$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft File: T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json) Hash identifier: xrb86N3hYb0A12OVcl6G7cU14K6cJSuxY1vOdP2Mu3M= Subject key identifier: A5:68:56:6E:7A:DC:C4:B1:8F:49:77:25:DB:69:45:BF:53:E7:81:69 Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Certificate serial: 03A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft Manifest number: 039E Signing time: Thu 21 Aug 2025 00:56:08 +0000 Manifest this update: Thu 21 Aug 2025 00:56:07 +0000 Manifest next update: Thu 28 Aug 2025 00:56:07 +0000 Files and hashes: 1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: z7FVKJM7NOsnWP3WF7t8RNNnBlr0AgV0PZi7aEpG6ok=) 2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: rWvQOGaQUF4KDCbeAOUg2IDrYzmM2mMdECYdn3UKK/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 931 (0x3a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Validity Not Before: Aug 21 00:56:07 2025 GMT Not After : Aug 28 00:56:07 2025 GMT Subject: CN=68a66ea7-da0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:54:94:99:14:54:86:53:02:92:47:47:6a: ed:c7:4d:17:06:8d:06:e8:cb:99:b7:63:62:30:76: 47:63:ed:f8:12:1a:d6:05:df:d6:f6:ed:2b:ac:e0: 02:38:31:ce:51:8b:7d:31:8d:f9:2d:11:bf:7e:1d: 39:32:7b:05:54:f1:d0:32:d7:93:4e:12:d7:f8:2d: f6:f6:de:67:18:b2:ac:aa:b7:e5:49:83:3e:a6:e7: 13:2f:a4:93:a6:1b:34:72:8b:95:8d:45:c8:4c:22: c2:b5:a9:b0:6b:3b:94:ae:22:00:1c:a0:07:fa:15: fe:18:f1:53:2a:f4:4a:86:d8:77:03:df:e1:fe:98: 01:50:f0:9d:ed:89:cd:7f:25:cb:5b:38:c3:6b:53: ae:25:c8:5c:8f:d8:4b:89:a8:18:db:a1:05:0c:6b: f8:08:15:e4:74:52:40:0e:ce:af:71:34:62:b6:53: d9:8d:e5:38:9c:2d:6b:86:07:00:83:6f:38:28:38: 45:b0:25:48:eb:da:b0:14:1c:ff:6e:cc:c9:f4:95: c1:4a:10:1b:b8:1a:59:ea:67:5f:ba:11:d8:6d:64: ae:40:16:6b:e9:2a:26:bd:ed:6c:e1:22:b8:f2:7e: 1c:75:c2:fe:24:2e:31:bc:e4:e3:20:14:04:70:1f: eb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:68:56:6E:7A:DC:C4:B1:8F:49:77:25:DB:69:45:BF:53:E7:81:69 X509v3 Authority Key Identifier: keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:84:08:75:cd:34:f0:c2:20:26:8b:af:6c:22:8e:76:ad:13: 02:1e:ca:14:d0:c1:b1:46:86:46:f6:c8:c6:f6:58:68:d9:6b: 59:d2:0f:2d:de:bf:8d:ca:b6:a0:2b:fa:79:69:06:bc:2a:bf: a9:d9:77:57:98:22:c0:d6:14:fd:8d:d0:1a:fb:75:8d:e5:0e: b2:a7:df:e8:f6:6a:e1:f3:72:78:3f:ba:43:77:1a:f3:b9:55: 7c:c0:24:d1:9f:33:52:7b:53:84:76:23:9f:35:06:70:44:10: 57:e7:99:4f:2e:6f:06:a6:bb:cd:0c:38:9c:6d:47:05:bd:ed: 31:0a:86:d5:8f:86:e8:11:7c:28:d5:60:65:45:76:56:5e:29: e0:71:04:3d:6c:01:5e:1d:82:4b:44:fd:92:c1:b5:89:a1:b9: 43:75:66:b1:cf:bd:9d:79:19:00:1d:0b:a1:b2:4c:9e:02:a7: db:4a:04:6a:ed:24:2e:03:5e:04:d1:ec:2b:de:c4:23:c4:d0: d1:ae:f6:00:98:58:97:cd:7f:29:b1:12:cd:d4:5d:5f:e3:d9: f7:97:27:22:de:0e:76:92:49:81:f5:10:3e:27:35:9c:fb:60: d7:91:b5:a1:c0:a6:f0:d1:f0:74:89:31:e6:54:65:42:d8:65: d8:dd:52:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG NTczOEY5MEEwHhcNMjUwODIxMDA1NjA3WhcNMjUwODI4MDA1NjA3WjAYMRYwFAYD VQQDEw02OGE2NmVhNy1kYTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0F1UlJkUVIZTApJHR2rtx00XBo0G6MuZt2NiMHZHY+34EhrWBd/W9u0rrOAC ODHOUYt9MY35LRG/fh05MnsFVPHQMteTThLX+C329t5nGLKsqrflSYM+pucTL6ST phs0couVjUXITCLCtamwazuUriIAHKAH+hX+GPFTKvRKhth3A9/h/pgBUPCd7YnN fyXLWzjDa1OuJchcj9hLiagY26EFDGv4CBXkdFJADs6vcTRitlPZjeU4nC1rhgcA g284KDhFsCVI69qwFBz/bszJ9JXBShAbuBpZ6mdfuhHYbWSuQBZr6Somve1s4SK4 8n4cdcL+JC4xvOTjIBQEcB/riwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVoVm56 3MSxj0l3JdtpRb9T54FpMB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM3Qy82QUU3NjE1MkFCMzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pO VmwwejhDclRodWIxYzQtUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzhAh1zTTwwiAmi69sIo52rRMCHsoU0MGxRoZG9sjG9lho2WtZ0g8t 3r+NyragK/p5aQa8Kr+p2XdXmCLA1hT9jdAa+3WN5Q6yp9/o9mrh83J4P7pDdxrz uVV8wCTRnzNSe1OEdiOfNQZwRBBX55lPLm8GprvNDDicbUcFve0xCobVj4boEXwo 1WBlRXZWXingcQQ9bAFeHYJLRP2SwbWJoblDdWaxz72deRkAHQuhskyeAqfbSgRq 7SQuA14E0ewr3sQjxNDRrvYAmFiXzX8psRLN1F1f49n3lyci3g52kkmB9RA+JzWc +2DXkbWhwKbw0fB0iTHmVGVC2GXY3VLi -----END CERTIFICATE-----Generated at Fri Aug 22 16:15:46 2025 by rpki-client