$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft File: v4hgssA3e7Xv7b461A8c8YnyrLI.mft (raw, json) Hash identifier: M5b0Rm3RatDVkpakJsmtg/i2lnvwHhOpZogqtlYrp3s= Subject key identifier: F8:ED:65:3E:81:67:C9:67:94:09:1B:C3:0A:44:0B:BA:48:F9:5C:1A Authority key identifier: BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2 Certificate issuer: /CN=A9157B74/serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft Manifest number: 32 Signing time: Sat 23 Aug 2025 07:53:42 +0000 Manifest this update: Sat 23 Aug 2025 07:53:42 +0000 Manifest next update: Sat 30 Aug 2025 07:53:42 +0000 Files and hashes: 1: v4hgssA3e7Xv7b461A8c8YnyrLI.crl (hash: 3q9OZ05hYKVcb5yI2Beb9xbzZQogBAqZoGCbcVQtFnw=) 2: 074A7A1436C511F0A4E5C52BC4F9AE02.roa (hash: VRIs5/TUKDaqF1hTLN0GORNvAVQA+OzzszxfTxaTTMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B74, serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2 Validity Not Before: Aug 23 07:53:42 2025 GMT Not After : Aug 30 07:53:42 2025 GMT Subject: CN=68a97386-c8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:db:27:e3:4f:da:b0:81:f8:f7:d2:95:16: 27:c2:73:36:e5:ca:eb:fd:db:9b:99:dd:8e:b4:af: f5:6d:e9:99:8e:81:f6:b5:77:f1:64:44:ff:b3:f4: 4a:09:10:7f:e3:bb:fb:c4:b3:cf:6d:f7:5b:5d:8c: 11:b9:a9:25:4a:45:6b:40:2f:37:3f:07:8b:38:11: 00:4a:20:43:b2:46:6c:e0:96:40:1c:11:80:07:59: b6:f7:20:b2:4d:2c:30:82:47:2d:33:f6:1b:0b:f6: 17:68:21:6c:f4:cf:e5:6a:4b:8f:ea:b0:d7:e1:34: 2c:8f:80:82:db:2c:ef:0e:b4:9a:18:b4:99:4c:d1: 01:fb:a8:74:d6:be:15:59:58:42:3b:bc:f8:94:28: 27:79:55:ee:42:13:e9:48:09:b3:39:a2:51:01:1e: 1f:d0:24:21:a6:12:b4:0b:89:5b:a1:65:c5:dd:eb: fc:aa:9d:53:86:9d:ba:ca:5f:3d:c0:7d:66:25:03: 94:24:bf:8c:a9:76:a7:aa:31:60:6f:35:c9:cc:e2: f4:8b:c7:3b:60:8f:b2:c2:0f:2f:ce:44:f0:66:f7: c4:7c:11:f9:42:82:18:ff:77:c6:3f:e7:f3:10:6b: 7a:94:48:81:14:af:a5:6e:4f:40:c7:be:d8:0f:bf: e6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:ED:65:3E:81:67:C9:67:94:09:1B:C3:0A:44:0B:BA:48:F9:5C:1A X509v3 Authority Key Identifier: keyid:BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:2e:63:60:7c:a2:19:ad:18:99:0b:b2:77:68:12:c3:66:4d: df:33:37:0f:93:90:26:45:b7:52:9e:20:a2:be:8e:47:d4:d0: 6d:ce:44:9e:45:00:78:91:93:c6:31:c6:14:29:ff:77:27:23: bc:ee:57:fd:d8:7b:b1:b6:e5:93:97:d8:02:a9:81:d0:9a:4a: 3f:1d:85:b8:78:f1:b0:da:54:4c:19:03:0b:d2:32:99:c9:6b: 43:8c:a6:2b:65:ef:e8:80:27:9d:b5:05:0d:c0:48:5f:dd:f7: b3:01:83:76:31:d3:a6:a5:c4:65:3c:24:2a:f8:41:bd:02:78: 6a:ec:f8:ac:85:c7:87:d3:0c:f3:a3:54:f3:52:5b:7c:9f:93: 86:6b:90:50:95:72:c1:a5:4f:ad:02:b3:7b:c9:df:f4:f2:28: 18:ad:a4:1b:04:6b:ec:4b:bb:9a:f3:80:de:00:d5:e0:27:7f: 76:42:d7:fc:91:5a:10:fe:3b:c9:7b:df:f9:6c:b5:71:cd:4b: 05:ba:67:15:d4:02:3f:77:1d:c4:53:1b:4f:c9:3b:d0:76:60: ca:fa:3c:73:70:82:c3:6a:f7:ee:2c:11:7f:2a:af:a3:ae:7c: ff:a1:03:1b:83:a8:42:dc:0b:9a:fd:24:93:8d:6c:0a:08:9f: 35:a0:3d:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 N0I3NDExMC8GA1UEBRMoQkY4ODYwQjJDMDM3N0JCNUVGRURCRTNBRDQwRjFDRjE4 OUYyQUNCMjAeFw0yNTA4MjMwNzUzNDJaFw0yNTA4MzAwNzUzNDJaMBgxFjAUBgNV BAMTDTY4YTk3Mzg2LWM4ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC50Nsn40/asIH499KVFifCczblyuv925uZ3Y60r/Vt6ZmOgfa1d/FkRP+z9EoJ EH/ju/vEs89t91tdjBG5qSVKRWtALzc/B4s4EQBKIEOyRmzglkAcEYAHWbb3ILJN LDCCRy0z9hsL9hdoIWz0z+VqS4/qsNfhNCyPgILbLO8OtJoYtJlM0QH7qHTWvhVZ WEI7vPiUKCd5Ve5CE+lICbM5olEBHh/QJCGmErQLiVuhZcXd6/yqnVOGnbrKXz3A fWYlA5Qkv4ypdqeqMWBvNcnM4vSLxztgj7LCDy/ORPBm98R8EflCghj/d8Y/5/MQ a3qUSIEUr6VuT0DHvtgPv+ahAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+O1lPoFn yWeUCRvDCkQLukj5XBowHwYDVR0jBBgwFoAUv4hgssA3e7Xv7b461A8c8YnyrLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3Qjc0L0NFMDA0MjVBMzZC QzExRjA4MUQ1NUYxN0M0RjlBRTAyL3Y0aGdzc0EzZTdYdjdiNDYxQThjOFlueXJM SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdjRoZ3NzQTNlN1h2N2I0NjFBOGM4WW55ckxJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 Qjc0L0NFMDA0MjVBMzZCQzExRjA4MUQ1NUYxN0M0RjlBRTAyL3Y0aGdzc0EzZTdY djdiNDYxQThjOFlueXJMSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHcuY2B8ohmtGJkLsndoEsNmTd8zNw+TkCZFt1KeIKK+jkfU0G3ORJ5F AHiRk8YxxhQp/3cnI7zuV/3Ye7G25ZOX2AKpgdCaSj8dhbh48bDaVEwZAwvSMpnJ a0OMpitl7+iAJ521BQ3ASF/d97MBg3Yx06alxGU8JCr4Qb0CeGrs+KyFx4fTDPOj VPNSW3yfk4ZrkFCVcsGlT60Cs3vJ3/TyKBitpBsEa+xLu5rzgN4A1eAnf3ZC1/yR WhD+O8l73/lstXHNSwW6ZxXUAj93HcRTG0/JO9B2YMr6PHNwgsNq9+4sEX8qr6Ou fP+hAxuDqELcC5r9JJONbAoInzWgPfQ= -----END CERTIFICATE-----Generated at Sat Aug 23 20:20:42 2025 by rpki-client