$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: s+QipGBOcN/3bXm4W9fnVZdqTuSpwA0Dy4/P4X1JUrE= Subject key identifier: CE:30:39:B7:06:4D:72:53:E2:27:6D:99:20:0E:0F:B7:8A:A5:B5:08 Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 094E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 094E Signing time: Tue 12 Aug 2025 20:27:24 +0000 Manifest this update: Tue 12 Aug 2025 20:27:23 +0000 Manifest next update: Tue 19 Aug 2025 20:27:23 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: AfwddIaGcNqfTxb4iJc25nbalKBjVPphcMH1kzSxACI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 20:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2382 (0x94e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Validity Not Before: Aug 12 20:27:23 2025 GMT Not After : Aug 19 20:27:23 2025 GMT Subject: CN=689ba3ac-1b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:46:2c:67:21:cf:08:02:32:7b:da:de:17:29: 87:f3:c4:26:66:14:81:28:8b:d3:6c:c0:16:a8:c2: ff:1c:28:0c:79:76:19:02:47:47:63:f4:e8:b3:c5: 2d:b3:c0:59:8d:bb:28:ea:a5:af:24:0b:87:dd:26: d5:2f:7b:d1:c6:e6:19:2e:b9:36:13:90:b9:62:86: c4:e4:cb:fe:bf:22:0a:db:07:9f:1a:66:26:5f:7d: 5a:70:70:1e:32:e5:7f:04:bb:1f:24:ff:2a:0b:57: 32:91:23:0f:b5:ed:30:a8:21:ef:97:46:47:d4:cd: 42:f3:b5:50:af:e5:20:fb:38:9f:a4:4c:84:bc:0e: 07:f5:d5:1d:25:b4:d6:09:5e:64:b9:90:36:44:f3: b7:3f:23:88:ac:50:0b:e8:7d:27:46:1c:3f:f5:db: 84:ad:4f:fb:9b:81:0d:49:9c:3b:78:9f:97:29:24: 15:93:84:66:48:aa:a8:11:90:7a:ba:9c:4a:71:88: 04:49:af:0c:37:f3:e8:37:a4:f1:44:a0:1c:2e:22: fb:e2:48:4f:f7:32:a6:22:66:36:66:8e:63:ea:e1: 08:cb:b6:72:0b:51:78:18:2a:5f:48:4b:45:a7:18: 98:b9:05:af:10:e1:53:f3:9d:83:8c:bf:5b:80:42: da:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:30:39:B7:06:4D:72:53:E2:27:6D:99:20:0E:0F:B7:8A:A5:B5:08 X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:68:c3:b1:44:5e:06:b5:24:44:10:b2:48:82:a2:7a:5a:bd: c8:99:1c:6b:80:fd:c2:e3:aa:d3:09:bd:af:89:14:ff:ec:44: d7:b8:72:ae:9e:ff:45:a6:24:38:38:92:5b:4f:c8:c2:dd:47: c9:b2:74:fe:4b:28:d3:97:2b:13:b0:43:de:c1:31:e5:d8:ba: 48:b7:bf:ee:4a:f4:3f:8b:fd:f2:67:7e:db:c0:37:50:89:34: 0a:01:03:5e:2f:4d:02:48:df:ac:68:87:1b:54:fd:65:9f:71: e6:6e:bd:30:17:6a:3c:ad:71:61:a9:87:a5:f1:e5:40:bf:b4: 56:7c:be:95:4f:94:18:67:af:b4:1f:6b:ea:24:45:94:c2:65: 1c:f9:cd:38:b6:2c:ff:8c:eb:5e:cc:de:6e:4d:13:2f:3e:30: b9:9b:9e:14:0b:81:bf:e7:68:7e:b6:66:2e:a0:27:8b:57:55: 0b:89:0d:43:4f:26:58:91:e9:7f:52:9f:9c:d0:20:af:32:29: 12:06:68:a6:ac:a5:22:74:28:4c:e0:9d:a9:d5:6d:8e:fd:1c: 14:2e:c9:10:da:14:89:6c:10:13:b4:6a:0c:1b:c6:64:10:44: f0:c2:97:de:6a:a9:25:1b:3a:40:05:fe:60:c0:2b:f5:06:bb: 80:74:72:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjUwODEyMjAyNzIzWhcNMjUwODE5MjAyNzIzWjAYMRYwFAYD VQQDEw02ODliYTNhYy0xYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEYsZyHPCAIye9reFymH88QmZhSBKIvTbMAWqML/HCgMeXYZAkdHY/Tos8Ut s8BZjbso6qWvJAuH3SbVL3vRxuYZLrk2E5C5YobE5Mv+vyIK2wefGmYmX31acHAe MuV/BLsfJP8qC1cykSMPte0wqCHvl0ZH1M1C87VQr+Ug+zifpEyEvA4H9dUdJbTW CV5kuZA2RPO3PyOIrFAL6H0nRhw/9duErU/7m4ENSZw7eJ+XKSQVk4RmSKqoEZB6 upxKcYgESa8MN/PoN6TxRKAcLiL74khP9zKmImY2Zo5j6uEIy7ZyC1F4GCpfSEtF pxiYuQWvEOFT852DjL9bgELa3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4wObcG TXJT4idtmSAOD7eKpbUIMB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUaMOxRF4GtSREELJIgqJ6Wr3ImRxrgP3C46rTCb2viRT/7ETXuHKu nv9FpiQ4OJJbT8jC3UfJsnT+SyjTlysTsEPewTHl2LpIt7/uSvQ/i/3yZ37bwDdQ iTQKAQNeL00CSN+saIcbVP1ln3Hmbr0wF2o8rXFhqYel8eVAv7RWfL6VT5QYZ6+0 H2vqJEWUwmUc+c04tiz/jOtezN5uTRMvPjC5m54UC4G/52h+tmYuoCeLV1ULiQ1D TyZYkel/Up+c0CCvMikSBmimrKUidChM4J2p1W2O/RwULskQ2hSJbBATtGoMG8Zk EETwwpfeaqklGzpABf5gwCv1BruAdHKP -----END CERTIFICATE-----Generated at Wed Aug 13 09:49:25 2025 by rpki-client