$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft File: A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json) Hash identifier: kt93RSaopX4W9Bv/vDE5eSp+IA8Ap26Fh9V1Xp54U0Q= Subject key identifier: 44:FD:0B:C4:FD:A3:EB:30:C0:C4:85:8E:AB:D6:5E:6E:9C:2B:32:D0 Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 Certificate issuer: /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Certificate serial: 34C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft Manifest number: 34B5 Signing time: Fri 22 Aug 2025 15:11:22 +0000 Manifest this update: Fri 22 Aug 2025 15:11:21 +0000 Manifest next update: Fri 29 Aug 2025 15:11:21 +0000 Files and hashes: 1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: IcIodJL3Xf1aErKryLCRpnLyQKUKZ3AtLPInQmwKRvc=) 2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: kZdCLZLr7MrW3XdEboMd7BRjcidMEtmhtIWvhKUYQqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13504 (0x34c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Validity Not Before: Aug 22 15:11:21 2025 GMT Not After : Aug 29 15:11:21 2025 GMT Subject: CN=68a8889a-9ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:2c:c2:c3:03:54:c2:ed:fb:31:72:1d:c0: 98:38:ff:7e:0e:7e:64:84:30:7f:61:d2:8f:ef:d1: dd:d0:a6:09:a9:06:56:0a:4f:ed:8c:5e:84:7b:c9: 37:4c:5d:fa:a4:a6:75:43:cb:57:11:9a:c3:fb:46: 28:e1:0b:8f:2b:40:fe:e2:c2:f8:8c:1b:4f:03:99: 90:60:3d:0e:0e:a5:4b:6f:ea:f2:0f:55:39:12:98: fc:5d:34:aa:92:ed:f1:22:9e:a7:6a:bd:0b:cf:0c: 35:66:b5:8b:87:50:00:05:19:34:1d:23:70:f8:5e: ab:bf:e3:1f:e3:8e:1e:e5:3d:6c:96:89:d8:74:7e: 5c:0e:f8:ae:90:e4:56:f7:f7:a7:42:49:dd:6b:77: 8b:d9:42:63:ed:51:7c:31:76:a2:f4:b1:43:d8:50: 16:a4:70:e2:e2:2c:5f:54:96:e6:fc:77:42:28:29: b9:c9:ee:16:01:69:55:99:d4:fc:d2:6e:65:9d:88: 1b:32:15:1c:8c:b3:c0:a3:cb:7c:33:20:4a:d8:8a: a9:91:9d:1b:f7:3e:7a:e1:45:29:c4:be:bc:8b:b0: fe:b2:df:41:c9:ef:2f:b2:de:28:13:a3:e9:e0:4a: 64:ba:97:17:35:24:20:da:52:87:b8:60:cb:3b:2f: 01:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FD:0B:C4:FD:A3:EB:30:C0:C4:85:8E:AB:D6:5E:6E:9C:2B:32:D0 X509v3 Authority Key Identifier: keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2d:4f:74:f3:40:cd:20:55:7c:e8:f7:79:a1:6e:a9:3d:65: 92:c8:46:e2:48:14:dd:ce:45:d5:0e:5c:3b:b5:52:6c:72:ce: 3a:7a:23:95:ea:0b:60:70:06:db:38:80:8a:e9:f0:b1:02:41: 79:0b:7e:1f:50:61:e3:d8:92:bb:30:8b:7c:0d:71:75:88:1c: e0:84:17:41:a7:04:cc:6d:35:48:8b:6c:7f:f5:c8:58:39:d0: 10:8d:e5:64:15:81:5c:f4:36:90:6a:11:1c:59:92:7e:6b:e4: c3:cf:83:7d:ec:d1:17:e6:b8:3c:b7:33:ae:24:ed:a9:c8:9d: d9:22:23:90:dd:3c:a8:d7:d5:f7:02:e0:a3:26:12:88:b8:2b: 96:bf:70:09:cd:d6:3b:95:72:a1:2c:6d:6c:d4:16:f3:f9:d3: 10:8f:16:73:64:01:d5:7a:05:b4:ba:33:96:81:8c:0e:a4:31: b1:50:9d:8d:89:b3:11:e3:0f:a9:ac:3f:e0:18:fd:9d:c1:03: f9:c9:a9:58:5b:b9:8e:dd:15:3b:c2:68:88:de:c7:53:61:5d: d9:c4:7d:49:40:98:bf:6c:06:19:24:25:cf:4d:e7:96:e8:fd: ec:c0:05:c3:37:51:95:5c:25:64:f0:8b:06:a5:f0:42:26:b6: 68:6e:5d:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJDRUMxMTAvBgNVBAUTKDAzOENGMkUyODA3N0RGMkNBREE0NTc1NkZCNUQ5OUE2 RTI0MEZEMDkwHhcNMjUwODIyMTUxMTIxWhcNMjUwODI5MTUxMTIxWjAYMRYwFAYD VQQDEw02OGE4ODg5YS05ZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRoswsMDVMLt+zFyHcCYOP9+Dn5khDB/YdKP79Hd0KYJqQZWCk/tjF6Ee8k3 TF36pKZ1Q8tXEZrD+0Yo4QuPK0D+4sL4jBtPA5mQYD0ODqVLb+ryD1U5Epj8XTSq ku3xIp6nar0Lzww1ZrWLh1AABRk0HSNw+F6rv+Mf444e5T1slonYdH5cDviukORW 9/enQknda3eL2UJj7VF8MXai9LFD2FAWpHDi4ixfVJbm/HdCKCm5ye4WAWlVmdT8 0m5lnYgbMhUcjLPAo8t8MyBK2IqpkZ0b9z564UUpxL68i7D+st9Bye8vst4oE6Pp 4EpkupcXNSQg2lKHuGDLOy8B5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFET9C8T9 o+swwMSFjqvWXm6cKzLQMB8GA1UdIwQYMBaAFAOM8uKAd98sraRXVvtdmabiQP0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkNFQy9COEIwQzc4ODFE QTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5eXRwRmRXLTEyWnB1SkFf UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0enk0b0IzM3l5dHBGZFctMTJacHVKQV9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkNFQy9COEIwQzc4ODFEQTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5 eXRwRmRXLTEyWnB1SkFfUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArLU9080DNIFV86Pd5oW6pPWWSyEbiSBTdzkXVDlw7tVJscs46eiOV 6gtgcAbbOICK6fCxAkF5C34fUGHj2JK7MIt8DXF1iBzghBdBpwTMbTVIi2x/9chY OdAQjeVkFYFc9DaQahEcWZJ+a+TDz4N97NEX5rg8tzOuJO2pyJ3ZIiOQ3Tyo19X3 AuCjJhKIuCuWv3AJzdY7lXKhLG1s1Bbz+dMQjxZzZAHVegW0ujOWgYwOpDGxUJ2N ibMR4w+prD/gGP2dwQP5yalYW7mO3RU7wmiI3sdTYV3ZxH1JQJi/bAYZJCXPTeeW 6P3swAXDN1GVXCVk8IsGpfBCJrZobl0i -----END CERTIFICATE-----Generated at Sun Aug 24 00:02:35 2025 by rpki-client