$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft File: c0XTOFGViQaITYcWQKS-0shG0U4.mft (raw, json) Hash identifier: zOEfUzCZBPDFzo2eTb1b658AVH2nrHR9y64XcfgWntY= Subject key identifier: E4:3A:3D:BA:26:F9:76:A5:20:9D:B4:6E:28:D0:3E:09:AA:C7:D5:27 Authority key identifier: 73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E Certificate issuer: /CN=A912F3B6/serialNumber=7345D33851958906884D871640A4BED2C846D14E Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft Manifest number: C4 Signing time: Sat 09 Aug 2025 06:13:35 +0000 Manifest this update: Sat 09 Aug 2025 06:13:34 +0000 Manifest next update: Sat 16 Aug 2025 06:13:34 +0000 Files and hashes: 1: c0XTOFGViQaITYcWQKS-0shG0U4.crl (hash: 0z4hiJgNP06XjgIe581UgMSCm0OfTDjcPuk828DJAvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F3B6, serialNumber=7345D33851958906884D871640A4BED2C846D14E Validity Not Before: Aug 9 06:13:34 2025 GMT Not After : Aug 16 06:13:34 2025 GMT Subject: CN=6896e70e-a767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6b:a5:13:e1:e0:e2:4c:ca:84:ba:fd:20:06: 7e:c1:25:70:24:35:c3:69:a2:03:d1:06:7e:fa:97: c0:b7:04:cc:1d:23:08:0a:cb:1c:66:9e:2c:7e:ab: b0:38:c4:04:64:1d:84:e7:9d:6e:39:ec:26:93:83: 06:9c:18:8d:fe:63:ac:b3:85:d1:c6:87:99:20:5d: 88:2f:7d:62:47:6f:55:bf:8f:35:48:ff:b8:41:4f: d4:b2:b2:cc:27:ec:1f:cd:80:22:7d:40:24:01:4c: b6:5d:4e:11:c5:ee:8a:f9:5e:31:e4:1c:5d:76:a5: 06:c9:19:ca:64:88:30:4c:47:7d:6b:09:e2:29:3a: 92:2a:09:23:9c:46:9d:d8:93:f3:aa:fe:c2:a7:71: e3:8e:54:bd:e0:07:6c:0a:dd:ac:0c:b6:fe:94:91: 12:be:94:8d:ce:5a:fa:ff:3a:d2:5c:54:a1:7b:50: b3:cd:24:53:3a:a0:0f:dc:b3:d2:6f:d0:aa:16:64: 8c:94:a4:21:3f:90:48:2a:c4:42:d9:5e:b6:ed:3e: 41:51:a1:52:bc:ef:8a:19:55:e9:5a:dc:3c:7f:28: 11:90:68:47:6a:66:70:2d:f2:d2:58:9b:9e:52:cc: 41:93:d6:8a:6c:39:6a:ec:c0:b6:f0:a5:e7:e4:46: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3A:3D:BA:26:F9:76:A5:20:9D:B4:6E:28:D0:3E:09:AA:C7:D5:27 X509v3 Authority Key Identifier: keyid:73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:5f:54:00:c0:78:ca:ba:49:2d:32:78:94:b6:f5:9e:bd:4c: cc:61:52:52:ab:0c:bf:8e:fd:b2:2c:37:9a:74:01:21:cf:da: 48:03:a2:de:59:24:9a:f3:00:28:2e:01:57:a3:e7:ac:cd:99: e1:d3:59:81:c3:e1:98:33:41:5f:d6:83:67:ec:a8:b2:a7:67: a1:2a:73:e2:64:2e:ad:44:04:ae:3b:92:64:c2:71:96:af:4a: ee:56:4b:81:43:7c:84:af:fe:dc:7c:94:9f:6e:6e:99:fb:ae: c5:5c:3c:d4:e4:6d:71:70:65:b5:d6:32:9b:19:b3:d8:a0:82: b6:07:45:97:63:c2:70:2a:d3:41:11:cb:36:55:ea:d3:58:5c: fa:d1:87:38:81:06:86:8e:97:5b:b9:51:d0:60:91:aa:42:ea: df:db:d8:7f:df:91:e7:a7:e0:e6:58:b4:33:65:36:f0:e3:ea: da:f8:7a:d0:80:3f:82:7c:a4:6f:fc:63:14:6c:75:32:0d:8a: c1:70:b5:98:c4:da:5c:9b:ec:ec:b3:d2:df:51:8f:4b:04:ce: 10:7f:c0:a2:c5:fb:cb:d0:36:79:37:89:b5:db:61:10:9a:7b: 0d:ba:f5:9b:4b:2e:1b:ee:d1:d7:5d:94:a4:14:57:92:fb:2f: 53:06:17:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzQjYxMTAvBgNVBAUTKDczNDVEMzM4NTE5NTg5MDY4ODREODcxNjQwQTRCRUQy Qzg0NkQxNEUwHhcNMjUwODA5MDYxMzM0WhcNMjUwODE2MDYxMzM0WjAYMRYwFAYD VQQDEw02ODk2ZTcwZS1hNzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02ulE+Hg4kzKhLr9IAZ+wSVwJDXDaaID0QZ++pfAtwTMHSMICsscZp4sfquw OMQEZB2E551uOewmk4MGnBiN/mOss4XRxoeZIF2IL31iR29Vv481SP+4QU/UsrLM J+wfzYAifUAkAUy2XU4Rxe6K+V4x5BxddqUGyRnKZIgwTEd9awniKTqSKgkjnEad 2JPzqv7Cp3HjjlS94AdsCt2sDLb+lJESvpSNzlr6/zrSXFShe1CzzSRTOqAP3LPS b9CqFmSMlKQhP5BIKsRC2V627T5BUaFSvO+KGVXpWtw8fygRkGhHamZwLfLSWJue UsxBk9aKbDlq7MC28KXn5EbNHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQ6Pbom +XalIJ20bijQPgmqx9UnMB8GA1UdIwQYMBaAFHNF0zhRlYkGiE2HFkCkvtLIRtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjNCNi81OUM0QUQ0QTQ4 QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9jMFhUT0ZHVmlRYUlUWWNXUUtTLTBzaEcw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwWFRPRkdWaVFhSVRZY1dRS1MtMHNoRzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjNCNi81OUM0QUQ0QTQ4QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9jMFhUT0ZHVmlR YUlUWWNXUUtTLTBzaEcwVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzX1QAwHjKukktMniUtvWevUzMYVJSqwy/jv2yLDeadAEhz9pIA6Le WSSa8wAoLgFXo+eszZnh01mBw+GYM0Ff1oNn7Kiyp2ehKnPiZC6tRASuO5JkwnGW r0ruVkuBQ3yEr/7cfJSfbm6Z+67FXDzU5G1xcGW11jKbGbPYoIK2B0WXY8JwKtNB Ecs2VerTWFz60Yc4gQaGjpdbuVHQYJGqQurf29h/35Hnp+DmWLQzZTbw4+ra+HrQ gD+CfKRv/GMUbHUyDYrBcLWYxNpcm+zss9LfUY9LBM4Qf8CixfvL0DZ5N4m122EQ mnsNuvWbSy4b7tHXXZSkFFeS+y9TBhd9 -----END CERTIFICATE-----Generated at Sat Aug 9 14:25:25 2025 by rpki-client