$ rpki-client -vvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft File: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json) Hash identifier: 8cfVyKkkPXETSzp3mVU+0GPc4+pgW/hRFLj2fE7IGE0= Subject key identifier: 50:6C:35:B6:E4:6D:05:91:AA:88:1E:FE:C6:2A:FC:16:39:DC:31:2C Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C Certificate issuer: /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C Certificate serial: 07C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft Manifest number: 07C0 Signing time: Sun 10 Aug 2025 21:15:11 +0000 Manifest this update: Sun 10 Aug 2025 21:15:10 +0000 Manifest next update: Sun 17 Aug 2025 21:15:10 +0000 Files and hashes: 1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: Mm6X54yWRSxGSC2Y8MGxsDhwFk9lB/WMF0jNL4hwdFU=) 2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: 04Yyac0X4yooHW+vSmS1SL3uVYlQ7JtEGZ1zzlU0iN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 21:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C Validity Not Before: Aug 10 21:15:10 2025 GMT Not After : Aug 17 21:15:10 2025 GMT Subject: CN=68990bde-bf34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:11:6d:58:ae:2f:d6:90:06:fa:f8:75:e8:31: 8f:db:4a:67:13:26:82:1b:f3:2c:8d:0e:90:81:8e: 52:25:4c:06:65:90:e5:e2:c3:c7:b4:7d:21:41:5f: e4:99:d1:01:11:e8:92:6b:39:1c:3f:cc:65:96:29: b0:29:45:cb:18:22:ac:7c:3d:3c:19:f1:d3:39:aa: ad:81:2a:96:6f:5d:c1:d8:24:c9:7e:d1:79:9f:2a: ee:81:85:97:7c:5c:4a:e3:76:5b:be:e9:40:55:2b: 1c:2c:20:d3:1f:ab:16:9a:92:8c:b9:c2:f6:15:7a: 1a:db:d3:3c:15:ec:bd:20:b3:ea:2b:51:ce:4c:33: 43:06:ad:f0:51:c9:f8:83:b3:91:71:31:26:71:d7: 2b:32:e0:ff:e5:ad:51:60:84:44:07:da:13:6d:1f: 47:43:ce:f8:92:5a:18:e2:43:3e:f8:7a:ee:9a:66: 1b:91:52:d0:3c:11:4c:5b:84:9c:50:0a:24:3e:25: 42:e2:43:d5:87:f5:c8:61:0f:ef:79:70:25:64:36: 1f:7c:30:81:60:e5:ee:29:47:b1:b9:ef:70:ac:d0: 56:fd:84:62:bf:f6:84:8b:a7:4b:0a:38:71:75:06: 56:5c:f4:da:b6:b1:a8:75:15:80:c1:17:d7:7e:21: 8f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6C:35:B6:E4:6D:05:91:AA:88:1E:FE:C6:2A:FC:16:39:DC:31:2C X509v3 Authority Key Identifier: keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:39:fb:6c:1b:60:d9:4a:51:8b:9f:68:89:df:85:d7:40:f0: 17:b8:8d:bd:ed:e7:a3:99:ed:39:c7:10:3b:c6:45:5e:83:c8: d4:9a:b4:92:0b:99:0b:9a:5b:4b:c2:bf:9d:9b:8b:1d:49:a3: e0:82:73:25:d7:33:85:26:af:61:ff:3b:54:9d:d4:fb:6e:53: 54:10:a9:0b:90:fd:39:de:cf:de:05:00:97:f5:12:a7:f1:58: 6f:08:73:ab:a2:f7:09:bb:ca:33:3c:91:73:3a:26:a7:4a:80: 89:01:74:5c:17:c0:7c:6f:ac:e8:18:76:44:43:1f:02:2d:16: c9:51:3a:92:46:3b:21:63:61:5d:19:0a:89:e6:e0:1c:22:2c: 0e:7c:f6:a9:56:85:b7:79:77:e9:85:36:9d:84:ed:7f:d1:f2: a6:0e:89:ef:7c:2e:ad:c7:21:c0:b9:14:cf:cb:8f:8c:45:33: df:7f:4b:e6:cd:41:30:e7:9c:05:45:45:0b:c6:bb:35:f8:eb: f3:62:af:c5:0f:a0:e2:15:7f:8a:46:6d:46:34:74:87:b2:fb: 18:cf:e2:bd:04:ac:68:00:03:18:b5:23:3d:72:60:f4:fd:9f: b8:1d:3a:00:bf:c0:51:c9:5e:c7:61:64:4c:3e:eb:e7:c1:38: 5f:de:93:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwRDYxMTAvBgNVBAUTKEUyRDgxM0Q2NkNFNTBERDkzOEZDM0E1MzJEQjhFREUy QzVCQTc5NUMwHhcNMjUwODEwMjExNTEwWhcNMjUwODE3MjExNTEwWjAYMRYwFAYD VQQDEw02ODk5MGJkZS1iZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9RFtWK4v1pAG+vh16DGP20pnEyaCG/MsjQ6QgY5SJUwGZZDl4sPHtH0hQV/k mdEBEeiSazkcP8xllimwKUXLGCKsfD08GfHTOaqtgSqWb13B2CTJftF5nyrugYWX fFxK43ZbvulAVSscLCDTH6sWmpKMucL2FXoa29M8Fey9ILPqK1HOTDNDBq3wUcn4 g7ORcTEmcdcrMuD/5a1RYIREB9oTbR9HQ874kloY4kM++HrummYbkVLQPBFMW4Sc UAokPiVC4kPVh/XIYQ/veXAlZDYffDCBYOXuKUexue9wrNBW/YRiv/aEi6dLCjhx dQZWXPTatrGodRWAwRfXfiGP+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBsNbbk bQWRqoge/sYq/BY53DEsMB8GA1UdIwQYMBaAFOLYE9Zs5Q3ZOPw6Uy247eLFunlc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjBENi84OUEwRTdBMjA4 NkExMUVCOURGMzM4NDJDNEY5QUUwMi80dGdUMW16bERkazRfRHBUTGJqdDRzVzZl VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR0Z1QxbXpsRGRrNF9EcFRMYmp0NHNXNmVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjBENi84OUEwRTdBMjA4NkExMUVCOURGMzM4NDJDNEY5QUUwMi80dGdUMW16bERk azRfRHBUTGJqdDRzVzZlVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBOftsG2DZSlGLn2iJ34XXQPAXuI297eejme05xxA7xkVeg8jUmrSS C5kLmltLwr+dm4sdSaPggnMl1zOFJq9h/ztUndT7blNUEKkLkP053s/eBQCX9RKn 8VhvCHOrovcJu8ozPJFzOianSoCJAXRcF8B8b6zoGHZEQx8CLRbJUTqSRjshY2Fd GQqJ5uAcIiwOfPapVoW3eXfphTadhO1/0fKmDonvfC6txyHAuRTPy4+MRTPff0vm zUEw55wFRUULxrs1+OvzYq/FD6DiFX+KRm1GNHSHsvsYz+K9BKxoAAMYtSM9cmD0 /Z+4HToAv8BRyV7HYWRMPuvnwThf3pO1 -----END CERTIFICATE-----Generated at Tue Aug 12 14:41:35 2025 by rpki-client