$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft File: 4JlhFVCKOtWZFdurzLaW26C0zHI.mft (raw, json) Hash identifier: 2HFKmDxQhEz8Y28rd+5Zu3a1QMarIBLmIFGCG+FV/Zo= Subject key identifier: D4:CF:E3:D5:6B:43:F0:FD:48:35:D1:9A:5F:FD:BA:17:8C:86:D8:CA Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72 Certificate issuer: /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72 Certificate serial: 059D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft Manifest number: 057E Signing time: Fri 22 Aug 2025 23:30:54 +0000 Manifest this update: Fri 22 Aug 2025 23:30:53 +0000 Manifest next update: Fri 29 Aug 2025 23:30:53 +0000 Files and hashes: 1: 4JlhFVCKOtWZFdurzLaW26C0zHI.crl (hash: OxPQLJa/MYtk4epvLh8lz+5wmZyxp9cdcDwgLTWjLdc=) 2: BA758AE2212711F0A7DCCB5BC4F9AE02.roa (hash: m8lEVsnh3DvG0KEPCp4MW7Ow9L5MLhKDggw4WLNqc68=) 3: 03C7AA80F01111ED9C345840C4F9AE02.roa (hash: Am8OlNfTP5V8Kx5g/Dv+15S2O7P9HWujy6NfIY4x9VA=) 4: 04E8D402F01111ED9C345840C4F9AE02.roa (hash: aw0GsE7/msiXwaZd5f0HibklFhBHtqZY6llDRI4HTZY=) 5: F650791EF01411ED9210D060C4F9AE02.roa (hash: 4IZfBEYxdxWId8yUiHx63z7AlPcjMCqr2gmuQDYBUpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153CE9, serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72 Validity Not Before: Aug 22 23:30:53 2025 GMT Not After : Aug 29 23:30:53 2025 GMT Subject: CN=68a8fdae-a678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:6f:54:1c:a9:78:37:54:e9:51:c1:ce:78: 6a:e2:60:73:20:2a:56:ff:1f:a7:ab:49:d6:c4:70: 60:14:7e:58:6f:95:0e:e2:83:84:35:87:65:73:b3: 46:8c:63:be:1f:2a:f4:94:af:ae:da:95:08:bb:fe: ec:13:c9:a0:7e:be:6d:14:7a:47:f1:cb:fe:7d:67: 99:a5:2b:d9:78:dc:92:72:72:3f:3b:71:a4:6a:2e: 10:83:ac:2d:3d:9e:f7:26:1e:bb:bc:40:94:1d:8b: b8:af:20:a3:f7:3d:24:f6:0d:fe:23:21:45:ed:25: 1a:ed:0c:a5:ed:8d:f8:f4:b2:d9:bc:63:d4:75:55: 95:96:a3:eb:37:30:9b:42:b7:59:28:1d:f8:14:bf: d5:09:82:5e:55:94:95:c1:78:a7:eb:6c:e6:37:23: 81:25:68:43:3c:6d:4f:94:60:42:b9:ab:f1:71:0a: ba:35:cb:4a:57:3c:31:d0:18:0b:8a:51:d9:d4:df: ca:43:35:4f:34:16:fd:e2:28:9d:f4:05:25:0e:b1: 07:e8:22:e2:45:a0:7a:0d:eb:d3:81:1c:49:b2:8f: 63:de:4c:20:3c:44:8b:76:de:22:cc:1a:1f:0b:89: 2d:11:47:ef:91:1c:26:0a:da:44:c1:ce:56:71:cd: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CF:E3:D5:6B:43:F0:FD:48:35:D1:9A:5F:FD:BA:17:8C:86:D8:CA X509v3 Authority Key Identifier: keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:6f:b2:2e:a2:96:5e:8c:59:6e:94:64:d2:5c:75:b3:82:a5: ca:c9:67:e3:14:39:e8:36:44:d6:47:47:2e:38:a7:e4:2c:3d: b8:ca:93:29:ac:a2:d7:5e:02:d9:67:ad:67:2d:db:4d:d5:19: 6b:14:93:ec:a9:24:94:9e:d5:5f:b5:8b:77:4e:db:ed:d3:c6: 0c:bb:d0:2e:af:94:71:4a:0c:67:3e:bb:1d:27:83:54:53:64: cc:04:74:a4:6d:c5:2d:81:1b:51:4c:10:c0:d4:42:6b:64:9b: 30:2c:39:b4:0f:d4:c3:b7:46:b6:45:11:64:00:0c:81:d1:1b: 10:1c:4a:21:7e:b2:05:ab:14:4f:03:66:a7:93:d9:dc:48:79: 27:78:cd:b3:74:c4:f6:37:a2:16:01:d2:fb:0f:4d:52:32:a7: d3:74:61:e6:23:d8:9e:6a:4a:5e:b0:1c:17:67:15:53:0c:3f: 66:17:33:2c:7b:7e:7a:3f:cd:e2:4c:51:0f:ec:14:4b:c8:87: 5c:68:f6:43:0b:b0:dd:4c:5d:ca:91:d3:0c:6a:5a:b8:1f:2a: 0d:82:c2:bc:67:01:e9:16:71:f6:10:46:97:ca:14:bc:97:67: 46:70:7f:7b:bf:c0:19:47:a7:65:4a:48:e6:14:a6:d8:ad:5e: 3a:88:8e:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDRTkxMTAvBgNVBAUTKEUwOTk2MTE1NTA4QTNBRDU5OTE1REJBQkNDQjY5NkRC QTBCNENDNzIwHhcNMjUwODIyMjMzMDUzWhcNMjUwODI5MjMzMDUzWjAYMRYwFAYD VQQDEw02OGE4ZmRhZS1hNjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvO5vVBypeDdU6VHBznhq4mBzICpW/x+nq0nWxHBgFH5Yb5UO4oOENYdlc7NG jGO+Hyr0lK+u2pUIu/7sE8mgfr5tFHpH8cv+fWeZpSvZeNyScnI/O3Gkai4Qg6wt PZ73Jh67vECUHYu4ryCj9z0k9g3+IyFF7SUa7Qyl7Y349LLZvGPUdVWVlqPrNzCb QrdZKB34FL/VCYJeVZSVwXin62zmNyOBJWhDPG1PlGBCuavxcQq6NctKVzwx0BgL ilHZ1N/KQzVPNBb94iid9AUlDrEH6CLiRaB6DevTgRxJso9j3kwgPESLdt4izBof C4ktEUfvkRwmCtpEwc5Wcc2w2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTP49Vr Q/D9SDXRml/9uheMhtjKMB8GA1UdIwQYMBaAFOCZYRVQijrVmRXbq8y2ltugtMxy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0NFOS8wQUIxRDM5NkY1 MTUxMUVCOUVGRTA3NTBDNEY5QUUwMi80SmxoRlZDS090V1pGZHVyekxhVzI2QzB6 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKbGhGVkNLT3RXWkZkdXJ6TGFXMjZDMHpISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0NFOS8wQUIxRDM5NkY1MTUxMUVCOUVGRTA3NTBDNEY5QUUwMi80SmxoRlZDS090 V1pGZHVyekxhVzI2QzB6SEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZb7IuopZejFlulGTSXHWzgqXKyWfjFDnoNkTWR0cuOKfkLD24ypMp rKLXXgLZZ61nLdtN1RlrFJPsqSSUntVftYt3Ttvt08YMu9Aur5RxSgxnPrsdJ4NU U2TMBHSkbcUtgRtRTBDA1EJrZJswLDm0D9TDt0a2RRFkAAyB0RsQHEohfrIFqxRP A2ank9ncSHkneM2zdMT2N6IWAdL7D01SMqfTdGHmI9ieakpesBwXZxVTDD9mFzMs e356P83iTFEP7BRLyIdcaPZDC7DdTF3KkdMMalq4HyoNgsK8ZwHpFnH2EEaXyhS8 l2dGcH97v8AZR6dlSkjmFKbYrV46iI78 -----END CERTIFICATE-----Generated at Sun Aug 24 05:04:45 2025 by rpki-client