$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft File: D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft (raw, json) Hash identifier: iwROEszwGvoDmLWU1DVSxd6cKwybafihHw05DtKttP0= Subject key identifier: 72:6F:03:9C:CF:0D:E5:1E:51:B9:36:6A:5E:DD:47:4B:6B:98:C5:FE Authority key identifier: 0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 Certificate issuer: /CN=A915D4EA/serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Certificate serial: 048A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft Manifest number: 0484 Signing time: Sat 09 Aug 2025 00:32:51 +0000 Manifest this update: Sat 09 Aug 2025 00:32:50 +0000 Manifest next update: Sat 16 Aug 2025 00:32:50 +0000 Files and hashes: 1: D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl (hash: B95+M5WYjL+Bcf2grGN/0o3RkR5T1FJeTp1K5ZVOCT4=) 2: B5A6646A4EA211EC9AEBA24CC4F9AE02.roa (hash: r7hd+udE0/uxVbv9WvLHX+58InN/53D6sx7FMyN6tO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1162 (0x48a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4EA, serialNumber=0F804F17EC357CBF300D3BB2FA9CCD2A360AD5E2 Validity Not Before: Aug 9 00:32:50 2025 GMT Not After : Aug 16 00:32:50 2025 GMT Subject: CN=68969732-179b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:09:9e:34:c7:92:90:4a:15:5b:f7:e9:25: 76:4d:3f:a1:b2:14:6d:d4:fd:10:45:8f:e6:96:11: ea:f9:48:66:0b:dc:2f:05:95:85:04:52:76:a7:2d: 58:1c:71:61:90:04:9e:a5:ca:fd:e7:bd:2f:ef:5a: da:8d:4d:25:0c:ea:42:d7:a9:08:ef:55:07:39:fa: f6:65:37:fe:f7:7b:15:a3:a4:3e:6e:8f:b3:32:f3: 65:a1:26:35:af:29:eb:57:11:98:46:53:0a:b2:2f: b2:26:d2:16:9f:04:c5:f9:cc:70:8c:c2:8c:8c:07: b0:26:ec:e7:db:e9:42:f3:52:20:85:61:63:2b:4c: 9a:c8:2f:2e:f3:dc:32:e1:6d:14:ac:06:58:65:80: a6:82:24:2b:b3:be:ac:ac:d9:3e:23:21:cd:97:bb: dc:86:9a:bf:52:68:38:a9:b3:70:c4:d1:32:ef:e1: 65:ed:1b:97:3b:d6:48:7e:15:b9:c8:2a:e7:a7:35: d5:34:3b:fd:64:ac:5b:5a:84:d4:13:f0:b7:5a:fa: eb:da:56:05:de:c0:81:10:21:99:67:59:d9:ed:36: 6b:98:3d:7a:88:44:d2:fe:dd:1f:62:0d:f1:2a:b4: 8a:29:6e:10:b7:67:72:d9:df:a2:4c:22:cd:1f:8a: bb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6F:03:9C:CF:0D:E5:1E:51:B9:36:6A:5E:DD:47:4B:6B:98:C5:FE X509v3 Authority Key Identifier: keyid:0F:80:4F:17:EC:35:7C:BF:30:0D:3B:B2:FA:9C:CD:2A:36:0A:D5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D4BPF-w1fL8wDTuy-pzNKjYK1eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4EA/700FCF284E9C11ECAA488671C4F9AE02/D4BPF-w1fL8wDTuy-pzNKjYK1eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:ee:98:1b:ee:57:32:61:58:f0:a5:77:9f:48:c5:3c:94:c9: 