$ rpki-client -vvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft File: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json) Hash identifier: Sa/9yrTATUiIIWWbgLpIwRnkPU3Wqg9QFpT+AiTfwyo= Subject key identifier: 81:01:21:9E:14:5C:AD:E8:94:A7:89:84:DF:8B:81:11:B7:AB:3F:02 Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C Certificate issuer: /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C Certificate serial: 07CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft Manifest number: 07C6 Signing time: Fri 22 Aug 2025 21:20:27 +0000 Manifest this update: Fri 22 Aug 2025 21:20:27 +0000 Manifest next update: Fri 29 Aug 2025 21:20:26 +0000 Files and hashes: 1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: L1jvs6icJivxNFDTLeU15E5lOi6hsEQFmcoKowFptdw=) 2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: 04Yyac0X4yooHW+vSmS1SL3uVYlQ7JtEGZ1zzlU0iN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1997 (0x7cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C Validity Not Before: Aug 22 21:20:27 2025 GMT Not After : Aug 29 21:20:26 2025 GMT Subject: CN=68a8df1b-b8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:a7:e9:1b:5b:5f:3e:bd:84:d0:f1:8b:af: a6:c0:5d:90:6e:1c:b3:6f:fe:ef:84:ea:58:b6:83: 41:1a:ef:12:ac:77:6f:b2:90:48:48:cd:82:7e:3a: 74:30:a9:87:91:63:d5:f2:6a:85:7e:dc:e8:4d:8a: d8:ee:42:06:d8:de:c9:d5:c0:2f:00:3c:c3:4e:d2: 7a:c8:95:6c:51:cd:2d:40:a7:1b:a4:19:a6:26:c0: b4:af:0d:22:22:da:95:49:e8:e3:9c:54:e7:8b:a6: 05:b4:0c:c6:cd:e4:f3:54:81:27:46:ab:86:55:5e: a4:15:8d:6f:ae:a3:aa:51:4e:0d:97:e8:be:b5:2e: e7:d8:77:0b:83:d5:53:e0:28:d1:07:42:fd:82:9d: fa:cd:7a:18:07:55:2d:e5:61:7d:bc:9b:2c:3d:f5: 5a:82:a6:fb:cd:09:d2:15:c6:ad:c2:93:91:05:05: eb:67:6b:6d:84:c1:2f:52:c3:18:9a:8c:4e:dd:21: f9:f6:e8:28:15:cb:6b:e8:23:f6:ac:33:20:81:e5: ff:2e:d2:82:5c:da:1c:7a:8c:1c:77:1a:7f:27:62: 23:b6:05:47:fc:44:a9:50:56:ad:75:a6:09:3a:a3: 2e:df:54:dd:8f:c5:13:9d:6c:9f:c4:e8:6d:81:63: d2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:01:21:9E:14:5C:AD:E8:94:A7:89:84:DF:8B:81:11:B7:AB:3F:02 X509v3 Authority Key Identifier: keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:b3:08:c6:db:e1:12:b4:93:8e:85:4c:ad:80:c5:b1:a7:a7: 2d:78:2b:03:3f:52:3b:b5:3c:96:c2:d4:2b:f9:fc:48:57:c7: 23:8a:d5:39:92:57:99:97:67:fa:8c:34:d1:4b:6c:5c:23:65: 52:e9:e0:e1:71:e2:74:f3:9a:a6:df:44:3f:30:98:58:54:2e: 75:7d:de:e5:24:74:ee:39:f8:95:dc:f7:3d:78:71:d3:09:c0: 4d:90:90:5a:b6:e4:bd:ff:21:f6:01:55:9c:1c:35:58:47:de: c3:c1:fd:8c:36:ea:c6:0c:7f:09:34:10:de:43:ff:04:a8:cc: 85:43:e8:50:70:d4:71:3e:9b:47:44:61:5f:2c:b8:41:58:66: 6a:79:09:c1:a5:b9:82:a4:8d:d1:21:55:8d:0e:a5:8a:b2:92: 14:04:d4:4a:b5:3d:fd:8f:f8:ad:fd:fe:8e:9d:d6:62:21:f7: 17:62:36:57:b1:ee:96:1c:4e:0d:0e:92:8a:9e:01:73:28:ec: 3f:2a:91:27:52:5a:2a:17:67:29:1c:68:5b:9d:e2:ab:c9:cb: b4:4f:dd:9d:13:55:00:0e:91:e1:29:ed:9d:af:3c:7e:82:26: 27:14:3e:5e:a8:01:2b:90:69:0e:fa:a9:26:0e:0d:27:ae:02: 5d:0b:3d:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwRDYxMTAvBgNVBAUTKEUyRDgxM0Q2NkNFNTBERDkzOEZDM0E1MzJEQjhFREUy QzVCQTc5NUMwHhcNMjUwODIyMjEyMDI3WhcNMjUwODI5MjEyMDI2WjAYMRYwFAYD VQQDEw02OGE4ZGYxYi1iOGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBmn6RtbXz69hNDxi6+mwF2Qbhyzb/7vhOpYtoNBGu8SrHdvspBISM2Cfjp0 MKmHkWPV8mqFftzoTYrY7kIG2N7J1cAvADzDTtJ6yJVsUc0tQKcbpBmmJsC0rw0i ItqVSejjnFTni6YFtAzGzeTzVIEnRquGVV6kFY1vrqOqUU4Nl+i+tS7n2HcLg9VT 4CjRB0L9gp36zXoYB1Ut5WF9vJssPfVagqb7zQnSFcatwpORBQXrZ2tthMEvUsMY moxO3SH59ugoFctr6CP2rDMggeX/LtKCXNoceowcdxp/J2IjtgVH/ESpUFatdaYJ OqMu31Tdj8UTnWyfxOhtgWPSAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEBIZ4U XK3olKeJhN+LgRG3qz8CMB8GA1UdIwQYMBaAFOLYE9Zs5Q3ZOPw6Uy247eLFunlc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjBENi84OUEwRTdBMjA4 NkExMUVCOURGMzM4NDJDNEY5QUUwMi80dGdUMW16bERkazRfRHBUTGJqdDRzVzZl VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR0Z1QxbXpsRGRrNF9EcFRMYmp0NHNXNmVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjBENi84OUEwRTdBMjA4NkExMUVCOURGMzM4NDJDNEY5QUUwMi80dGdUMW16bERk azRfRHBUTGJqdDRzVzZlVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2swjG2+EStJOOhUytgMWxp6cteCsDP1I7tTyWwtQr+fxIV8cjitU5 kleZl2f6jDTRS2xcI2VS6eDhceJ085qm30Q/MJhYVC51fd7lJHTuOfiV3Pc9eHHT CcBNkJBatuS9/yH2AVWcHDVYR97Dwf2MNurGDH8JNBDeQ/8EqMyFQ+hQcNRxPptH RGFfLLhBWGZqeQnBpbmCpI3RIVWNDqWKspIUBNRKtT39j/it/f6OndZiIfcXYjZX se6WHE4NDpKKngFzKOw/KpEnUloqF2cpHGhbneKrycu0T92dE1UADpHhKe2drzx+ giYnFD5eqAErkGkO+qkmDg0nrgJdCz0g -----END CERTIFICATE-----Generated at Sun Aug 24 09:15:15 2025 by rpki-client