$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: /sJRGWLv4tSeUQb2LCoCw+5IBPD/9c6jC7jyKM4DkJY= Subject key identifier: 09:25:AA:9A:98:5C:05:6F:E1:52:28:73:CC:07:51:F6:53:2F:A5:27 Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 07DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 07D2 Signing time: Fri 22 Aug 2025 21:15:58 +0000 Manifest this update: Fri 22 Aug 2025 21:15:58 +0000 Manifest next update: Fri 29 Aug 2025 21:15:58 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: lZ/cjD5H79EGyQ7Y9mVsbqUoHDPlQzRCwP1SESOE0EY=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: nebZkphHnCGcHsK4OPuyoN2DWSVg+M+V/082vsrCEns=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: tXMl2RtLfZvDGfhyJ5diezkCwv50p552Np4xQThv520=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2012 (0x7dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Aug 22 21:15:58 2025 GMT Not After : Aug 29 21:15:58 2025 GMT Subject: CN=68a8de0e-97ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:4f:90:7d:ff:c7:34:3a:24:38:28:4f:ea: ea:42:c8:90:0d:61:dd:c6:24:9c:3b:f9:eb:40:31: 2f:12:3b:58:11:74:29:35:a7:6e:a1:5a:b4:53:10: 8e:b9:d4:c8:94:4e:fb:e1:3a:da:42:1b:a8:75:12: cb:91:47:34:a2:62:9b:ac:99:8e:40:10:1e:c7:28: ad:21:52:f5:65:89:4e:f4:7d:8d:4e:97:31:8d:6f: cc:16:5d:f5:9f:d4:9a:d9:30:46:d5:29:56:97:32: 22:d5:a3:8c:eb:53:14:02:86:ec:b8:ff:57:c7:d8: a3:02:9f:1b:08:d2:32:a7:d0:a4:23:16:6b:3f:cc: 53:be:85:f3:39:f3:d3:a5:d8:c7:fb:72:95:9c:1f: 54:36:b0:a0:5c:bf:f3:a6:cb:80:d7:f1:ea:11:9c: 46:0d:c2:a1:57:4e:ba:4a:c7:1b:9a:0c:b7:db:dd: 9a:4e:9f:bb:66:c1:8c:47:8d:62:12:3b:43:f2:60: 8c:c2:e3:2b:14:de:0a:31:29:e6:6b:ee:bc:1e:db: 4b:98:72:68:c7:ea:e6:1d:9f:f0:89:20:f3:8f:12: 43:07:23:fa:95:a8:a6:93:a0:5f:dd:b8:11:6e:70: d2:b9:3f:01:1c:11:c4:5c:f6:55:54:6c:bd:04:60: 87:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:25:AA:9A:98:5C:05:6F:E1:52:28:73:CC:07:51:F6:53:2F:A5:27 X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:89:a3:01:4f:89:1c:94:7e:c4:60:d6:2c:c5:62:0b:0d:6b: 09:3c:a3:12:16:1b:59:ba:0f:09:00:80:82:d1:90:19:ee:ce: ba:a2:1c:01:8e:5e:28:f9:b5:54:fb:65:40:f2:6e:9a:19:e8: 17:7b:f8:6e:ee:7d:4f:b1:bc:6a:29:73:08:b7:db:75:f1:20: ca:26:2b:55:3a:12:e6:18:d8:41:c7:1b:1c:2c:cd:ff:a8:56: 6d:e5:cb:2e:8b:4a:49:2e:d1:3f:b5:c4:56:c9:c1:92:cc:00: f9:e0:f6:15:d8:0e:0f:bc:b5:60:6f:09:de:db:6c:b6:05:4b: b7:11:db:67:f4:7a:50:e8:d5:81:8f:3c:3d:04:fc:cb:ef:0f: df:ef:96:c6:da:28:d9:a1:d2:bf:bd:84:26:89:21:df:09:e8: 03:8d:0a:73:20:48:7f:4e:7d:38:e4:a5:72:be:1a:9b:04:9e: 7b:ed:9e:a3:c3:3d:ee:3c:c8:47:30:26:1b:f3:49:29:c7:23: 60:e5:cc:a4:52:a3:9d:ce:92:08:ba:15:94:be:cb:c4:7d:69: 5c:05:51:f4:7b:f3:41:6b:5b:ed:01:39:3d:c7:af:ae:01:ef: 06:79:00:c4:3b:08:5b:c0:66:5d:48:ca:28:5e:8b:9f:59:7a: bb:b8:6c:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjUwODIyMjExNTU4WhcNMjUwODI5MjExNTU4WjAYMRYwFAYD VQQDEw02OGE4ZGUwZS05N2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1hPkH3/xzQ6JDgoT+rqQsiQDWHdxiScO/nrQDEvEjtYEXQpNaduoVq0UxCO udTIlE774TraQhuodRLLkUc0omKbrJmOQBAexyitIVL1ZYlO9H2NTpcxjW/MFl31 n9Sa2TBG1SlWlzIi1aOM61MUAobsuP9Xx9ijAp8bCNIyp9CkIxZrP8xTvoXzOfPT pdjH+3KVnB9UNrCgXL/zpsuA1/HqEZxGDcKhV066Sscbmgy3292aTp+7ZsGMR41i EjtD8mCMwuMrFN4KMSnma+68HttLmHJox+rmHZ/wiSDzjxJDByP6laimk6Bf3bgR bnDSuT8BHBHEXPZVVGy9BGCHmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAklqpqY XAVv4VIoc8wHUfZTL6UnMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYiaMBT4kclH7EYNYsxWILDWsJPKMSFhtZug8JAICC0ZAZ7s66ohwB jl4o+bVU+2VA8m6aGegXe/hu7n1PsbxqKXMIt9t18SDKJitVOhLmGNhBxxscLM3/ qFZt5csui0pJLtE/tcRWycGSzAD54PYV2A4PvLVgbwne22y2BUu3Edtn9HpQ6NWB jzw9BPzL7w/f75bG2ijZodK/vYQmiSHfCegDjQpzIEh/Tn045KVyvhqbBJ577Z6j wz3uPMhHMCYb80kpxyNg5cykUqOdzpIIuhWUvsvEfWlcBVH0e/NBa1vtATk9x6+u Ae8GeQDEOwhbwGZdSMooXoufWXq7uGxw -----END CERTIFICATE-----Generated at Sat Aug 23 16:22:33 2025 by rpki-client