$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json) Hash identifier: MpUcC5LPgfe4SAwjxGVoH14/4RuYcWdQLh79m5nmwCg= Subject key identifier: 32:56:6B:01:CC:74:AC:7F:25:AD:3A:E5:5A:6B:E3:C0:38:DC:DC:54 Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87 Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft Manifest number: A5 Signing time: Tue 05 Aug 2025 06:44:34 +0000 Manifest this update: Tue 05 Aug 2025 06:44:33 +0000 Manifest next update: Tue 12 Aug 2025 06:44:33 +0000 Files and hashes: 1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: chBvawlj4fB/hYG72cqYdnSKWCkP63fdqXmNjzfiYC8=) 2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: vFQI0/WMzcqMUL954AE6vlA2OPOfqfsgIiFbV+UqtL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087 Validity Not Before: Aug 5 06:44:33 2025 GMT Not After : Aug 12 06:44:33 2025 GMT Subject: CN=6891a851-f06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bc:bc:12:e8:fd:2e:33:ec:37:e7:2d:ae:c1: 69:62:d9:12:1a:1d:ab:63:81:a3:cb:89:00:d4:cb: d3:22:e4:c8:01:60:bc:bd:97:11:2b:d6:00:3e:ad: ce:14:41:d7:a3:76:bc:74:2e:48:70:83:f2:33:b7: 5c:4a:93:99:f3:2d:ea:37:8a:85:50:85:02:16:87: d7:95:77:82:60:0f:f8:f1:dd:c3:5c:2c:e2:11:28: 82:72:84:e6:5c:3a:ea:a6:af:6a:94:8d:94:18:c7: e1:5d:fe:ab:d6:72:32:5c:b8:fc:b7:f8:db:1e:ce: 46:04:f3:39:37:4f:32:64:1c:16:30:2b:97:ce:87: 3f:02:3d:9c:d4:10:67:8c:77:b4:55:cc:01:27:d0: 1f:67:6d:17:17:50:b7:5c:3e:58:36:9f:53:a8:03: 2a:c5:b5:1b:de:d4:b2:80:54:07:f4:9c:f6:bd:e3: 66:49:5a:4d:2d:ca:df:5a:97:d6:85:18:a7:01:d4: 69:89:44:17:5e:32:5e:75:4c:c9:c7:58:15:07:fe: 3c:4c:bf:30:b0:7d:84:b2:37:68:71:e8:42:eb:61: 2c:33:a5:a5:f6:7f:06:f4:89:52:32:be:1e:c6:f2: 79:03:a1:70:ce:09:1a:6b:34:41:20:1a:b6:53:15: 7e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:56:6B:01:CC:74:AC:7F:25:AD:3A:E5:5A:6B:E3:C0:38:DC:DC:54 X509v3 Authority Key Identifier: keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:07:64:17:46:13:a0:2e:8f:e1:e7:ca:f3:5c:38:c0:ad:8a: d3:10:88:28:57:b4:bc:3b:b8:27:5b:e7:78:be:9a:b8:9d:78: 43:65:ae:d8:1c:ed:2b:f7:3a:fa:d4:9a:8b:ae:a7:50:6c:73: 50:67:7d:ba:8e:05:a7:9d:02:a6:97:06:14:69:85:93:d4:04: 3f:a6:ba:8d:29:61:70:bb:83:38:ba:37:db:93:16:c3:81:08: dc:71:ad:8b:d1:4d:97:d4:cd:24:01:6f:78:80:3f:f0:2b:d5: 4f:b7:47:05:6a:b2:59:4f:18:cb:6a:74:61:a7:3a:7d:e1:06: 38:8e:4d:95:56:88:95:c4:3f:a4:2f:fa:80:9e:e0:fc:9c:50: 1a:ef:04:70:97:f6:63:39:62:6b:83:99:52:d4:92:22:b5:c3: 79:fe:33:55:27:9b:c0:a9:6a:6a:dd:9a:8e:ea:45:f6:25:f7: ed:5d:06:26:b0:bc:ee:cb:f0:54:6d:17:4e:00:a3:27:9d:b3: d9:19:b0:64:07:c9:e0:61:2d:7f:a4:87:d1:8b:24:6f:1c:55: 65:d7:6f:a8:92:ca:13:69:17:91:9b:78:99:0a:5f:be:b5:1f: e6:c8:ea:0b:89:9e:a3:52:e9:0d:2e:68:d4:b1:a1:5e:48:55: 3b:27:e1:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2MDAxMTAvBgNVBAUTKEUwQjk0NThGNjk4MjVGRjgyOTM4N0IxMzlFODhGRDNC RDY3NDAwODcwHhcNMjUwODA1MDY0NDMzWhcNMjUwODEyMDY0NDMzWjAYMRYwFAYD VQQDEw02ODkxYTg1MS1mMDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ly8Euj9LjPsN+ctrsFpYtkSGh2rY4Gjy4kA1MvTIuTIAWC8vZcRK9YAPq3O FEHXo3a8dC5IcIPyM7dcSpOZ8y3qN4qFUIUCFofXlXeCYA/48d3DXCziESiCcoTm XDrqpq9qlI2UGMfhXf6r1nIyXLj8t/jbHs5GBPM5N08yZBwWMCuXzoc/Aj2c1BBn jHe0VcwBJ9AfZ20XF1C3XD5YNp9TqAMqxbUb3tSygFQH9Jz2veNmSVpNLcrfWpfW hRinAdRpiUQXXjJedUzJx1gVB/48TL8wsH2EsjdocehC62EsM6Wl9n8G9IlSMr4e xvJ5A6FwzgkaazRBIBq2UxV+YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJWawHM dKx/Ja065Vpr48A43NxUMB8GA1UdIwQYMBaAFOC5RY9pgl/4KTh7E56I/TvWdACH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTYwMC8yMjFCQUVCRTc3 RjExMUVGQUMxMTI5NDJDNEY5QUUwMi80TGxGajJtQ1hfZ3BPSHNUbm9qOU85WjBB SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRMbEZqMm1DWF9ncE9Ic1Rub2o5TzlaMEFJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTYwMC8yMjFCQUVCRTc3RjExMUVGQUMxMTI5NDJDNEY5QUUwMi80TGxGajJtQ1hf Z3BPSHNUbm9qOU85WjBBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArB2QXRhOgLo/h58rzXDjArYrTEIgoV7S8O7gnW+d4vpq4nXhDZa7Y HO0r9zr61JqLrqdQbHNQZ326jgWnnQKmlwYUaYWT1AQ/prqNKWFwu4M4ujfbkxbD gQjcca2L0U2X1M0kAW94gD/wK9VPt0cFarJZTxjLanRhpzp94QY4jk2VVoiVxD+k L/qAnuD8nFAa7wRwl/ZjOWJrg5lS1JIitcN5/jNVJ5vAqWpq3ZqO6kX2JfftXQYm sLzuy/BUbRdOAKMnnbPZGbBkB8ngYS1/pIfRiyRvHFVl12+oksoTaReRm3iZCl++ tR/myOoLiZ6jUukNLmjUsaFeSFU7J+GM -----END CERTIFICATE-----Generated at Wed Aug 6 11:03:03 2025 by rpki-client