$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft File: T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json) Hash identifier: goXpQ35Ka8+Li/Bkq9Y79DVWDD5kQQ1VOiS32kxX6Vo= Subject key identifier: 44:D2:25:78:21:6C:71:F1:C1:8E:DC:E9:D2:DC:13:8F:45:75:6C:F3 Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Certificate serial: 03A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft Manifest number: 039F Signing time: Sat 23 Aug 2025 01:01:14 +0000 Manifest this update: Sat 23 Aug 2025 01:01:13 +0000 Manifest next update: Sat 30 Aug 2025 01:01:13 +0000 Files and hashes: 1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: do8YlHueT+Lesu6i3s+aEzwgaEZiANU5/IoUkW034tE=) 2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: rWvQOGaQUF4KDCbeAOUg2IDrYzmM2mMdECYdn3UKK/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 932 (0x3a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Validity Not Before: Aug 23 01:01:13 2025 GMT Not After : Aug 30 01:01:13 2025 GMT Subject: CN=68a912da-4c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c5:c7:1c:51:d7:fe:ae:c3:fb:f0:14:39:3f: 68:1f:93:75:e7:f4:70:ac:3e:27:73:25:45:75:02: 80:b8:b0:2a:80:33:37:ad:54:5c:4d:27:2b:40:76: 66:51:d7:68:c9:11:96:58:34:ba:a2:79:98:05:d7: e9:b3:44:8b:5e:62:34:c5:22:74:19:a2:40:5a:72: 78:07:cf:ba:c2:59:3b:4f:70:0e:42:33:88:00:4a: f8:8f:08:ef:1b:93:84:52:79:59:74:af:e7:42:e0: 52:83:82:21:3f:0a:25:47:a1:60:41:f5:a4:d2:7a: 41:a2:9d:19:a9:d8:a2:67:3e:47:16:6b:bc:72:84: de:06:d6:9a:f9:e0:b4:d3:d7:c4:8c:10:46:bf:71: 81:9b:6d:50:18:1f:ab:b0:08:20:5f:ff:db:c0:9c: 9d:b5:39:d0:c9:54:c5:94:91:b9:89:44:cf:2a:e5: 8b:6d:20:1f:8b:df:2e:b7:23:f7:5a:34:c6:9b:8e: 6a:5f:cf:5b:e8:95:bb:e0:a7:35:b9:41:ee:16:eb: 8a:6a:9a:42:b9:a2:70:82:4f:da:31:3b:6e:d3:05: 73:5e:d2:3e:dc:07:4e:b0:1c:84:4c:9b:cb:36:ac: 2c:78:63:8f:62:1e:c7:7f:42:b8:b4:7e:67:86:1a: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D2:25:78:21:6C:71:F1:C1:8E:DC:E9:D2:DC:13:8F:45:75:6C:F3 X509v3 Authority Key Identifier: keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:70:28:2b:db:d1:e7:3c:e3:16:68:8e:33:2e:7f:1d:8c:07: 88:af:a0:d2:c7:06:c1:86:c8:2d:c3:e5:fa:16:c8:42:e4:dd: 9e:35:d6:4c:4f:5d:9d:aa:0f:92:b4:26:c5:cb:94:d1:e7:c2: 65:b2:01:a5:03:1b:a1:ad:de:0f:20:aa:0c:c2:fe:55:89:0b: f0:9b:23:eb:7b:a4:ee:68:1d:f7:f9:6e:92:b9:ef:36:c8:74: 90:a3:6a:b8:42:ec:06:5d:44:4e:12:16:6d:3e:b8:5b:20:f3: 39:55:fb:8b:60:a3:c3:40:3e:aa:a4:25:3a:69:15:b7:da:59: 05:9e:90:6c:31:7f:70:2a:9d:fa:59:65:b0:56:d3:22:d6:a2: 4d:17:f6:de:96:8d:2a:ed:2f:2b:6a:bb:89:e4:10:64:78:fa: d7:8f:57:21:53:90:5d:56:61:0a:1f:85:46:48:b4:35:a9:4d: 26:56:c2:38:1b:89:bc:96:33:b8:2b:46:4e:81:ad:5c:02:3a: b3:a5:f0:a8:da:ab:14:b7:0a:c4:e0:6d:ee:fa:c0:3b:8f:7c: c3:e6:d5:1f:18:d8:f2:b6:0c:2d:ab:bb:a9:df:5e:14:4b:c4: b9:fe:f5:a1:de:a8:f5:c0:07:ef:2a:de:aa:5c:ae:7f:17:17: 18:69:cc:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG NTczOEY5MEEwHhcNMjUwODIzMDEwMTEzWhcNMjUwODMwMDEwMTEzWjAYMRYwFAYD VQQDEw02OGE5MTJkYS00YzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosXHHFHX/q7D+/AUOT9oH5N15/RwrD4ncyVFdQKAuLAqgDM3rVRcTScrQHZm UddoyRGWWDS6onmYBdfps0SLXmI0xSJ0GaJAWnJ4B8+6wlk7T3AOQjOIAEr4jwjv G5OEUnlZdK/nQuBSg4IhPwolR6FgQfWk0npBop0ZqdiiZz5HFmu8coTeBtaa+eC0 09fEjBBGv3GBm21QGB+rsAggX//bwJydtTnQyVTFlJG5iUTPKuWLbSAfi98utyP3 WjTGm45qX89b6JW74Kc1uUHuFuuKappCuaJwgk/aMTtu0wVzXtI+3AdOsByETJvL NqwseGOPYh7Hf0K4tH5nhhrbuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETSJXgh bHHxwY7c6dLcE49FdWzzMB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM3Qy82QUU3NjE1MkFCMzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pO VmwwejhDclRodWIxYzQtUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlcCgr29HnPOMWaI4zLn8djAeIr6DSxwbBhsgtw+X6FshC5N2eNdZM T12dqg+StCbFy5TR58JlsgGlAxuhrd4PIKoMwv5ViQvwmyPre6TuaB33+W6Sue82 yHSQo2q4QuwGXUROEhZtPrhbIPM5VfuLYKPDQD6qpCU6aRW32lkFnpBsMX9wKp36 WWWwVtMi1qJNF/belo0q7S8raruJ5BBkePrXj1chU5BdVmEKH4VGSLQ1qU0mVsI4 G4m8ljO4K0ZOga1cAjqzpfCo2qsUtwrE4G3u+sA7j3zD5tUfGNjytgwtq7up314U S8S5/vWh3qj1wAfvKt6qXK5/FxcYaczA -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:43 2025 by rpki-client