$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft File: 4xZnlgSAzwfjwi15DeTiAe9wQNs.mft (raw, json) Hash identifier: 04bwqBD8BKq14sJq1aGHZF+uSATKJq9F/r7/cuhIH8I= Subject key identifier: A8:1C:96:54:56:8C:B9:D9:E6:66:FB:D2:3F:7F:61:16:E0:78:CB:1A Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB Certificate issuer: /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft Manifest number: 01DF Signing time: Sat 23 Aug 2025 02:51:15 +0000 Manifest this update: Sat 23 Aug 2025 02:51:15 +0000 Manifest next update: Sat 30 Aug 2025 02:51:15 +0000 Files and hashes: 1: 4xZnlgSAzwfjwi15DeTiAe9wQNs.crl (hash: pka8R4ybYc+bqlCsgowbbliSOmQEOkQwxGsmf84dMmg=) 2: 0ADA583C5DB911F0A54D4C6FC4F9AE02.roa (hash: YIHS3PAvaz4V4QmFJCk8b1AkmK5GNgS8/DelBF3BA28=) 3: 0BBC997C5DB911F0A54D4C6FC4F9AE02.roa (hash: g6pquqeh1IhUuquygrP9Vdo65/Zud1vKIjoHKRNQNOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B310, serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Validity Not Before: Aug 23 02:51:15 2025 GMT Not After : Aug 30 02:51:15 2025 GMT Subject: CN=68a92ca3-2c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:c9:26:4e:49:47:61:6d:5b:6c:f7:55:62: d5:65:f4:36:fa:b4:41:83:ef:0f:9c:99:87:67:cf: 9b:8c:f6:94:85:5a:a3:86:cc:d1:ae:26:16:c0:58: bd:0a:80:e2:fa:0b:c6:9c:c9:64:32:66:8f:21:df: 70:43:a6:bd:73:40:cf:a5:18:52:65:d3:f3:98:bf: 16:80:7d:52:c0:ae:4f:9e:5f:18:14:8d:0c:14:f6: c5:0a:3f:7b:fe:d6:68:36:54:4c:27:6e:7e:5e:ce: 03:f8:49:01:80:39:41:e2:32:da:d1:c3:6a:e8:84: 98:7a:e3:af:ec:05:41:46:28:14:98:f9:3f:d2:f2: f9:8b:3e:f9:14:7b:35:c7:4d:76:ee:3f:c1:cc:6b: 82:62:94:4b:1f:e3:f1:2b:97:82:ec:9f:64:39:81: dc:cd:c8:4f:02:17:09:5b:0c:4f:75:57:15:ac:dc: 70:82:71:4d:d6:44:f1:e9:65:65:ab:e3:5d:e0:1c: 87:73:30:4a:de:96:30:9e:ff:7e:ab:fc:d4:f1:6b: fe:84:50:28:4c:2e:61:a0:d7:23:c7:9d:aa:49:10: 49:b7:33:31:ad:84:4f:22:4a:17:cf:dc:f9:86:49: 4f:35:3c:1e:42:d2:db:ed:cd:ea:0a:6e:b8:d6:5f: 6f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1C:96:54:56:8C:B9:D9:E6:66:FB:D2:3F:7F:61:16:E0:78:CB:1A X509v3 Authority Key Identifier: keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:13:ae:39:00:f2:2e:59:f9:7a:be:f9:48:86:d8:92:1f:1a: cd:01:38:9c:63:16:27:ba:7f:6c:81:ca:5c:0b:da:92:4e:26: d8:07:20:84:b6:96:90:57:da:65:e1:0e:d6:51:32:5c:f0:ca: 32:4c:ed:f7:f2:06:f4:9d:76:9f:9d:86:8b:0f:22:0d:50:58: f1:cd:1d:75:b9:5b:4f:f3:83:d1:21:7e:29:e0:67:d2:43:78: 11:6c:13:70:fb:28:a3:b1:4a:4b:77:10:f6:54:44:49:62:e1: 81:0c:9a:a2:8e:ba:9a:68:0e:49:9f:d4:ed:10:92:5c:90:84: 44:5e:90:cc:26:e1:23:f9:89:88:b4:35:53:28:96:a0:58:29: 4b:ad:3b:1b:f4:f6:85:f7:3e:64:c4:ec:9b:ec:73:b4:d0:96: 01:a0:fe:2c:b5:f4:09:5f:39:30:06:f6:ad:4a:94:f7:45:d2: f2:ee:b9:a6:99:72:3b:e2:83:46:9c:75:d4:e4:a9:1b:7a:79: 9d:bd:eb:88:85:c4:41:81:9b:8c:ed:52:49:6e:85:3c:d9:2c: 02:1c:c7:4e:80:63:07:4a:98:07:d0:0e:64:79:c0:ff:d8:72: 19:a9:29:e4:b5:de:4a:49:a7:32:98:c3:2d:fc:ba:42:14:01: b5:5f:fb:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIzMTAxMTAvBgNVBAUTKEUzMTY2Nzk2MDQ4MENGMDdFM0MyMkQ3OTBERTRFMjAx RUY3MDQwREIwHhcNMjUwODIzMDI1MTE1WhcNMjUwODMwMDI1MTE1WjAYMRYwFAYD VQQDEw02OGE5MmNhMy0yYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBjJJk5JR2FtW2z3VWLVZfQ2+rRBg+8PnJmHZ8+bjPaUhVqjhszRriYWwFi9 CoDi+gvGnMlkMmaPId9wQ6a9c0DPpRhSZdPzmL8WgH1SwK5Pnl8YFI0MFPbFCj97 /tZoNlRMJ25+Xs4D+EkBgDlB4jLa0cNq6ISYeuOv7AVBRigUmPk/0vL5iz75FHs1 x0127j/BzGuCYpRLH+PxK5eC7J9kOYHczchPAhcJWwxPdVcVrNxwgnFN1kTx6WVl q+Nd4ByHczBK3pYwnv9+q/zU8Wv+hFAoTC5hoNcjx52qSRBJtzMxrYRPIkoXz9z5 hklPNTweQtLb7c3qCm641l9v1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgcllRW jLnZ5mb70j9/YRbgeMsaMB8GA1UdIwQYMBaAFOMWZ5YEgM8H48IteQ3k4gHvcEDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjMxMC8zRUJEMTdDMkFE MTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3Zmp3aTE1RGVUaUFlOXdR TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4Wm5sZ1NBendmandpMTVEZVRpQWU5d1FOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjMxMC8zRUJEMTdDMkFEMTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3 Zmp3aTE1RGVUaUFlOXdRTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/E645APIuWfl6vvlIhtiSHxrNATicYxYnun9sgcpcC9qSTibYByCE tpaQV9pl4Q7WUTJc8MoyTO338gb0nXafnYaLDyINUFjxzR11uVtP84PRIX4p4GfS Q3gRbBNw+yijsUpLdxD2VERJYuGBDJqijrqaaA5Jn9TtEJJckIREXpDMJuEj+YmI tDVTKJagWClLrTsb9PaF9z5kxOyb7HO00JYBoP4stfQJXzkwBvatSpT3RdLy7rmm mXI74oNGnHXU5KkbenmdveuIhcRBgZuM7VJJboU82SwCHMdOgGMHSpgH0A5kecD/ 2HIZqSnktd5KSacymMMt/LpCFAG1X/t8 -----END CERTIFICATE-----Generated at Sat Aug 23 13:51:24 2025 by rpki-client