$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft File: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft (raw, json) Hash identifier: taehxc7ra7eTTQSMAj/v2SOo51r/0fgBMceUb+nxJX8= Subject key identifier: 4B:7B:B5:71:2D:17:C5:09:D3:27:7C:1B:AF:1F:06:49:50:0F:43:52 Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft Manifest number: 85 Signing time: Sat 23 Aug 2025 07:32:14 +0000 Manifest this update: Sat 23 Aug 2025 07:32:14 +0000 Manifest next update: Sat 30 Aug 2025 07:32:13 +0000 Files and hashes: 1: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl (hash: HR2bh/StaHnuSv86o1HIVONwpvbHOpm7g2tEYZWcbQE=) 2: 13B46272139511F0BAC02735C4F9AE02.roa (hash: lunzyAvH2WnGuuqjQcMC7tzE6PiUkG2ZqHNZmlQ3Mow=) 3: 0AAD710010B111F0A46DA723C4F9AE02.roa (hash: bk09MGKmA1KtNu/8fLfir0D9n+KVGE5j0LJioJGLi+A=) 4: 4777E5245CAC11F0AEA97F4CC4F9AE02.roa (hash: rBs6jKsXb4pJx+SYnA3vFhpQEUoRgu8wgVzo1RO1me8=) 5: 71A92448186E11F083760527C4F9AE02.roa (hash: fEhJNoYQsvAhpUWy30zyzhm+f82+0YX6EDfhlwxFPqw=) 6: 9A3B7A6C5C8111F09B95A34AC4F9AE02.roa (hash: SNNnHO/eblmsoaPKtADN1dyH0LspNteqC579SF1W9eA=) 7: 95E16734187411F099AC2133C4F9AE02.roa (hash: GF8rCTpf/VJlJeNEZPKA8ehDu40GNOcfTE2tHrOTJPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Validity Not Before: Aug 23 07:32:14 2025 GMT Not After : Aug 30 07:32:13 2025 GMT Subject: CN=68a96e7e-fedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d6:cb:7b:33:1a:54:eb:39:7a:a5:7f:f6:20: 13:a6:5e:76:c0:be:4b:2c:fd:a0:43:bf:06:c0:9d: b5:60:91:b5:ec:a3:82:e8:4c:01:94:a3:89:7e:ad: 66:01:a6:6e:b6:ce:93:cc:49:67:ca:b9:96:85:58: 41:d8:94:92:c7:2e:61:f0:2c:0c:e8:04:31:6f:90: 72:e6:50:af:9b:2b:97:f4:09:4b:8d:9b:be:f4:4d: 57:9b:86:b8:04:c3:e8:f5:54:0b:d3:f6:10:39:c3: 80:66:4f:76:b6:d4:58:87:33:ca:2f:2f:e2:1d:4a: 04:0a:25:90:b1:5c:ce:59:a4:b9:30:0a:d8:b1:6f: d9:59:12:99:bf:56:56:e8:59:bb:2d:79:b9:bd:01: 4c:72:27:bb:4c:b2:23:c0:1e:f4:b3:57:1b:74:56: 33:33:fa:c5:31:47:ed:76:a4:59:d2:d2:69:97:6a: 95:4a:a9:14:4c:7c:14:90:50:bb:d2:a9:f3:b2:98: d8:7f:99:66:55:1b:bf:8b:7b:9d:a7:6e:55:4c:ed: 09:f2:a2:05:66:ba:96:bb:73:c5:c6:a8:f9:96:39: d9:df:1d:17:a1:10:6e:a4:87:f9:95:83:c1:f8:65: a5:c8:fb:09:9d:c9:ad:9b:ac:ce:fd:6d:d0:d8:08: 8a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7B:B5:71:2D:17:C5:09:D3:27:7C:1B:AF:1F:06:49:50:0F:43:52 X509v3 Authority Key Identifier: keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:09:e5:85:ea:2d:04:c2:67:3f:6a:52:f3:a1:e6:9e:e5:6a: 