90:a6:a7:3c:84:83:7c:43:0b:7a:20:50:37:fa:fa:f0:b0:37: ba:23:b9:23:d5:bf:e1:19:28:f4:92:21:1a:30:bd:b9:c6:30: 2d:a6:04:88:ca:cd:04:86:9b:3b:04:e5:53:eb:94:5a:ad:95: 48:0f:5d:39:b0:8f:36:7e:3a:14:7a:0c:b8:30:9a:9d:5e:03: 87:a6:92:a7:96:dd:1f:62:3a:0c:a6:4b:fb:4e:ef:11:9d:d1: 5f:fe:e7:76:04:fa:d6:7b:cc:50:38:de:0e:cb:c6:16:83:6e: aa:83:d8:da:be:cf:64:09:42:de:04:e0:14:90:03:ef:43:2f: 00:23:09:50:f1:d4:75:34:94:2b:57:c3:ba:ed:e9:ea:62:95: a6:e4:8a:88:94:b4:f1:d8:b0:ae:e9:1c:2f:20:ed:00:9d:5d: b9:41:43:26:ba:f2:96:8b:48:b5:dc:35:cb:e4:a3:16:b8:d1: 49:ec:ca:d0:06:6e:48:9f:d3:bd:d7:57:56:4b:46:53:b0:a6: 3a:fd:d2:ca:fc:98:60:27:64:27:ae:8c:d2:c6:bc:0c:df:79: 89:31:ca:53:b4:95:41:1c:8a:90:28:12:a1:40:0b:05:70:ef: 84:8d:cc:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RUExMTAvBgNVBAUTKDBGODA0RjE3RUMzNTdDQkYzMDBEM0JCMkZBOUNDRDJB MzYwQUQ1RTIwHhcNMjUwODA5MDAzMjUwWhcNMjUwODE2MDAzMjUwWjAYMRYwFAYD VQQDEw02ODk2OTczMi0xNzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQUJnjTHkpBKFVv36SV2TT+hshRt1P0QRY/mlhHq+UhmC9wvBZWFBFJ2py1Y HHFhkASepcr9570v71rajU0lDOpC16kI71UHOfr2ZTf+93sVo6Q+bo+zMvNloSY1 rynrVxGYRlMKsi+yJtIWnwTF+cxwjMKMjAewJuzn2+lC81IghWFjK0yayC8u89wy 4W0UrAZYZYCmgiQrs76srNk+IyHNl7vchpq/Umg4qbNwxNEy7+Fl7RuXO9ZIfhW5 yCrnpzXVNDv9ZKxbWoTUE/C3Wvrr2lYF3sCBECGZZ1nZ7TZrmD16iETS/t0fYg3x KrSKKW4Qt2dy2d+iTCLNH4q7xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJvA5zP DeUeUbk2al7dR0trmMX+MB8GA1UdIwQYMBaAFA+ATxfsNXy/MA07svqczSo2CtXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRFQS83MDBGQ0YyODRF OUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZMOHdEVHV5LXB6TktqWUsx ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q0QlBGLXcxZkw4d0RUdXktcHpOS2pZSzFlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRFQS83MDBGQ0YyODRFOUMxMUVDQUE0ODg2NzFDNEY5QUUwMi9ENEJQRi13MWZM OHdEVHV5LXB6TktqWUsxZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk7pgb7lcyYVjwpXefSMU8lMmQpqc8hIN8Qwt6IFA3+vrwsDe6I7kj 1b/hGSj0kiEaML25xjAtpgSIys0Ehps7BOVT65RarZVID105sI82fjoUegy4MJqd XgOHppKnlt0fYjoMpkv7Tu8RndFf/ud2BPrWe8xQON4Oy8YWg26qg9javs9kCULe BOAUkAPvQy8AIwlQ8dR1NJQrV8O67enqYpWm5IqIlLTx2LCu6RwvIO0AnV25QUMm uvKWi0i13DXL5KMWuNFJ7MrQBm5In9O911dWS0ZTsKY6/dLK/JhgJ2QnrozSxrwM 33mJMcpTtJVBHIqQKBKhQAsFcO+Ejcyk -----END CERTIFICATE-----Generated at Sat Aug 9 10:48:57 2025 by rpki-client