$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft File: hM4p-GFBrPuKdekE8CcjhS3mMzg.mft (raw, json) Hash identifier: knTEVwk2BE3nWlSScXldk+TFeNQYicZT/+fe0CllFnM= Subject key identifier: 62:DF:8E:CC:0F:6E:FB:A2:9C:89:31:8E:D3:B1:1C:18:0C:4B:75:02 Authority key identifier: 84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 Certificate issuer: /CN=A9114FFB/serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Certificate serial: 0A5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft Manifest number: 0A54 Signing time: Fri 22 Aug 2025 19:49:39 +0000 Manifest this update: Fri 22 Aug 2025 19:49:39 +0000 Manifest next update: Fri 29 Aug 2025 19:49:39 +0000 Files and hashes: 1: hM4p-GFBrPuKdekE8CcjhS3mMzg.crl (hash: 23YuBMJgdRcdKmdxTt3zsY5PPt4J9fWAotLWZhwZyHU=) 2: 267A24046E7D11EAADB09659C4F9AE02.roa (hash: 3bopi4jiFY/1Loa4aKzVKdm1Wqw6EWIsHmdkMoO5oMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2653 (0xa5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114FFB, serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Validity Not Before: Aug 22 19:49:39 2025 GMT Not After : Aug 29 19:49:39 2025 GMT Subject: CN=68a8c9d3-9cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f2:26:3a:88:1a:a5:45:26:85:bc:ae:13:4c: 8e:27:e9:35:28:97:c9:51:c7:8d:e7:ff:15:1b:f7: 25:06:38:8c:91:51:17:34:39:a3:f6:99:8d:76:6f: 16:f1:8c:4b:0e:f7:82:c7:11:da:1d:9e:d8:69:b9: 19:43:6c:7e:f9:eb:9d:8b:95:29:d8:39:69:d5:95: e2:ef:ca:1b:28:5c:e7:6c:5b:eb:0f:a8:24:54:58: 78:bd:59:2f:85:58:a1:7f:e8:0b:e7:98:e3:57:26: 68:f2:05:65:a8:5f:3d:e0:f5:10:a4:04:e8:04:06: cc:3b:78:3f:ce:56:88:82:1e:30:f0:db:93:ec:e8: 72:d1:c8:15:e5:b7:b3:44:78:89:2b:30:c8:aa:ed: 4b:85:1f:56:2e:ed:6b:d6:85:f6:da:e2:4f:ab:5d: cd:f7:8d:4d:83:6c:d6:b9:a9:5f:63:61:4f:3a:7f: d8:a1:11:87:b0:d0:da:bd:3c:c0:0d:e7:12:e0:96: c4:2a:c8:95:f7:e7:a6:c7:84:5a:49:d1:71:11:15: b2:e1:39:c3:d5:58:d5:dc:49:be:bc:b7:11:ba:64: 30:d5:52:0a:dd:8d:92:f3:0d:04:95:df:69:c6:ac: 55:68:1d:30:45:91:e2:2a:5e:47:b1:bb:22:fd:a4: ca:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DF:8E:CC:0F:6E:FB:A2:9C:89:31:8E:D3:B1:1C:18:0C:4B:75:02 X509v3 Authority Key Identifier: keyid:84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:83:6e:99:f9:50:11:5b:dd:08:d4:4f:6f:05:06:87:26:17: 0e:7a:2f:fa:7b:0d:c7:87:56:99:bf:70:8c:64:44:54:6b:03: d3:11:1f:5a:ba:4d:6f:16:0c:34:65:20:28:b6:f5:70:cc:3d: ef:87:a1:c5:f0:45:3d:88:61:e8:6a:97:b3:6e:1d:4c:31:3d: 5a:8e:7c:ff:fd:a8:0f:0c:a4:50:a7:9e:9b:74:e2:90:ea:62: 97:cd:cb:67:0e:2c:27:15:30:c0:76:92:d3:dc:6f:26:6b:6b: 95:5f:99:6f:2d:a5:52:3e:cb:36:12:0b:69:2a:c7:51:62:25: d0:d2:de:e1:d8:17:3b:96:e8:22:50:57:49:00:da:10:5b:15: cc:c5:7f:c7:74:cc:a7:f3:f3:14:da:49:33:a6:ae:55:17:00: a2:3b:79:4f:b9:26:e1:33:1b:e6:ca:c9:00:1e:73:82:bc:e1: 22:36:db:b3:ff:a4:6d:85:17:84:7c:f6:56:3c:ff:05:89:27: af:4e:c7:84:10:8a:a2:f4:8c:90:ce:16:83:71:26:1a:67:2f: 27:01:72:5d:b8:aa:be:6d:97:7f:68:f3:1a:5f:34:2a:30:fe: a3:ad:b1:a0:18:3d:19:aa:9e:d8:da:1f:89:39:a5:5d:06:a6: 15:3c:55:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGRkIxMTAvBgNVBAUTKDg0Q0UyOUY4NjE0MUFDRkI4QTc1RTkwNEYwMjcyMzg1 MkRFNjMzMzgwHhcNMjUwODIyMTk0OTM5WhcNMjUwODI5MTk0OTM5WjAYMRYwFAYD VQQDEw02OGE4YzlkMy05Y2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vImOogapUUmhbyuE0yOJ+k1KJfJUceN5/8VG/clBjiMkVEXNDmj9pmNdm8W 8YxLDveCxxHaHZ7YabkZQ2x++eudi5Up2Dlp1ZXi78obKFznbFvrD6gkVFh4vVkv hVihf+gL55jjVyZo8gVlqF894PUQpAToBAbMO3g/zlaIgh4w8NuT7Ohy0cgV5bez RHiJKzDIqu1LhR9WLu1r1oX22uJPq13N941Ng2zWualfY2FPOn/YoRGHsNDavTzA DecS4JbEKsiV9+emx4RaSdFxERWy4TnD1VjV3Em+vLcRumQw1VIK3Y2S8w0Eld9p xqxVaB0wRZHiKl5Hsbsi/aTKuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLfjswP bvuinIkxjtOxHBgMS3UCMB8GA1UdIwQYMBaAFITOKfhhQaz7inXpBPAnI4Ut5jM4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEZGQi82QUMxRjE2QTZF N0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQdUtkZWtFOENjamhTM21N emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hNNHAtR0ZCclB1S2Rla0U4Q2NqaFMzbU16Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEZGQi82QUMxRjE2QTZFN0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQ dUtkZWtFOENjamhTM21NemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACg26Z+VARW90I1E9vBQaHJhcOei/6ew3Hh1aZv3CMZERUawPTER9a uk1vFgw0ZSAotvVwzD3vh6HF8EU9iGHoapezbh1MMT1ajnz//agPDKRQp56bdOKQ 6mKXzctnDiwnFTDAdpLT3G8ma2uVX5lvLaVSPss2EgtpKsdRYiXQ0t7h2Bc7lugi UFdJANoQWxXMxX/HdMyn8/MU2kkzpq5VFwCiO3lPuSbhMxvmyskAHnOCvOEiNtuz /6RthReEfPZWPP8FiSevTseEEIqi9IyQzhaDcSYaZy8nAXJduKq+bZd/aPMaXzQq MP6jrbGgGD0Zqp7Y2h+JOaVdBqYVPFUv -----END CERTIFICATE-----Generated at Sat Aug 23 20:28:02 2025 by rpki-client