$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft File: R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json) Hash identifier: oQQ6BstO2x2nLQplIHBi4ocb5TadoFItqtgNfG+hER4= Subject key identifier: 57:EF:CD:20:B6:4D:3C:2D:45:7B:5A:AD:E0:17:B7:E9:CB:15:33:D4 Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft Manifest number: 029E Signing time: Sat 23 Aug 2025 01:49:41 +0000 Manifest this update: Sat 23 Aug 2025 01:49:40 +0000 Manifest next update: Sat 30 Aug 2025 01:49:40 +0000 Files and hashes: 1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: fIOKRqVgOg9pmiFGw2rBf02S0IR01pE7ru08N2k+Ou4=) 2: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: GG/AMsbpEzm/NFjGRgk+JWg1MGNbtO4+De0JwZLDbdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Validity Not Before: Aug 23 01:49:40 2025 GMT Not After : Aug 30 01:49:40 2025 GMT Subject: CN=68a91e35-9be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:73:b6:8e:c4:ea:d7:96:cf:d3:10:c4:1d:b9: 74:b0:15:08:a4:0a:77:4c:ca:54:1f:79:51:05:f7: 4c:55:39:29:13:a4:e5:57:d1:29:91:e6:f7:b3:c1: a9:17:12:15:62:1e:15:a1:16:2c:57:9b:82:31:53: 33:ed:a4:41:57:73:99:f1:cd:80:93:81:5e:2c:6a: 0c:2e:cc:21:e8:28:45:ec:2a:c3:d2:7b:10:b3:e2: 84:e8:69:b7:97:35:10:71:16:5a:6f:ac:26:12:05: da:fe:2d:2c:7a:d0:4f:37:66:29:a6:7c:42:cf:ce: c3:0a:4c:b3:d2:53:73:d1:ba:c6:6d:6d:0a:ec:9e: 1b:55:05:e3:ba:5d:53:61:03:70:8b:35:4f:6c:19: 48:03:c6:77:a3:df:27:8e:2d:d6:4c:d4:b4:52:f0: ca:15:03:4f:d2:9b:db:bf:ee:66:77:f9:be:ec:65: 46:3c:d9:63:95:c0:48:74:19:69:54:b0:56:e5:39: cb:25:24:ba:b8:78:7c:94:8e:af:74:d8:4a:fe:bf: 83:3d:10:f7:e1:f4:ec:92:9f:aa:27:05:42:99:c4: 82:6d:18:2e:70:b0:27:1b:ad:32:df:29:8f:05:ea: 91:71:6b:f3:c8:fc:a3:ee:8c:fa:2c:e5:d6:07:ed: 3c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EF:CD:20:B6:4D:3C:2D:45:7B:5A:AD:E0:17:B7:E9:CB:15:33:D4 X509v3 Authority Key Identifier: keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:d2:8d:7b:79:bb:fc:00:37:1e:e4:bc:b1:84:82:f2:fa:8f: 35:15:c0:d5:02:6a:3b:21:9f:32:36:09:bd:e0:26:2e:3e:bb: 74:c2:8c:9e:f5:97:d4:da:f8:51:6c:dc:a1:4b:c4:6c:d7:e4: 2b:e3:9e:21:bd:f6:5e:aa:30:0d:be:7f:8f:29:c4:4d:6c:93: 95:11:37:39:a7:1e:d3:b4:5b:d7:81:61:0f:f8:c7:6b:ad:36: 77:dd:70:b8:3d:28:07:8a:e8:8f:62:dc:f8:e5:5c:f8:ae:2b: 38:b8:bc:82:d0:e2:8d:92:af:41:a2:76:8c:31:59:73:b3:3c: 8a:a7:b0:63:ff:e8:d4:38:fe:46:5f:ed:89:e2:00:e1:3f:f2: 21:24:53:4b:ab:f5:43:dd:34:b3:ff:09:7b:cc:f6:0c:ee:35: e1:6f:fb:68:31:77:96:a8:32:2d:1c:a2:20:f0:37:2a:19:3a: ba:e7:06:8a:a9:f0:79:cd:80:05:14:a4:99:88:29:98:d8:e4: c0:93:cb:75:ca:a7:15:b3:3f:69:9b:d7:4e:f9:bf:1b:c9:35: 08:4d:5c:38:d4:15:ce:18:ef:1e:52:e0:d8:1f:c7:aa:4e:01: a8:44:5a:81:7c:b8:9a:6a:8d:04:8e:bf:14:23:c9:29:7c:ef: 4c:8e:65:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThEQzYxMTAvBgNVBAUTKDQ3ODZEQkNDQjVDQzI5NkIxREFCMTc1RTgzQ0M0ODEx QTYzNjE3QzcwHhcNMjUwODIzMDE0OTQwWhcNMjUwODMwMDE0OTQwWjAYMRYwFAYD VQQDEw02OGE5MWUzNS05YmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nO2jsTq15bP0xDEHbl0sBUIpAp3TMpUH3lRBfdMVTkpE6TlV9Epkeb3s8Gp FxIVYh4VoRYsV5uCMVMz7aRBV3OZ8c2Ak4FeLGoMLswh6ChF7CrD0nsQs+KE6Gm3 lzUQcRZab6wmEgXa/i0setBPN2YppnxCz87DCkyz0lNz0brGbW0K7J4bVQXjul1T YQNwizVPbBlIA8Z3o98nji3WTNS0UvDKFQNP0pvbv+5md/m+7GVGPNljlcBIdBlp VLBW5TnLJSS6uHh8lI6vdNhK/r+DPRD34fTskp+qJwVCmcSCbRgucLAnG60y3ymP BeqRcWvzyPyj7oz6LOXWB+08nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfvzSC2 TTwtRXtareAXt+nLFTPUMB8GA1UdIwQYMBaAFEeG28y1zClrHasXXoPMSBGmNhfH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OERDNi80QTAxMjI3QzBG RjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtXc2RxeGRlZzh4SUVhWTJG OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0YmJ6TFhNS1dzZHF4ZGVnOHhJRWFZMkY4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OERDNi80QTAxMjI3QzBGRjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtX c2RxeGRlZzh4SUVhWTJGOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv0o17ebv8ADce5LyxhILy+o81FcDVAmo7IZ8yNgm94CYuPrt0woye 9ZfU2vhRbNyhS8Rs1+Qr454hvfZeqjANvn+PKcRNbJOVETc5px7TtFvXgWEP+Mdr rTZ33XC4PSgHiuiPYtz45Vz4ris4uLyC0OKNkq9BonaMMVlzszyKp7Bj/+jUOP5G X+2J4gDhP/IhJFNLq/VD3TSz/wl7zPYM7jXhb/toMXeWqDItHKIg8DcqGTq65waK qfB5zYAFFKSZiCmY2OTAk8t1yqcVsz9pm9dO+b8byTUITVw41BXOGO8eUuDYH8eq TgGoRFqBfLiaao0Ejr8UI8kpfO9MjmXa -----END CERTIFICATE-----Generated at Sat Aug 23 17:40:12 2025 by rpki-client