1NTAwWhcNMjUwODI1MTY1NTAwWjAYMRYwFAYD VQQDEw02OGEzNWFlNC1mNjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UuKhBhKA9lUmWecOlmNe4vqmiABwhvG8xQWHaDai8JktLMiYOOv1/DUyLcC V7qv6tQtsOM1x5vchXyZWIszf+MccYbxQx5iAV8fnA+SETC71rS2bOMsqZOqu2oj U/ZwP4LUvQ1xVRDeHmyiNduQqm5L0ljRlcZA5TC6f8qjcA23YHJRyUlP+49Qr3eO R7QqXNymS+4NANPhriLUX9juDPjRUfnIn2sWGjdIRH7JAYQWm0xq3yLWFmTXSKrn aj19Bvtfaiz5kfWhGsSXZidgs1AQEAhw9G30bww8mjgO7LZJEIXUm7oq/dVOYX5p 65BAazUQtJMRsAvCrFmjqy69LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4HNNKb Z2ttSo77Yzijmar93mOLMB8GA1UdIwQYMBaAFOGDLbalHkolnpD+yB5HxUacUqaJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi8wMkEyRDk3MDE2 MkYxMUU4QjhERTI2NjlDNEY5QUUwMi80WU10dHFVZVNpV2VrUDdJSGtmRlJweFNw b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTXR0cVVlU2lXZWtQN0lIa2ZGUnB4U3Bvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi8wMkEyRDk3MDE2MkYxMUU4QjhERTI2NjlDNEY5QUUwMi80WU10dHFVZVNp V2VrUDdJSGtmRlJweFNwb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdy1g84vWbPj5q7zSvCxwnGTQ9q066mQDBXtua1f4l5Hk+YKr1Q8Q0 V+3rqdo5w061w1e3C+jgggGNQ6JIeBoHmS+gdlG8O7tkviPBwtCCg50VaIByr4y1 ogipBW13R0UeOmD4XfXyfvxXLz3K22wXues9JEoCANbJGBEJQ8EjyI0mYxd07vNo OimDKjrzR89TGg+EH7chI70SQTKS/Nxk6GPd/pXw5pMlJtgJB1fQxDjCv0lKsNH/ k5B30+KF9OnLTF0c6v7zHQX+a2SqBRxG8XBsDe0RzEaZeiU1nM0IQ/NihMBZMtVR sc2G31CtUxTxRo90YeAVL5BRjlX2DaaS -----END CERTIFICATE-----Generated at Wed Aug 20 08:47:08 2025 by rpki-client