$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft File: v4hgssA3e7Xv7b461A8c8YnyrLI.mft (raw, json) Hash identifier: D//bYdHe6y40Da+O1uLGYBCBbveLIrYERAjk2HfOhks= Subject key identifier: 92:E2:6C:CA:2B:87:ED:6A:4D:BD:8A:82:6E:DC:6D:CF:19:A4:37:73 Authority key identifier: BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2 Certificate issuer: /CN=A9157B74/serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft Manifest number: 28 Signing time: Sun 03 Aug 2025 08:11:25 +0000 Manifest this update: Sun 03 Aug 2025 08:11:24 +0000 Manifest next update: Sun 10 Aug 2025 08:11:24 +0000 Files and hashes: 1: v4hgssA3e7Xv7b461A8c8YnyrLI.crl (hash: i9cCwPWyzPRNnalORHyBUHBFe5maXLDc9S+43vYjkqY=) 2: 074A7A1436C511F0A4E5C52BC4F9AE02.roa (hash: VRIs5/TUKDaqF1hTLN0GORNvAVQA+OzzszxfTxaTTMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B74, serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2 Validity Not Before: Aug 3 08:11:24 2025 GMT Not After : Aug 10 08:11:24 2025 GMT Subject: CN=688f19ac-1487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:87:84:70:07:45:29:79:d7:d2:56:97:9c:d1: b0:b3:a0:51:fc:44:be:1f:65:fd:b6:c8:46:96:b0: 79:cc:4b:2e:bf:1c:26:00:10:f1:0f:f9:36:e1:63: 7b:5b:85:40:be:c8:82:81:78:a5:38:65:9f:af:e1: c1:88:03:a6:07:6f:4a:60:5d:e8:9d:19:83:bf:73: eb:61:49:65:bc:01:64:1c:61:29:09:39:54:78:a2: 03:33:f7:2f:20:9c:2e:ba:2d:3f:7d:81:3c:a2:87: b2:77:6a:b8:85:d5:fc:5f:55:cb:5c:66:39:d7:e7: 37:c5:5a:d1:02:f2:22:5c:7a:eb:73:54:e0:a3:6c: 46:ae:1e:6a:0a:0d:7c:f2:6a:2d:04:52:d7:fa:14: 90:c5:45:83:25:e7:2b:15:e7:7f:24:03:14:38:4d: 83:11:8f:50:87:c9:98:0c:fa:f0:49:b5:66:db:1f: 0e:eb:77:6f:96:d2:53:59:3d:41:57:d9:ae:d2:bd: 4e:11:e2:4e:b2:e5:e6:5f:1c:6c:16:e3:47:7e:b4: bc:1f:bf:e8:4e:8a:22:ce:c9:46:b3:1b:7b:19:23: f2:57:0d:80:4f:0a:f3:18:38:ea:08:b1:ca:b7:2e: 26:d8:3f:16:9c:0c:b1:86:1b:ac:e8:c6:62:e6:9b: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E2:6C:CA:2B:87:ED:6A:4D:BD:8A:82:6E:DC:6D:CF:19:A4:37:73 X509v3 Authority Key Identifier: keyid:BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:6e:ea:ac:9f:33:b2:78:60:7e:e2:b5:9f:28:15:4e:89:f2: 84:3a:b6:e9:93:6f:c6:df:2d:f8:e2:e2:98:b0:76:48:fd:48: 6e:8f:e9:18:75:f3:1d:cf:6e:23:7d:b2:23:13:81:44:ce:71: 85:19:63:2c:2b:a8:f5:ac:68:55:45:b0:c3:b7:01:0b:0e:92: a2:58:ab:a6:27:2e:4b:84:b2:90:1b:fb:98:4f:29:9b:48:67: a3:23:d4:94:1f:c5:47:f6:19:9b:71:cd:76:c6:15:e9:64:af: 19:c3:b3:51:6c:59:ae:1c:54:ec:04:28:2c:a5:28:c2:db:3f: 5a:4b:04:41:7b:1f:3b:2d:1b:e4:55:e8:07:d3:7c:50:43:ce: 36:b8:84:a5:51:87:f9:b5:da:4b:8b:c3:b0:2c:aa:f8:cb:01: f8:44:5b:0c:8a:06:12:b2:0b:d6:8a:fc:0d:6a:4d:dd:b7:73: b9:ae:8c:79:82:ca:a8:40:8a:d0:0e:48:9a:e6:f1:8e:36:f8: e2:ce:37:50:df:b4:44:f0:55:fb:ba:d6:b3:5b:34:a7:f8:ab: 9a:03:cc:d7:7a:63:09:14:35:b6:c1:59:d4:c5:a6:61:dd:dc: e5:4f:d9:8b:ce:aa:ec:a4:7b:99:d2:63:ba:f1:cd:e4:3f:f9: 31:e9:7e:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 N0I3NDExMC8GA1UEBRMoQkY4ODYwQjJDMDM3N0JCNUVGRURCRTNBRDQwRjFDRjE4 OUYyQUNCMjAeFw0yNTA4MDMwODExMjRaFw0yNTA4MTAwODExMjRaMBgxFjAUBgNV BAMTDTY4OGYxOWFjLTE0ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMh4RwB0UpedfSVpec0bCzoFH8RL4fZf22yEaWsHnMSy6/HCYAEPEP+TbhY3tb hUC+yIKBeKU4ZZ+v4cGIA6YHb0pgXeidGYO/c+thSWW8AWQcYSkJOVR4ogMz9y8g nC66LT99gTyih7J3ariF1fxfVctcZjnX5zfFWtEC8iJceutzVOCjbEauHmoKDXzy ai0EUtf6FJDFRYMl5ysV538kAxQ4TYMRj1CHyZgM+vBJtWbbHw7rd2+W0lNZPUFX 2a7SvU4R4k6y5eZfHGwW40d+tLwfv+hOiiLOyUazG3sZI/JXDYBPCvMYOOoIscq3 LibYPxacDLGGG6zoxmLmm7WnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkuJsyiuH 7WpNvYqCbtxtzxmkN3MwHwYDVR0jBBgwFoAUv4hgssA3e7Xv7b461A8c8YnyrLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3Qjc0L0NFMDA0MjVBMzZC QzExRjA4MUQ1NUYxN0M0RjlBRTAyL3Y0aGdzc0EzZTdYdjdiNDYxQThjOFlueXJM SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdjRoZ3NzQTNlN1h2N2I0NjFBOGM4WW55ckxJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 Qjc0L0NFMDA0MjVBMzZCQzExRjA4MUQ1NUYxN0M0RjlBRTAyL3Y0aGdzc0EzZTdY djdiNDYxQThjOFlueXJMSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD1u6qyfM7J4YH7itZ8oFU6J8oQ6tumTb8bfLfji4piwdkj9SG6P6Rh1 8x3PbiN9siMTgUTOcYUZYywrqPWsaFVFsMO3AQsOkqJYq6YnLkuEspAb+5hPKZtI Z6Mj1JQfxUf2GZtxzXbGFelkrxnDs1FsWa4cVOwEKCylKMLbP1pLBEF7HzstG+RV 6AfTfFBDzja4hKVRh/m12kuLw7AsqvjLAfhEWwyKBhKyC9aK/A1qTd23c7mujHmC yqhAitAOSJrm8Y42+OLON1DftETwVfu61rNbNKf4q5oDzNd6YwkUNbbBWdTFpmHd 3OVP2YvOquyke5nSY7rxzeQ/+THpfsI= -----END CERTIFICATE-----Generated at Mon Aug 4 11:18:57 2025 by rpki-client