$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft File: Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft (raw, json) Hash identifier: 1WxN6s2OYlQvX8WX7OsVMmHpvzTkgFnxgmtfzVurl3Y= Subject key identifier: D3:C5:B0:E8:38:76:CB:F5:6E:FA:CC:F5:C6:B6:2A:B5:D5:63:AA:F7 Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft Manifest number: 016E Signing time: Sat 09 Aug 2025 04:15:14 +0000 Manifest this update: Sat 09 Aug 2025 04:15:14 +0000 Manifest next update: Sat 16 Aug 2025 04:15:14 +0000 Files and hashes: 1: Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl (hash: zy4uqQnvtZxVLMP4nCPihVkyVqb+oUYOIOfq/yJGGDY=) 2: 4D7FE224E87B11EEAF04B71AC4F9AE02.roa (hash: LhhhRZ9rRf4tKP+wa+0RqCOvGKNOYKeYqEjxUmyjiLQ=) 3: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (hash: QFhCans14JnqpL9Jwv4rbJ2pg2u9bZu64HPsOXqSkiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121995, serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Validity Not Before: Aug 9 04:15:14 2025 GMT Not After : Aug 16 04:15:14 2025 GMT Subject: CN=6896cb52-278f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d2:4c:7c:95:0f:c5:62:c5:8e:e6:d8:d2:eb: 67:7f:96:c9:25:68:2f:9c:ba:6b:6a:b4:c7:bb:44: 2f:5b:77:10:b4:00:29:f5:e0:5c:0d:7f:6d:28:55: e9:04:a1:f3:2f:0e:9c:2b:b5:8f:44:a7:43:04:79: d0:b0:bf:36:88:2e:6b:ad:9c:7c:2d:f4:32:b6:29: fa:22:fa:eb:9b:66:02:a9:e2:88:26:70:36:0b:18: 92:e7:e4:08:0b:1e:e8:e8:25:23:78:14:92:29:11: 9e:cb:83:e1:fb:5b:ac:9b:c3:00:cf:97:22:82:42: 2d:8e:6e:83:76:4b:90:ab:0b:66:c8:b2:7a:3f:17: 60:ba:44:04:1f:c6:8f:a0:e8:cc:7e:18:79:2c:4f: 4f:9a:dd:28:5c:a8:07:4e:d7:89:5f:ac:ee:66:22: dc:d4:e3:a6:22:59:fd:f3:82:15:b0:6c:f7:76:85: 7a:7b:e5:e1:56:64:3e:70:a2:1d:aa:2d:97:d4:b6: 8f:c7:c1:b6:0e:45:8a:17:0d:60:a7:84:b8:91:3f: c8:a1:8e:33:9e:f5:20:1f:ad:92:2f:a2:8c:b7:6c: 6e:94:7b:cd:12:ad:19:f5:3b:ed:70:d3:83:72:cf: 09:4f:ae:7d:b2:82:0a:58:57:8e:30:c5:61:4a:16: 07:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C5:B0:E8:38:76:CB:F5:6E:FA:CC:F5:C6:B6:2A:B5:D5:63:AA:F7 X509v3 Authority Key Identifier: keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:0c:8c:a4:ab:34:fc:80:33:0d:da:02:ef:f7:06:13:81:71: 59:95:a6:b4:f6:f4:b4:57:05:81:98:c8:e2:df:e0:74:c0:cb: da:a5:b6:54:e0:a9:39:84:1b:65:01:18:44:28:bc:61:eb:59: 9b:15:a5:f7:ac:c9:cc:d1:d4:da:35:f4:da:88:b9:c3:c3:0d: 1b:e6:f7:41:cc:63:72:00:56:43:a6:d0:96:51:d4:ac:1e:59: 88:1a:3b:83:90:bb:7c:24:84:ae:5b:d6:96:b5:6d:99:17:90: 28:8b:d9:2e:94:10:4a:44:b0:85:f0:61:f4:ca:84:eb:0b:28: 5d:bd:64:52:1e:f8:b4:f5:0a:bd:13:fb:3d:de:c7:b0:83:c0: bf:4a:8c:a2:3c:9d:20:a0:45:b3:29:cf:51:5b:c2:89:6a:f0: a0:18:0c:46:ec:6b:63:db:21:22:08:51:6f:f4:54:48:b3:63: 44:dd:21:91:88:86:b5:66:38:93:6a:c5:f3:e9:32:05:7c:06: ed:12:a7:a4:b8:0a:a1:5a:59:99:5e:db:15:c0:44:eb:01:3b: e5:9f:80:9f:1a:45:42:65:9d:c7:8d:c4:9b:87:8f:eb:39:92: f9:97:38:69:82:e0:d2:3c:ee:25:e8:11:08:3f:f5:97:59:d2: 02:63:c7:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5OTUxMTAvBgNVBAUTKDIyOUUwNjRBQ0Y0MzJGNjREQUE3MDE3QTY2QkU4QjYx QTk2QjE4NUEwHhcNMjUwODA5MDQxNTE0WhcNMjUwODE2MDQxNTE0WjAYMRYwFAYD VQQDEw02ODk2Y2I1Mi0yNzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dJMfJUPxWLFjubY0utnf5bJJWgvnLprarTHu0QvW3cQtAAp9eBcDX9tKFXp BKHzLw6cK7WPRKdDBHnQsL82iC5rrZx8LfQytin6Ivrrm2YCqeKIJnA2CxiS5+QI Cx7o6CUjeBSSKRGey4Ph+1usm8MAz5cigkItjm6DdkuQqwtmyLJ6PxdgukQEH8aP oOjMfhh5LE9Pmt0oXKgHTteJX6zuZiLc1OOmIln984IVsGz3doV6e+XhVmQ+cKId qi2X1LaPx8G2DkWKFw1gp4S4kT/IoY4znvUgH62SL6KMt2xulHvNEq0Z9TvtcNOD cs8JT659soIKWFeOMMVhShYHfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPFsOg4 dsv1bvrM9ca2KrXVY6r3MB8GA1UdIwQYMBaAFCKeBkrPQy9k2qcBema+i2Gpaxha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTk5NS85RTM2QkZBNDRD MTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwyVGFwd0Y2WnI2TFlhbHJH Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwNEdTczlETDJUYXB3RjZacjZMWWFsckdGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTk5NS85RTM2QkZBNDRDMTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwy VGFwd0Y2WnI2TFlhbHJHRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNDIykqzT8gDMN2gLv9wYTgXFZlaa09vS0VwWBmMji3+B0wMvapbZU 4Kk5hBtlARhEKLxh61mbFaX3rMnM0dTaNfTaiLnDww0b5vdBzGNyAFZDptCWUdSs HlmIGjuDkLt8JISuW9aWtW2ZF5Aoi9kulBBKRLCF8GH0yoTrCyhdvWRSHvi09Qq9 E/s93sewg8C/SoyiPJ0goEWzKc9RW8KJavCgGAxG7Gtj2yEiCFFv9FRIs2NE3SGR iIa1ZjiTasXz6TIFfAbtEqekuAqhWlmZXtsVwETrATvln4CfGkVCZZ3HjcSbh4/r OZL5lzhpguDSPO4l6BEIP/WXWdICY8fV -----END CERTIFICATE-----Generated at Sun Aug 10 16:04:43 2025 by rpki-client