$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json) Hash identifier: DLQu8O2xkkKA97b9zCj0WajjqjGyIj8Yq9NdaJVu7S8= Subject key identifier: 1C:F3:11:B6:38:A2:6C:1A:5E:8C:93:99:B9:72:76:88:AA:8E:FD:75 Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft Manifest number: 04AC Signing time: Sat 23 Aug 2025 00:08:08 +0000 Manifest this update: Sat 23 Aug 2025 00:08:07 +0000 Manifest next update: Sat 30 Aug 2025 00:08:07 +0000 Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: aPJYRZy3EgY+p0ABqW3hcI7D9Cs2lKHTuOjemOj+jfs=) 2: CF272560413111ECB71E086AC4F9AE02.roa (hash: DFm7D2HD21ulEvvyR2LKRVZi0MMQ+cGXUer0vQ5hcd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Validity Not Before: Aug 23 00:08:07 2025 GMT Not After : Aug 30 00:08:07 2025 GMT Subject: CN=68a90667-e8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:48:15:d1:f8:ff:e3:1d:6b:7f:29:2d:70:d6: e7:37:4e:23:21:3a:e3:bf:d0:c9:a8:e6:f5:3b:d8: 28:3d:d0:33:ab:a2:64:fb:73:bd:92:e2:d3:68:5b: 7b:49:a5:fc:8b:17:86:77:ca:41:26:99:70:42:f6: a4:ba:b7:42:d0:1e:42:3e:c8:27:10:28:65:e8:f9: 83:79:bd:24:08:4d:a2:ff:30:07:1b:d6:58:e3:12: 92:1d:10:36:c5:1a:ac:a2:1c:5d:7f:45:f6:fe:d4: 8d:9a:b4:46:04:4a:e9:2e:96:b1:58:fc:e4:d9:fd: 46:df:ec:da:e1:f7:b6:16:4c:33:e8:be:0d:35:e8: 4f:98:f7:1a:11:8c:af:92:88:b1:46:77:b1:29:ac: 2f:fd:32:bd:11:d7:63:3d:ed:a6:e1:4f:c0:3e:2d: 52:3b:f8:8b:c3:4c:37:57:00:e4:4e:bd:f0:dc:02: c0:0f:e1:c5:58:d8:69:57:17:33:fa:4a:ac:05:8a: 1e:a3:10:a8:08:c7:f6:28:8c:2a:fb:ef:36:87:91: 6e:e3:58:25:ce:a3:dd:b2:c4:98:8c:d4:f8:13:3d: 44:54:97:ca:58:48:17:0a:f8:a0:65:02:43:48:f2: d0:1e:31:1c:c5:fb:72:fb:90:43:25:d5:47:02:8d: ed:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F3:11:B6:38:A2:6C:1A:5E:8C:93:99:B9:72:76:88:AA:8E:FD:75 X509v3 Authority Key Identifier: keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:78:32:2e:c4:5c:22:af:a1:99:88:a5:2c:6f:e0:66:b3:96: a0:39:99:6d:5a:8e:bc:93:3f:c1:d6:cb:d6:7d:3e:2c:97:d8: 3b:6b:9f:b4:4b:62:44:e3:4e:8b:a9:e2:43:81:da:7a:3b:6f: 72:33:26:e3:7b:9f:e5:74:e1:3c:34:4e:62:3d:16:65:cf:5e: 65:40:3c:af:07:cf:1c:b4:7f:8c:6f:bc:4e:2b:db:e1:e1:ed: 91:6e:d0:ac:3b:eb:6d:8d:c1:57:3b:ff:3d:07:ac:26:74:97: c4:ae:79:ef:fa:4f:ca:9e:9d:c1:be:02:34:36:ed:d2:49:21: 80:83:4e:bb:0b:7b:d1:91:cc:73:b9:ff:0a:4f:18:8f:01:1a: b5:ac:98:6a:02:e2:a9:a7:8e:8e:43:84:47:77:fc:10:27:b7: 64:13:3e:61:86:f5:fa:32:3e:b6:d6:ed:64:23:0a:5c:21:2e: 1d:24:58:b8:cd:8e:27:d7:ee:a3:7e:68:a1:0f:77:9b:20:3c: 7b:1f:e4:eb:52:fa:19:5a:2c:7e:13:96:84:7a:d9:6a:36:4f: ef:a2:8c:1b:7e:b1:15:de:85:50:83:33:71:ab:db:3c:46:22: 54:ae:13:be:4d:c8:67:c5:ef:8f:b7:3f:f3:dc:38:21:51:0c: 77:8d:d6:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMjQxMTAvBgNVBAUTKDMxRjM3ODNDN0ExRUQ3ODNGQzFGREE3NDFGNkE3NTI5 RDVBNUU2QTAwHhcNMjUwODIzMDAwODA3WhcNMjUwODMwMDAwODA3WjAYMRYwFAYD VQQDEw02OGE5MDY2Ny1lOGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10gV0fj/4x1rfyktcNbnN04jITrjv9DJqOb1O9goPdAzq6Jk+3O9kuLTaFt7 SaX8ixeGd8pBJplwQvakurdC0B5CPsgnEChl6PmDeb0kCE2i/zAHG9ZY4xKSHRA2 xRqsohxdf0X2/tSNmrRGBErpLpaxWPzk2f1G3+za4fe2Fkwz6L4NNehPmPcaEYyv koixRnexKawv/TK9EddjPe2m4U/APi1SO/iLw0w3VwDkTr3w3ALAD+HFWNhpVxcz +kqsBYoeoxCoCMf2KIwq++82h5Fu41glzqPdssSYjNT4Ez1EVJfKWEgXCvigZQJD SPLQHjEcxfty+5BDJdVHAo3tzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzzEbY4 omwaXoyTmblydoiqjv11MB8GA1UdIwQYMBaAFDHzeDx6HteD/B/adB9qdSnVpeag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIyNC81RkZDOUVGNjQx MjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0UDhIOXAwSDJwMUtkV2w1 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mTjRQSG9lMTRQOEg5cDBIMnAxS2RXbDVxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIyNC81RkZDOUVGNjQxMjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0 UDhIOXAwSDJwMUtkV2w1cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQeDIuxFwir6GZiKUsb+Bms5agOZltWo68kz/B1svWfT4sl9g7a5+0 S2JE406LqeJDgdp6O29yMybje5/ldOE8NE5iPRZlz15lQDyvB88ctH+Mb7xOK9vh 4e2RbtCsO+ttjcFXO/89B6wmdJfErnnv+k/Knp3BvgI0Nu3SSSGAg067C3vRkcxz uf8KTxiPARq1rJhqAuKpp46OQ4RHd/wQJ7dkEz5hhvX6Mj621u1kIwpcIS4dJFi4 zY4n1+6jfmihD3ebIDx7H+TrUvoZWix+E5aEetlqNk/voowbfrEV3oVQgzNxq9s8 RiJUrhO+Tchnxe+Ptz/z3DghUQx3jdYD -----END CERTIFICATE-----Generated at Sun Aug 24 03:08:23 2025 by rpki-client