$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft File: g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json) Hash identifier: +dGO+Vs2LKE23KN7K7HyoV2Gx420h+zK0AAK4icfBF0= Subject key identifier: BE:71:0B:5A:A3:28:67:11:44:7F:F1:E6:62:9D:E3:C8:42:5C:7D:2B Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41 Certificate issuer: /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft Manifest number: 80 Signing time: Sat 23 Aug 2025 07:03:57 +0000 Manifest this update: Sat 23 Aug 2025 07:03:57 +0000 Manifest next update: Sat 30 Aug 2025 07:03:57 +0000 Files and hashes: 1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: tWMgfLw2oaZgqNAoRLMvqQdcI8tq9K0pY5Anz0GDsG8=) 2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: zf4VXC00w+/l84Z7TgltHAME/FckYYEPpSyVri8Ai2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241 Validity Not Before: Aug 23 07:03:57 2025 GMT Not After : Aug 30 07:03:57 2025 GMT Subject: CN=68a967dd-110b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c6:e3:59:79:71:67:3a:f7:47:be:ca:53:d6: de:4b:56:b0:52:af:e0:76:c1:64:b3:64:73:e9:5c: c8:cc:3b:19:38:9f:aa:30:7b:81:2d:4a:3b:82:8a: f4:f5:71:c8:ef:02:fc:ef:c7:0b:de:0a:20:45:d6: 1a:f9:eb:47:23:78:ee:74:bd:04:bb:9f:f2:86:21: 88:75:5f:29:af:15:e6:5b:80:72:8a:1c:3f:44:04: 6e:a9:44:44:92:41:d5:84:75:af:9c:07:dc:80:06: 14:ef:ed:e3:d6:a2:8d:19:b6:c0:09:e1:5f:ff:fe: 86:63:1f:3d:ed:14:f7:c7:eb:81:c4:ac:02:23:68: bb:b6:56:6b:dd:a8:13:9c:87:37:ea:a4:29:14:88: da:c6:42:01:02:f4:f5:75:85:6a:e2:ac:54:c3:5c: 42:7e:a6:15:b9:f7:07:ad:70:de:26:b5:97:2a:af: 1e:2d:50:1e:94:46:b1:2c:ea:30:49:9a:51:a2:5d: 6b:5f:0b:9c:e7:c8:2e:35:93:5f:ef:51:7b:2a:41: 34:77:43:29:a4:31:55:e6:08:c9:bc:df:69:6b:04: a1:4a:0e:2c:37:89:da:fa:a7:44:37:29:8f:87:1a: f3:65:b6:6d:dd:eb:6b:1e:24:29:cd:33:49:bd:4d: ef:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:71:0B:5A:A3:28:67:11:44:7F:F1:E6:62:9D:E3:C8:42:5C:7D:2B X509v3 Authority Key Identifier: keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:ed:b9:61:12:0c:d9:54:8c:5a:15:90:93:d8:23:ae:8b:51: 55:09:32:e2:d6:48:63:52:d6:50:5d:63:88:d7:28:f4:5b:1a: 3c:5e:de:7a:8e:c6:db:f8:e3:bf:dd:5e:1f:49:a9:a6:c8:a6: 73:2e:7f:b8:ad:c0:fc:20:37:ce:b0:c5:29:f2:ef:cc:b7:43: 2b:f1:24:2a:f1:22:a3:7a:15:18:65:3e:e9:ab:19:e2:a6:3c: df:96:c0:b1:6a:f3:e9:00:ac:95:88:db:fc:25:6e:e4:d2:91: 6e:9e:0d:55:ca:b8:fd:bb:d6:e8:70:c4:cf:b7:91:b5:70:ba: f4:64:07:86:e5:31:1b:97:c1:6f:e9:9b:ac:6a:cd:e5:39:24: e5:a2:35:48:78:bb:15:41:1b:4a:4a:29:d1:64:43:20:b0:57: 4f:d8:cb:63:e9:4a:f1:85:c5:cd:34:67:15:39:42:fc:60:06: 07:b5:ef:28:2f:d9:cc:3a:05:23:e0:30:4b:74:90:6e:44:19: 67:d0:42:75:98:c4:69:d4:f9:01:5a:b4:93:cb:4d:1b:10:56: f9:2f:5e:9f:b6:76:84:02:4d:85:60:99:8e:7d:4e:d8:f7:5b: ad:21:f6:ed:52:ac:9d:22:64:0c:31:64:c7:46:d0:fd:67:0c: 71:76:c0:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCOUExMTAvBgNVBAUTKDgzOEZCRDBCMzk1RUE5MDcwNkM2QzI4OUFDMjZCMEQ3 MzhBMDQyNDEwHhcNMjUwODIzMDcwMzU3WhcNMjUwODMwMDcwMzU3WjAYMRYwFAYD VQQDEw02OGE5NjdkZC0xMTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8bjWXlxZzr3R77KU9beS1awUq/gdsFks2Rz6VzIzDsZOJ+qMHuBLUo7gor0 9XHI7wL878cL3gogRdYa+etHI3judL0Eu5/yhiGIdV8prxXmW4Byihw/RARuqURE kkHVhHWvnAfcgAYU7+3j1qKNGbbACeFf//6GYx897RT3x+uBxKwCI2i7tlZr3agT nIc36qQpFIjaxkIBAvT1dYVq4qxUw1xCfqYVufcHrXDeJrWXKq8eLVAelEaxLOow SZpRol1rXwuc58guNZNf71F7KkE0d0MppDFV5gjJvN9pawShSg4sN4na+qdENymP hxrzZbZt3etrHiQpzTNJvU3vuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5xC1qj KGcRRH/x5mKd48hCXH0rMB8GA1UdIwQYMBaAFIOPvQs5XqkHBsbCiawmsNc4oEJB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI5QS80MTM5MEJDQUNG RjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9nNC05Q3psZXFRY0d4c0tKckNhdzF6aWdR a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c0LTlDemxlcVFjR3hzS0pyQ2F3MXppZ1FrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI5QS80MTM5MEJDQUNGRjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9nNC05Q3psZXFR Y0d4c0tKckNhdzF6aWdRa0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDL7blhEgzZVIxaFZCT2COui1FVCTLi1khjUtZQXWOI1yj0Wxo8Xt56 jsbb+OO/3V4fSammyKZzLn+4rcD8IDfOsMUp8u/Mt0Mr8SQq8SKjehUYZT7pqxni pjzflsCxavPpAKyViNv8JW7k0pFung1Vyrj9u9bocMTPt5G1cLr0ZAeG5TEbl8Fv 6Zusas3lOSTlojVIeLsVQRtKSinRZEMgsFdP2Mtj6UrxhcXNNGcVOUL8YAYHte8o L9nMOgUj4DBLdJBuRBln0EJ1mMRp1PkBWrSTy00bEFb5L16ftnaEAk2FYJmOfU7Y 91utIfbtUqydImQMMWTHRtD9ZwxxdsBM -----END CERTIFICATE-----Generated at Sat Aug 23 19:57:48 2025 by rpki-client