$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft File: aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft (raw, json) Hash identifier: Ts1dtFG0exNZocdfviwl9+7SSwN6ie2p0VZSyJZl1kQ= Subject key identifier: 6E:9A:AA:1F:D5:29:38:9D:F9:02:16:97:E3:60:5D:8C:F6:CE:79:50 Authority key identifier: 69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03 Certificate issuer: /CN=A9122B85/serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft Manifest number: 0143 Signing time: Sat 09 Aug 2025 04:44:52 +0000 Manifest this update: Sat 09 Aug 2025 04:44:51 +0000 Manifest next update: Sat 16 Aug 2025 04:44:51 +0000 Files and hashes: 1: aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl (hash: LlWVuuV2xd1C2Fn+087Rsb1K7uoEFd6Z42HBBjmZHRo=) 2: 0287BD068A3D11EEADFABF09C4F9AE02.roa (hash: zthvVJ0xeL5J9gMyWu/Onbxvo/kp68K5vsS8CZ3Wqh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B85, serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103 Validity Not Before: Aug 9 04:44:51 2025 GMT Not After : Aug 16 04:44:51 2025 GMT Subject: CN=6896d244-8d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6d:d8:02:c6:ad:83:27:8b:be:64:96:68:dd: 1f:5b:a6:4b:89:83:28:f5:73:88:4f:fa:0c:27:3b: aa:cb:68:3a:60:68:fc:a6:ac:7f:44:85:9f:ba:c9: 1a:3d:c2:cf:3b:af:b0:d4:4a:92:9d:f5:af:03:c8: c2:5b:ac:ab:52:36:16:f1:89:82:e1:19:27:d8:a7: 12:53:1b:73:a0:1b:00:fe:41:e9:0f:c5:76:86:4d: 05:3e:05:48:53:b1:a2:48:ff:0f:cb:b6:b7:e1:44: 59:20:2c:d8:8b:2c:58:89:b4:ed:69:0a:c3:90:06: 29:27:40:d6:a3:1e:f8:27:43:74:56:ae:19:05:02: a5:b3:41:70:87:25:61:df:24:57:3e:2b:e1:72:af: b7:73:78:94:ea:94:66:ef:b2:4f:c3:a7:3f:ea:ff: 27:d8:95:af:3d:d8:9d:36:1b:6e:1c:06:cb:98:4c: 97:56:cb:b1:b4:7d:33:91:61:53:a2:60:5d:ad:33: 44:51:2b:38:e6:0e:cb:2e:9b:c8:cc:6e:a6:d6:b0: ca:09:40:5e:6a:79:3b:31:eb:d6:c4:9f:5e:80:ac: e8:83:ad:1e:fe:56:a4:6a:2e:b9:3c:c3:7f:a7:ee: ac:88:8e:38:de:48:ce:d4:23:72:e7:6c:b2:41:df: 03:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9A:AA:1F:D5:29:38:9D:F9:02:16:97:E3:60:5D:8C:F6:CE:79:50 X509v3 Authority Key Identifier: keyid:69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:1f:58:95:eb:8c:97:f4:57:77:4d:25:99:09:98:07:0d:71: a9:7f:b2:cb:a5:e2:f9:f8:11:9a:bb:ed:8e:9b:f3:c7:41:95: e3:38:07:54:a5:b9:47:5f:f5:2b:f6:50:2d:72:e8:d3:13:f8: f0:07:c3:3c:1c:0e:44:71:1a:23:6d:04:68:ae:50:0c:d0:c9: e0:47:d1:9d:95:f8:bc:54:96:64:8d:77:aa:20:6d:3f:33:ff: 71:fd:88:ce:c0:67:95:32:3d:b3:72:7e:c0:bf:70:07:b1:69: 14:ca:4f:c5:a9:bd:ab:9e:08:d9:f0:54:30:08:2f:eb:77:ea: 88:b6:83:50:8c:c8:1d:7f:59:f8:48:c4:b1:42:13:1b:03:fb: 14:3f:65:61:7c:5d:c1:d7:3e:df:f8:13:ed:aa:5c:8c:9a:77: 83:9a:86:ce:5a:1d:d5:d3:49:72:83:6c:79:37:3a:69:07:3f: d7:65:ac:cc:e0:8e:97:3f:a5:59:b5:9d:94:78:cf:01:a9:65: 50:0f:c8:df:6a:81:14:67:ea:a3:3d:21:ae:32:15:7f:40:7c: 80:e5:bb:92:56:b1:87:75:ae:38:6d:94:df:12:b7:54:ed:f3: e6:28:84:3e:a0:26:f6:db:27:35:d6:ea:83:2a:cd:c0:ce:5e: 30:e3:fa:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCODUxMTAvBgNVBAUTKDY5RUE2MkUzRjAzRTQ3QzAzNzE5QkVEQjE2QjRDQTI3 M0I4QjMxMDMwHhcNMjUwODA5MDQ0NDUxWhcNMjUwODE2MDQ0NDUxWjAYMRYwFAYD VQQDEw02ODk2ZDI0NC04ZDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyG3YAsatgyeLvmSWaN0fW6ZLiYMo9XOIT/oMJzuqy2g6YGj8pqx/RIWfuska PcLPO6+w1EqSnfWvA8jCW6yrUjYW8YmC4Rkn2KcSUxtzoBsA/kHpD8V2hk0FPgVI U7GiSP8Py7a34URZICzYiyxYibTtaQrDkAYpJ0DWox74J0N0Vq4ZBQKls0FwhyVh 3yRXPivhcq+3c3iU6pRm77JPw6c/6v8n2JWvPdidNhtuHAbLmEyXVsuxtH0zkWFT omBdrTNEUSs45g7LLpvIzG6m1rDKCUBeank7MevWxJ9egKzog60e/lakai65PMN/ p+6siI443kjO1CNy52yyQd8DVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6aqh/V KTid+QIWl+NgXYz2znlQMB8GA1UdIwQYMBaAFGnqYuPwPkfANxm+2xa0yic7izED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkI4NS85MEU5N0Q3MDg5 QkUxMUVFQkNGMjlBNTVDNEY5QUUwMi9hZXBpNF9BLVI4QTNHYjdiRnJUS0p6dUxN UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlcGk0X0EtUjhBM0diN2JGclRLSnp1TE1RTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkI4NS85MEU5N0Q3MDg5QkUxMUVFQkNGMjlBNTVDNEY5QUUwMi9hZXBpNF9BLVI4 QTNHYjdiRnJUS0p6dUxNUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiH1iV64yX9Fd3TSWZCZgHDXGpf7LLpeL5+BGau+2Om/PHQZXjOAdU pblHX/Ur9lAtcujTE/jwB8M8HA5EcRojbQRorlAM0MngR9Gdlfi8VJZkjXeqIG0/ M/9x/YjOwGeVMj2zcn7Av3AHsWkUyk/Fqb2rngjZ8FQwCC/rd+qItoNQjMgdf1n4 SMSxQhMbA/sUP2VhfF3B1z7f+BPtqlyMmneDmobOWh3V00lyg2x5NzppBz/XZazM 4I6XP6VZtZ2UeM8BqWVQD8jfaoEUZ+qjPSGuMhV/QHyA5buSVrGHda44bZTfErdU 7fPmKIQ+oCb22yc11uqDKs3Azl4w4/pn -----END CERTIFICATE-----Generated at Sun Aug 10 21:16:05 2025 by rpki-client