$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json) Hash identifier: q40XTCVh+TFkocYje7jXMyxntjisXJcguuBqsrzHrZU= Subject key identifier: 61:9B:77:05:5E:30:B3:B0:D5:34:F0:01:0A:38:04:EE:90:8E:AF:72 Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 04AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft Manifest number: 04A5 Signing time: Sat 23 Aug 2025 00:10:15 +0000 Manifest this update: Sat 23 Aug 2025 00:10:15 +0000 Manifest next update: Sat 30 Aug 2025 00:10:15 +0000 Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: oILshiArR1xOi4skBXprgRJuFsRPUZXPXXRrGAaR0Hk=) 2: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: oit1Hcurqov7MCqWlGsRBKXsNTM2JCAP78/GFOI7Xmc=) 3: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: 4z+897eYmawfXH/tzTqewnh8oQ4d+YXJLaFQ5gY8Qbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1197 (0x4ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Aug 23 00:10:15 2025 GMT Not After : Aug 30 00:10:15 2025 GMT Subject: CN=68a906e7-d4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a3:1f:e3:58:93:f8:6f:83:35:4a:02:4f:81: 59:23:f5:22:38:33:e5:f5:5a:ed:cd:9e:3b:12:f2: 0d:8f:9f:e6:55:30:d6:2e:29:d4:1e:bb:6d:4e:b7: 3f:51:21:c7:8c:fd:a0:92:ad:ae:86:a3:b8:f0:b8: 48:1f:b0:06:3d:7f:41:b4:d5:9f:7f:29:de:ab:1b: fb:5b:b5:3b:9c:b7:33:3e:e5:f8:64:54:cd:0f:59: 7d:90:4a:c4:0d:e2:57:06:47:3e:5b:b9:c5:c4:90: fc:22:ee:8f:df:90:ca:6c:49:24:d4:0b:ec:d1:8f: 38:05:b2:58:11:9f:aa:d1:91:6a:a4:be:61:61:31: f2:aa:d4:2c:94:0a:40:50:bd:bd:4b:53:54:e4:d7: 56:45:44:32:fb:32:2d:58:2d:de:31:fb:e5:f6:22: 4c:c5:09:cc:a3:97:22:a8:46:8b:2b:95:c1:4a:fe: be:d0:0f:d2:18:26:bf:1d:05:33:53:85:54:cb:02: a5:61:3e:5f:a7:8a:00:2d:ed:30:73:07:0d:36:a6: 25:b7:26:a7:58:d6:60:93:2d:ae:a8:c8:50:b7:ef: eb:62:67:17:ea:b0:a9:e2:c7:cb:1d:12:dd:77:23: a2:19:c0:2a:0f:7f:88:dd:90:89:69:91:92:59:5b: ba:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9B:77:05:5E:30:B3:B0:D5:34:F0:01:0A:38:04:EE:90:8E:AF:72 X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:cc:4d:d9:0a:54:48:ca:c0:7d:d8:fe:0e:42:bc:77:54:e5: 80:2b:d2:f9:04:34:98:c0:69:76:5c:3c:cb:19:7c:0a:08:05: 76:80:48:32:5f:dd:f6:68:07:6f:0c:32:76:eb:43:f0:b6:b5: 89:9b:d8:18:f9:26:cb:90:7e:04:0f:a8:b0:50:f8:1f:77:96: f2:5c:de:c8:c0:79:ab:a0:ed:07:10:e4:fd:8f:3a:2c:4e:19: 60:cb:29:82:19:3e:a0:44:5e:3d:b7:29:0a:cf:64:b6:cb:f8: 79:41:f9:48:2a:2a:1b:5e:42:cd:7f:c9:82:47:24:29:a3:b8: f6:10:c3:2a:45:25:63:fc:86:85:b9:7a:4b:7c:cf:52:e8:04: 51:0f:51:e3:41:56:b0:67:df:1f:92:ae:b4:03:cd:89:29:e2: 70:d9:c4:0a:9a:ea:0e:2b:08:74:2c:b6:d4:e4:82:c5:e7:67: 4f:99:6e:83:9f:c8:ab:c0:ff:3c:2a:3c:5b:81:26:90:ba:4a: 1d:6f:b5:24:0d:d2:cb:b1:7e:a1:be:e0:83:87:28:9a:b1:c2: 9e:24:cc:88:bb:eb:2b:d7:3f:13:1a:02:7b:7c:41:36:f1:18: 07:0f:d1:37:e2:25:e4:ce:16:23:b8:e9:c3:cd:c1:d1:30:21: cb:f6:6e:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjUwODIzMDAxMDE1WhcNMjUwODMwMDAxMDE1WjAYMRYwFAYD VQQDEw02OGE5MDZlNy1kNGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06Mf41iT+G+DNUoCT4FZI/UiODPl9VrtzZ47EvINj5/mVTDWLinUHrttTrc/ USHHjP2gkq2uhqO48LhIH7AGPX9BtNWffyneqxv7W7U7nLczPuX4ZFTND1l9kErE DeJXBkc+W7nFxJD8Iu6P35DKbEkk1Avs0Y84BbJYEZ+q0ZFqpL5hYTHyqtQslApA UL29S1NU5NdWRUQy+zItWC3eMfvl9iJMxQnMo5ciqEaLK5XBSv6+0A/SGCa/HQUz U4VUywKlYT5fp4oALe0wcwcNNqYltyanWNZgky2uqMhQt+/rYmcX6rCp4sfLHRLd dyOiGcAqD3+I3ZCJaZGSWVu6DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGbdwVe MLOw1TTwAQo4BO6Qjq9yMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y aS1hVm5XbURfaldQTzNxU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAzE3ZClRIysB92P4OQrx3VOWAK9L5BDSYwGl2XDzLGXwKCAV2gEgy X932aAdvDDJ260PwtrWJm9gY+SbLkH4ED6iwUPgfd5byXN7IwHmroO0HEOT9jzos ThlgyymCGT6gRF49tykKz2S2y/h5QflIKiobXkLNf8mCRyQpo7j2EMMqRSVj/IaF uXpLfM9S6ARRD1HjQVawZ98fkq60A82JKeJw2cQKmuoOKwh0LLbU5ILF52dPmW6D n8irwP88KjxbgSaQukodb7UkDdLLsX6hvuCDhyiascKeJMyIu+sr1z8TGgJ7fEE2 8RgHD9E34iXkzhYjuOnDzcHRMCHL9m4n -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:55 2025 by rpki-client