$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft File: Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft (raw, json) Hash identifier: RKlrBav4Cz3PxQV19zbbvL1Bkvgs1uwzSsuZel71/Nw= Subject key identifier: D5:85:D5:51:78:EA:3A:7D:01:DC:4A:E3:84:15:FB:95:97:AF:3E:01 Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft Manifest number: 0175 Signing time: Sat 23 Aug 2025 03:55:48 +0000 Manifest this update: Sat 23 Aug 2025 03:55:47 +0000 Manifest next update: Sat 30 Aug 2025 03:55:47 +0000 Files and hashes: 1: Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl (hash: JLGEZeW8OKhJFNEkU7xJ/1NpoNK9Sp4o5sfGbiQMOds=) 2: 4D7FE224E87B11EEAF04B71AC4F9AE02.roa (hash: LhhhRZ9rRf4tKP+wa+0RqCOvGKNOYKeYqEjxUmyjiLQ=) 3: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (hash: QFhCans14JnqpL9Jwv4rbJ2pg2u9bZu64HPsOXqSkiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121995, serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Validity Not Before: Aug 23 03:55:47 2025 GMT Not After : Aug 30 03:55:47 2025 GMT Subject: CN=68a93bc4-82fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:72:3f:c1:18:7f:82:b2:95:72:bf:ca:f9: 9b:45:33:47:de:8f:5a:45:54:f0:5f:24:ad:37:29: 15:a1:3c:fc:b0:be:96:e1:74:9d:9e:dd:ee:c5:e4: a6:e0:66:7c:9b:7d:7d:4c:b2:65:ea:34:e1:83:56: e4:c0:42:a1:9a:d2:22:a1:12:a6:72:a9:7c:a9:1a: 63:43:3f:fa:36:6f:cd:c0:e0:3f:5a:6c:95:7c:f3: 5e:83:ab:39:57:02:1b:b1:0c:32:45:49:a0:66:c7: e9:06:c4:34:48:3d:86:74:c7:60:13:f8:ff:46:65: 6e:35:12:d1:e2:3b:9d:ce:83:55:de:09:bb:33:06: ff:cc:36:30:70:f6:26:2e:9e:f2:67:3e:70:34:1d: 1f:f4:22:e3:78:bc:e5:22:2c:26:45:8a:2a:ae:4f: cf:ed:6a:a6:22:99:d8:47:a0:5d:76:98:5c:db:90: 05:c7:f3:04:94:35:45:cc:21:55:23:5a:61:78:12: 49:b1:d5:37:43:85:a0:5f:e1:02:a4:47:0a:e5:c0: d1:3f:0c:4b:98:94:f7:ea:34:01:a8:bf:85:e2:c0: f4:55:80:33:64:83:1d:d4:9c:af:20:fe:ce:14:e7: 28:5d:6d:a9:de:6a:fb:f1:2a:b7:4b:cf:80:50:11: b9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:85:D5:51:78:EA:3A:7D:01:DC:4A:E3:84:15:FB:95:97:AF:3E:01 X509v3 Authority Key Identifier: keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:56:c0:df:40:36:69:25:30:6d:f3:7c:62:ea:c1:ae:8c:76: 1a:df:26:7b:e3:de:0f:d7:41:1b:38:b8:b8:39:c6:f2:95:1b: c0:c9:a5:53:37:5f:92:7b:da:eb:da:26:81:d2:05:bb:1a:06: d1:cc:9e:52:83:8e:06:80:9d:56:c9:89:d8:6d:25:29:25:34: 78:bc:ec:35:1f:26:0a:08:e2:db:0d:ef:73:81:92:1d:43:a5: 0b:e4:08:5e:48:bb:2a:17:a3:4d:5f:e2:ed:bf:c0:8f:44:60: a9:d8:88:39:d8:77:d4:5e:9e:bb:e5:bb:60:5a:c5:9b:f4:b5: df:5a:95:2f:15:2d:bb:a0:0a:5f:c1:8a:ef:9b:e7:44:d1:7b: 1a:29:38:ae:82:a2:e4:72:06:4b:92:94:91:93:af:f0:b6:17: 82:84:78:0a:cd:66:a1:ba:e6:c0:c8:e7:db:d9:50:60:e5:a9: 5f:c6:5f:72:b0:c9:42:b8:e0:35:d0:7e:30:10:cb:e0:71:9c: d6:4e:d9:cc:56:64:60:18:b8:84:28:0c:f2:2a:42:56:40:7c: 17:c9:ba:0c:03:ea:35:4b:47:6b:04:ae:b3:7c:25:06:48:b9: ef:f5:ee:24:99:25:d8:a3:c9:22:80:ad:ae:4c:61:75:ff:a4: c1:0b:d2:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5OTUxMTAvBgNVBAUTKDIyOUUwNjRBQ0Y0MzJGNjREQUE3MDE3QTY2QkU4QjYx QTk2QjE4NUEwHhcNMjUwODIzMDM1NTQ3WhcNMjUwODMwMDM1NTQ3WjAYMRYwFAYD VQQDEw02OGE5M2JjNC04MmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqVyP8EYf4KylXK/yvmbRTNH3o9aRVTwXyStNykVoTz8sL6W4XSdnt3uxeSm 4GZ8m319TLJl6jThg1bkwEKhmtIioRKmcql8qRpjQz/6Nm/NwOA/WmyVfPNeg6s5 VwIbsQwyRUmgZsfpBsQ0SD2GdMdgE/j/RmVuNRLR4judzoNV3gm7Mwb/zDYwcPYm Lp7yZz5wNB0f9CLjeLzlIiwmRYoqrk/P7WqmIpnYR6Bddphc25AFx/MElDVFzCFV I1pheBJJsdU3Q4WgX+ECpEcK5cDRPwxLmJT36jQBqL+F4sD0VYAzZIMd1JyvIP7O FOcoXW2p3mr78Sq3S8+AUBG59QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWF1VF4 6jp9AdxK44QV+5WXrz4BMB8GA1UdIwQYMBaAFCKeBkrPQy9k2qcBema+i2Gpaxha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTk5NS85RTM2QkZBNDRD MTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwyVGFwd0Y2WnI2TFlhbHJH Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwNEdTczlETDJUYXB3RjZacjZMWWFsckdGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTk5NS85RTM2QkZBNDRDMTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwy VGFwd0Y2WnI2TFlhbHJHRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnVsDfQDZpJTBt83xi6sGujHYa3yZ7494P10EbOLi4OcbylRvAyaVT N1+Se9rr2iaB0gW7GgbRzJ5Sg44GgJ1WyYnYbSUpJTR4vOw1HyYKCOLbDe9zgZId Q6UL5AheSLsqF6NNX+Ltv8CPRGCp2Ig52HfUXp675btgWsWb9LXfWpUvFS27oApf wYrvm+dE0XsaKTiugqLkcgZLkpSRk6/wtheChHgKzWahuubAyOfb2VBg5alfxl9y sMlCuOA10H4wEMvgcZzWTtnMVmRgGLiEKAzyKkJWQHwXyboMA+o1S0drBK6zfCUG SLnv9e4kmSXYo8kigK2uTGF1/6TBC9KB -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:36 2025 by rpki-client