$ rpki-client -vvf rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft File: 4FxkVUXZ74a0UeUhnYMnYPQFyug.mft (raw, json) Hash identifier: j0C0tEEpwDe3IJ9ILSo1J7tPKZb56V5Ka+tBob6Rifw= Subject key identifier: C8:95:A1:79:A3:A2:4B:BB:F4:A0:79:E7:61:30:39:25:C5:2F:C2:00 Authority key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8 Certificate issuer: /CN=A911E09E/serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft Manifest number: 17 Signing time: Sat 23 Aug 2025 08:14:23 +0000 Manifest this update: Sat 23 Aug 2025 08:14:22 +0000 Manifest next update: Sat 30 Aug 2025 08:14:22 +0000 Files and hashes: 1: 4FxkVUXZ74a0UeUhnYMnYPQFyug.crl (hash: QumHE8CnShXM12h3OUr5WhyCVYOAt+M1uYNb1yLQxzc=) 2: E1A91004624811F098E5B95AC4F9AE02.roa (hash: 1N1Nu5pcKDFIroX+rvuJL8XDBkDXCgLTCUyWTqRqaG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8 Validity Not Before: Aug 23 08:14:22 2025 GMT Not After : Aug 30 08:14:22 2025 GMT Subject: CN=68a9785e-977e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:98:ea:1b:7b:c5:74:0b:41:cc:62:8b:24: a6:84:99:4c:d1:a3:cf:3b:04:0f:d1:70:93:95:69: b1:69:98:f7:35:ad:d2:51:6b:c0:c3:c6:aa:12:eb: 30:50:a3:81:be:aa:af:bc:27:92:1c:92:f6:b8:b2: ca:a1:1c:25:3c:a0:69:43:18:75:76:b3:0e:54:4a: a7:48:55:46:48:ee:54:bd:3a:ee:a2:f4:1b:a0:27: 45:90:8d:72:2f:03:fe:4a:73:0e:a5:a0:25:bd:bb: 84:67:b1:d4:2a:5e:31:c2:95:b8:ec:58:ce:91:ea: 3e:b3:98:3c:87:cf:57:00:55:03:6c:f4:d5:7b:e1: 06:88:11:10:82:e3:74:0f:23:c8:13:3e:9e:4c:e8: 28:b7:63:c1:3e:b1:9f:b9:be:f6:77:1c:5b:95:fb: 71:ea:70:8b:37:18:d4:4e:2a:83:45:72:98:84:22: d6:c6:ec:ed:e9:6f:2f:d0:bd:1b:49:37:be:fc:07: c8:1c:d3:9c:e9:a4:c6:0c:5a:0d:51:bc:7e:2b:e3: 76:88:19:5c:08:4a:04:16:f8:07:ee:71:66:41:4b: 49:cc:e4:b8:7b:f1:89:fe:08:1b:59:e4:b7:a1:9f: 4a:69:41:d3:2c:33:64:64:10:7e:c7:c3:a2:49:d5: 1d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:95:A1:79:A3:A2:4B:BB:F4:A0:79:E7:61:30:39:25:C5:2F:C2:00 X509v3 Authority Key Identifier: keyid:E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:7e:03:89:74:74:9f:f9:d1:ee:5c:80:e8:5d:e7:14:cf:c9: 89:9b:0d:87:b9:eb:bb:2d:dc:60:fe:6c:27:58:8e:f9:73:57: 15:51:b1:d6:fb:d6:13:3e:f7:22:8f:43:7c:93:bc:a8:ec:93: 00:7f:d1:54:af:e9:8e:0d:02:2a:b9:9a:55:d1:b3:f4:7f:ad: 78:f0:80:dc:4f:e8:ee:89:45:0f:6a:23:67:d6:7e:c1:30:e4: cf:93:4c:1f:ed:03:3d:89:39:4e:8e:36:ee:e5:3a:14:61:9d: 8a:8f:06:46:53:08:f6:65:f7:c3:ac:6e:da:20:a0:6c:4a:95: d1:ba:eb:ad:c8:c7:9e:e0:f6:b5:69:bc:b1:2f:60:81:28:75: d6:57:f3:87:56:fa:12:38:cd:7e:17:6f:b1:29:ed:3e:13:39: 9a:7e:c1:5f:de:ec:3f:3c:19:13:9c:63:f4:02:49:a0:e5:9f: 87:9c:20:df:11:da:d3:b0:d5:0c:14:fd:ac:37:a3:df:6d:ad: 4d:2f:50:3d:82:53:58:df:1d:2b:e4:52:c5:23:f2:32:39:ac: 29:67:95:fd:92:58:2d:57:39:f0:4b:5c:a6:dc:5d:c7:17:18: f6:7b:33:09:ca:23:d0:90:2c:76:59:27:c9:4d:89:34:4c:35: e3:b4:e8:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTA5RTExMC8GA1UEBRMoRTA1QzY0NTU0NUQ5RUY4NkI0NTFFNTIxOUQ4MzI3NjBG NDA1Q0FFODAeFw0yNTA4MjMwODE0MjJaFw0yNTA4MzAwODE0MjJaMBgxFjAUBgNV BAMTDTY4YTk3ODVlLTk3N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+4ZjqG3vFdAtBzGKLJKaEmUzRo887BA/RcJOVabFpmPc1rdJRa8DDxqoS6zBQ o4G+qq+8J5Ickva4ssqhHCU8oGlDGHV2sw5USqdIVUZI7lS9Ou6i9BugJ0WQjXIv A/5Kcw6loCW9u4RnsdQqXjHClbjsWM6R6j6zmDyHz1cAVQNs9NV74QaIERCC43QP I8gTPp5M6Ci3Y8E+sZ+5vvZ3HFuV+3HqcIs3GNROKoNFcpiEItbG7O3pby/QvRtJ N778B8gc05zppMYMWg1RvH4r43aIGVwISgQW+AfucWZBS0nM5Lh78Yn+CBtZ5Leh n0ppQdMsM2RkEH7Hw6JJ1R2hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyJWheaOi S7v0oHnnYTA5JcUvwgAwHwYDVR0jBBgwFoAU4FxkVUXZ74a0UeUhnYMnYPQFyugw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFMDlFL0Q4QkIwRjM2NjFG QTExRjBCRDRGNjA2RUM0RjlBRTAyLzRGeGtWVVhaNzRhMFVlVWhuWU1uWVBRRnl1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEZ4a1ZVWFo3NGEwVWVVaG5ZTW5ZUFFGeXVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF MDlFL0Q4QkIwRjM2NjFGQTExRjBCRDRGNjA2RUM0RjlBRTAyLzRGeGtWVVhaNzRh MFVlVWhuWU1uWVBRRnl1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALp+A4l0dJ/50e5cgOhd5xTPyYmbDYe567st3GD+bCdYjvlzVxVRsdb7 1hM+9yKPQ3yTvKjskwB/0VSv6Y4NAiq5mlXRs/R/rXjwgNxP6O6JRQ9qI2fWfsEw 5M+TTB/tAz2JOU6ONu7lOhRhnYqPBkZTCPZl98OsbtogoGxKldG6663Ix57g9rVp vLEvYIEoddZX84dW+hI4zX4Xb7Ep7T4TOZp+wV/e7D88GROcY/QCSaDln4ecIN8R 2tOw1QwU/aw3o99trU0vUD2CU1jfHSvkUsUj8jI5rClnlf2SWC1XOfBLXKbcXccX GPZ7MwnKI9CQLHZZJ8lNiTRMNeO06FM= -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:05 2025 by rpki-client