12:4c:68:95:f4:df:89:6c:e2:6d:99:b9:6a:67:40:ff:bc:0f: dc:51:ca:a6:86:f1:03:9f:da:b6:95:9e:21:9d:e4:ba:e2:f8: c6:5a:95:b4:fd:cd:d6:2d:98:41:fe:ba:3b:8b:fb:b5:4d:0e: e0:a8:3f:52:ac:f3:8d:f3:78:ec:0c:d7:82:22:ed:d7:50:83: a7:bb:ae:e9:0a:7b:6c:ad:47:45:fa:13:fc:6c:e0:c2:da:01: 05:9b:41:7a:7f:23:4f:b8:08:6f:ec:01:df:a8:c9:9c:5b:d3: 05:bb:d5:95:e9:13:62:2c:55:f5:37:1b:48:85:eb:01:d8:2c: 40:2e:cb:e2:c8:45:11:da:2b:96:fa:71:39:a0:a0:a0:e2:50: db:56:46:9f:dd:3f:22:7b:5c:d1:b3:72:59:81:36:8e:5a:ec: 21:26:84:30:41:95:54:52:21:fe:4a:1b:3e:07:72:da:a4:ac: d3:1e:43:97:ac:c7:4c:9f:22:b4:93:4e:f4:6b:b5:27:ce:d8: de:bb:9b:70:4a:26:8d:b5:30:2a:58:38:55:c2:4b:36:a7:a7: a4:ba:31:f0:47:34:e0:6d:39:20:78:f4:3f:d6:5d:68:5a:22: a9:08:fb:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDOTgxMTAvBgNVBAUTKEZGOENDQkU2MTg3NTVBMUY1MTk5QkQwQzgyNzYwRThF REI4Rjg1QkEwHhcNMjUwODIzMDczMjE0WhcNMjUwODMwMDczMjEzWjAYMRYwFAYD VQQDEw02OGE5NmU3ZS1mZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA69bLezMaVOs5eqV/9iATpl52wL5LLP2gQ78GwJ21YJG17KOC6EwBlKOJfq1m AaZuts6TzElnyrmWhVhB2JSSxy5h8CwM6AQxb5By5lCvmyuX9AlLjZu+9E1Xm4a4 BMPo9VQL0/YQOcOAZk92ttRYhzPKLy/iHUoECiWQsVzOWaS5MArYsW/ZWRKZv1ZW 6Fm7LXm5vQFMcie7TLIjwB70s1cbdFYzM/rFMUftdqRZ0tJpl2qVSqkUTHwUkFC7 0qnzspjYf5lmVRu/i3udp25VTO0J8qIFZrqWu3PFxqj5ljnZ3x0XoRBupIf5lYPB +GWlyPsJncmtm6zO/W3Q2AiKlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEt7tXEt F8UJ0yd8G68fBklQD0NSMB8GA1UdIwQYMBaAFP+My+YYdVofUZm9DIJ2Do7bj4W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkM5OC9BQkFGRjVFQTA2 MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi9fNHpMNWhoMVdoOVJtYjBNZ25ZT2p0dVBo Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL180ekw1aGgxV2g5Um1iME1nbllPanR1UGhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkM5OC9BQkFGRjVFQTA2MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi9fNHpMNWhoMVdo OVJtYjBNZ25ZT2p0dVBoYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDjCeWF6i0Ewmc/alLzoeae5WoSTGiV9N+JbOJtmblqZ0D/vA/cUcqm hvEDn9q2lZ4hneS64vjGWpW0/c3WLZhB/ro7i/u1TQ7gqD9SrPON83jsDNeCIu3X UIOnu67pCntsrUdF+hP8bODC2gEFm0F6fyNPuAhv7AHfqMmcW9MFu9WV6RNiLFX1 NxtIhesB2CxALsviyEUR2iuW+nE5oKCg4lDbVkaf3T8ie1zRs3JZgTaOWuwhJoQw QZVUUiH+Shs+B3LapKzTHkOXrMdMnyK0k070a7Unztjeu5twSiaNtTAqWDhVwks2 p6ekujHwRzTgbTkgePQ/1l1oWiKpCPth -----END CERTIFICATE-----Generated at Sat Aug 23 16:14:09 2025 by rpki-client