$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft File: 4YL5k2lSxCadZw2ldS3syGgjTxs.mft (raw, json) Hash identifier: L4tMtpcZM9WetS2ezQXyphoCyigCCCF4pPTtz/MgOis= Subject key identifier: 7E:CD:9E:50:74:CF:35:96:63:D9:6C:90:0D:6C:EC:40:40:7A:34:97 Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B Certificate issuer: /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Certificate serial: 21F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft Manifest number: 21D1 Signing time: Sun 10 Aug 2025 15:51:16 +0000 Manifest this update: Sun 10 Aug 2025 15:51:16 +0000 Manifest next update: Sun 17 Aug 2025 15:51:16 +0000 Files and hashes: 1: 4YL5k2lSxCadZw2ldS3syGgjTxs.crl (hash: DS+0ynwqNxNakMMXxgav7X7v5/oJofVHxeahFbimjiY=) 2: B72206B4554B11E791BA5861C4F9AE02.roa (hash: Si+Xx28szHe9Iv7W1YtcZoNp90VlP5RP91wUGl6kx/U=) 3: A8E9DE704B8511E7BF406610C4F9AE02.roa (hash: nu+MmRVMelFZBsdSEFhVpeJliAcHe14e7veTklAJkjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8690 (0x21f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Validity Not Before: Aug 10 15:51:16 2025 GMT Not After : Aug 17 15:51:16 2025 GMT Subject: CN=6898bff4-8f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:52:02:f7:9b:46:d5:f7:fc:25:b1:4c:db: 94:0c:c8:12:a3:a2:2f:c9:a1:db:64:47:30:51:cd: 6b:42:0d:eb:8a:27:eb:13:bf:45:6d:14:f4:4f:75: d9:26:5b:1b:b7:6b:26:f2:8d:2d:87:cd:e6:4e:67: 3e:7b:ae:d5:56:69:33:b4:dc:d9:c8:ee:d7:3f:a0: bb:c2:c4:9a:80:40:25:3b:14:70:16:7b:d5:65:af: 2d:56:64:01:97:9d:47:e6:6c:d5:d1:db:96:c9:e2: 48:1f:8c:b7:9d:79:10:0c:cb:af:d4:ef:9d:e7:fb: 7c:02:0c:29:9e:37:1b:5c:6d:5d:43:3d:0d:17:1b: 90:63:c6:04:c7:eb:b2:bd:ca:9d:43:21:d8:98:17: d8:45:26:a3:5a:5f:09:af:a5:dc:20:3e:5d:51:21: f2:49:a3:04:71:88:35:40:de:fb:1e:8b:9b:43:2a: 92:35:ac:ff:42:ec:66:02:fe:ca:ec:46:ea:d2:d5: b6:9b:95:ea:30:fb:e2:ef:c1:c8:e0:09:26:de:32: d4:f7:10:28:80:f8:02:67:97:d5:7c:98:82:a0:9a: 16:0b:07:35:43:9f:75:1f:d8:db:a9:fe:69:7b:91: be:50:95:8a:5a:58:d1:f6:c6:64:e1:37:92:5d:9b: 7f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CD:9E:50:74:CF:35:96:63:D9:6C:90:0D:6C:EC:40:40:7A:34:97 X509v3 Authority Key Identifier: keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:cf:e2:c4:43:76:ff:e0:3e:de:ba:32:ee:99:1a:3b:69:62: f3:72:50:58:93:4d:6d:66:61:b4:12:6a:67:99:be:23:29:99: