$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft File: 4u3kp-qXJminlbJ7qdyH9LkNqJc.mft (raw, json) Hash identifier: 8EAWAxBzxWs/NS6BRoB9FlYiNjrwkl9sxi4fCqnaaeU= Subject key identifier: E8:B2:62:83:CD:32:D8:E6:80:90:06:34:7C:A1:13:2D:F9:AD:D5:AC Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Certificate serial: 1687 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft Manifest number: 1649 Signing time: Wed 02 Jul 2025 16:53:15 +0000 Manifest this update: Wed 02 Jul 2025 16:53:14 +0000 Manifest next update: Wed 09 Jul 2025 16:53:14 +0000 Files and hashes: 1: 4u3kp-qXJminlbJ7qdyH9LkNqJc.crl (hash: RSRfZoUbQWurnPuSJ+tS49siRxFGNxruFGxs84mkimo=) 2: 854D304E0C9B11EC8433FE7AC4F9AE02.roa (hash: pak3Iy8E0gYpnvDkmWBebcI4LeVYUCjbRqic1+nKIXc=) 3: 56C8FCACE38011EFBF195482C4F9AE02.roa (hash: YpgFRa2Rul9X6oABfgOzOCogI1xE9k1rvzUQOQyIs6c=) 4: 9C79DBD23E7911EBBFFAC96BC4F9AE02.roa (hash: v+Ks9nZk5YSGi8jwz8W2ujGkO89h3nHyAUbCbrfDviU=) 5: 2357FC145F8D11EF94E7303FC4F9AE02.roa (hash: Adsar2w8VAjS3SUaIO5TAhSv+c7iSEo6NtUlziAok5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5767 (0x1687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Validity Not Before: Jul 2 16:53:14 2025 GMT Not After : Jul 9 16:53:14 2025 GMT Subject: CN=686563fa-a82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ed:0b:dc:d6:b3:13:f3:75:ac:a0:c9:4a:f7: 90:88:2a:b2:27:24:11:07:12:42:45:a9:c6:b5:93: ae:2b:ca:d8:8f:70:f7:23:fe:eb:c8:97:22:85:c3: 68:74:2d:b1:5d:a7:ee:46:f9:b3:33:ef:92:c2:01: 87:06:1d:67:d7:0e:21:59:38:53:b6:70:43:41:80: 42:bd:0c:b9:f9:8f:58:f3:dd:78:8b:18:fe:0e:68: 70:f8:fa:f7:10:91:11:df:63:19:ff:1b:91:eb:92: 81:13:67:2c:6a:46:d2:09:ab:ed:10:7a:92:a2:b0: 6f:9d:aa:2e:72:ac:69:bb:27:55:e8:c7:c9:14:51: 6e:62:37:50:66:02:16:8f:04:41:bd:24:16:2e:12: aa:4a:f8:af:f0:28:33:9f:35:f4:4e:10:9e:d3:1e: 2b:9c:c2:47:60:02:15:66:71:ec:44:80:44:68:93: d3:04:f2:c5:d8:4c:dc:05:a4:50:96:7e:ae:09:9e: 7b:78:a4:1e:18:5e:52:2e:ab:a8:48:e5:2e:f6:6a: ab:d4:d9:64:b1:10:33:ef:4f:5f:a2:5b:0b:8d:9a: 7c:b6:c6:48:e8:08:5d:d3:28:19:06:be:37:3e:a0: 76:0e:e6:9a:69:91:28:fc:c9:ba:52:e1:7a:4c:0a: 17:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B2:62:83:CD:32:D8:E6:80:90:06:34:7C:A1:13:2D:F9:AD:D5:AC X509v3 Authority Key Identifier: keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:cd:d9:33:5d:15:1f:f9:49:4b:ed:fe:e1:44:d7:55:27:d9: 