$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft File: v4hgssA3e7Xv7b461A8c8YnyrLI.mft (raw, json) Hash identifier: L+rO0g4CtWq472vRt8nyM9gOhZJ6QCUuDze3knEODXE= Subject key identifier: 12:51:CD:11:08:C0:6F:85:A0:A4:90:1F:72:6B:F7:94:83:55:EF:78 Authority key identifier: BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2 Certificate issuer: /CN=A9157B74/serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft Manifest number: 18 Signing time: Thu 03 Jul 2025 08:14:53 +0000 Manifest this update: Thu 03 Jul 2025 08:14:52 +0000 Manifest next update: Thu 10 Jul 2025 08:14:52 +0000 Files and hashes: 1: v4hgssA3e7Xv7b461A8c8YnyrLI.crl (hash: TDZN2+rHah6pSFaRem7fhCDAZK5KvGz4bgJ5ydiwI2Q=) 2: 074A7A1436C511F0A4E5C52BC4F9AE02.roa (hash: VRIs5/TUKDaqF1hTLN0GORNvAVQA+OzzszxfTxaTTMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B74, serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2 Validity Not Before: Jul 3 08:14:52 2025 GMT Not After : Jul 10 08:14:52 2025 GMT Subject: CN=68663bfd-c5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e4:56:d9:f2:34:69:a6:da:24:6a:12:7b:5a: e6:cc:33:93:86:d2:db:1f:f6:40:a3:28:2d:b2:6a: c9:47:2e:43:9e:2f:db:63:df:53:4f:93:ac:aa:33: 23:31:b1:53:bd:df:f2:e4:6d:62:9a:4c:a2:46:20: e6:77:4b:16:6f:fb:28:60:a2:f6:ff:6a:a8:9d:d3: 5b:27:4e:3d:9c:b4:09:e2:85:50:b0:6e:55:ef:c3: af:b4:46:09:ff:9c:99:66:1d:57:de:e2:ec:b7:ec: 51:55:fc:98:5f:ae:5e:78:fd:c0:77:b0:54:70:c9: dc:72:ca:79:7f:be:6d:ed:2e:36:93:2e:f7:46:07: a7:ff:e1:9c:e8:a3:97:17:2b:d5:8d:a8:36:75:b1: 19:04:ce:0a:08:d6:cd:04:e5:cc:6a:d6:0a:51:3d: 4a:87:91:4b:0e:5f:43:53:92:b8:48:d6:bc:1b:77: fa:05:6f:9f:2a:b1:f7:75:cf:be:ea:8d:43:11:7f: 09:92:51:19:b5:ca:7c:39:d2:b8:d4:48:84:5d:12: 56:cd:27:61:95:e5:16:e1:e1:4e:71:58:52:e2:d2: 4e:37:87:7d:0e:0c:1e:98:f3:89:27:46:7e:8d:ad: b4:93:3b:89:05:09:d5:dd:a4:4e:39:fa:24:b5:5f: 8d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:51:CD:11:08:C0:6F:85:A0:A4:90:1F:72:6B:F7:94:83:55:EF:78 X509v3 Authority Key Identifier: keyid:BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:37:b9:5e:55:3b:c5:16:59:48:46:9f:75:1a:cb:ba:83:2d: ae:94:17:23:93:2e:e6:ac:34:da:98:dc:f5:5a:80:bc:a9:cd: 65:98:ae:97:b0:2e:8c:86:d3:38:78:7a:0c:21:0f:61:d6:04: 39:e9:39:c4:02:30:16:6d:d4:39:6b:d9:2b:15:c2:f9:67:94: 79:0c:1e:b5:27:da:f6:2a:6b:fb:a5:25:3d:6f:e7:79:c3:4b: 68:6b:c6:1a:c8:28:13:c0:f5:e2:70:ac:4c:89:76:13:03:bd: cc:7b:be:8d:48:1e:6c:ec:c9:95:17:6a:af:c4:fd:9b:b0:ae: bb:aa:64:58:50:24:4a:d9:a1:24:7d:e4:d6:8f:b1:42:da:13: 53:9c:f0:28:eb:0c:9d:2a:ca:8a:9c:46:d1:31:45:4a:3f:22: 9e:74:6b:2e:1b:ae:9d:46:65:51:45:09:6a:70:f5:19:e1:06: 99:b6:fd:a1:e7:e0:29:66:16:36:50:65:cc:6e:ee:ee:59:e8: f8:46:b1:32:75:ca:0c:2a:7b:b5:7c:ca:43:e2:80:eb:f6:e6: 51:a6:fe:42:bc:52:14:61:4a:38:d8:d4:95:2f:71:0c:dd:4f: 44:bf:06:f3:b2:77:7a:fd:30:bd:56:a9:ab:f8:54:c8:5e:2a: dd:e1:e2:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 N0I3NDExMC8GA1UEBRMoQkY4ODYwQjJDMDM3N0JCNUVGRURCRTNBRDQwRjFDRjE4 OUYyQUNCMjAeFw0yNTA3MDMwODE0NTJaFw0yNTA3MTAwODE0NTJaMBgxFjAUBgNV BAMTDTY4NjYzYmZkLWM1ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo5FbZ8jRpptokahJ7WubMM5OG0tsf9kCjKC2yaslHLkOeL9tj31NPk6yqMyMx sVO93/LkbWKaTKJGIOZ3SxZv+yhgovb/aqid01snTj2ctAnihVCwblXvw6+0Rgn/ nJlmHVfe4uy37FFV/Jhfrl54/cB3sFRwydxyynl/vm3tLjaTLvdGB6f/4Zzoo5cX K9WNqDZ1sRkEzgoI1s0E5cxq1gpRPUqHkUsOX0NTkrhI1rwbd/oFb58qsfd1z77q jUMRfwmSURm1ynw50rjUSIRdElbNJ2GV5Rbh4U5xWFLi0k43h30ODB6Y84knRn6N rbSTO4kFCdXdpE45+iS1X411AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUElHNEQjA b4WgpJAfcmv3lINV73gwHwYDVR0jBBgwFoAUv4hgssA3e7Xv7b461A8c8YnyrLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3Qjc0L0NFMDA0MjVBMzZC QzExRjA4MUQ1NUYxN0M0RjlBRTAyL3Y0aGdzc0EzZTdYdjdiNDYxQThjOFlueXJM SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdjRoZ3NzQTNlN1h2N2I0NjFBOGM4WW55ckxJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 Qjc0L0NFMDA0MjVBMzZCQzExRjA4MUQ1NUYxN0M0RjlBRTAyL3Y0aGdzc0EzZTdY djdiNDYxQThjOFlueXJMSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA83uV5VO8UWWUhGn3Uay7qDLa6UFyOTLuasNNqY3PVagLypzWWYrpew LoyG0zh4egwhD2HWBDnpOcQCMBZt1Dlr2SsVwvlnlHkMHrUn2vYqa/ulJT1v53nD S2hrxhrIKBPA9eJwrEyJdhMDvcx7vo1IHmzsyZUXaq/E/ZuwrruqZFhQJErZoSR9 5NaPsULaE1Oc8CjrDJ0qyoqcRtExRUo/Ip50ay4brp1GZVFFCWpw9RnhBpm2/aHn 4ClmFjZQZcxu7u5Z6PhGsTJ1ygwqe7V8ykPigOv25lGm/kK8UhRhSjjY1JUvcQzd T0S/BvOyd3r9ML1Wqav4VMheKt3h4sA= -----END CERTIFICATE-----Generated at Fri Jul 4 17:20:40 2025 by rpki-client