$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: dqoUAIkoMLM2oiX12yKzQurU2SPsvRmajAsLoqc0Wyw= Subject key identifier: 68:78:6D:8E:6B:E8:F7:DD:43:D5:29:D1:BA:57:DB:54:F0:DA:6E:2F Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 0953 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 0953 Signing time: Fri 22 Aug 2025 20:17:56 +0000 Manifest this update: Fri 22 Aug 2025 20:17:56 +0000 Manifest next update: Fri 29 Aug 2025 20:17:56 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: 0U5YPl7E5SJj+a/EZc+6G2FmwE1QvsMCSIC2VjKjqJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2387 (0x953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Validity Not Before: Aug 22 20:17:56 2025 GMT Not After : Aug 29 20:17:56 2025 GMT Subject: CN=68a8d074-17e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:05:6f:db:70:dd:ba:ef:df:f4:c6:12:0a:83: 3f:1b:db:2e:0b:9f:30:6d:4e:71:e5:a2:df:07:60: f3:e8:35:61:48:b0:05:f5:eb:74:34:c0:06:ba:5b: 85:db:f3:3a:9d:21:94:f8:ab:02:32:72:c1:32:dd: 6e:6f:ee:28:5e:35:7d:0b:81:09:2c:1d:9e:19:55: 79:e2:4e:36:eb:a7:0f:d1:df:ac:c0:0e:22:29:50: 27:8c:f2:8d:9c:7f:13:47:3a:4f:82:20:02:8b:9f: 7f:f3:fb:cd:b7:d8:ee:b5:14:2b:f6:5b:1d:65:da: 0e:0e:35:09:0e:11:0e:cd:42:e9:de:00:47:a0:eb: fd:b1:25:81:47:92:03:3d:78:f4:63:f6:07:0f:98: a2:ea:cc:09:42:c7:fd:fe:f9:59:a9:6a:08:97:d7: d0:2e:7b:b9:f9:82:c2:2c:87:59:7d:94:99:67:74: 88:c4:5b:a9:9c:4e:c7:8e:3b:b3:22:81:34:93:bd: 47:d8:73:b5:be:5b:76:2b:ca:3d:99:91:60:e1:f5: 10:19:23:ff:25:d0:b7:97:9e:31:9b:53:36:62:b0: 1b:48:33:47:17:0d:98:0e:45:29:31:ed:2d:8e:f0: f0:a6:d2:45:4c:d8:f1:31:b8:bd:ce:f1:95:d7:98: ac:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:78:6D:8E:6B:E8:F7:DD:43:D5:29:D1:BA:57:DB:54:F0:DA:6E:2F X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:5e:7d:9c:3c:e4:3f:a6:c6:06:8a:4c:50:6d:ef:80:11:5a: 18:69:89:90:8b:ec:0e:dc:9a:3b:68:da:4c:02:1c:f9:58:59: c2:3c:63:08:91:59:ec:07:18:e6:7d:bc:fa:27:93:5e:c1:61: c5:2f:81:d0:ef:ab:6a:20:90:30:dc:36:0d:1b:6a:e1:62:95: e3:de:dc:75:50:fc:0f:63:0e:77:5c:3c:d4:d2:e8:03:78:0f: c4:c8:0c:c8:25:00:9d:fb:18:0c:f9:c6:62:1f:18:f8:ec:1c: 67:78:a5:29:92:e9:c0:5d:f3:fe:c8:b3:c9:d9:a1:8f:4c:94: 0b:2f:d9:87:6e:88:5d:8b:5e:4d:ec:fe:47:68:8a:1f:cb:fd: 29:8f:de:22:da:4b:14:be:b5:49:c2:c5:5b:09:2b:a2:7c:96: a2:db:06:16:9d:1c:f3:73:05:7b:17:c0:d8:01:c8:f2:f0:af: ee:9d:f6:94:82:24:44:b0:26:00:80:0a:18:8c:90:cd:77:6d: 65:f5:ab:57:b2:db:ee:4a:5a:16:19:b9:b5:07:47:ac:44:f4: 62:66:51:b9:df:b2:79:97:56:63:49:25:65:36:11:90:50:8c: dc:7e:53:4f:ee:4c:20:12:e0:86:21:e2:79:9b:92:92:31:6f: c1:ac:2e:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjUwODIyMjAxNzU2WhcNMjUwODI5MjAxNzU2WjAYMRYwFAYD VQQDEw02OGE4ZDA3NC0xN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6AVv23Dduu/f9MYSCoM/G9suC58wbU5x5aLfB2Dz6DVhSLAF9et0NMAGuluF 2/M6nSGU+KsCMnLBMt1ub+4oXjV9C4EJLB2eGVV54k4266cP0d+swA4iKVAnjPKN nH8TRzpPgiACi59/8/vNt9jutRQr9lsdZdoODjUJDhEOzULp3gBHoOv9sSWBR5ID PXj0Y/YHD5ii6swJQsf9/vlZqWoIl9fQLnu5+YLCLIdZfZSZZ3SIxFupnE7Hjjuz IoE0k71H2HO1vlt2K8o9mZFg4fUQGSP/JdC3l54xm1M2YrAbSDNHFw2YDkUpMe0t jvDwptJFTNjxMbi9zvGV15isYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGh4bY5r 6PfdQ9Up0bpX21Tw2m4vMB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVXn2cPOQ/psYGikxQbe+AEVoYaYmQi+wO3Jo7aNpMAhz5WFnCPGMI kVnsBxjmfbz6J5NewWHFL4HQ76tqIJAw3DYNG2rhYpXj3tx1UPwPYw53XDzU0ugD eA/EyAzIJQCd+xgM+cZiHxj47BxneKUpkunAXfP+yLPJ2aGPTJQLL9mHbohdi15N 7P5HaIofy/0pj94i2ksUvrVJwsVbCSuifJai2wYWnRzzcwV7F8DYAcjy8K/unfaU giREsCYAgAoYjJDNd21l9atXstvuSloWGbm1B0esRPRiZlG537J5l1ZjSSVlNhGQ UIzcflNP7kwgEuCGIeJ5m5KSMW/BrC5C -----END CERTIFICATE-----Generated at Sun Aug 24 03:36:20 2025 by rpki-client