$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft File: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft (raw, json) Hash identifier: K99+39LZv9Yc8NbvZnGtDJQKde18qLiWwkDqKGBCE5I= Subject key identifier: AD:76:44:67:FA:BD:45:33:ED:38:81:5F:59:73:72:D5:4B:8D:EF:46 Authority key identifier: 7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53 Certificate issuer: /CN=A914E600/serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft Manifest number: B5 Signing time: Sat 23 Aug 2025 06:41:53 +0000 Manifest this update: Sat 23 Aug 2025 06:41:53 +0000 Manifest next update: Sat 30 Aug 2025 06:41:53 +0000 Files and hashes: 1: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl (hash: xjVpL0UG7esLsFreQwrsW4ykks7bNsxCQSgl1XhOt6Y=) 2: B47102FE77F211EFBA1E9F7EC4F9AE02.roa (hash: AW0AjmB1MBpf81Bbaj4obKJm9vXagVv8vcAISz8uehk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E600, serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953 Validity Not Before: Aug 23 06:41:53 2025 GMT Not After : Aug 30 06:41:53 2025 GMT Subject: CN=68a962b1-f0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1f:17:61:2c:fd:53:ee:6e:31:ac:8b:57:26: 12:fa:d5:b0:0f:b7:7f:1f:9c:23:f1:7f:9b:14:cb: ec:dc:50:74:26:ac:33:8a:51:b4:9f:96:99:63:0f: fb:36:ee:d1:7b:37:2b:f9:c5:e3:fc:b3:02:16:32: da:19:aa:93:4b:fb:11:02:4d:9c:df:61:15:b5:48: bc:55:42:5a:04:f9:4f:52:fd:ca:1f:6d:92:b8:b7: c0:6b:e3:d0:fe:86:a4:cb:57:44:a8:74:6b:54:13: 3d:05:64:ca:3c:b8:4d:0e:13:c7:d2:7d:fa:26:4b: 23:26:99:ea:f9:84:e9:3f:35:79:67:bc:16:0a:d5: 4a:8f:95:36:28:09:3c:09:fa:c9:21:0f:bc:50:0d: ce:f3:92:dc:bb:5b:24:e0:65:61:11:2d:97:89:0b: bc:43:f2:59:da:08:b6:08:79:e4:b7:76:00:d9:6e: 92:de:a5:91:4c:10:83:2b:ba:59:0e:13:ab:fa:fa: a9:f4:57:52:fa:f6:cc:72:9e:94:b2:2d:42:32:90: 00:1c:60:c0:ec:c3:58:3d:77:15:d6:7b:bb:ec:3e: 2f:0a:51:cc:18:d6:3b:3a:7d:d4:05:0c:72:ae:b6: 77:45:9d:7d:19:fe:20:9d:08:40:68:a4:d4:f4:f2: 25:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:76:44:67:FA:BD:45:33:ED:38:81:5F:59:73:72:D5:4B:8D:EF:46 X509v3 Authority Key Identifier: keyid:7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:2e:a1:6a:63:8f:e6:05:82:67:00:2e:8b:c9:3a:ea:77:eb: d2:71:6c:cf:9d:f5:89:94:ce:cb:13:2e:85:cd:e6:54:6e:6f: cc:27:93:e7:7e:32:93:fc:03:15:41:89:b2:c2:96:cd:47:ea: 63:18:9f:ef:2d:d9:1e:85:af:2e:8b:7c:3d:fd:83:b5:e3:ff: 75:5a:e6:81:88:d4:f2:2e:b1:32:3b:ed:87:bb:6f:ad:58:51: 3f:33:62:df:1f:68:32:0c:d3:2b:e3:4b:28:2c:38:ab:7e:2e: e7:50:8b:14:58:f2:57:09:d1:7c:35:be:23:3b:d7:67:e7:1f: f7:10:04:86:b2:fd:d1:cd:be:fc:3e:24:bc:0c:66:84:4b:21: 3b:36:5b:66:01:cf:a5:13:34:18:53:f4:1d:a4:fb:a5:eb:ee: e7:95:a7:90:1d:4b:e7:51:03:fa:cf:a8:d6:9a:f9:d7:20:67: c2:3b:1d:ee:87:14:be:9c:2f:60:e8:20:ae:b1:8a:ba:e6:d2: b6:45:51:c2:1b:39:6d:3b:84:f1:7d:1b:ce:92:f7:e9:9b:17: 89:14:25:a9:22:7e:15:8a:cc:bf:4f:a3:05:84:38:de:d2:38: 1e:bf:36:c8:8a:a1:03:eb:59:09:ce:b6:31:19:2e:b6:6d:2e: 50:1f:2a:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2MDAxMTAvBgNVBAUTKDdGODI0NUJCRDRENDU5NzIxQjQxRDRGRjJCQkZCNDI1 RkYxMTg5NTMwHhcNMjUwODIzMDY0MTUzWhcNMjUwODMwMDY0MTUzWjAYMRYwFAYD VQQDEw02OGE5NjJiMS1mMGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvh8XYSz9U+5uMayLVyYS+tWwD7d/H5wj8X+bFMvs3FB0JqwzilG0n5aZYw/7 Nu7Rezcr+cXj/LMCFjLaGaqTS/sRAk2c32EVtUi8VUJaBPlPUv3KH22SuLfAa+PQ /oaky1dEqHRrVBM9BWTKPLhNDhPH0n36JksjJpnq+YTpPzV5Z7wWCtVKj5U2KAk8 CfrJIQ+8UA3O85Lcu1sk4GVhES2XiQu8Q/JZ2gi2CHnkt3YA2W6S3qWRTBCDK7pZ DhOr+vqp9FdS+vbMcp6Usi1CMpAAHGDA7MNYPXcV1nu77D4vClHMGNY7On3UBQxy rrZ3RZ19Gf4gnQhAaKTU9PIliwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK12RGf6 vUUz7TiBX1lzctVLje9GMB8GA1UdIwQYMBaAFH+CRbvU1FlyG0HU/yu/tCX/EYlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTYwMC8yQUE3RDQ1RTc3 RjExMUVGQUMxMTI5NDJDNEY5QUUwMi9mNEpGdTlUVVdYSWJRZFRfSzctMEpmOFJp Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y0SkZ1OVRVV1hJYlFkVF9LNy0wSmY4UmlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTYwMC8yQUE3RDQ1RTc3RjExMUVGQUMxMTI5NDJDNEY5QUUwMi9mNEpGdTlUVVdY SWJRZFRfSzctMEpmOFJpVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoLqFqY4/mBYJnAC6LyTrqd+vScWzPnfWJlM7LEy6FzeZUbm/MJ5Pn fjKT/AMVQYmywpbNR+pjGJ/vLdkeha8ui3w9/YO14/91WuaBiNTyLrEyO+2Hu2+t WFE/M2LfH2gyDNMr40soLDirfi7nUIsUWPJXCdF8Nb4jO9dn5x/3EASGsv3Rzb78 PiS8DGaESyE7NltmAc+lEzQYU/QdpPul6+7nlaeQHUvnUQP6z6jWmvnXIGfCOx3u hxS+nC9g6CCusYq65tK2RVHCGzltO4TxfRvOkvfpmxeJFCWpIn4Visy/T6MFhDje 0jgevzbIiqED61kJzrYxGS62bS5QHyqO -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:51 2025 by rpki-client