$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft File: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft (raw, json) Hash identifier: kFOqUyV60/g6IbWhxPMbRkNDZ8Ji+eLc906kLVFdl9c= Subject key identifier: 7E:93:D8:D6:77:43:D8:A2:C7:14:F9:0E:23:6A:82:48:97:4B:1B:7A Authority key identifier: E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32 Certificate issuer: /CN=A914D0E3/serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft Manifest number: A0 Signing time: Sat 23 Aug 2025 06:30:59 +0000 Manifest this update: Sat 23 Aug 2025 06:30:58 +0000 Manifest next update: Sat 30 Aug 2025 06:30:58 +0000 Files and hashes: 1: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl (hash: EGSiZ5tc4uWE4BqnNpnMchW3rwq4g7uIeoiEumyZNrU=) 2: 793E79A68D1811EF92E90C51C4F9AE02.roa (hash: zVqTt6tzc+Il4GxP87PklggXFLaDGzjtaeUtoZhSM8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0E3, serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932 Validity Not Before: Aug 23 06:30:58 2025 GMT Not After : Aug 30 06:30:58 2025 GMT Subject: CN=68a96023-fde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:8c:88:39:5c:7f:3d:f9:7d:5e:ab:3e:b8: ed:1e:b1:fa:24:01:be:4d:13:68:aa:a6:20:f0:4e: a5:4d:c8:42:b3:19:dc:5c:99:e9:d8:11:14:81:f0: 68:8f:c0:13:17:3d:ff:eb:4f:53:6a:fd:98:a4:2d: dd:4b:1a:c2:9e:81:69:f9:fe:99:1d:01:60:34:57: 23:d0:c7:3a:8b:ba:14:77:a4:8b:38:f9:40:50:7c: ac:d7:86:01:6f:84:04:bc:2b:d9:ae:4e:67:4a:c0: 48:6b:4c:5c:d4:aa:eb:b0:75:44:e1:08:0d:08:0e: 92:b5:29:16:d0:a2:22:47:c0:6a:0d:cc:86:93:bf: 26:e7:94:ab:ca:8d:b0:51:17:1c:f7:4c:3c:15:fa: 1c:15:6f:6a:2a:a3:9f:7f:58:3c:20:13:cd:7d:21: 2f:e4:6d:11:d5:f8:e5:69:31:30:49:ba:41:de:a7: 83:d0:61:aa:ab:37:4b:43:71:44:c5:a4:c7:ad:b0: f7:9c:25:84:8d:59:de:61:e9:ee:5d:3e:a2:b7:ba: 59:2e:1a:9e:27:ef:ca:16:71:99:7d:27:9b:32:fb: 39:6f:12:ab:c8:16:8d:11:d7:c8:91:be:bc:17:4c: f6:51:b5:df:37:18:ca:51:0f:e0:83:1f:c2:60:6c: cb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:93:D8:D6:77:43:D8:A2:C7:14:F9:0E:23:6A:82:48:97:4B:1B:7A X509v3 Authority Key Identifier: keyid:E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:f9:58:8d:ff:2e:a2:26:92:5e:6f:80:8e:af:45:6e:7e:7a: 56:3f:d0:d3:ed:37:b8:38:3d:6a:6a:e6:26:07:e3:60:63:9a: 0c:7d:ab:21:04:67:1c:b0:5e:3f:ba:e0:4a:03:9d:ba:20:0b: 43:68:e9:e8:32:88:37:d3:c0:31:a8:76:38:d1:e4:46:57:7a: c8:2f:66:f6:c5:50:b6:0e:a3:a6:06:47:d2:12:54:19:1a:9c: 21:ab:6e:c9:99:6e:d8:c3:93:67:9d:7a:ec:4e:75:d8:84:26: 85:2d:75:08:d6:ec:40:59:3b:b8:9f:d2:4f:2f:bd:b6:df:31: 5e:ea:bc:28:52:1b:17:9b:2e:8e:e2:78:ff:8a:ea:a9:a4:c4: 6f:41:b8:59:21:a7:2c:cb:88:e2:c9:11:02:7b:af:0f:62:33: c9:cf:6e:af:94:46:d3:4f:c6:85:ff:1d:f2:47:6e:9b:29:22: b8:7c:dc:34:fe:eb:c5:10:d6:2e:91:95:72:ba:19:e1:13:da: f3:c0:9f:17:89:02:2e:57:bf:a4:77:e7:67:5e:f6:b1:e6:1b: dd:17:8a:79:3b:91:2c:42:74:8c:d1:3b:4f:fb:49:c6:15:86: c4:34:40:94:d2:73:17:c1:7b:01:1e:dc:35:39:94:61:f0:c6: 8d:06:a3:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwRTMxMTAvBgNVBAUTKEUwRTgwODMwNjU5NUZFNjhENUYyODFBOTYyQUY2REY1 MUU4NkY5MzIwHhcNMjUwODIzMDYzMDU4WhcNMjUwODMwMDYzMDU4WjAYMRYwFAYD VQQDEw02OGE5NjAyMy1mZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhuMiDlcfz35fV6rPrjtHrH6JAG+TRNoqqYg8E6lTchCsxncXJnp2BEUgfBo j8ATFz3/609Tav2YpC3dSxrCnoFp+f6ZHQFgNFcj0Mc6i7oUd6SLOPlAUHys14YB b4QEvCvZrk5nSsBIa0xc1KrrsHVE4QgNCA6StSkW0KIiR8BqDcyGk78m55Sryo2w URcc90w8FfocFW9qKqOff1g8IBPNfSEv5G0R1fjlaTEwSbpB3qeD0GGqqzdLQ3FE xaTHrbD3nCWEjVneYenuXT6it7pZLhqeJ+/KFnGZfSebMvs5bxKryBaNEdfIkb68 F0z2UbXfNxjKUQ/ggx/CYGzLGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6T2NZ3 Q9iixxT5DiNqgkiXSxt6MB8GA1UdIwQYMBaAFODoCDBllf5o1fKBqWKvbfUehvky MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBFMy9BQTk4NTlGODhD N0UxMUVGOEU5MkU3MUJDNEY5QUUwMi80T2dJTUdXVl9talY4b0dwWXE5dDlSNkct VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPZ0lNR1dWX21qVjhvR3BZcTl0OVI2Ry1USS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDBFMy9BQTk4NTlGODhDN0UxMUVGOEU5MkU3MUJDNEY5QUUwMi80T2dJTUdXVl9t alY4b0dwWXE5dDlSNkctVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX+ViN/y6iJpJeb4COr0VufnpWP9DT7Te4OD1qauYmB+NgY5oMfash BGccsF4/uuBKA526IAtDaOnoMog308AxqHY40eRGV3rIL2b2xVC2DqOmBkfSElQZ Gpwhq27JmW7Yw5NnnXrsTnXYhCaFLXUI1uxAWTu4n9JPL7223zFe6rwoUhsXmy6O 4nj/iuqppMRvQbhZIacsy4jiyRECe68PYjPJz26vlEbTT8aF/x3yR26bKSK4fNw0 /uvFENYukZVyuhnhE9rzwJ8XiQIuV7+kd+dnXvax5hvdF4p5O5EsQnSM0TtP+0nG FYbENECU0nMXwXsBHtw1OZRh8MaNBqMX -----END CERTIFICATE-----Generated at Sun Aug 24 04:48:53 2025 by rpki-client