$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft File: 4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json) Hash identifier: rNFaWAUkFmQTFdWj2dU0aeHeH6DAoPSEP+Yyl+f6r/Q= Subject key identifier: 08:8A:10:8A:3B:2D:5E:45:34:7A:8C:8F:A2:22:E9:25:4A:A0:ED:75 Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 0911 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft Manifest number: 08F8 Signing time: Sun 10 Aug 2025 20:24:13 +0000 Manifest this update: Sun 10 Aug 2025 20:24:13 +0000 Manifest next update: Sun 17 Aug 2025 20:24:13 +0000 Files and hashes: 1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: kjn460VWWOGKArp+3XPDs11Knu+cf7WBQbAVDfZmjPc=) 2: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: YmROt2RnH3UdNIAXBylk68JRdbwoGmgzkhxTYT8yZZA=) 3: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: jI9GJ3mUj7/g+UDfOOrVVqKbgOohmwcRp94iSUpENxA=) 4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: 65R5M+eBFk+Sri4/ilXTe6yj4G3UYq+q394nSZKR7qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2321 (0x911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Aug 10 20:24:13 2025 GMT Not After : Aug 17 20:24:13 2025 GMT Subject: CN=6898ffed-014e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:ce:d8:45:0b:42:59:ef:6c:cd:80:e0:f6: eb:96:2f:2b:78:d9:6b:16:ee:02:08:aa:1d:0d:76: f5:7e:eb:a2:cb:63:44:e2:14:70:e1:a6:36:3c:4a: e7:75:eb:c0:00:30:dd:b1:18:a6:09:05:c5:b2:97: fe:6a:09:0e:04:ca:0e:62:3b:d1:fc:53:24:3b:67: c2:b9:14:0d:6a:1b:09:13:84:ed:5c:c1:cf:5d:f9: e4:4e:77:b1:00:53:11:37:68:ea:39:88:b4:b3:ec: 13:47:59:b3:47:1a:21:e7:82:ca:ed:ed:c4:de:02: 98:cb:7f:77:37:b8:37:88:b7:6c:0e:db:16:bb:fa: ae:6c:af:2d:0e:18:6b:65:28:cb:b7:23:b2:0c:72: b9:7a:52:b7:3e:a3:b7:ca:33:93:70:02:c1:af:1a: 36:66:1f:e6:f2:f1:9e:02:96:84:ef:04:bf:c8:39: 6a:43:a1:00:d0:d0:29:2b:50:48:60:11:f7:00:a7: b6:1a:eb:b7:3e:74:a8:b2:7c:cb:35:e2:f2:6c:57: 57:e6:71:15:24:88:83:ae:f6:7a:8e:9f:15:d7:eb: 0c:80:d2:84:d8:af:ae:c3:99:a9:99:b2:1f:9f:72: 08:90:51:74:b4:24:60:ab:3f:22:27:b4:3e:f6:d6: c4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8A:10:8A:3B:2D:5E:45:34:7A:8C:8F:A2:22:E9:25:4A:A0:ED:75 X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:4b:a2:a6:76:1c:11:e3:d1:c1:65:ab:52:ab:b0:11:c3:e9: cb:c5:2f:f9:a1:30:9e:a3:43:5d:b2:f7:75:a9:76:77:65:fd: 74:17:db:1d:33:97:68:41:f0:13:1e:24:52:c5:5b:d3:95:8e: fb:2f:1d:4e:56:53:2b:61:8b:c6:2d:58:0f:9b:93:62:0b:24: 97:93:7c:dd:5d:13:33:d3:6f:03:91:c7:6e:6b:0d:10:7f:1c: 26:ea:12:84:f4:14:03:b8:45:10:18:6f:8c:c2:4e:a5:31:5e: ef:5c:f1:b8:84:6d:ba:bc:4c:56:91:51:98:23:17:6f:ef:d0: 0d:69:b2:01:4d:d7:75:02:9f:d4:0e:43:a3:1b:3f:ce:9f:5c: b9:4b:a3:f0:ce:a8:a5:0f:53:4b:87:5e:fa:10:03:ec:b6:68: ba:0d:f3:4e:f7:b1:c9:da:07:eb:14:38:0a:8e:92:2b:02:6c: ae:e5:02:a8:2b:f6:d0:0b:09:93:d7:b3:8d:c2:c5:6f:41:9a: d1:72:c3:49:28:b7:bf:0f:e7:68:e4:0a:5e:97:e4:12:16:6c: 76:ca:c1:93:30:d2:d6:11:31:3e:5e:45:0c:5c:76:87:ab:ba: 5f:16:17:34:af:dc:10:1e:a2:44:bc:2e:a2:4b:b4:b5:57:4c: b0:b6:23:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjUwODEwMjAyNDEzWhcNMjUwODE3MjAyNDEzWjAYMRYwFAYD VQQDEw02ODk4ZmZlZC0wMTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzTO2EULQlnvbM2A4Pbrli8reNlrFu4CCKodDXb1fuuiy2NE4hRw4aY2PErn devAADDdsRimCQXFspf+agkOBMoOYjvR/FMkO2fCuRQNahsJE4TtXMHPXfnkTnex AFMRN2jqOYi0s+wTR1mzRxoh54LK7e3E3gKYy393N7g3iLdsDtsWu/qubK8tDhhr ZSjLtyOyDHK5elK3PqO3yjOTcALBrxo2Zh/m8vGeApaE7wS/yDlqQ6EA0NApK1BI YBH3AKe2Guu3PnSosnzLNeLybFdX5nEVJIiDrvZ6jp8V1+sMgNKE2K+uw5mpmbIf n3IIkFF0tCRgqz8iJ7Q+9tbE8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiKEIo7 LV5FNHqMj6Ii6SVKoO11MB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTEyRi80QjhCRkZFQ0I0NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhi a25WRjhrU1pLSEt0Q3Z3d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxS6KmdhwR49HBZatSq7ARw+nLxS/5oTCeo0Ndsvd1qXZ3Zf10F9sd M5doQfATHiRSxVvTlY77Lx1OVlMrYYvGLVgPm5NiCySXk3zdXRMz028Dkcduaw0Q fxwm6hKE9BQDuEUQGG+Mwk6lMV7vXPG4hG26vExWkVGYIxdv79ANabIBTdd1Ap/U DkOjGz/On1y5S6PwzqilD1NLh176EAPstmi6DfNO97HJ2gfrFDgKjpIrAmyu5QKo K/bQCwmT17ONwsVvQZrRcsNJKLe/D+do5Apel+QSFmx2ysGTMNLWETE+XkUMXHaH q7pfFhc0r9wQHqJEvC6iS7S1V0ywtiMq -----END CERTIFICATE-----Generated at Mon Aug 11 09:02:51 2025 by rpki-client