$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json) Hash identifier: qkMOfjdjk/wpbJSPe4UN9KfXgm4zKNsrWfJ+EMS1d/k= Subject key identifier: 4A:E7:2E:DF:A3:8E:94:DD:70:6E:B9:42:7E:C2:05:DC:77:48:32:B7 Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft Manifest number: 4D Signing time: Sun 07 Sep 2025 07:50:54 +0000 Manifest this update: Sun 07 Sep 2025 07:50:53 +0000 Manifest next update: Sun 14 Sep 2025 07:50:53 +0000 Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: T1qUX3g9BFNZ9+JaQCVkVrsTqFQvDIroXzsdT5p660c=) 2: 8BACF000172811F0B074151EC4F9AE02.roa (hash: ZKoMpxvl06JDEHPwPvY04s64aILLwwH0kpQN+XzmWw8=) 3: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: QaVxitn1fI1JNxNdOxFRN5URfiNEZoLOemGjg0zo0Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Validity Not Before: Sep 7 07:50:53 2025 GMT Not After : Sep 14 07:50:53 2025 GMT Subject: CN=68bd395e-2c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:d0:a7:b9:94:44:62:96:50:0c:e3:6c:39: 61:a6:da:3a:27:4d:a2:20:74:1a:17:96:ad:ef:ce: b6:62:c3:1c:1f:83:e7:5e:e0:00:fe:06:c0:ae:53: e7:b7:70:4a:cb:11:65:60:e4:f7:73:96:f3:a8:ac: 97:d7:c4:b0:d7:39:38:cd:bc:14:5d:6a:1f:f8:03: ba:62:44:ff:1f:f8:a1:07:73:d5:e1:d5:d4:65:ff: d3:e8:52:c9:78:ae:ec:c4:f3:ac:ff:6b:e8:29:3f: 7b:a4:d5:b9:26:b0:67:be:23:7e:b1:d7:60:92:8b: 24:97:2d:9f:a1:a4:13:9e:6b:1f:24:de:43:48:4f: d5:b7:f9:33:8e:e3:27:93:f9:7b:4a:32:7f:00:da: 34:62:8a:89:d1:7e:99:67:fb:16:6b:77:1f:20:38: a2:ab:49:56:d4:49:61:e2:b2:34:ec:0d:71:37:6b: 4f:c3:1f:4f:b1:c8:b8:b3:53:20:84:60:13:fe:33: 16:25:8b:9c:a1:28:57:79:af:86:f1:96:c1:c5:f6: 06:20:bf:f7:01:a9:bb:f3:61:66:4d:d4:1a:df:56: 6d:24:d1:68:b9:f1:b0:0c:7e:06:20:8b:bf:fb:d2: 5c:7c:86:a1:e3:23:96:d0:8b:ec:37:27:e4:29:7d: 66:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E7:2E:DF:A3:8E:94:DD:70:6E:B9:42:7E:C2:05:DC:77:48:32:B7 X509v3 Authority Key Identifier: keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3b:83:e3:22:57:58:2b:7c:7c:cf:9e:d4:1d:13:97:9f:c2: 84:5f:c2:e9:61:64:2e:3e:a4:06:be:bc:53:f2:df:64:2f:37: fa:f0:d5:da:dc:ac:8c:4a:c9:36:19:15:3c:89:18:84:46:2f: 09:f5:c6:0e:10:b2:38:4f:28:36:dc:fd:85:ea:a9:84:a1:af: 24:3d:86:e3:ec:de:8a:7f:27:db:51:cb:9c:1f:5f:d0:a8:cd: a4:3a:49:54:c4:82:d5:ca:d4:44:b4:5d:3e:60:89:a2:45:06: 46:ae:85:43:52:bc:b0:eb:94:d9:cf:2d:2a:4a:6d:dc:95:d2: c7:50:47:0e:c5:81:03:b3:04:1a:7d:07:c8:d3:69:c2:78:ef: 16:62:2c:12:97:79:18:24:dc:39:78:e1:3b:a5:37:09:9d:c4: ae:ff:72:e4:3f:cc:5a:fb:3d:3a:d8:e4:2b:a9:32:24:02:93: d6:8f:c7:f3:95:e7:a6:d0:0a:3e:dd:42:99:4d:28:f1:4d:91: da:13:61:70:96:58:9a:9e:87:10:c0:fc:e1:18:bd:e1:f6:e7: 29:66:19:e8:00:e6:1b:bf:d9:53:50:e6:5f:5f:0a:80:70:2f: e4:da:35:cc:ba:b9:e1:99:7e:53:10:96:03:62:b4:95:ea:fc: fc:4d:19:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY2MzExMC8GA1UEBRMoM0NBQUVBRjFCMEQ0QkY2MzE3QUU0RjFFNTQ2Mzc5QkZG MzQ2Q0ZEMzAeFw0yNTA5MDcwNzUwNTNaFw0yNTA5MTQwNzUwNTNaMBgxFjAUBgNV BAMTDTY4YmQzOTVlLTJjNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ0dCnuZREYpZQDONsOWGm2jonTaIgdBoXlq3vzrZiwxwfg+de4AD+BsCuU+e3 cErLEWVg5PdzlvOorJfXxLDXOTjNvBRdah/4A7piRP8f+KEHc9Xh1dRl/9PoUsl4 ruzE86z/a+gpP3uk1bkmsGe+I36x12CSiySXLZ+hpBOeax8k3kNIT9W3+TOO4yeT +XtKMn8A2jRiionRfpln+xZrdx8gOKKrSVbUSWHisjTsDXE3a0/DH0+xyLizUyCE YBP+MxYli5yhKFd5r4bxlsHF9gYgv/cBqbvzYWZN1BrfVm0k0Wi58bAMfgYgi7/7 0lx8hqHjI5bQi+w3J+QpfWY1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSucu36OO lN1wbrlCfsIF3HdIMrcwHwYDVR0jBBgwFoAUPKrq8bDUv2MXrk8eVGN5v/NGz9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzLzdBQzk2NzlFMTcy MDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEtycThiRFV2Mk1Ycms4ZVZHTjV2X05HejlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NjYzLzdBQzk2NzlFMTcyMDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJN WHJrOGVWR041dl9OR3o5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD07g+MiV1grfHzPntQdE5efwoRfwulhZC4+pAa+vFPy32QvN/rw1drc rIxKyTYZFTyJGIRGLwn1xg4QsjhPKDbc/YXqqYShryQ9huPs3op/J9tRy5wfX9Co zaQ6SVTEgtXK1ES0XT5giaJFBkauhUNSvLDrlNnPLSpKbdyV0sdQRw7FgQOzBBp9 B8jTacJ47xZiLBKXeRgk3Dl44TulNwmdxK7/cuQ/zFr7PTrY5CupMiQCk9aPx/OV 56bQCj7dQplNKPFNkdoTYXCWWJqehxDA/OEYveH25ylmGegA5hu/2VNQ5l9fCoBw L+TaNcy6ueGZflMQlgNitJXq/PxNGTY= -----END CERTIFICATE-----Generated at Tue Sep 9 05:28:44 2025 by rpki-client