df:db:70:e7:f3:c4:c9:e9:8b:b2:ff:a7:e4:9e:e5:ce:12:f6: 9c:dd:a1:2d:37:ee:23:ac:da:a3:17:a3:59:38:3e:1c:75:a9: cf:8f:eb:c9:d6:b1:e8:a8:96:17:71:a0:3f:e3:4f:c6:1e:ba: 55:90:95:22:d1:ef:94:ab:8e:05:ed:3b:19:aa:c5:02:87:8f: 9b:d3:2f:6f:21:21:b8:ce:79:03:8c:ab:f7:cd:09:cb:08:01: 18:0a:df:af:42:ac:7c:90:78:bd:b4:f3:a7:79:82:c6:99:c4: 7c:41:5e:37:2d:d3:ae:10:9c:7b:49:27:4c:66:fc:a2:7b:11: 2f:a1:ec:15:1a:3c:f6:d7:07:af:4f:d6:2d:24:5a:42:ef:13: 61:a6:b3:d2:80:da:d8:37:4e:1f:8e:44:4b:be:dc:e1:0e:9e: 08:01:fe:85:9b:c1:68:f7:ef:2a:14:86:ed:a8:07:34:85:b3: a5:09:fa:b4:4e:46:aa:05:8e:de:34:cd:c8:b5:9f:53:a5:c0: e3:80:77:d3:7e:ca:ca:06:69:00:da:28:4a:28:88:45:55:bd: 20:91:08:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZGMkIxMTAvBgNVBAUTKEUxODJGOTkzNjk1MkM0MjY5RDY3MERBNTc1MkRFQ0M4 NjgyMzRGMUIwHhcNMjUwODEwMTU1MTE2WhcNMjUwODE3MTU1MTE2WjAYMRYwFAYD VQQDEw02ODk4YmZmNC04ZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHxSAvebRtX3/CWxTNuUDMgSo6IvyaHbZEcwUc1rQg3riifrE79FbRT0T3XZ Jlsbt2sm8o0th83mTmc+e67VVmkztNzZyO7XP6C7wsSagEAlOxRwFnvVZa8tVmQB l51H5mzV0duWyeJIH4y3nXkQDMuv1O+d5/t8AgwpnjcbXG1dQz0NFxuQY8YEx+uy vcqdQyHYmBfYRSajWl8Jr6XcID5dUSHySaMEcYg1QN77HoubQyqSNaz/QuxmAv7K 7Ebq0tW2m5XqMPvi78HI4Akm3jLU9xAogPgCZ5fVfJiCoJoWCwc1Q591H9jbqf5p e5G+UJWKWljR9sZk4TeSXZt/LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7NnlB0 zzWWY9lskA1s7EBAejSXMB8GA1UdIwQYMBaAFOGC+ZNpUsQmnWcNpXUt7MhoI08b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkYyQi85MEZBREVFQ0Q1 Q0QxMUU1QUE0MjZFNDBDNEY5QUUwMi80WUw1azJsU3hDYWRadzJsZFMzc3lHZ2pU eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTDVrMmxTeENhZFp3MmxkUzNzeUdnalR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkYyQi85MEZBREVFQ0Q1Q0QxMUU1QUE0MjZFNDBDNEY5QUUwMi80WUw1azJsU3hD YWRadzJsZFMzc3lHZ2pUeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSz+LEQ3b/4D7eujLumRo7aWLzclBYk01tZmG0Empnmb4jKZnf23Dn 88TJ6Yuy/6fknuXOEvac3aEtN+4jrNqjF6NZOD4cdanPj+vJ1rHoqJYXcaA/40/G HrpVkJUi0e+Uq44F7TsZqsUCh4+b0y9vISG4znkDjKv3zQnLCAEYCt+vQqx8kHi9 tPOneYLGmcR8QV43LdOuEJx7SSdMZvyiexEvoewVGjz21wevT9YtJFpC7xNhprPS gNrYN04fjkRLvtzhDp4IAf6Fm8Fo9+8qFIbtqAc0hbOlCfq0TkaqBY7eNM3ItZ9T pcDjgHfTfsrKBmkA2ihKKIhFVb0gkQjb -----END CERTIFICATE-----Generated at Mon Aug 11 07:27:05 2025 by rpki-client