$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft File: 4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json) Hash identifier: qx8Fmj2NG9/u34K4vRBPgiHdaRwfKwt9x7uzaH7tYZM= Subject key identifier: 53:7A:C0:84:94:A3:11:CE:8C:95:0A:5A:19:94:14:7A:18:B8:80:6A Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Certificate serial: 1831 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft Manifest number: 17F7 Signing time: Thu 04 Sep 2025 16:41:21 +0000 Manifest this update: Thu 04 Sep 2025 16:41:21 +0000 Manifest next update: Thu 11 Sep 2025 16:41:21 +0000 Files and hashes: 1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: XNN5B3wCYBDVO6sL7TupePpaV4Of+27z2KNUDwEGuBs=) 2: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: wcQu6qDmYL8RSwTWQdHq8swDuqsLZ/b+WksTXiVZeUI=) 3: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: ukI4z4ZMWUWet1XkTlAm00Pda4+ffxxraVEq+pStj8k=) 4: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: mm0VJeRGh/+0foB6ENfn+0Td2KUkG+rfML9gCL5EGhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 16:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6193 (0x1831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Validity Not Before: Sep 4 16:41:21 2025 GMT Not After : Sep 11 16:41:21 2025 GMT Subject: CN=68b9c131-da15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9e:ed:c8:3a:c2:33:88:bc:ab:56:1e:a7:79: 20:ea:a1:f0:32:bc:e6:62:67:d6:a4:2e:2d:fb:82: 51:21:e0:35:7f:51:ea:b5:4d:be:38:65:bf:f8:ce: 90:15:52:dd:4c:09:88:75:c8:b4:5d:2a:5a:cb:ed: ef:9e:b7:92:ed:c1:e2:86:0f:a4:cb:cc:25:aa:5e: 1b:2b:a4:99:72:91:8a:8c:7d:73:10:ca:ea:a0:f7: 26:b6:cf:fd:05:01:46:b1:e3:63:ea:a8:d0:74:de: 72:24:91:9c:84:aa:ee:1e:b9:d2:57:ea:b3:e6:ae: 74:14:c6:bd:a7:3d:d5:41:d5:a6:14:73:c9:20:dc: 95:b6:57:99:cf:de:bb:75:3c:3c:86:87:e2:a7:5e: 73:29:ec:a5:18:ba:2a:e1:cf:4d:99:7e:32:ff:ac: c8:d8:5d:34:8a:bc:aa:09:fd:cf:8b:a4:af:c9:c0: be:dc:0a:c9:cc:7c:83:70:9b:31:d2:7a:d0:ab:60: 23:0e:38:22:d9:0c:f5:c7:74:1b:a1:ea:e0:8f:4b: 7d:97:2e:9f:40:0b:ac:8e:7f:5e:90:32:ea:f8:0c: 36:28:da:8c:9b:69:eb:bb:de:69:d7:30:be:ba:e4: e3:3d:4f:b4:4e:96:69:24:c3:ae:e1:af:3e:3b:f2: 0a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7A:C0:84:94:A3:11:CE:8C:95:0A:5A:19:94:14:7A:18:B8:80:6A X509v3 Authority Key Identifier: keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c4:f1:df:ae:2e:71:e3:5f:bd:6d:44:e8:59:32:65:93:81: 83:4f:93:18:dd:d5:4d:fc:07:93:33:23:eb:85:a0:a4:19:b8: 0d:77:ff:cb:0a:55:ce:5c:3f:f0:b8:13:74:7f:38:ae:d5:cd: 87:dc:ba:96:22:d7:32:03:d7:63:15:9c:b4:49:be:ab:9e:1a: e2:21:22:54:0e:83:c1:d1:59:7b:0f:67:bf:c9:07:1d:b7:a3: 6c:88:c1:e6:fe:ec:06:a3:98:d6:d5:d9:c7:48:35:8c:7b:be: f5:46:40:39:8f:c2:d2:07:74:19:5f:ab:d9:26:61:59:46:11: 76:af:d5:5a:3f:47:96:e5:8b:c5:4f:d0:f1:bd:71:ff:6c:46: fb:41:ec:24:ff:7d:c0:e3:1a:b3:80:c5:42:37:3c:46:99:70: 1e:df:7a:98:12:3e:3f:ed:03:4a:d9:93:8c:7a:dd:b9:dc:a8: b7:18:7b:41:d0:a9:45:32:e0:05:94:81:e2:f3:9f:9c:9c:72: 56:aa:95:db:92:7f:9d:c5:3c:87:52:ce:c8:f8:a0:e4:92:be: 72:68:dc:45:0c:6b:25:0e:cf:d8:1b:4c:a5:05:79:53:2e:0b: 42:20:f6:8c:c5:24:50:71:62:12:69:17:a8:ce:0e:4f:ef:24: 6b:c1:8e:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMUUxMTAvBgNVBAUTKEUxQkIxRTYyNURCREVCQjMyMjBGRjkyM0NENkExMUEy Q0UyNDUxOTYwHhcNMjUwOTA0MTY0MTIxWhcNMjUwOTExMTY0MTIxWjAYMRYwFAYD VQQDEw02OGI5YzEzMS1kYTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn57tyDrCM4i8q1Yep3kg6qHwMrzmYmfWpC4t+4JRIeA1f1HqtU2+OGW/+M6Q FVLdTAmIdci0XSpay+3vnreS7cHihg+ky8wlql4bK6SZcpGKjH1zEMrqoPcmts/9 BQFGseNj6qjQdN5yJJGchKruHrnSV+qz5q50FMa9pz3VQdWmFHPJINyVtleZz967 dTw8hofip15zKeylGLoq4c9NmX4y/6zI2F00iryqCf3Pi6SvycC+3ArJzHyDcJsx 0nrQq2AjDjgi2Qz1x3Qboergj0t9ly6fQAusjn9ekDLq+Aw2KNqMm2nru95p1zC+ uuTjPU+0TpZpJMOu4a8+O/IKhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFN6wISU oxHOjJUKWhmUFHoYuIBqMB8GA1UdIwQYMBaAFOG7HmJdveuzIg/5I81qEaLOJFGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxRS9DMUZBMDgyQ0M4 Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3TWlEX2tqeldvUm9zNGtV WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRic2VZbDI5NjdNaURfa2p6V29Sb3M0a1VaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTMxRS9DMUZBMDgyQ0M4Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3 TWlEX2tqeldvUm9zNGtVWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdxPHfri5x41+9bUToWTJlk4GDT5MY3dVN/AeTMyPrhaCkGbgNd//L ClXOXD/wuBN0fziu1c2H3LqWItcyA9djFZy0Sb6rnhriISJUDoPB0Vl7D2e/yQcd t6NsiMHm/uwGo5jW1dnHSDWMe771RkA5j8LSB3QZX6vZJmFZRhF2r9VaP0eW5YvF T9DxvXH/bEb7Qewk/33A4xqzgMVCNzxGmXAe33qYEj4/7QNK2ZOMet253Ki3GHtB 0KlFMuAFlIHi85+cnHJWqpXbkn+dxTyHUs7I+KDkkr5yaNxFDGslDs/YG0ylBXlT LgtCIPaMxSRQcWISaReozg5P7yRrwY4R -----END CERTIFICATE-----Generated at Sat Sep 6 04:45:04 2025 by rpki-client