$ rpki-client -vvf rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft File: 4VLg53x5W1Qih9ZcHk4L8obU1eA.mft (raw, json) Hash identifier: tJ04CNcosk8X8bn10UTm9QWy079d/ca+5pVhKm3Guzo= Subject key identifier: 58:77:B4:BB:6B:71:E0:7F:71:40:26:4C:79:2E:62:E1:DE:50:28:BB Authority key identifier: E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0 Certificate issuer: /CN=A912763C/serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0 Certificate serial: 080E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft Manifest number: 0807 Signing time: Fri 22 Aug 2025 21:01:56 +0000 Manifest this update: Fri 22 Aug 2025 21:01:55 +0000 Manifest next update: Fri 29 Aug 2025 21:01:55 +0000 Files and hashes: 1: 4VLg53x5W1Qih9ZcHk4L8obU1eA.crl (hash: OwbPnyenHY+h1JJbCT1yGI2cG+juA4RFCyPEk/pzsqU=) 2: 22329D14EE6511EAA50E8052C4F9AE02.roa (hash: CrTXUk46Qs0+2Fg8G1Szn+PXGeNBfOdVzoZfC6kMiL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2062 (0x80e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912763C, serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0 Validity Not Before: Aug 22 21:01:55 2025 GMT Not After : Aug 29 21:01:55 2025 GMT Subject: CN=68a8dac3-3801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6c:e6:05:52:05:bc:43:34:06:31:df:d5:25: 2d:c5:0e:37:78:12:26:8c:6c:65:8d:15:69:ba:2e: 20:42:5b:47:a2:d6:8e:d9:8f:1a:02:bc:7b:c4:30: 2c:ce:71:89:3f:1d:0d:13:ec:c7:3a:bc:9d:17:9b: aa:92:21:73:63:41:6b:1e:7e:b6:8d:45:b0:5a:62: eb:e3:4f:72:35:bb:36:fa:72:38:07:37:c6:31:15: 26:32:8b:f6:1f:53:85:7c:19:f9:e8:f1:ed:69:cc: 23:86:de:a6:c1:03:a2:e8:8d:20:ba:c4:41:4f:bc: d7:dc:e7:62:02:30:9c:4b:51:8e:48:3d:53:30:30: c7:8e:0b:e2:aa:b1:e8:d3:e4:39:25:90:d2:b8:25: 3e:2b:c6:6a:a2:b2:78:2b:c5:79:1e:2c:e4:08:fc: 5a:22:09:82:81:33:db:46:a8:cc:2e:2a:7b:38:f3: a5:5c:37:1a:7d:69:fe:30:68:4e:f9:ec:8c:92:38: 93:35:b2:d6:87:67:e4:4b:a3:3f:fe:e5:6d:df:c6: aa:ba:42:71:c3:af:52:a0:ad:26:fc:66:14:bb:31: bc:20:f8:6e:06:91:8b:63:fb:f9:18:a6:75:a6:8a: 44:96:af:d9:3f:16:6f:1f:7e:e1:1c:11:73:e0:5a: 15:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:77:B4:BB:6B:71:E0:7F:71:40:26:4C:79:2E:62:E1:DE:50:28:BB X509v3 Authority Key Identifier: keyid:E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:b4:f4:b2:07:ab:27:1b:66:67:f4:df:d1:30:60:39:03:3c: db:6a:49:0f:30:bb:b9:45:c9:b4:0c:76:e9:5a:61:7b:20:c1: 51:78:36:28:fc:43:e1:59:bd:47:de:40:28:2e:a3:c9:36:64: 4f:03:ad:8f:4f:ca:ef:58:0a:3d:48:85:43:92:71:81:56:03: 36:26:58:2a:2b:79:6f:ab:77:ee:50:f4:6c:d8:e7:bc:2e:9d: ad:2e:3b:a0:77:93:c6:f0:ee:b7:37:79:84:67:17:42:0a:3a: b9:7b:40:e2:b7:e2:fa:6d:12:73:86:55:cc:e3:84:28:b2:a9: e5:94:01:b0:31:98:69:50:6f:70:27:d0:58:63:81:c2:6d:0b: 9c:f2:33:25:83:d5:1f:11:b2:73:09:4c:97:a6:5a:27:41:20: b7:f8:30:4f:45:84:4e:e1:90:91:16:7e:92:95:c2:1c:71:99: 03:00:e7:ff:08:68:b8:41:eb:61:d8:e7:ee:72:b1:c7:19:88: dd:c8:a9:91:08:96:46:27:16:44:b8:81:2c:2f:17:c6:de:90: 2a:97:86:69:59:2f:09:e3:1e:6a:fc:58:6f:2d:74:c3:4a:4c: e2:37:0a:86:f3:58:db:a9:41:63:e8:b2:9d:82:68:9e:64:d1: 71:e7:f3:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2M0MxMTAvBgNVBAUTKEUxNTJFMEU3N0M3OTVCNTQyMjg3RDY1QzFFNEUwQkYy ODZENEQ1RTAwHhcNMjUwODIyMjEwMTU1WhcNMjUwODI5MjEwMTU1WjAYMRYwFAYD VQQDEw02OGE4ZGFjMy0zODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6mzmBVIFvEM0BjHf1SUtxQ43eBImjGxljRVpui4gQltHotaO2Y8aArx7xDAs znGJPx0NE+zHOrydF5uqkiFzY0FrHn62jUWwWmLr409yNbs2+nI4BzfGMRUmMov2 H1OFfBn56PHtacwjht6mwQOi6I0gusRBT7zX3OdiAjCcS1GOSD1TMDDHjgviqrHo 0+Q5JZDSuCU+K8ZqorJ4K8V5HizkCPxaIgmCgTPbRqjMLip7OPOlXDcafWn+MGhO +eyMkjiTNbLWh2fkS6M//uVt38aqukJxw69SoK0m/GYUuzG8IPhuBpGLY/v5GKZ1 popElq/ZPxZvH37hHBFz4FoVDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFh3tLtr ceB/cUAmTHkuYuHeUCi7MB8GA1UdIwQYMBaAFOFS4Od8eVtUIofWXB5OC/KG1NXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzYzQy9GMjBBQjMxQ0VF NjIxMUVBQTc2NjY0NEVDNEY5QUUwMi80VkxnNTN4NVcxUWloOVpjSGs0TDhvYlUx ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWTGc1M3g1VzFRaWg5WmNIazRMOG9iVTFlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzYzQy9GMjBBQjMxQ0VFNjIxMUVBQTc2NjY0NEVDNEY5QUUwMi80VkxnNTN4NVcx UWloOVpjSGs0TDhvYlUxZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBtPSyB6snG2Zn9N/RMGA5AzzbakkPMLu5Rcm0DHbpWmF7IMFReDYo /EPhWb1H3kAoLqPJNmRPA62PT8rvWAo9SIVDknGBVgM2JlgqK3lvq3fuUPRs2Oe8 Lp2tLjugd5PG8O63N3mEZxdCCjq5e0Dit+L6bRJzhlXM44QosqnllAGwMZhpUG9w J9BYY4HCbQuc8jMlg9UfEbJzCUyXplonQSC3+DBPRYRO4ZCRFn6SlcIccZkDAOf/ CGi4Qeth2OfucrHHGYjdyKmRCJZGJxZEuIEsLxfG3pAql4ZpWS8J4x5q/FhvLXTD SkziNwqG81jbqUFj6LKdgmieZNFx5/Ow -----END CERTIFICATE-----Generated at Sun Aug 24 05:01:39 2025 by rpki-client