$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft File: D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft (raw, json) Hash identifier: qzEoZBnKNrbuAVFJwxEOLxhqHSAxQuKn42xyYoYnXCw= Subject key identifier: 4E:DD:61:57:49:17:DC:5C:BF:D2:1B:51:2C:9E:97:73:85:0A:F6:BA Authority key identifier: 0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 Certificate issuer: /CN=A915D4EA/serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Certificate serial: 0491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft Manifest number: 048B Signing time: Sat 23 Aug 2025 00:15:00 +0000 Manifest this update: Sat 23 Aug 2025 00:14:59 +0000 Manifest next update: Sat 30 Aug 2025 00:14:59 +0000 Files and hashes: 1: D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl (hash: 0fNjhj/u4NxcoC6B6qjQ/XJ3Rp+AWEfBx6Vi2kHkEl0=) 2: B5A6646A4EA211EC9AEBA24CC4F9AE02.roa (hash: r7hd+udE0/uxVbv9WvLHX+58InN/53D6sx7FMyN6tO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1169 (0x491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4EA, serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Validity Not Before: Aug 23 00:14:59 2025 GMT Not After : Aug 30 00:14:59 2025 GMT Subject: CN=68a90803-3ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b5:70:90:25:e3:0e:8e:ea:64:e1:dd:e7:80: 0a:ad:37:1b:27:c5:bc:9b:1c:df:d0:db:f6:8e:da: 52:87:2e:60:41:fc:9d:1c:3a:ec:da:e7:14:d9:81: f9:d4:1f:72:58:11:f0:c1:cc:bd:0e:b5:48:d2:7e: 32:1c:fb:c9:b8:4b:c1:76:dd:56:15:fb:0e:b9:ad: 57:71:73:48:eb:64:3b:8c:42:25:bc:00:f7:ed:7b: 19:a9:6b:27:98:2d:15:0f:c1:38:a1:36:98:fe:5c: ae:12:cc:d9:f9:26:4e:36:0b:de:1d:87:e0:71:28: ae:9e:55:f9:54:f3:e1:66:75:88:53:4b:6f:39:9f: 62:7c:1f:bd:76:03:6a:2c:ab:bb:5e:ef:70:e8:bb: 3d:a3:cf:dd:29:1d:8d:86:9d:59:10:3f:9a:8d:b6: 76:74:48:0f:61:03:52:1f:e8:51:b7:51:70:02:8d: 26:44:ed:53:36:1d:57:47:8f:a9:a8:45:07:2c:64: bd:94:33:c3:90:07:be:14:33:46:3c:76:9c:36:86: 2e:9f:db:9c:52:8e:af:60:8d:67:a6:0d:a0:3c:0b: db:2e:aa:98:71:5a:b3:0c:7c:a5:0d:57:1e:90:cf: ca:46:bf:d3:4f:b8:a0:58:e9:fd:e0:c8:eb:05:9b: b2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DD:61:57:49:17:DC:5C:BF:D2:1B:51:2C:9E:97:73:85:0A:F6:BA X509v3 Authority Key Identifier: keyid:0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:18:89:fd:27:de:3d:6e:cb:d6:e9:c3:92:55:a6:37:b6:9d: 3f:15:2c:15:0c:8d:d0:9a:0a:9d:ef:66:04:a7:6b:ac:5a:a7: f5:a7:3e:79:37:c2:8f:5c:c6:1a:7e:99:6d:3d:b0:18:50:84: 5a:49:7b:1c:44:ff:53:fd:b7:bb:bd:a3:e8:4f:4c:67:7c:ea: 48:72:78:72:f9:9e:63:11:4e:65:c7:85:85:03:59:05:2d:d4: 63:64:73:e3:b1:9c:41:8c:0b:7f:d1:13:43:7d:c7:c1:01:21: 94:c8:0b:3f:87:46:80:20:81:5d:e0:97:96:a9:48:85:21:a0: f1:e2:51:a7:64:2d:9d:ad:f4:bf:3c:44:98:31:a0:3c:4b:92: e0:32:8c:39:fe:ee:95:31:53:b8:32:a0:8b:7a:bd:f5:20:22: 71:92:db:a9:8b:e7:fb:5f:a8:05:72:1b:3b:56:b0:47:82:b3: e3:5d:fa:85:8c:a3:73:1a:ad:00:ca:7b:62:3a:01:01:80:16: d5:44:0c:ba:51:09:a9:3f:0b:34:42:72:8a:b1:4e:ac:a4:a7: 07:52:71:5d:24:77:2b:60:fb:80:e9:2d:7d:67:4b:2a:47:ee: 75:08:88:73:a6:d7:e0:c5:2a:6a:89:4e:ea:9a:bd:f0:73:60: 6f:f6:4f:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RUExMTAvBgNVBAUTKDBGODA0RjE3RUMzNTdDQkYzMDBEM0JCMkZBOUNDRDJB MzYwQUQ1RTIwHhcNMjUwODIzMDAxNDU5WhcNMjUwODMwMDAxNDU5WjAYMRYwFAYD VQQDEw02OGE5MDgwMy0zZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7VwkCXjDo7qZOHd54AKrTcbJ8W8mxzf0Nv2jtpShy5gQfydHDrs2ucU2YH5 1B9yWBHwwcy9DrVI0n4yHPvJuEvBdt1WFfsOua1XcXNI62Q7jEIlvAD37XsZqWsn mC0VD8E4oTaY/lyuEszZ+SZONgveHYfgcSiunlX5VPPhZnWIU0tvOZ9ifB+9dgNq LKu7Xu9w6Ls9o8/dKR2Nhp1ZED+ajbZ2dEgPYQNSH+hRt1FwAo0mRO1TNh1XR4+p qEUHLGS9lDPDkAe+FDNGPHacNoYun9ucUo6vYI1npg2gPAvbLqqYcVqzDHylDVce kM/KRr/TT7igWOn94MjrBZuyFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7dYVdJ F9xcv9IbUSyel3OFCva6MB8GA1UdIwQYMBaAFA+ATxfsNXy/MA07svqczSo2CtXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRFQS83MDBGQ0YyODRF OUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZMOHdEVHV5LXB6TktqWUsx ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q0QlBGLXcxZkw4d0RUdXktcHpOS2pZSzFlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRFQS83MDBGQ0YyODRFOUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZM OHdEVHV5LXB6TktqWUsxZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgGIn9J949bsvW6cOSVaY3tp0/FSwVDI3Qmgqd72YEp2usWqf1pz55 N8KPXMYafpltPbAYUIRaSXscRP9T/be7vaPoT0xnfOpIcnhy+Z5jEU5lx4WFA1kF LdRjZHPjsZxBjAt/0RNDfcfBASGUyAs/h0aAIIFd4JeWqUiFIaDx4lGnZC2drfS/ PESYMaA8S5LgMow5/u6VMVO4MqCLer31ICJxktupi+f7X6gFchs7VrBHgrPjXfqF jKNzGq0AyntiOgEBgBbVRAy6UQmpPws0QnKKsU6spKcHUnFdJHcrYPuA6S19Z0sq R+51CIhzptfgxSpqiU7qmr3wc2Bv9k9D -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:16 2025 by rpki-client