$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft File: 4suW87BaY-nlR5ZSbszpSjWR5fw.mft (raw, json) Hash identifier: kzgogXsuDDJl8AavGzVT1Kig/5l7kzU1zhHJwGt2OqE= Subject key identifier: E2:3F:87:AB:8D:B9:2F:0F:52:3F:6F:1A:FE:98:56:21:8C:71:15:F2 Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC Certificate issuer: /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft Manifest number: 28 Signing time: Sat 09 Aug 2025 08:15:28 +0000 Manifest this update: Sat 09 Aug 2025 08:15:27 +0000 Manifest next update: Sat 16 Aug 2025 08:15:27 +0000 Files and hashes: 1: 4suW87BaY-nlR5ZSbszpSjWR5fw.crl (hash: iSFwb4e3I+vLgIwSlNRQ8u+gGMvSk7uAxX0JhwHp20E=) 2: ACCFE0643C9711F08159891EC4F9AE02.roa (hash: lVHhBj6K1C48l+j8zLFa7FZ7WGKYKz6QlN3fyLSlK7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC Validity Not Before: Aug 9 08:15:27 2025 GMT Not After : Aug 16 08:15:27 2025 GMT Subject: CN=689703a0-8e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:89:25:d7:93:72:78:65:41:45:04:14:40: 1c:94:c5:0c:76:81:38:c1:49:2e:20:b3:3f:46:a2: 23:af:a8:ee:de:6a:4f:b7:77:c8:a2:46:63:8c:73: 6d:fb:25:d9:a5:65:ab:5f:9d:0e:98:d2:63:69:c7: ad:c9:e6:57:0b:c8:a2:51:51:76:90:45:eb:84:52: 71:0d:35:34:0b:75:c1:88:3d:5e:38:e4:30:3c:aa: bf:8c:40:7e:34:a1:fc:56:9d:65:2c:0b:fe:97:9a: 67:f6:77:26:78:3d:c5:de:98:33:cb:a1:c7:e6:b9: 2e:65:2b:76:d5:f1:b0:4f:5e:9f:f0:ee:44:1d:13: 94:fd:8e:bc:8a:de:c4:dc:a4:66:f0:a7:b8:f2:bf: 12:32:4c:f3:43:b9:23:29:1e:96:86:95:3a:4e:fd: 44:df:cb:18:e3:83:30:1c:37:29:fa:48:c5:20:5a: b8:70:cd:ed:f7:bd:57:61:46:af:3d:d2:62:43:6e: d8:fe:af:6f:8d:18:ab:49:6b:5d:23:4e:89:e8:a2: 1c:67:f3:be:fc:f8:04:43:8f:cf:03:3b:29:9f:80: 43:be:67:63:d5:cd:1e:37:34:0e:fb:75:0d:bc:b1: 35:e2:89:23:80:31:67:84:2b:d1:c6:40:e3:6b:aa: 27:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3F:87:AB:8D:B9:2F:0F:52:3F:6F:1A:FE:98:56:21:8C:71:15:F2 X509v3 Authority Key Identifier: keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:b5:11:4e:74:51:ee:7d:44:74:07:d8:07:18:14:82:89:23: 51:e4:06:27:86:13:8d:77:4d:3d:24:fa:0d:74:cc:0e:e1:53: c6:87:40:c9:56:f9:a5:22:51:d8:be:52:94:48:15:17:52:ba: c8:a3:cc:bc:83:bb:b0:f2:10:9d:7b:43:b4:aa:33:54:47:d1: 47:1a:6e:cc:ac:8a:94:0a:35:84:d3:00:93:c4:e0:ed:58:10: 4d:19:9f:b0:43:89:ac:c8:54:95:30:0f:5f:2d:b5:aa:08:fa: 1c:b0:7c:f7:60:09:f5:30:5e:1f:ff:39:5e:40:87:01:ee:f0: 57:0b:39:e7:23:97:5c:f5:f2:c1:58:1e:a0:8a:d6:81:68:da: f6:c2:33:4b:dc:30:eb:2b:6d:cd:b2:b9:7a:6b:00:84:c7:bc: 91:16:b7:ef:cf:52:0f:1d:44:55:cf:a6:0a:94:7a:63:a2:69: ac:7a:a2:3b:a0:34:07:03:f7:51:13:d2:bc:38:e0:67:40:e7: 96:b0:5a:a4:94:08:e8:03:be:c9:38:66:39:e2:a7:bc:5f:80: 5c:da:54:64:12:d7:ad:5c:0c:1a:bb:25:2d:27:a1:2c:ab:c9: 35:a7:7f:35:99:f1:92:67:4c:0e:99:36:70:d2:58:54:92:37: cb:de:d6:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 N0I3NDExMC8GA1UEBRMoRTJDQjk2RjNCMDVBNjNFOUU1NDc5NjUyNkVDQ0U5NEEz NTkxRTVGQzAeFw0yNTA4MDkwODE1MjdaFw0yNTA4MTYwODE1MjdaMBgxFjAUBgNV BAMTDTY4OTcwM2EwLThlMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4WYkl15NyeGVBRQQUQByUxQx2gTjBSS4gsz9GoiOvqO7eak+3d8iiRmOMc237 JdmlZatfnQ6Y0mNpx63J5lcLyKJRUXaQReuEUnENNTQLdcGIPV445DA8qr+MQH40 ofxWnWUsC/6Xmmf2dyZ4PcXemDPLocfmuS5lK3bV8bBPXp/w7kQdE5T9jryK3sTc pGbwp7jyvxIyTPNDuSMpHpaGlTpO/UTfyxjjgzAcNyn6SMUgWrhwze33vVdhRq89 0mJDbtj+r2+NGKtJa10jTonoohxn8778+ARDj88DOymfgEO+Z2PVzR43NA77dQ28 sTXiiSOAMWeEK9HGQONrqiebAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4j+Hq425 Lw9SP28a/phWIYxxFfIwHwYDVR0jBBgwFoAU4suW87BaY+nlR5ZSbszpSjWR5fww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3Qjc0L0FGNjRFNTEwM0JB QTExRjA5NjQyODIxQ0M0RjlBRTAyLzRzdVc4N0JhWS1ubFI1WlNic3pwU2pXUjVm dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNHN1Vzg3QmFZLW5sUjVaU2JzenBTaldSNWZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 Qjc0L0FGNjRFNTEwM0JBQTExRjA5NjQyODIxQ0M0RjlBRTAyLzRzdVc4N0JhWS1u bFI1WlNic3pwU2pXUjVmdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALS1EU50Ue59RHQH2AcYFIKJI1HkBieGE413TT0k+g10zA7hU8aHQMlW +aUiUdi+UpRIFRdSusijzLyDu7DyEJ17Q7SqM1RH0UcabsysipQKNYTTAJPE4O1Y EE0Zn7BDiazIVJUwD18ttaoI+hywfPdgCfUwXh//OV5AhwHu8FcLOecjl1z18sFY HqCK1oFo2vbCM0vcMOsrbc2yuXprAITHvJEWt+/PUg8dRFXPpgqUemOiaax6ojug NAcD91ET0rw44GdA55awWqSUCOgDvsk4Zjnip7xfgFzaVGQS161cDBq7JS0noSyr yTWnfzWZ8ZJnTA6ZNnDSWFSSN8ve1tM= -----END CERTIFICATE-----Generated at Mon Aug 11 04:14:59 2025 by rpki-client