9d:e6:4c:e0:ae:f6:5e:f5:fc:ec:c4:77:ba:db:41:6f:e9:5b: 10:1f:da:6b:9a:0a:7a:f5:29:e7:ab:e4:57:b2:3b:9c:b2:f0: 6a:bf:c6:a7:f3:42:a2:dd:0c:a6:72:56:66:a0:c3:8f:fa:28: d1:d3:e6:84:8f:7c:54:68:4f:45:8f:30:82:d1:83:68:b3:62: 54:a8:17:f2:59:05:5d:3f:fd:7e:de:ec:69:b7:3c:b7:97:87: 31:2e:d1:fe:e3:c8:e4:5e:2c:65:c7:b5:ae:43:43:3a:00:60: 33:b9:ca:c8:27:3e:5c:b8:0c:f2:87:59:b2:b7:b7:a6:7f:11: 10:0a:a4:0a:8f:f5:82:40:75:f3:ec:05:c8:b1:52:57:62:3d: f5:bc:a7:15:2d:c0:f5:25:6a:6c:24:c8:51:25:0b:f4:7b:f0: 65:94:96:dd:ce:e7:49:97:c2:ef:bb:c4:30:0b:0d:e3:12:55: f7:29:43:53:5e:6f:60:aa:70:8d:8b:62:f0:6b:8a:e4:c8:aa: d0:78:08:e7:86:43:1f:72:f1:75:8c:d7:f3:a8:5f:f0:39:84: 12:15:1b:61:e4:7f:28:fb:e1:36:f8:31:aa:e9:aa:fb:68:7b: ab:0a:2f:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJEOTExMTAvBgNVBAUTKEUyRURFNEE3RUE5NzI2NjhBNzk1QjI3QkE5REM4N0Y0 QjkwREE4OTcwHhcNMjUwNzAyMTY1MzE0WhcNMjUwNzA5MTY1MzE0WjAYMRYwFAYD VQQDEw02ODY1NjNmYS1hODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9O0L3NazE/N1rKDJSveQiCqyJyQRBxJCRanGtZOuK8rYj3D3I/7ryJcihcNo dC2xXafuRvmzM++SwgGHBh1n1w4hWThTtnBDQYBCvQy5+Y9Y8914ixj+Dmhw+Pr3 EJER32MZ/xuR65KBE2csakbSCavtEHqSorBvnaoucqxpuydV6MfJFFFuYjdQZgIW jwRBvSQWLhKqSviv8CgznzX0ThCe0x4rnMJHYAIVZnHsRIBEaJPTBPLF2EzcBaRQ ln6uCZ57eKQeGF5SLquoSOUu9mqr1NlksRAz709folsLjZp8tsZI6Ahd0ygZBr43 PqB2DuaaaZEo/Mm6UuF6TAoX3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiyYoPN MtjmgJAGNHyhEy35rdWsMB8GA1UdIwQYMBaAFOLt5KfqlyZop5Wye6nch/S5DaiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ5MS9FQTY3MkE1QzE5 RTcxMUU4QjI0M0Q1N0NDNEY5QUUwMi80dTNrcC1xWEptaW5sYko3cWR5SDlMa05x SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1M2twLXFYSm1pbmxiSjdxZHlIOUxrTnFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkQ5MS9FQTY3MkE1QzE5RTcxMUU4QjI0M0Q1N0NDNEY5QUUwMi80dTNrcC1xWEpt aW5sYko3cWR5SDlMa05xSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXzdkzXRUf+UlL7f7hRNdVJ9md5kzgrvZe9fzsxHe620Fv6VsQH9pr mgp69Snnq+RXsjucsvBqv8an80Ki3QymclZmoMOP+ijR0+aEj3xUaE9FjzCC0YNo s2JUqBfyWQVdP/1+3uxptzy3l4cxLtH+48jkXixlx7WuQ0M6AGAzucrIJz5cuAzy h1myt7emfxEQCqQKj/WCQHXz7AXIsVJXYj31vKcVLcD1JWpsJMhRJQv0e/BllJbd zudJl8Lvu8QwCw3jElX3KUNTXm9gqnCNi2Lwa4rkyKrQeAjnhkMfcvF1jNfzqF/w OYQSFRth5H8o++E2+DGq6ar7aHurCi// -----END CERTIFICATE-----Generated at Wed Jul 2 20:48:02 2025 by rpki-client