$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft File: 4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json) Hash identifier: lZzQN2qabhU57mVe8oZsXAO2c+/9Z0DwXIbufuqCSQE= Subject key identifier: 18:6C:22:7B:16:FF:FF:CD:E6:4C:2D:FF:BE:8A:C5:DA:8B:1C:DD:8E Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft Manifest number: 0285 Signing time: Thu 07 Aug 2025 02:17:24 +0000 Manifest this update: Thu 07 Aug 2025 02:17:23 +0000 Manifest next update: Thu 14 Aug 2025 02:17:23 +0000 Files and hashes: 1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: mkBfGSlCgLLF3TkDIdBt1+jOQRYcUJXa5yxNpBM1NNc=) 2: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: axhlzcql8Um5s2iVqGj/BuPhDZVy8siOPCHeHdpqbOU=) 3: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: ldX/DKDOg9xZhESj3T5OZ1Y87w44jU1f3a2RytTmEgo=) 4: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: RgIHOi6o2CyuImHKbYCkxFcAJ9v5chcNqvLkjQHCgqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Validity Not Before: Aug 7 02:17:23 2025 GMT Not After : Aug 14 02:17:23 2025 GMT Subject: CN=68940cb4-2f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9f:d8:83:01:05:8b:95:69:a6:1b:aa:dc:aa: e1:86:e5:93:b6:3d:f7:b0:30:4b:aa:a3:b4:d7:63: 2e:69:ad:6d:f9:f6:93:7e:75:f5:1c:2e:be:c5:1c: 2b:25:3c:16:d5:77:55:d3:7e:f2:35:62:5a:8b:f4: 8c:f2:dd:f3:1a:d4:02:85:51:51:fb:f1:e8:1d:25: 74:e4:90:4b:72:21:33:f3:58:58:99:7d:b2:77:11: 1c:66:55:b4:6b:c3:d2:90:2e:a0:31:b8:6a:fd:7a: f8:6c:d8:4d:8a:ad:96:e7:a2:b4:b7:d4:7f:cf:7d: 35:7c:8b:c0:bc:58:b2:79:fb:53:6e:2e:a9:a2:25: e5:c9:6a:41:60:2f:d8:dc:e5:93:c7:b3:eb:60:35: d8:eb:0f:26:ca:05:b9:e1:3d:bd:05:78:09:8a:7f: 6b:dc:e9:6f:f9:e4:b2:be:5b:03:fa:4d:a8:1d:de: 52:29:89:21:32:f8:a6:81:70:a6:f7:fa:74:39:5d: 68:14:d9:42:a5:86:aa:e7:c8:1e:7e:20:69:a0:15: cd:4f:2d:ee:75:99:8e:9b:f1:71:03:40:57:b7:c2: 73:e5:3c:6a:6a:fa:0e:1c:a8:9b:9a:fe:98:1f:1b: be:70:f4:1f:92:14:12:50:21:8c:67:42:6e:a8:06: 60:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6C:22:7B:16:FF:FF:CD:E6:4C:2D:FF:BE:8A:C5:DA:8B:1C:DD:8E X509v3 Authority Key Identifier: keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:22:ba:ed:e4:3f:59:f3:4a:f5:3d:14:a8:77:d8:1a:6c:bb: 40:a9:47:75:94:b3:5e:f7:9b:0a:79:c8:74:96:39:7a:01:30: 9e:86:28:b9:12:36:dd:dd:a9:d5:3e:28:9a:4d:90:e1:08:9a: 2f:d1:d8:9f:17:f1:87:f8:77:c3:f2:8e:8b:c1:f1:ad:1b:33: a2:c7:c8:5d:cf:35:63:6f:2b:0a:28:a1:67:0c:07:dd:d6:36: 05:be:be:c9:35:0c:9a:d9:3d:f5:b2:01:65:e6:8b:f4:8b:ed: ee:0a:b2:9e:97:d3:f3:b9:72:e3:d2:b3:5f:9e:92:87:e9:b8: 77:8b:29:0b:54:cb:5b:25:0a:44:3c:bf:e5:63:a8:eb:a8:2c: 7c:b1:6c:cb:bb:32:0b:4a:4b:a6:31:bf:5a:f7:bb:77:98:e7: 23:22:ba:3d:a5:39:a5:3f:95:8d:3a:0e:df:74:0b:03:45:09: 13:45:26:5c:a7:a3:22:d6:46:00:a8:5f:af:97:49:c0:7c:0d: 91:97:55:df:69:9f:47:bd:cd:5b:7e:df:90:d0:26:02:85:ab: e0:bd:92:17:5e:f0:39:dd:96:a5:70:46:ef:03:70:a3:d0:c7: b4:74:c7:4c:15:06:be:f7:42:de:89:a7:35:71:49:4f:4b:7c: b2:a9:6b:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz Rjg2MDI5QTIwHhcNMjUwODA3MDIxNzIzWhcNMjUwODE0MDIxNzIzWjAYMRYwFAYD VQQDEw02ODk0MGNiNC0yZjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05/YgwEFi5Vpphuq3KrhhuWTtj33sDBLqqO012Muaa1t+faTfnX1HC6+xRwr JTwW1XdV037yNWJai/SM8t3zGtQChVFR+/HoHSV05JBLciEz81hYmX2ydxEcZlW0 a8PSkC6gMbhq/Xr4bNhNiq2W56K0t9R/z301fIvAvFiyeftTbi6poiXlyWpBYC/Y 3OWTx7PrYDXY6w8mygW54T29BXgJin9r3Olv+eSyvlsD+k2oHd5SKYkhMvimgXCm 9/p0OV1oFNlCpYaq58gefiBpoBXNTy3udZmOm/FxA0BXt8Jz5TxqavoOHKibmv6Y Hxu+cPQfkhQSUCGMZ0JuqAZg/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhsInsW ///N5kwt/76KxdqLHN2OMB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2 QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc0MC8zNTI4QjBDQzE2QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9H ZE1hVW5zTzRvTGNfaGdLYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRIrrt5D9Z80r1PRSod9gabLtAqUd1lLNe95sKech0ljl6ATCehii5 Ejbd3anVPiiaTZDhCJov0difF/GH+HfD8o6LwfGtGzOix8hdzzVjbysKKKFnDAfd 1jYFvr7JNQya2T31sgFl5ov0i+3uCrKel9PzuXLj0rNfnpKH6bh3iykLVMtbJQpE PL/lY6jrqCx8sWzLuzILSkumMb9a97t3mOcjIro9pTmlP5WNOg7fdAsDRQkTRSZc p6Mi1kYAqF+vl0nAfA2Rl1XfaZ9Hvc1bft+Q0CYChavgvZIXXvA53ZalcEbvA3Cj 0Me0dMdMFQa+90Leiac1cUlPS3yyqWsC -----END CERTIFICATE-----Generated at Fri Aug 8 20:52:37 2025 by rpki-client