$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: lXlGVac9K4a+akMcD277Lqj2H92AloPktXHI4NKJReE= Subject key identifier: DD:95:3F:50:1A:F9:D0:C0:BE:79:83:AC:E5:D1:9C:58:50:25:CB:EA Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 02EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 02C0 Signing time: Tue 09 Sep 2025 01:42:22 +0000 Manifest this update: Tue 09 Sep 2025 01:42:22 +0000 Manifest next update: Tue 16 Sep 2025 01:42:22 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: d+Z6xrQ6J8D0/EL8rAQVU8RrlfNvuCeXcy+fajjAY2A=) 2: CC647BDECAC711EF80553A61C4F9AE02.roa (hash: wcGSkIclIE1toilkxNzAK4TRkSG87FAdX9jhsTJGr7o=) 3: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: JFnHafVEFMtRqzbULiHqCAleWGn7lYd8UUBXcTVaExM=) 4: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: opJO4K7YZ/e2DX+s/GDo4FYN3UUPRtbZmQRgFxg+ZXw=) 5: 3632957E441311EE8A03A472C4F9AE02.roa (hash: nC156FtWNisRyJ+sZJC0neQfTsLbF3t6cdGqYP4uj+g=) 6: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: Iqn/bXqznhtCorMWZ+Zjcj+q0RdF1Ri2rDqeHKOqgrA=) 7: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: i8rhzfoYVzIteA50gdYKsP0L/C+up3cTPTY1lRFjLJk=) 8: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: 0yjNoUcfSfQzsQDEWyMesVRiNf3mWHbgqFSp6Aeqe88=) 9: 3D34A750A88111ED80831318C4F9AE02.roa (hash: x8f88T4/0fygwChpTG7CDDG+BVQvHAjTQvhSaAfGmUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Sep 9 01:42:22 2025 GMT Not After : Sep 16 01:42:22 2025 GMT Subject: CN=68bf85fe-0cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:05:a3:20:c2:00:42:b6:c7:04:07:56:f7: 6d:6a:ce:92:9e:96:02:e5:8d:e4:2a:50:94:b3:d5: ba:ad:3e:db:2a:ea:60:83:ad:53:e6:fa:58:c0:84: 45:7d:8f:6d:c8:89:da:6d:bb:c6:2a:2f:62:bc:bd: de:ee:7b:d9:fa:4c:ac:c9:5d:0a:d9:0e:cb:f1:f9: ea:47:d5:c6:5d:c7:e8:e6:5d:72:2d:f3:e4:35:93: 14:4a:55:38:f9:27:a4:29:10:1c:c4:62:d5:3b:60: cf:1a:05:5a:4f:2f:f3:7e:48:33:63:ec:12:fa:88: 19:01:c0:d3:e7:ae:7d:e1:36:17:4d:57:a6:a3:67: 37:4b:9f:f2:0e:f8:2b:4c:29:3a:55:bf:48:7a:ea: 36:49:d9:c5:ef:34:92:58:2d:ff:c2:65:69:44:4a: de:ce:a7:7a:f7:1e:73:37:6a:54:4e:4d:95:4d:eb: 30:d1:ea:4e:cc:a1:35:0d:1d:8a:07:b3:e2:af:3f: 2f:93:57:05:44:29:e4:be:1c:c1:b8:72:6b:94:cc: a6:9f:63:17:e6:38:66:a7:af:c6:74:65:4a:1d:bc: 01:a9:46:bc:12:8d:10:7a:29:97:9a:f0:9c:7d:dd: c5:43:5e:52:c3:29:b0:71:67:05:0e:f1:a6:ca:95: a1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:95:3F:50:1A:F9:D0:C0:BE:79:83:AC:E5:D1:9C:58:50:25:CB:EA X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b9:7a:d8:58:4e:c3:dc:34:4c:ec:d2:a9:d4:18:ba:1d:ba: b3:36:8f:67:d3:3a:5b:39:11:f2:af:4d:1a:09:6b:de:c3:f1: 47:89:b1:72:26:93:fa:04:fa:14:93:cf:b1:f3:9f:1e:ce:2a: bf:33:11:48:c2:b2:91:4e:a4:06:ad:9a:f2:69:e5:ff:7f:62: ec:b1:c8:e2:26:86:98:c5:d6:a1:cc:48:54:ff:2d:12:96:c0: ef:f4:6f:b0:7f:dd:bd:1f:a5:fa:90:a1:1c:9f:29:6e:2f:91: 5c:3d:ed:2c:12:35:9c:af:f0:e6:cf:47:27:d6:3c:33:09:ce: 6a:58:e4:76:ae:49:8e:43:ed:d5:b5:b9:f1:0e:ff:73:3f:43: 74:e4:cb:6e:31:e6:ed:1d:42:a6:09:0b:49:61:bc:e1:0f:1a: 74:30:71:a8:76:97:21:b9:c7:6a:d9:77:21:35:77:15:9a:80: ce:86:52:b0:1e:9d:ae:f2:dd:d9:0b:bd:3f:19:c7:d4:28:77: b1:53:50:c4:f5:12:a6:3e:35:d6:62:cf:7a:a4:bb:b7:33:7e: 48:3a:f0:7e:06:3e:ed:19:5e:29:58:bd:b8:00:73:bc:49:aa: b1:01:2b:fd:17:ce:b8:36:02:09:4e:ee:55:ec:30:5a:0f:76: e7:d8:03:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjUwOTA5MDE0MjIyWhcNMjUwOTE2MDE0MjIyWjAYMRYwFAYD VQQDEw02OGJmODVmZS0wY2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYcFoyDCAEK2xwQHVvdtas6SnpYC5Y3kKlCUs9W6rT7bKupgg61T5vpYwIRF fY9tyInabbvGKi9ivL3e7nvZ+kysyV0K2Q7L8fnqR9XGXcfo5l1yLfPkNZMUSlU4 +SekKRAcxGLVO2DPGgVaTy/zfkgzY+wS+ogZAcDT56594TYXTVemo2c3S5/yDvgr TCk6Vb9Ieuo2SdnF7zSSWC3/wmVpRErezqd69x5zN2pUTk2VTesw0epOzKE1DR2K B7Pirz8vk1cFRCnkvhzBuHJrlMymn2MX5jhmp6/GdGVKHbwBqUa8Eo0QeimXmvCc fd3FQ15SwymwcWcFDvGmypWhNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2VP1Aa +dDAvnmDrOXRnFhQJcvqMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5uXrYWE7D3DRM7NKp1Bi6HbqzNo9n0zpbORHyr00aCWvew/FHibFy JpP6BPoUk8+x858eziq/MxFIwrKRTqQGrZryaeX/f2LsscjiJoaYxdahzEhU/y0S lsDv9G+wf929H6X6kKEcnyluL5FcPe0sEjWcr/Dmz0cn1jwzCc5qWOR2rkmOQ+3V tbnxDv9zP0N05MtuMebtHUKmCQtJYbzhDxp0MHGodpchucdq2XchNXcVmoDOhlKw Hp2u8t3ZC70/GcfUKHexU1DE9RKmPjXWYs96pLu3M35IOvB+Bj7tGV4pWL24AHO8 SaqxASv9F864NgIJTu5V7DBaD3bn2APP -----END CERTIFICATE-----Generated at Tue Sep 9 14:35:00 2025 by rpki-client