$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft File: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json) Hash identifier: EsbF6Fa03E9c2e1CtD3Oh2r4iKyX8OxaOQDjhkJ2V9g= Subject key identifier: 60:8B:4D:D6:B6:48:76:13:17:3A:C8:E5:71:68:57:D5:BE:BD:BA:2D Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Certificate serial: 07D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft Manifest number: 07C3 Signing time: Fri 22 Aug 2025 21:22:54 +0000 Manifest this update: Fri 22 Aug 2025 21:22:53 +0000 Manifest next update: Fri 29 Aug 2025 21:22:53 +0000 Files and hashes: 1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: OAGf86rRgWmcWqiDGEmPkgQDBDSX4J4Xcy+ntiRtq9s=) 2: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: tLbfqsiqbU5f5RIfXdeZj0H0Fi86hjwtE1k3SMfEBD0=) 3: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: /j+vq5djnc7hZrEiUy4WmMk+wFiISuWLXCgiYcfhmKo=) 4: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: tkd8GU4TJwZRxQo7fPIxlQckyw3LFTCGlrBbg1Zjf+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2006 (0x7d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Validity Not Before: Aug 22 21:22:53 2025 GMT Not After : Aug 29 21:22:53 2025 GMT Subject: CN=68a8dfad-08a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:63:8b:89:b2:4d:72:7f:4a:82:b5:79:73:ac: 10:d1:87:4d:a3:1c:8e:84:c8:a8:30:3e:d5:c2:69: d4:6f:67:6d:6d:b1:2f:6d:b9:ce:76:71:f8:dc:5c: f1:89:bb:9d:c2:e9:ac:f8:b3:bf:6d:44:6a:97:33: bf:d9:6d:8d:a8:95:41:20:bb:a0:e0:1b:84:e2:c9: c1:ca:64:82:b4:94:fb:ff:3e:ba:58:ff:cf:21:6a: 86:1d:70:e1:28:3f:41:8e:74:93:c6:6a:7f:88:a9: cc:39:d3:a9:15:1c:8f:2f:60:b8:5d:31:87:44:76: 00:75:9a:ea:31:0d:d9:bf:a0:01:07:38:08:ee:1b: 32:8f:cf:6f:b7:bc:bf:db:7b:2d:73:ed:a1:3f:81: a3:db:83:92:46:98:35:f6:63:63:7d:7a:a7:98:e4: 40:d7:ed:a3:c3:4b:b2:07:83:5d:45:b3:de:a1:10: a7:c4:d8:53:ab:5c:80:20:19:2c:a4:ad:29:07:4c: b0:dd:1d:31:0d:c1:fd:8a:c2:5b:8b:26:14:33:eb: 7e:c8:c3:3a:1e:c0:55:d6:f9:38:0c:b8:43:96:4f: 59:fa:11:7c:4f:7f:31:42:d2:32:80:27:6a:9d:89: 2b:00:56:a7:78:46:f5:d2:05:83:0b:f2:48:62:af: b9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8B:4D:D6:B6:48:76:13:17:3A:C8:E5:71:68:57:D5:BE:BD:BA:2D X509v3 Authority Key Identifier: keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:5c:f8:81:db:69:a6:a7:99:0c:92:03:16:b6:d5:2d:c1:d3: 33:49:37:cd:63:ca:dc:f7:04:1f:96:b2:cc:74:45:b9:82:d6: 9e:b8:3f:45:ea:f9:e7:dd:b4:df:03:60:13:fe:1c:c4:e3:55: 80:7a:de:77:9f:53:25:8a:54:7a:35:48:4b:37:78:75:68:91: 93:6f:12:07:08:7e:e2:75:4b:8c:e2:11:7e:f3:85:eb:65:57: ef:5e:b4:df:0b:8c:43:d4:81:9a:e6:cf:c6:e5:78:e8:b2:87: cd:e3:b9:01:df:16:51:ac:81:3c:32:a1:82:b6:3c:1a:16:12: 5f:c1:2f:5e:a4:32:73:e7:8b:88:f8:10:ed:30:ab:73:62:99: 07:5e:d0:d6:c6:a8:94:a8:b7:87:7b:8b:3b:32:be:2b:08:2f: 46:a6:57:3a:92:ad:54:21:e5:d7:e2:f1:eb:15:a3:27:6c:0f: 85:ed:00:90:64:91:53:b5:f2:77:e3:da:a2:3a:6b:73:96:d2: a4:63:c8:28:21:83:e8:c4:6e:e0:3f:6d:6d:74:cf:d9:f6:59: 33:ff:76:cd:bd:3c:bb:11:d1:9e:43:11:5b:af:70:b2:d6:6d: ad:ac:dc:a8:99:e1:32:32:26:33:63:3d:4f:1b:3f:0a:ec:0a: dc:d0:8a:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVFNzcxMTAvBgNVBAUTKEI3ODFBMkU3RDkxRURDQThCMDMwREUzRUE4OUZBNEZB RjE3OTFGMjEwHhcNMjUwODIyMjEyMjUzWhcNMjUwODI5MjEyMjUzWjAYMRYwFAYD VQQDEw02OGE4ZGZhZC0wOGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmOLibJNcn9KgrV5c6wQ0YdNoxyOhMioMD7VwmnUb2dtbbEvbbnOdnH43Fzx ibudwums+LO/bURqlzO/2W2NqJVBILug4BuE4snBymSCtJT7/z66WP/PIWqGHXDh KD9BjnSTxmp/iKnMOdOpFRyPL2C4XTGHRHYAdZrqMQ3Zv6ABBzgI7hsyj89vt7y/ 23stc+2hP4Gj24OSRpg19mNjfXqnmORA1+2jw0uyB4NdRbPeoRCnxNhTq1yAIBks pK0pB0yw3R0xDcH9isJbiyYUM+t+yMM6HsBV1vk4DLhDlk9Z+hF8T38xQtIygCdq nYkrAFaneEb10gWDC/JIYq+5iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCLTda2 SHYTFzrI5XFoV9W+vbotMB8GA1UdIwQYMBaAFLeBoufZHtyosDDePqifpPrxeR8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUU3Ny9EOUJFMDdCQTBD RUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNLaXdNTjQtcUotay12RjVI eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q0R2k1OWtlM0tpd01ONC1xSi1rLXZGNUh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUU3Ny9EOUJFMDdCQTBDRUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNL aXdNTjQtcUotay12RjVIeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzXPiB22mmp5kMkgMWttUtwdMzSTfNY8rc9wQflrLMdEW5gtaeuD9F 6vnn3bTfA2AT/hzE41WAet53n1MlilR6NUhLN3h1aJGTbxIHCH7idUuM4hF+84Xr ZVfvXrTfC4xD1IGa5s/G5XjosofN47kB3xZRrIE8MqGCtjwaFhJfwS9epDJz54uI +BDtMKtzYpkHXtDWxqiUqLeHe4s7Mr4rCC9Gplc6kq1UIeXX4vHrFaMnbA+F7QCQ ZJFTtfJ349qiOmtzltKkY8goIYPoxG7gP21tdM/Z9lkz/3bNvTy7EdGeQxFbr3Cy 1m2trNyomeEyMiYzYz1PGz8K7Arc0IpX -----END CERTIFICATE-----Generated at Sat Aug 23 21:26:51 2025 by rpki-client