$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft File: RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft (raw, json) Hash identifier: RlhLMy7IwUWPsrOBzUZYCUdHRaJeZdTvEThWfcK/jDc= Subject key identifier: 30:2E:EF:FC:FB:73:E6:BF:1D:05:56:77:52:CE:69:28:2B:3A:A8:DC Authority key identifier: 47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17 Certificate issuer: /CN=A911DD04/serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft Manifest number: 012C Signing time: Sat 23 Aug 2025 04:47:32 +0000 Manifest this update: Sat 23 Aug 2025 04:47:32 +0000 Manifest next update: Sat 30 Aug 2025 04:47:32 +0000 Files and hashes: 1: RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl (hash: FcfDe9hQ83HQ6eTr/T1V20WESfPAzelwR1gzQrKcYVg=) 2: 939790AAB9BD11EEA19BE74DC4F9AE02.roa (hash: usgNeDoGlzZoBDkMS+oNirA/1DpfH4pmT68FwmH4UH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DD04, serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17 Validity Not Before: Aug 23 04:47:32 2025 GMT Not After : Aug 30 04:47:32 2025 GMT Subject: CN=68a947e4-1b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:f3:a9:f8:c2:3f:b7:fa:52:88:f9:19:c5: 55:87:d3:a2:f6:fd:3a:be:16:5c:98:0e:e0:f4:b8: eb:e0:3c:73:ca:23:13:66:5b:13:28:e4:e2:d4:da: d9:b0:16:82:c9:8e:58:d6:55:20:b6:53:77:c0:c9: df:01:82:1a:71:c6:7b:be:16:86:b6:c4:2f:f5:a3: eb:c9:cc:28:0e:26:34:68:0c:e1:21:60:05:d2:06: d0:c1:38:c3:12:e8:bf:04:92:18:40:3b:4d:c2:69: b6:1b:19:b7:41:78:10:1c:54:00:54:f1:05:a3:b1: 8b:4a:18:df:ca:8a:b8:71:1d:2b:12:98:9c:df:b5: 5a:9e:9d:c7:53:08:54:ee:65:ab:17:cf:63:09:0c: 4d:a5:d3:fe:49:94:c5:69:fa:95:37:39:01:31:34: 4d:47:01:71:ed:3f:89:44:4a:fa:cc:42:1a:51:ca: c8:ee:80:59:31:b5:0c:21:da:3b:3a:8f:da:86:ba: 1c:76:58:64:4c:d2:ea:a1:af:88:f3:86:d9:54:70: c3:cb:0f:e1:54:49:e1:ba:1b:cf:96:2b:18:90:34: 9f:92:1e:c1:91:7d:00:23:22:e2:1b:c2:92:c3:db: d5:71:73:dc:06:f3:7e:7c:38:fd:a2:f3:f1:fc:ad: 23:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2E:EF:FC:FB:73:E6:BF:1D:05:56:77:52:CE:69:28:2B:3A:A8:DC X509v3 Authority Key Identifier: keyid:47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:6d:79:f0:5c:8c:3b:07:5b:32:ae:a2:f4:95:3e:aa:a7:1f: be:2a:72:8a:15:b3:00:7b:16:ee:ed:22:0f:ce:4c:e4:38:16: e9:8a:f9:c2:e3:fb:f3:20:b3:d3:af:32:73:ac:b8:71:0d:fd: 63:9e:4f:1d:87:b1:7a:75:fe:31:dd:cb:14:42:0f:88:d6:9f: 66:b1:1e:ba:cd:bb:f7:9e:ba:b2:bd:e0:5a:93:a7:23:63:ef: 67:6f:96:f4:34:09:ea:23:0c:61:10:7f:1f:d7:f8:28:57:d2: f4:35:f6:ed:b8:bd:06:3b:a2:04:47:31:34:6c:62:75:cc:a4: b8:a3:cd:c5:fb:80:c4:a0:f4:5a:e4:69:a4:9b:8b:1a:02:a2: ad:03:e0:05:79:59:d0:63:7f:66:a1:31:06:61:0c:82:5f:52: ee:f0:ee:a2:c9:23:10:36:37:90:0e:fd:20:45:97:ac:3d:3b: 2c:99:17:d8:9f:4d:04:9e:61:48:aa:a0:58:36:68:be:9a:88: 89:f5:9c:ba:14:f6:09:11:bb:ba:77:cc:6d:19:3e:d7:bb:2f: e4:a2:cb:86:93:72:b7:6c:f4:c8:7f:4a:96:c6:2d:15:bb:9f: 56:65:46:24:72:2d:32:d3:29:17:db:0b:e1:c2:e3:b4:36:e6: 27:d7:f6:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUREMDQxMTAvBgNVBAUTKDQ3MzQ2NDg0NzE1OUJCMTUyRkJGRTFEQkI1QTFCMDE1 NDY4MjJGMTcwHhcNMjUwODIzMDQ0NzMyWhcNMjUwODMwMDQ0NzMyWjAYMRYwFAYD VQQDEw02OGE5NDdlNC0xYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmfzqfjCP7f6Uoj5GcVVh9Oi9v06vhZcmA7g9Ljr4DxzyiMTZlsTKOTi1NrZ sBaCyY5Y1lUgtlN3wMnfAYIaccZ7vhaGtsQv9aPrycwoDiY0aAzhIWAF0gbQwTjD Eui/BJIYQDtNwmm2Gxm3QXgQHFQAVPEFo7GLShjfyoq4cR0rEpic37Vanp3HUwhU 7mWrF89jCQxNpdP+SZTFafqVNzkBMTRNRwFx7T+JREr6zEIaUcrI7oBZMbUMIdo7 Oo/ahrocdlhkTNLqoa+I84bZVHDDyw/hVEnhuhvPlisYkDSfkh7BkX0AIyLiG8KS w9vVcXPcBvN+fDj9ovPx/K0jVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAu7/z7 c+a/HQVWd1LOaSgrOqjcMB8GA1UdIwQYMBaAFEc0ZIRxWbsVL7/h27WhsBVGgi8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREQwNC9DM0Q1RkRDNkI5 QkIxMUVFQUEzMjI5NUVDNEY5QUUwMi9SelJraEhGWnV4VXZ2LUhidGFHd0ZVYUNM eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6UmtoSEZadXhVdnYtSGJ0YUd3RlVhQ0x4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REQwNC9DM0Q1RkRDNkI5QkIxMUVFQUEzMjI5NUVDNEY5QUUwMi9SelJraEhGWnV4 VXZ2LUhidGFHd0ZVYUNMeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJbXnwXIw7B1syrqL0lT6qpx++KnKKFbMAexbu7SIPzkzkOBbpivnC 4/vzILPTrzJzrLhxDf1jnk8dh7F6df4x3csUQg+I1p9msR66zbv3nrqyveBak6cj Y+9nb5b0NAnqIwxhEH8f1/goV9L0NfbtuL0GO6IERzE0bGJ1zKS4o83F+4DEoPRa 5Gmkm4saAqKtA+AFeVnQY39moTEGYQyCX1Lu8O6iySMQNjeQDv0gRZesPTssmRfY n00EnmFIqqBYNmi+moiJ9Zy6FPYJEbu6d8xtGT7Xuy/kosuGk3K3bPTIf0qWxi0V u59WZUYkci0y0ykX2wvhwuO0NuYn1/Ym -----END CERTIFICATE-----Generated at Sat Aug 23 18:41:30 2025 by rpki-client