$ rpki-client -vvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft File: 4TxHTdRFcajO9AZpTgStasYbJWY.mft (raw, json) Hash identifier: Gm/YHZ3zPW2O0eeLiJfH65fe9lYiZOpwxyXtWC8UJLE= Subject key identifier: DB:AC:5B:13:1A:F1:C8:AC:49:E1:31:67:1E:8C:EB:FF:29:12:F2:A1 Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66 Certificate issuer: /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft Manifest number: 015B Signing time: Sat 23 Aug 2025 04:13:34 +0000 Manifest this update: Sat 23 Aug 2025 04:13:34 +0000 Manifest next update: Sat 30 Aug 2025 04:13:34 +0000 Files and hashes: 1: 4TxHTdRFcajO9AZpTgStasYbJWY.crl (hash: lNM35SvJhcvEm7Bf8O3E3Bh+pQ03xdsOmLXdU6YnxiA=) 2: 658CF9F2721411EEAC707910C4F9AE02.roa (hash: q+T3C3H2UjoBgZcZ1La6G7C0poZwdj+81El+MVIEtoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D313, serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566 Validity Not Before: Aug 23 04:13:34 2025 GMT Not After : Aug 30 04:13:34 2025 GMT Subject: CN=68a93fee-2557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7e:1a:4c:3d:94:65:94:38:ca:f4:99:aa:2d: 82:61:79:24:58:96:94:14:d1:9d:18:15:b2:72:ac: 31:54:6b:95:1a:82:c4:e2:f6:83:97:7a:a2:05:49: c4:2c:47:af:7e:d1:ea:ca:d2:b8:24:3a:05:60:1d: 5e:58:22:d3:c6:08:a3:dc:e2:07:6d:4e:b4:ab:24: ad:ee:69:05:85:4f:3b:42:ab:1d:45:74:ea:a3:9c: dd:de:f8:a1:90:11:51:33:14:1e:96:d0:a1:93:75: b7:25:56:aa:4c:5d:32:51:ff:e3:64:23:2e:1e:51: 8f:0f:f4:1c:a8:bb:e4:a1:9c:a6:fe:de:36:23:16: 96:29:2d:d9:77:d2:94:8d:c4:01:81:26:ed:23:6c: 46:f7:47:41:af:76:46:e5:c6:5f:38:e0:61:07:ea: 69:28:d6:4c:a9:f8:4f:99:50:f2:79:73:0b:ee:83: 2b:a8:69:05:10:e1:59:96:f8:79:77:e1:08:13:18: 94:39:c1:3d:31:c0:85:55:f2:f3:55:2f:a8:3c:05: bc:a1:55:27:a9:d6:22:73:4d:61:2c:fd:5f:70:d2: df:89:64:29:68:40:66:a9:39:c6:9a:00:63:59:bc: a8:2f:32:77:75:82:ee:5f:b7:cd:3c:3b:d0:11:1d: fb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AC:5B:13:1A:F1:C8:AC:49:E1:31:67:1E:8C:EB:FF:29:12:F2:A1 X509v3 Authority Key Identifier: keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:88:db:56:af:73:d7:ec:b0:78:ae:50:fc:a7:1d:41:52:af: 0e:2e:00:ff:0c:c5:db:c9:30:41:0a:a6:5c:51:b5:74:53:ab: 07:2a:00:9c:1e:8f:ec:20:f3:02:04:ac:fd:1c:7c:4a:77:b0: 00:03:79:c2:11:ca:eb:b7:0a:37:81:fc:82:08:e2:c2:c6:bf: 10:67:a2:8e:fb:f5:1a:c0:7e:51:af:7b:ae:32:c3:39:f7:95: 05:ec:ca:7d:3f:6c:0b:d2:3e:f6:a2:24:21:bd:71:c3:28:e2: cb:e2:30:a2:95:5f:fe:c3:34:b4:12:ee:3e:66:32:3e:cc:70: 72:3e:7d:ac:34:80:90:79:b9:70:64:fd:ba:84:f0:51:f5:95: e2:da:7e:f4:12:28:20:7e:97:92:90:39:e2:e8:70:73:4c:1c: 2f:1c:43:b2:8c:08:d4:d6:71:72:73:0a:c4:9c:2b:36:7f:0a: 64:6b:4a:7a:bb:e1:07:1c:98:19:31:4d:3b:11:9c:e9:a2:42: da:12:29:30:13:be:35:36:bd:c4:ff:97:3f:07:31:1d:19:2c: 32:e0:81:b0:7e:1c:59:d7:af:d3:29:17:ae:fa:7a:68:56:cd: 08:17:a3:61:cc:eb:44:75:f3:20:83:bf:84:0f:3d:3f:a6:f7: 3a:15:ca:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzMTMxMTAvBgNVBAUTKEUxM0M0NzRERDQ0NTcxQThDRUY0MDY2OTRFMDRBRDZB QzYxQjI1NjYwHhcNMjUwODIzMDQxMzM0WhcNMjUwODMwMDQxMzM0WjAYMRYwFAYD VQQDEw02OGE5M2ZlZS0yNTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm34aTD2UZZQ4yvSZqi2CYXkkWJaUFNGdGBWycqwxVGuVGoLE4vaDl3qiBUnE LEevftHqytK4JDoFYB1eWCLTxgij3OIHbU60qySt7mkFhU87QqsdRXTqo5zd3vih kBFRMxQeltChk3W3JVaqTF0yUf/jZCMuHlGPD/QcqLvkoZym/t42IxaWKS3Zd9KU jcQBgSbtI2xG90dBr3ZG5cZfOOBhB+ppKNZMqfhPmVDyeXML7oMrqGkFEOFZlvh5 d+EIExiUOcE9McCFVfLzVS+oPAW8oVUnqdYic01hLP1fcNLfiWQpaEBmqTnGmgBj WbyoLzJ3dYLuX7fNPDvQER37lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNusWxMa 8cisSeExZx6M6/8pEvKhMB8GA1UdIwQYMBaAFOE8R03URXGozvQGaU4ErWrGGyVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDMxMy8wRjIwNzk3NjZF RjUxMUVFODREQTY5ODJDNEY5QUUwMi80VHhIVGRSRmNhak85QVpwVGdTdGFzWWJK V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRUeEhUZFJGY2FqTzlBWnBUZ1N0YXNZYkpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDMxMy8wRjIwNzk3NjZFRjUxMUVFODREQTY5ODJDNEY5QUUwMi80VHhIVGRSRmNh ak85QVpwVGdTdGFzWWJKV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1iNtWr3PX7LB4rlD8px1BUq8OLgD/DMXbyTBBCqZcUbV0U6sHKgCc Ho/sIPMCBKz9HHxKd7AAA3nCEcrrtwo3gfyCCOLCxr8QZ6KO+/UawH5Rr3uuMsM5 95UF7Mp9P2wL0j72oiQhvXHDKOLL4jCilV/+wzS0Eu4+ZjI+zHByPn2sNICQeblw ZP26hPBR9ZXi2n70EiggfpeSkDni6HBzTBwvHEOyjAjU1nFycwrEnCs2fwpka0p6 u+EHHJgZMU07EZzpokLaEikwE741Nr3E/5c/BzEdGSwy4IGwfhxZ16/TKReu+npo Vs0IF6NhzOtEdfMgg7+EDz0/pvc6FcoR -----END CERTIFICATE-----Generated at Sun Aug 24 04:48:35 2025 by rpki-client