$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft File: 4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json) Hash identifier: sqCc08rCZWICDt2C044TUi0lcym98EjvLXlZTMvVsl8= Subject key identifier: DA:C5:16:1E:9A:C5:CF:0F:B4:C4:E5:2C:8A:F9:F9:6A:7E:E1:8B:E0 Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft Manifest number: 01DB Signing time: Sat 23 Aug 2025 02:48:22 +0000 Manifest this update: Sat 23 Aug 2025 02:48:21 +0000 Manifest next update: Sat 30 Aug 2025 02:48:21 +0000 Files and hashes: 1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: l+0M4lW1NZ2C4Ft9uuBHhAOo6Tq7ptZ2Tc6ysZnZkJc=) 2: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: V89TVKMG86FWKeqAC80eNKWm9QeM+Xm489cfb+DFW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Validity Not Before: Aug 23 02:48:21 2025 GMT Not After : Aug 30 02:48:21 2025 GMT Subject: CN=68a92bf6-c546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:64:a6:44:6b:93:42:93:b3:08:15:49:60:8a: 33:da:6a:a7:aa:00:ec:c2:9f:86:2f:17:f4:0d:8a: 6b:52:22:5b:72:7a:ac:df:27:83:31:73:3d:c5:59: 91:2a:c7:2a:e3:c2:36:60:3b:95:87:99:c5:df:21: b7:0f:4e:f3:9a:61:5c:b3:42:9f:f4:0c:18:74:6f: 84:49:45:c0:cd:3f:26:0d:2f:fb:8f:81:59:1d:28: 3c:ae:08:06:8d:94:0c:3f:75:c1:5b:9f:04:99:57: f7:ab:63:34:8b:bd:a8:39:04:15:cb:2d:2f:35:10: 6a:00:1f:2e:fd:2b:fc:9d:f0:89:d2:96:a1:b8:24: b1:ae:ed:3e:48:44:da:4e:13:ec:03:ae:b9:66:07: 90:8f:7c:a8:13:dd:ee:70:33:c7:8d:72:d7:d5:c9: be:fe:79:f2:68:4f:8e:f6:84:32:c4:21:10:a7:72: dd:36:30:a2:1f:ed:f6:ac:1f:05:8d:ea:71:cb:44: 82:a9:c0:6f:68:32:87:ad:f5:fa:a7:51:84:18:e8: de:d8:43:b0:0f:05:82:75:3d:ee:08:80:cc:7a:bf: f4:0e:41:f6:47:ba:28:97:fc:37:7b:d9:16:a6:b5: 00:1a:24:cb:72:af:b3:70:cd:b8:25:31:91:08:4e: 9a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C5:16:1E:9A:C5:CF:0F:B4:C4:E5:2C:8A:F9:F9:6A:7E:E1:8B:E0 X509v3 Authority Key Identifier: keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:58:fc:fe:f2:db:06:4c:7a:97:97:7f:8f:52:c8:0a:b7:8b: af:5f:68:4f:46:97:1f:b2:90:d7:bd:83:58:59:dc:bc:69:80: 54:05:41:fd:e3:d4:d0:cb:e5:ce:3f:13:14:d2:37:8f:e2:f9: 6e:0e:da:18:45:6b:82:41:a2:d0:0e:c5:f3:20:c0:83:76:a3: 8c:8f:de:f9:be:7e:e1:f0:6b:cc:a6:ac:76:e9:d3:02:9f:a1: ff:9d:b4:0a:d1:f7:07:7e:1c:7f:a8:5e:85:69:07:c3:b7:f3: 7a:68:60:92:90:07:08:67:d1:d3:ec:33:b6:35:12:18:56:7c: 8d:74:e2:b5:4c:be:b0:05:74:63:23:84:36:fc:bb:6f:db:4e: 80:7b:15:45:e4:34:74:d6:d0:36:ec:ce:17:a0:a4:a2:36:1e: f3:91:60:8b:bd:d3:bf:a2:b3:78:24:bf:1f:75:49:ba:77:7e: cc:8f:cb:3c:d0:4a:db:32:06:86:d1:c6:5f:f8:43:61:60:34: e9:0a:ae:59:bd:b3:dd:0d:da:83:c9:cc:75:da:6a:77:9e:9d: 0e:1d:ef:e1:07:44:6a:a7:59:83:43:c7:b3:0a:dd:58:ee:c6: 6f:be:07:c2:c0:d1:bd:9b:6b:40:7d:56:05:67:c9:e9:d2:bd: b5:2b:9d:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0NjkxMTAvBgNVBAUTKEUwRDU0NDVCODBCMTgxN0Y2MkYzQzY0QUE4QzhGNkQ3 RTEzQUUxMDMwHhcNMjUwODIzMDI0ODIxWhcNMjUwODMwMDI0ODIxWjAYMRYwFAYD VQQDEw02OGE5MmJmNi1jNTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WSmRGuTQpOzCBVJYIoz2mqnqgDswp+GLxf0DYprUiJbcnqs3yeDMXM9xVmR Kscq48I2YDuVh5nF3yG3D07zmmFcs0Kf9AwYdG+ESUXAzT8mDS/7j4FZHSg8rggG jZQMP3XBW58EmVf3q2M0i72oOQQVyy0vNRBqAB8u/Sv8nfCJ0pahuCSxru0+SETa ThPsA665ZgeQj3yoE93ucDPHjXLX1cm+/nnyaE+O9oQyxCEQp3LdNjCiH+32rB8F jepxy0SCqcBvaDKHrfX6p1GEGOje2EOwDwWCdT3uCIDMer/0DkH2R7ool/w3e9kW prUAGiTLcq+zcM24JTGRCE6axQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrFFh6a xc8PtMTlLIr5+Wp+4YvgMB8GA1UdIwQYMBaAFODVRFuAsYF/YvPGSqjI9tfhOuED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTQ2OS9FRkE1NjNDOEE1 QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdYOWk4OFpLcU1qMjEtRTY0 UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROVkVXNEN4Z1g5aTg4WktxTWoyMS1FNjRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTQ2OS9FRkE1NjNDOEE1QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdY OWk4OFpLcU1qMjEtRTY0UU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRWPz+8tsGTHqXl3+PUsgKt4uvX2hPRpcfspDXvYNYWdy8aYBUBUH9 49TQy+XOPxMU0jeP4vluDtoYRWuCQaLQDsXzIMCDdqOMj975vn7h8GvMpqx26dMC n6H/nbQK0fcHfhx/qF6FaQfDt/N6aGCSkAcIZ9HT7DO2NRIYVnyNdOK1TL6wBXRj I4Q2/Ltv206AexVF5DR01tA27M4XoKSiNh7zkWCLvdO/orN4JL8fdUm6d37Mj8s8 0ErbMgaG0cZf+ENhYDTpCq5ZvbPdDdqDycx12mp3np0OHe/hB0Rqp1mDQ8ezCt1Y 7sZvvgfCwNG9m2tAfVYFZ8np0r21K52Y -----END CERTIFICATE-----Generated at Sat Aug 23 09:17:51 2025 by rpki-client