$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft File: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json) Hash identifier: b0hHacnXvoZTrlK1jREVjWqgBpOqMERwjYhojwQOSos= Subject key identifier: D4:0D:6C:C1:53:8A:0D:0B:3A:8C:92:8F:4B:DE:DD:61:75:E2:77:C2 Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft Manifest number: 0209 Signing time: Sat 23 Aug 2025 02:31:25 +0000 Manifest this update: Sat 23 Aug 2025 02:31:24 +0000 Manifest next update: Sat 30 Aug 2025 02:31:24 +0000 Files and hashes: 1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: mQ6s49gtdR6CLvC0DcgQh/CQuywphjI4NQ0SUxgcSdQ=) 2: 13BC244C61A311F0A6E3910CC4F9AE02.roa (hash: PZ/Rcq3UjWrVkjq/myGAfI/HR3kWEFWwoh0XtDhdPhA=) 3: E8F2B1C224E911F0B5C26715C4F9AE02.roa (hash: G8jsJ+mpJjx+P09daIjyz9j+xHd4TGz4K0la+7J5BHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Validity Not Before: Aug 23 02:31:24 2025 GMT Not After : Aug 30 02:31:24 2025 GMT Subject: CN=68a927fd-4cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:b0:57:aa:17:c9:bb:6c:52:08:3c:eb:c6: dd:d0:77:f6:b9:34:42:27:f5:5e:d9:46:db:02:30: 48:29:07:c3:5f:24:ad:ff:8d:f4:5a:a5:d9:8a:a3: 0e:c1:3d:3a:2d:8c:57:12:d1:23:31:03:71:40:43: da:a4:fe:f4:48:58:77:eb:59:dd:90:7d:de:60:ae: b8:d5:6d:25:03:54:fa:6b:a9:3b:60:17:81:dd:8d: ef:7f:5c:77:f2:07:5d:b4:b7:51:0e:6f:92:96:b1: 86:71:55:a9:1d:6b:d1:51:32:ab:b7:61:f4:1d:7a: a0:c1:29:2b:be:48:75:80:46:33:80:7b:59:99:7a: 3c:45:4b:87:e1:31:65:c2:b3:75:c2:5c:4e:1d:79: 24:01:2c:32:a9:b8:04:67:bb:7b:31:6a:fc:97:cb: bf:b8:c8:5a:d6:e4:7b:7f:8f:e2:8a:b8:8e:6b:2e: 05:ec:19:3d:e2:1c:73:13:14:3c:0a:08:78:19:e1: 62:04:f3:1e:4e:5a:8e:94:4e:59:74:8e:53:d9:1b: 47:2c:04:00:be:28:cc:03:93:e1:7d:a1:fb:59:06: 93:ec:9f:2b:78:61:32:cc:27:b7:06:00:f9:ce:3a: a6:3a:cd:31:fc:e4:31:87:10:16:20:b0:94:f7:d6: 0d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0D:6C:C1:53:8A:0D:0B:3A:8C:92:8F:4B:DE:DD:61:75:E2:77:C2 X509v3 Authority Key Identifier: keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:ab:a6:5b:61:f8:80:27:ce:65:e8:63:78:72:4e:d5:cf:5a: 89:33:68:ba:69:67:7f:9b:2b:17:15:6b:52:76:1d:39:9d:c8: f3:97:48:e2:d7:b2:4c:d5:42:8e:81:9e:3a:6e:16:44:9b:25: 9f:95:0f:2d:b2:c1:af:90:f6:f2:ee:c4:e0:ab:2b:23:51:6c: 87:2b:f6:2a:14:9c:c4:27:a4:7f:46:d6:0e:db:09:52:ef:c8: 54:b1:20:7d:1e:2e:6b:7c:5f:b0:45:f6:1f:56:17:13:94:48: 3a:88:74:f3:6b:03:20:e3:a9:97:88:9e:aa:c2:13:52:df:3e: 53:be:87:43:1f:dd:85:a5:e8:53:21:4c:3f:71:bb:0f:11:87: 2b:ca:e2:38:20:c9:32:ef:f7:9a:7b:f7:90:83:72:13:c9:2a: 0b:06:38:fe:af:1a:02:01:1c:fa:24:2a:06:9b:ab:cf:39:3f: d4:11:f4:87:d9:a1:6a:42:75:23:67:54:2a:69:f5:ea:8b:8f: 48:3d:e0:43:11:6d:3f:79:57:b8:78:14:8c:a4:a4:c8:48:0f: 2c:df:94:e6:20:20:38:21:73:27:1c:22:61:c7:0e:16:ef:5e: d4:d4:fd:68:64:86:16:de:bb:54:e7:d7:5f:8d:1a:fe:13:a5: a6:0b:3f:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEREYxMTAvBgNVBAUTKEUzRTFDQ0NGODNENTJDQjhBM0M5ODdBODExRTFGODA3 RjMzOTNFN0YwHhcNMjUwODIzMDIzMTI0WhcNMjUwODMwMDIzMTI0WjAYMRYwFAYD VQQDEw02OGE5MjdmZC00Y2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwiwV6oXybtsUgg868bd0Hf2uTRCJ/Ve2UbbAjBIKQfDXySt/430WqXZiqMO wT06LYxXEtEjMQNxQEPapP70SFh361ndkH3eYK641W0lA1T6a6k7YBeB3Y3vf1x3 8gddtLdRDm+SlrGGcVWpHWvRUTKrt2H0HXqgwSkrvkh1gEYzgHtZmXo8RUuH4TFl wrN1wlxOHXkkASwyqbgEZ7t7MWr8l8u/uMha1uR7f4/iiriOay4F7Bk94hxzExQ8 Cgh4GeFiBPMeTlqOlE5ZdI5T2RtHLAQAvijMA5PhfaH7WQaT7J8reGEyzCe3BgD5 zjqmOs0x/OQxhxAWILCU99YN1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQNbMFT ig0LOoySj0ve3WF14nfCMB8GA1UdIwQYMBaAFOPhzM+D1Sy4o8mHqBHh+AfzOT5/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRERi9BMjEyNzY4Qzc2 MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxMaWp5WWVvRWVINEJfTTVQ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtSE16NFBWTExpanlZZW9FZUg0Ql9NNVBuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRERi9BMjEyNzY4Qzc2MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxM aWp5WWVvRWVINEJfTTVQbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARq6ZbYfiAJ85l6GN4ck7Vz1qJM2i6aWd/mysXFWtSdh05ncjzl0ji 17JM1UKOgZ46bhZEmyWflQ8tssGvkPby7sTgqysjUWyHK/YqFJzEJ6R/RtYO2wlS 78hUsSB9Hi5rfF+wRfYfVhcTlEg6iHTzawMg46mXiJ6qwhNS3z5TvodDH92FpehT IUw/cbsPEYcryuI4IMky7/eae/eQg3ITySoLBjj+rxoCARz6JCoGm6vPOT/UEfSH 2aFqQnUjZ1QqafXqi49IPeBDEW0/eVe4eBSMpKTISA8s35TmICA4IXMnHCJhxw4W 717U1P1oZIYW3rtU59dfjRr+E6WmCz8K -----END CERTIFICATE-----Generated at Sat Aug 23 21:17:30 2025 by rpki-client