$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft File: em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json) Hash identifier: a0AbIUTBcZcd+19JFBZBkRCC5bdunEp+VUlDtzCJIg4= Subject key identifier: 07:81:22:EB:D6:1D:7E:B7:63:EF:12:BE:6B:2C:34:1A:BB:CE:5B:62 Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Certificate serial: 1865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft Manifest number: 1844 Signing time: Fri 22 Aug 2025 16:38:00 +0000 Manifest this update: Fri 22 Aug 2025 16:37:59 +0000 Manifest next update: Fri 29 Aug 2025 16:37:59 +0000 Files and hashes: 1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: Z4goPdeiZU+Rp+Ew9UwVVk0yElNImHytMUctnYLzWuk=) 2: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 4Q+SEdvBQGfYmmHeFRyy/2R/EHACTjORm2A/+Pw5UxE=) 3: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: p3nDO3WF2LVR/VuRYdJhLml5b3M6N0ju1bV/+dQUHBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6245 (0x1865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Validity Not Before: Aug 22 16:37:59 2025 GMT Not After : Aug 29 16:37:59 2025 GMT Subject: CN=68a89ce8-10d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:66:ba:a9:30:71:8f:fe:cf:dc:a9:d1:ea:3d: 7a:3c:b7:e7:13:7d:25:e2:19:7b:d1:8f:3d:97:42: 2c:f3:3a:18:96:20:b8:1d:f1:69:56:37:7a:fa:54: 3e:ef:7d:26:44:b3:b6:77:1c:5b:1f:b6:4f:6b:05: 26:5a:02:3f:a3:fa:90:0d:8a:ea:27:09:a8:b2:f1: 60:a4:a6:a3:5d:93:72:5d:e2:35:fa:d0:94:e5:05: 4e:eb:99:8a:c9:01:40:f6:62:e3:ea:bc:e2:df:48: 11:2b:12:5a:3b:c2:cd:7e:be:e6:4d:98:97:06:86: 38:dc:89:35:74:44:f1:00:8b:0d:3a:50:62:92:42: 07:67:ca:a0:78:83:38:35:86:ff:90:b4:ba:3b:4e: 29:7f:48:f6:91:e0:04:8d:2a:67:09:44:4b:fc:63: 81:61:ea:67:55:98:c7:3b:9f:40:1d:52:bc:45:37: 72:19:8c:85:80:21:a1:72:17:22:56:98:9d:45:20: ae:41:ba:ec:ef:8c:9f:e2:f7:dd:91:a6:1b:61:fa: 88:c6:2b:e0:5e:89:b4:f4:b3:e7:8a:5b:2f:eb:f6: ff:df:1c:78:75:2b:3c:87:e4:22:97:d0:b6:11:a4: c3:20:a5:32:b7:3f:2f:a9:b0:7b:fe:8d:c5:aa:c0: 73:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:81:22:EB:D6:1D:7E:B7:63:EF:12:BE:6B:2C:34:1A:BB:CE:5B:62 X509v3 Authority Key Identifier: keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:f2:bb:5f:a3:cf:b1:2c:f8:9a:db:0b:ca:84:3c:ba:49:d3: d7:da:16:98:71:54:51:40:7c:e8:6b:a5:95:44:c2:c6:d7:d0: f4:e7:2f:cc:29:6f:41:71:f9:53:69:06:a5:98:74:9b:0e:fb: 57:4b:94:2e:98:7b:f8:80:be:45:70:9c:e1:71:12:7a:d0:66: 5e:3a:13:0f:b7:89:36:4e:c6:13:4e:56:3e:da:89:51:39:1f: e4:a6:05:8d:ae:65:23:21:d9:b8:f5:c3:51:cb:e9:00:ed:54: e5:49:e3:25:cd:d9:d7:73:dc:29:10:db:e6:16:7a:61:56:f2: e0:60:e5:1d:bc:e7:09:7d:97:7d:c5:77:41:fd:40:d6:f0:ab: 09:25:3d:94:1a:3d:7a:eb:44:d4:9b:c2:35:04:95:96:99:03: fe:db:c2:e9:b2:76:6b:96:78:13:cf:da:17:87:e3:7f:a2:18: 64:93:be:6e:54:5b:5d:79:8f:de:fb:04:ea:c0:60:75:57:f2: 93:b2:c3:af:80:f1:97:3d:7f:e8:ea:00:b5:f8:bc:a6:7f:81: fb:a7:b2:83:24:ef:0f:6d:ac:a5:ed:79:86:de:8e:25:99:8e: 96:f0:83:f8:d9:cb:55:69:91:ab:51:88:d2:3c:cd:30:2d:4c: 56:c9:a1:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKDdBNkUzMDIxMDY0MkNGNEZCQjQxNzNGMzUyNzQ4RTFF QTVDMkM3QzMwHhcNMjUwODIyMTYzNzU5WhcNMjUwODI5MTYzNzU5WjAYMRYwFAYD VQQDEw02OGE4OWNlOC0xMGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Ga6qTBxj/7P3KnR6j16PLfnE30l4hl70Y89l0Is8zoYliC4HfFpVjd6+lQ+ 730mRLO2dxxbH7ZPawUmWgI/o/qQDYrqJwmosvFgpKajXZNyXeI1+tCU5QVO65mK yQFA9mLj6rzi30gRKxJaO8LNfr7mTZiXBoY43Ik1dETxAIsNOlBikkIHZ8qgeIM4 NYb/kLS6O04pf0j2keAEjSpnCURL/GOBYepnVZjHO59AHVK8RTdyGYyFgCGhchci VpidRSCuQbrs74yf4vfdkaYbYfqIxivgXom09LPnilsv6/b/3xx4dSs8h+Qil9C2 EaTDIKUytz8vqbB7/o3FqsBzMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeBIuvW HX63Y+8SvmssNBq7zltiMB8GA1UdIwQYMBaAFHpuMCEGQs9Pu0Fz81J0jh6lwsfD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy9DNkIwMzRBQUI4 OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3owLTdRWFB6VW5TT0hxWEN4 OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtNHdJUVpDejAtN1FYUHpVblNPSHFYQ3g4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy9DNkIwMzRBQUI4OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3ow LTdRWFB6VW5TT0hxWEN4OE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC08rtfo8+xLPia2wvKhDy6SdPX2haYcVRRQHzoa6WVRMLG19D05y/M KW9BcflTaQalmHSbDvtXS5QumHv4gL5FcJzhcRJ60GZeOhMPt4k2TsYTTlY+2olR OR/kpgWNrmUjIdm49cNRy+kA7VTlSeMlzdnXc9wpENvmFnphVvLgYOUdvOcJfZd9 xXdB/UDW8KsJJT2UGj1660TUm8I1BJWWmQP+28LpsnZrlngTz9oXh+N/ohhkk75u VFtdeY/e+wTqwGB1V/KTssOvgPGXPX/o6gC1+Lymf4H7p7KDJO8Pbayl7XmG3o4l mY6W8IP42ctVaZGrUYjSPM0wLUxWyaE0 -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:22 2025 by rpki-client