$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft File: j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json) Hash identifier: 0TF+BBgsEiU6a939s3jb3+MafFwke7o4f7lP2geuKBM= Subject key identifier: 6E:DE:6E:E9:D1:80:62:22:07:36:72:E1:DF:6F:38:D8:C3:5C:F3:72 Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Certificate serial: 087C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft Manifest number: 0875 Signing time: Fri 08 Aug 2025 20:59:37 +0000 Manifest this update: Fri 08 Aug 2025 20:59:36 +0000 Manifest next update: Fri 15 Aug 2025 20:59:36 +0000 Files and hashes: 1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: C8RgCWeD5SNllogwC2CBUPaxHmQOu+A89bUQ3Z4ntw4=) 2: BA33C4CC638A11F090002541C4F9AE02.roa (hash: SYp3+Qw2NUOxAP2PI8VyKC4eZrJ7XxwyTmQykIlzc3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2172 (0x87c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Validity Not Before: Aug 8 20:59:36 2025 GMT Not After : Aug 15 20:59:36 2025 GMT Subject: CN=68966538-8247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:3e:75:eb:89:be:47:a9:c9:8b:da:49:1a: 1a:e7:32:56:3b:67:29:81:07:0e:3d:8b:31:14:f5: 7f:95:da:12:95:17:b3:5a:72:06:16:63:a6:1c:45: 9a:65:da:6a:f6:e5:6c:05:21:6c:79:7d:1b:55:b0: 72:9f:b9:a0:4b:95:47:3d:36:bf:87:3d:42:5e:08: a5:e6:3a:69:c2:d3:fd:49:5a:7e:14:ab:76:ab:fb: af:60:7c:37:a6:18:96:8a:b8:2a:50:5b:de:dc:1e: 84:6b:ba:f4:73:7b:f4:3b:3d:1d:a1:a8:7b:88:fd: e8:10:16:58:f9:d1:3a:67:1f:03:7b:53:c1:e5:e0: 4c:e1:ed:cf:96:90:1e:e9:0e:b8:8f:70:09:a3:1b: bc:d9:d6:bb:73:2d:5c:a9:97:ee:28:6f:67:9e:67: e4:26:6d:f3:78:a7:04:42:4b:8d:29:5c:2d:8f:35: d8:08:c2:fa:d2:91:37:0f:83:70:04:4d:3b:71:c3: 52:7e:45:db:92:eb:bc:e6:31:1e:f7:e2:19:4b:46: 12:5f:64:d0:cc:7a:60:9d:11:bb:3c:6c:e8:9a:28: 76:51:cb:93:f2:7f:0e:2b:b7:b2:de:f2:3b:d5:31: ce:10:0d:bf:a1:81:28:e1:95:28:3e:d2:b4:8c:f2: f6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DE:6E:E9:D1:80:62:22:07:36:72:E1:DF:6F:38:D8:C3:5C:F3:72 X509v3 Authority Key Identifier: keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:7a:63:9a:0e:06:bf:d2:b5:32:12:08:86:bd:87:88:a9:08: 89:36:71:d5:a1:1a:db:df:83:cf:3a:2c:bf:2f:13:b2:05:ae: 65:92:ad:ab:22:62:d2:6c:bc:c3:64:fb:2e:0c:fc:15:af:c3: 96:94:ef:83:e5:5b:5b:43:50:f8:25:90:72:25:44:c7:2d:06: 34:80:47:ec:e4:c9:6a:13:6e:32:7f:e5:04:c0:ab:73:d5:f0: 9b:da:a9:e4:0f:df:1e:cb:0f:cf:58:ae:c9:99:7d:ad:2a:a8: 7c:f8:90:88:61:7d:52:0c:00:15:71:4c:fe:38:51:84:66:4c: e8:22:bb:8b:be:12:8b:d8:da:a2:51:a0:93:d9:ef:35:52:81: 21:81:41:7b:1c:fc:39:6e:fb:d2:24:d9:24:bf:dc:77:f0:b3: 5e:32:e1:01:00:a4:62:a4:4c:2f:c1:64:5e:b7:8c:80:b1:9e: e4:83:da:09:fc:3a:d2:29:12:a1:a3:da:3c:51:46:16:90:4d: 1b:9e:05:cd:0e:01:ef:d0:59:92:fb:b1:e0:7e:89:ba:c8:27: eb:56:14:fa:bc:56:e5:e1:c1:e3:aa:31:54:9e:44:12:51:db: d6:09:dc:91:e4:17:07:59:91:ee:4b:15:75:34:a6:d5:17:a3: 8c:94:f7:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1QUM4RjlDMUEy Qjk5QkQ5NkQwHhcNMjUwODA4MjA1OTM2WhcNMjUwODE1MjA1OTM2WjAYMRYwFAYD VQQDEw02ODk2NjUzOC04MjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNs+deuJvkepyYvaSRoa5zJWO2cpgQcOPYsxFPV/ldoSlRezWnIGFmOmHEWa Zdpq9uVsBSFseX0bVbByn7mgS5VHPTa/hz1CXgil5jppwtP9SVp+FKt2q/uvYHw3 phiWirgqUFve3B6Ea7r0c3v0Oz0doah7iP3oEBZY+dE6Zx8De1PB5eBM4e3PlpAe 6Q64j3AJoxu82da7cy1cqZfuKG9nnmfkJm3zeKcEQkuNKVwtjzXYCML60pE3D4Nw BE07ccNSfkXbkuu85jEe9+IZS0YSX2TQzHpgnRG7PGzomih2UcuT8n8OK7ey3vI7 1THOEA2/oYEo4ZUoPtK0jPL2SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7ebunR gGIiBzZy4d9vONjDXPNyMB8GA1UdIwQYMBaAFI+EUOoY7WY912MTWsj5waK5m9lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDlDQi8zRkQyRDlDNENB MkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpqM1hZeE5heVBuQm9ybWIy VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0UlE2aGp0WmozWFl4TmF5UG5Cb3JtYjJXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDlDQi8zRkQyRDlDNENBMkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpq M1hZeE5heVBuQm9ybWIyVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3emOaDga/0rUyEgiGvYeIqQiJNnHVoRrb34PPOiy/LxOyBa5lkq2r ImLSbLzDZPsuDPwVr8OWlO+D5VtbQ1D4JZByJUTHLQY0gEfs5MlqE24yf+UEwKtz 1fCb2qnkD98eyw/PWK7JmX2tKqh8+JCIYX1SDAAVcUz+OFGEZkzoIruLvhKL2Nqi UaCT2e81UoEhgUF7HPw5bvvSJNkkv9x38LNeMuEBAKRipEwvwWRet4yAsZ7kg9oJ /DrSKRKho9o8UUYWkE0bngXNDgHv0FmS+7Hgfom6yCfrVhT6vFbl4cHjqjFUnkQS UdvWCdyR5BcHWZHuSxV1NKbVF6OMlPfq -----END CERTIFICATE-----Generated at Sun Aug 10 21:05:31 2025 by rpki-client