$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft File: 4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json) Hash identifier: LdbGsfv9vHtiXRYN8dErRxV+ARpwuxOgd32a6LJnONg= Subject key identifier: 75:8F:05:92:EE:B1:70:BE:1F:BC:C5:17:2C:67:64:08:14:69:B3:B1 Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 08FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft Manifest number: 08E4 Signing time: Wed 02 Jul 2025 20:41:44 +0000 Manifest this update: Wed 02 Jul 2025 20:41:44 +0000 Manifest next update: Wed 09 Jul 2025 20:41:44 +0000 Files and hashes: 1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: PvIXRly+VE5Oz3lGZqM1HUX1MKR5K360GLt6eDmEsWw=) 2: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: YmROt2RnH3UdNIAXBylk68JRdbwoGmgzkhxTYT8yZZA=) 3: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: jI9GJ3mUj7/g+UDfOOrVVqKbgOohmwcRp94iSUpENxA=) 4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: 65R5M+eBFk+Sri4/ilXTe6yj4G3UYq+q394nSZKR7qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2301 (0x8fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Jul 2 20:41:44 2025 GMT Not After : Jul 9 20:41:44 2025 GMT Subject: CN=68659988-6748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:99:41:82:f4:dc:fb:29:b0:10:83:46:00:ef: 4f:09:fe:cf:82:9e:50:d9:1e:3b:0d:ac:a0:3f:14: ab:1c:c7:61:22:03:ba:73:e3:69:3d:10:35:37:30: 7b:1a:2d:6a:56:1e:4b:16:43:b0:57:79:ac:54:6d: 94:55:78:97:5c:e6:d3:b0:65:69:36:d6:46:d9:68: 0f:d0:13:86:20:34:99:3e:70:61:15:92:a5:a4:ec: 09:70:5d:c7:f0:7e:a4:37:6f:5b:ed:ae:55:b0:5e: 1f:36:c0:45:18:2e:db:4f:35:33:4c:80:ef:3e:87: 8f:e9:5d:10:9b:11:d9:69:74:7f:45:57:86:d0:ea: ca:ea:0b:c4:9b:ef:20:df:47:fe:46:dd:99:62:1a: 9e:3d:d1:c3:9d:17:6f:e8:0a:3d:4f:c3:d7:77:11: 8a:36:97:64:92:b2:37:ef:24:ba:c2:8f:2c:84:08: e2:32:28:57:e1:75:1e:67:70:15:75:58:1b:fe:ce: 88:ed:02:67:b2:b1:d2:91:ec:31:5a:5f:26:d8:e0: 7e:ec:82:ea:53:3f:48:53:d6:68:1d:c2:62:44:bc: d5:f5:30:4c:96:1d:cc:f5:96:c0:c9:f5:d1:fb:52: b2:9d:01:91:90:3d:60:6a:80:8f:e6:c2:ae:75:cc: ff:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8F:05:92:EE:B1:70:BE:1F:BC:C5:17:2C:67:64:08:14:69:B3:B1 X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:9e:ae:97:20:03:4a:ef:28:d8:d1:88:c4:ac:26:7e:ea:b9: 85:3a:b4:05:77:81:bb:cb:19:f8:84:03:8e:41:2c:51:1e:f3: 65:85:01:f8:f2:bd:f5:19:19:11:e8:2e:28:f9:ca:8f:4d:7b: 37:98:d5:34:00:76:93:90:9d:dd:ae:cf:8e:be:47:44:d6:c8: 60:d1:b0:9b:f0:59:3d:44:67:5e:4c:a6:5b:db:59:7b:56:28: 54:99:b3:61:dd:26:ce:e3:10:67:f4:24:60:d3:fc:fd:c4:d9: d0:e5:e5:02:c0:ca:04:35:3e:d9:0e:2c:06:e8:ef:03:af:57: 72:c3:9b:e0:c9:2f:5e:13:e0:80:2a:0e:87:fc:46:52:0f:ce: 68:a4:ed:e9:84:84:d6:b7:cb:4b:c9:d3:ba:60:35:1f:84:3f: 27:0b:8b:ae:8b:17:b6:66:55:9e:5d:29:ea:07:3e:c8:73:dd: de:d5:73:66:e3:2c:6d:74:a1:77:4f:d5:54:bd:cf:60:c0:42: 72:7f:f7:4d:04:fb:3d:b5:35:54:9b:02:07:4d:49:dc:47:fe: 64:95:b6:80:7b:36:38:b9:cc:60:46:e9:3d:b9:67:c0:93:88: 24:68:7e:f2:84:8c:d0:5a:ee:81:a9:7f:49:1a:a6:3a:49:51: 58:12:87:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjUwNzAyMjA0MTQ0WhcNMjUwNzA5MjA0MTQ0WjAYMRYwFAYD VQQDEw02ODY1OTk4OC02NzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15lBgvTc+ymwEINGAO9PCf7Pgp5Q2R47DaygPxSrHMdhIgO6c+NpPRA1NzB7 Gi1qVh5LFkOwV3msVG2UVXiXXObTsGVpNtZG2WgP0BOGIDSZPnBhFZKlpOwJcF3H 8H6kN29b7a5VsF4fNsBFGC7bTzUzTIDvPoeP6V0QmxHZaXR/RVeG0OrK6gvEm+8g 30f+Rt2ZYhqePdHDnRdv6Ao9T8PXdxGKNpdkkrI37yS6wo8shAjiMihX4XUeZ3AV dVgb/s6I7QJnsrHSkewxWl8m2OB+7ILqUz9IU9ZoHcJiRLzV9TBMlh3M9ZbAyfXR +1KynQGRkD1gaoCP5sKudcz/NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWPBZLu sXC+H7zFFyxnZAgUabOxMB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTEyRi80QjhCRkZFQ0I0NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhi a25WRjhrU1pLSEt0Q3Z3d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBknq6XIANK7yjY0YjErCZ+6rmFOrQFd4G7yxn4hAOOQSxRHvNlhQH4 8r31GRkR6C4o+cqPTXs3mNU0AHaTkJ3drs+OvkdE1shg0bCb8Fk9RGdeTKZb21l7 VihUmbNh3SbO4xBn9CRg0/z9xNnQ5eUCwMoENT7ZDiwG6O8Dr1dyw5vgyS9eE+CA Kg6H/EZSD85opO3phITWt8tLydO6YDUfhD8nC4uuixe2ZlWeXSnqBz7Ic93e1XNm 4yxtdKF3T9VUvc9gwEJyf/dNBPs9tTVUmwIHTUncR/5klbaAezY4ucxgRuk9uWfA k4gkaH7yhIzQWu6BqX9JGqY6SVFYEodT -----END CERTIFICATE-----Generated at Thu Jul 3 15:06:30 2025 by rpki-client