$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft File: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json) Hash identifier: BvjaTVFjry4k0moAEaXETen2GP7QF7xFmT7rluoSDBg= Subject key identifier: 0E:76:BF:46:A2:3C:DC:D3:55:96:46:0C:D3:93:8C:57:5C:DE:09:F8 Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F Certificate issuer: /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Certificate serial: 0DAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft Manifest number: 0D9E Signing time: Fri 22 Aug 2025 18:02:36 +0000 Manifest this update: Fri 22 Aug 2025 18:02:36 +0000 Manifest next update: Fri 29 Aug 2025 18:02:36 +0000 Files and hashes: 1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: j8O1sO83hUw1y2bT347D1DadNSbgbVT0q8BtKjhuVwA=) 2: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: r12gsCo6iUFC5f/jSOBGicDzV0QxP8G0HCiUT+DfDFw=) 3: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: XfxZHGEC6L2I7lf4RHsiD8/699vyTVMdYrB6wZFXmUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3499 (0xdab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Validity Not Before: Aug 22 18:02:36 2025 GMT Not After : Aug 29 18:02:36 2025 GMT Subject: CN=68a8b0bc-8c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fb:9f:7d:c4:de:90:93:ba:5f:57:16:7f:b3: 68:3f:d8:59:e2:65:5d:6a:1d:d5:78:56:30:57:79: 09:19:8e:ae:b4:f5:5b:0c:e7:ac:20:16:a9:8e:03: 67:1d:fa:65:77:68:5b:09:e4:fc:ed:56:c8:88:4f: 9c:8b:97:15:73:5a:f0:37:01:97:18:1b:ac:c0:c2: 26:af:78:5e:4c:f0:ad:bb:77:95:33:4e:19:1f:e0: d4:59:33:56:c7:f5:a1:d8:aa:a4:ed:ea:51:8f:72: ce:a1:5a:99:71:60:8b:0d:4e:fd:1b:60:9a:62:ac: a3:08:5e:fc:a2:b5:4d:de:89:4e:d2:f2:0a:65:32: d4:40:b3:1b:db:e6:63:8a:72:de:6a:b5:77:10:ff: 7e:6b:bf:13:47:57:36:af:89:01:bd:12:df:ef:d9: 06:da:cb:60:c4:84:25:94:87:a3:b0:66:85:40:48: ab:04:59:b1:66:b4:70:77:94:9f:b3:0e:8f:d3:19: 1d:38:ba:58:30:60:cf:1d:bb:31:06:38:f8:43:e0: 49:46:1c:3e:7d:44:17:33:31:36:ef:0f:6a:39:9e: 13:3f:10:22:2f:5b:8b:c9:ef:8e:9a:d7:4d:85:90: 9a:48:5c:77:d3:e2:47:be:12:c7:42:17:ff:4b:65: a1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:76:BF:46:A2:3C:DC:D3:55:96:46:0C:D3:93:8C:57:5C:DE:09:F8 X509v3 Authority Key Identifier: keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:84:b0:7a:94:be:84:24:81:ae:7f:cb:ec:cf:ff:98:15:74: bb:6f:71:2e:e0:6a:1f:00:83:8e:69:26:34:d7:f1:a6:4c:ed: ff:3b:e4:d0:1c:a2:80:ca:8d:91:3f:48:ae:d5:4e:d3:6a:c6: f5:0a:ff:24:87:0d:dc:68:0a:31:4b:01:dc:bb:e9:33:34:11: 13:97:cf:14:e3:d7:36:87:23:82:4f:a6:21:f0:71:10:4a:ba: 4e:ed:c2:76:f2:18:31:53:42:c0:74:00:50:ea:8a:7b:ca:16: ea:97:56:f0:b0:b3:e7:e6:e0:22:f7:39:f5:e2:c3:84:43:2e: bd:2f:98:74:10:b5:31:3c:ac:31:98:83:a0:a2:91:ca:c4:1d: 3e:68:29:92:ec:a7:5c:23:28:b7:55:f1:8f:83:bc:04:2b:85: 7a:10:a0:cb:a6:ab:b1:fa:d8:3b:d7:05:bc:28:d8:7e:42:bf: 38:a1:8d:79:04:0d:77:b9:1d:f4:c2:58:da:57:fb:db:dd:1a: b9:9f:0c:b9:88:56:00:dc:97:b2:25:71:4f:37:9b:33:8e:3b: af:ca:32:7d:f0:31:d7:b6:01:74:92:17:01:02:e0:75:03:73: 2a:6a:9f:4d:01:4e:52:03:91:4a:ed:88:f6:58:43:27:20:57: 61:37:a7:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIzNjExMTAvBgNVBAUTKEUwQjlBMkU5OTM5RDU1OEYxOEJFNjIxNzVDOTVENzY4 RDI0NUQzMUYwHhcNMjUwODIyMTgwMjM2WhcNMjUwODI5MTgwMjM2WjAYMRYwFAYD VQQDEw02OGE4YjBiYy04YzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vuffcTekJO6X1cWf7NoP9hZ4mVdah3VeFYwV3kJGY6utPVbDOesIBapjgNn Hfpld2hbCeT87VbIiE+ci5cVc1rwNwGXGBuswMImr3heTPCtu3eVM04ZH+DUWTNW x/Wh2Kqk7epRj3LOoVqZcWCLDU79G2CaYqyjCF78orVN3olO0vIKZTLUQLMb2+Zj inLearV3EP9+a78TR1c2r4kBvRLf79kG2stgxIQllIejsGaFQEirBFmxZrRwd5Sf sw6P0xkdOLpYMGDPHbsxBjj4Q+BJRhw+fUQXMzE27w9qOZ4TPxAiL1uLye+OmtdN hZCaSFx30+JHvhLHQhf/S2WhOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA52v0ai PNzTVZZGDNOTjFdc3gn4MB8GA1UdIwQYMBaAFOC5oumTnVWPGL5iF1yV12jSRdMf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjM2MS83QzhEODAwQUNB MzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZOFl2bUlYWEpYWGFOSkYw eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMbWk2Wk9kVlk4WXZtSVhYSlhYYU5KRjB4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjM2MS83QzhEODAwQUNBMzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZ OFl2bUlYWEpYWGFOSkYweDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAChLB6lL6EJIGuf8vsz/+YFXS7b3Eu4GofAIOOaSY01/GmTO3/O+TQ HKKAyo2RP0iu1U7Tasb1Cv8khw3caAoxSwHcu+kzNBETl88U49c2hyOCT6Yh8HEQ SrpO7cJ28hgxU0LAdABQ6op7yhbql1bwsLPn5uAi9zn14sOEQy69L5h0ELUxPKwx mIOgopHKxB0+aCmS7KdcIyi3VfGPg7wEK4V6EKDLpqux+tg71wW8KNh+Qr84oY15 BA13uR30wljaV/vb3Rq5nwy5iFYA3JeyJXFPN5szjjuvyjJ98DHXtgF0khcBAuB1 A3Mqap9NAU5SA5FK7Yj2WEMnIFdhN6fa -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:10 2025 by rpki-client