$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft File: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft (raw, json) Hash identifier: onfnU0vkHkpJDGlXQMbkkl6ySrE8DTgOv+abZnUEHlg= Subject key identifier: 31:3A:EB:B9:B6:50:65:01:1C:55:57:8D:36:95:A7:D5:CA:81:48:21 Authority key identifier: 32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D Certificate issuer: /CN=A9173C08/serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft Manifest number: 4A Signing time: Sat 23 Aug 2025 07:37:25 +0000 Manifest this update: Sat 23 Aug 2025 07:37:25 +0000 Manifest next update: Sat 30 Aug 2025 07:37:25 +0000 Files and hashes: 1: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl (hash: ZNalE1LMX/3PQQTxlT0UlMZkMRlN7kPadu9VbYZ8qdc=) 2: ED917A58117D11F08E2E217CC4F9AE02.roa (hash: wOxc2mRdKwnrkxXakYEXBYgQ1Llp1nvGe0GOb+4AM30=) 3: 7D6BCA6429D111F09DF2F66EC4F9AE02.roa (hash: AY2s5T5nFgYlJrJemH+atWCYX2gv1ohpQJNZYKJbmMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C08, serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D Validity Not Before: Aug 23 07:37:25 2025 GMT Not After : Aug 30 07:37:25 2025 GMT Subject: CN=68a96fb5-76f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:aa:be:f3:60:6c:d2:63:21:1a:5b:6f:f5: 3e:38:7f:54:2a:4b:41:9b:76:68:8a:de:bd:a4:25: 84:ed:a6:87:63:37:ef:4d:f0:0e:d0:30:5c:af:09: 6d:18:23:9d:0e:82:d7:65:93:44:b7:f6:05:89:47: 70:21:bf:ec:ba:c3:e7:80:69:71:31:08:97:32:a1: 90:92:f7:02:a0:66:53:4a:4d:49:36:53:a4:35:9f: 8d:a9:4e:fa:af:9e:b9:40:5f:87:df:19:00:2e:2a: 0e:95:c6:dc:53:ab:65:9a:d9:7c:46:5c:2c:08:4f: 90:26:5f:6b:e3:81:b1:b7:d7:8e:3d:07:fa:1a:0e: a7:44:43:0a:8d:c0:58:7d:03:45:73:ae:15:50:08: 06:67:97:18:f2:7c:28:48:9d:9c:a3:24:ba:36:97: 99:65:c4:79:55:01:ef:58:58:1f:4f:19:62:3d:79: 68:5b:7e:60:ec:a5:de:8d:cc:8d:e0:03:aa:54:d7: c5:40:f6:42:a1:d2:31:8b:96:a0:8a:ef:2b:d4:ae: 98:63:05:4e:de:61:43:1b:12:e9:ae:2c:a4:3a:b1: 0d:71:39:c3:cb:de:98:7f:be:a5:25:9c:49:1b:4f: b7:d1:58:b6:63:a2:ae:a3:dc:a6:be:fc:f5:0d:08: 32:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3A:EB:B9:B6:50:65:01:1C:55:57:8D:36:95:A7:D5:CA:81:48:21 X509v3 Authority Key Identifier: keyid:32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:d6:2c:ac:64:c1:e5:eb:65:15:e3:fd:03:00:c9:d5:70:88: f2:18:cd:62:13:b3:6c:61:ef:69:e7:d2:f2:74:2f:1c:1e:40: 78:a5:c1:b9:8d:9c:ac:e4:98:5b:a5:4e:8d:2e:66:89:d7:2c: 41:31:32:3d:51:fa:c9:f8:bc:35:a7:ac:5c:86:92:81:2d:c1: ec:25:eb:fa:a5:99:97:70:8f:73:a0:0d:cb:cd:1b:7a:8d:6a: 45:99:1a:ef:68:9c:38:24:8a:72:bf:d5:30:c1:1b:40:49:b8: ef:01:2e:9f:39:b9:9b:a7:f3:a4:63:2e:71:a4:38:92:bd:fb: 65:96:e4:52:d1:44:6d:34:01:b5:ae:87:bf:ec:16:df:a3:b8: c5:3b:f3:3f:1c:11:ee:7f:34:75:ab:fb:69:28:31:51:20:82: a9:20:d8:0d:d8:cb:91:f7:54:63:51:2a:4f:49:17:c4:4c:f0: 7f:24:f7:c5:3e:de:4b:94:14:6f:53:b2:52:2c:e4:fa:fd:ad: 13:ea:3c:a0:e6:8b:06:8e:7f:de:21:83:64:a9:55:49:4a:c9: 71:32:2b:9d:c9:39:15:7a:21:db:93:53:c6:22:47:75:30:3d: 5b:fc:39:2a:0a:5d:ed:0f:e0:e7:ab:f9:c7:5e:63:69:59:0d: 8d:73:65:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0MwODExMC8GA1UEBRMoMzIxRUVGQjgwODUxRkY4MkZFQjdDQjZDMDhBOTRGNURE MkQ5MjcwRDAeFw0yNTA4MjMwNzM3MjVaFw0yNTA4MzAwNzM3MjVaMBgxFjAUBgNV BAMTDTY4YTk2ZmI1LTc2ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwCKq+82Bs0mMhGltv9T44f1QqS0GbdmiK3r2kJYTtpodjN+9N8A7QMFyvCW0Y I50Ogtdlk0S39gWJR3Ahv+y6w+eAaXExCJcyoZCS9wKgZlNKTUk2U6Q1n42pTvqv nrlAX4ffGQAuKg6VxtxTq2Wa2XxGXCwIT5AmX2vjgbG31449B/oaDqdEQwqNwFh9 A0VzrhVQCAZnlxjyfChInZyjJLo2l5llxHlVAe9YWB9PGWI9eWhbfmDspd6NzI3g A6pU18VA9kKh0jGLlqCK7yvUrphjBU7eYUMbEumuLKQ6sQ1xOcPL3ph/vqUlnEkb T7fRWLZjoq6j3Ka+/PUNCDI/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMTrrubZQ ZQEcVVeNNpWn1cqBSCEwHwYDVR0jBBgwFoAUMh7vuAhR/4L+t8tsCKlPXdLZJw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczQzA4L0FGRkMwREU0MTE3 QzExRjBCMjM0Q0Q3OEM0RjlBRTAyL01oN3Z1QWhSXzRMLXQ4dHNDS2xQWGRMWkp3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWg3dnVBaFJfNEwtdDh0c0NLbFBYZExaSncwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz QzA4L0FGRkMwREU0MTE3QzExRjBCMjM0Q0Q3OEM0RjlBRTAyL01oN3Z1QWhSXzRM LXQ4dHNDS2xQWGRMWkp3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIXWLKxkweXrZRXj/QMAydVwiPIYzWITs2xh72nn0vJ0LxweQHilwbmN nKzkmFulTo0uZonXLEExMj1R+sn4vDWnrFyGkoEtwewl6/qlmZdwj3OgDcvNG3qN akWZGu9onDgkinK/1TDBG0BJuO8BLp85uZun86RjLnGkOJK9+2WW5FLRRG00AbWu h7/sFt+juMU78z8cEe5/NHWr+2koMVEggqkg2A3Yy5H3VGNRKk9JF8RM8H8k98U+ 3kuUFG9TslIs5Pr9rRPqPKDmiwaOf94hg2SpVUlKyXEyK53JORV6IduTU8YiR3Uw PVv8OSoKXe0P4Oer+cdeY2lZDY1zZac= -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:25 2025 by rpki-client