$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: 4cCKZLpAiyk0YJcFr34u1lPEgEHgB+QFpyP8MwqY5Gw= Subject key identifier: 1C:42:43:A2:14:04:79:E6:BF:37:A5:C2:11:56:1D:D2:EC:18:4F:1A Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 07D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 07C9 Signing time: Mon 04 Aug 2025 21:28:46 +0000 Manifest this update: Mon 04 Aug 2025 21:28:46 +0000 Manifest next update: Mon 11 Aug 2025 21:28:46 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: Ib4tyvHVWJQeapJJYrjfHXMAO27I9WobXbO9em6+taU=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: nebZkphHnCGcHsK4OPuyoN2DWSVg+M+V/082vsrCEns=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: tXMl2RtLfZvDGfhyJ5diezkCwv50p552Np4xQThv520=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2003 (0x7d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Aug 4 21:28:46 2025 GMT Not After : Aug 11 21:28:46 2025 GMT Subject: CN=6891260e-5864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f3:34:20:78:09:00:c8:10:ca:06:02:53:c9: ed:8f:d7:c2:c2:14:30:76:55:6f:1f:58:ae:49:1c: dd:1d:8f:7f:ce:49:fa:74:fe:8a:ff:62:13:35:a4: 1a:53:0c:86:d8:81:e9:fb:9b:14:14:74:bf:ce:c7: af:66:c5:10:7d:cf:0a:84:e4:21:23:c1:28:72:d0: 1a:1d:09:43:f6:a8:6a:41:05:c3:f6:bf:fd:a2:eb: da:35:45:16:7d:cb:45:7e:bb:c4:35:be:34:8f:43: 5f:3b:66:55:b1:eb:54:62:e3:77:75:d9:7b:29:5f: 0e:8b:28:53:4f:61:24:0e:35:2c:54:2e:46:f2:1b: 07:da:9d:eb:f7:4d:27:dd:5f:ef:c8:93:2c:50:d8: 9e:f4:31:57:8a:2b:38:8b:aa:9c:a1:ba:81:f1:33: c6:c4:87:15:cd:4c:f2:e5:54:75:3e:2d:b4:d0:7d: 90:11:39:64:83:da:cd:94:e2:bb:2e:f3:5c:8d:67: c3:de:6f:d8:3b:45:04:37:70:ab:8f:e0:50:0f:a4: 6d:d2:35:a4:b7:df:3e:b4:e5:57:d2:0e:48:19:e5: c3:b9:88:a2:00:d9:93:e4:52:5c:e0:be:76:5f:cc: ba:88:58:4f:a2:6e:35:71:92:b1:61:49:7a:19:94: 1d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:42:43:A2:14:04:79:E6:BF:37:A5:C2:11:56:1D:D2:EC:18:4F:1A X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:54:a5:fc:cb:e1:a4:0c:f6:09:4b:bd:30:bb:80:f2:f1:db: 7e:83:f3:68:76:6f:f6:fe:dd:22:61:94:60:b6:c9:d2:6b:71: 91:52:1a:53:03:e6:56:80:2b:77:d7:a5:57:27:dd:c0:78:24: 65:b7:07:59:aa:19:09:04:e6:a1:97:1d:65:0e:ca:f5:c5:16: 8b:8d:9f:a3:7b:84:ae:12:c9:0c:f8:cb:ec:aa:a0:d7:00:d3: a8:10:83:0e:c2:95:2b:bb:b4:d3:0a:3b:35:2a:8c:57:2b:0a: 09:9a:4e:c9:8b:f4:0a:20:22:05:33:d0:70:be:c6:67:12:f5: e1:b7:08:7b:6a:24:21:a2:f0:8c:b8:ba:c2:93:84:f2:12:9f: 13:4d:f2:c1:eb:79:a5:59:61:ba:4e:c6:ef:e9:7d:e3:44:c8: 67:39:bf:55:94:06:85:ad:16:e2:c2:73:9a:a8:1e:32:c6:aa: 40:b9:fc:f8:d0:a9:18:6c:2c:10:92:ce:ab:32:ff:97:90:52: 9d:fa:da:4a:19:46:72:68:9d:c1:ed:7d:20:b6:b1:5b:73:98: 97:54:b4:44:b2:7d:80:f0:ae:e6:d9:90:2f:50:4c:39:6d:b4: f4:60:4c:a5:fc:b0:84:15:f8:83:a1:c1:77:88:36:10:2c:dc: 6b:fe:14:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjUwODA0MjEyODQ2WhcNMjUwODExMjEyODQ2WjAYMRYwFAYD VQQDEw02ODkxMjYwZS01ODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fM0IHgJAMgQygYCU8ntj9fCwhQwdlVvH1iuSRzdHY9/zkn6dP6K/2ITNaQa UwyG2IHp+5sUFHS/zsevZsUQfc8KhOQhI8EoctAaHQlD9qhqQQXD9r/9ouvaNUUW fctFfrvENb40j0NfO2ZVsetUYuN3ddl7KV8OiyhTT2EkDjUsVC5G8hsH2p3r900n 3V/vyJMsUNie9DFXiis4i6qcobqB8TPGxIcVzUzy5VR1Pi200H2QETlkg9rNlOK7 LvNcjWfD3m/YO0UEN3Crj+BQD6Rt0jWkt98+tOVX0g5IGeXDuYiiANmT5FJc4L52 X8y6iFhPom41cZKxYUl6GZQdZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxCQ6IU BHnmvzelwhFWHdLsGE8aMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlVKX8y+GkDPYJS70wu4Dy8dt+g/Nodm/2/t0iYZRgtsnSa3GRUhpT A+ZWgCt316VXJ93AeCRltwdZqhkJBOahlx1lDsr1xRaLjZ+je4SuEskM+MvsqqDX ANOoEIMOwpUru7TTCjs1KoxXKwoJmk7Ji/QKICIFM9BwvsZnEvXhtwh7aiQhovCM uLrCk4TyEp8TTfLB63mlWWG6Tsbv6X3jRMhnOb9VlAaFrRbiwnOaqB4yxqpAufz4 0KkYbCwQks6rMv+XkFKd+tpKGUZyaJ3B7X0gtrFbc5iXVLREsn2A8K7m2ZAvUEw5 bbT0YEyl/LCEFfiDocF3iDYQLNxr/hQm -----END CERTIFICATE-----Generated at Wed Aug 6 14:10:12 2025 by rpki-client