$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json) Hash identifier: RiMMzEhhGGqSjmlk688ni4gqjXOc2w/KAcrhCloeTVI= Subject key identifier: B2:72:D5:78:3F:C1:BB:5C:9D:79:7F:3F:E3:F4:F1:75:D8:CD:AD:42 Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 07B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft Manifest number: 0791 Signing time: Mon 04 Aug 2025 21:53:53 +0000 Manifest this update: Mon 04 Aug 2025 21:53:52 +0000 Manifest next update: Mon 11 Aug 2025 21:53:52 +0000 Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: X96kBi1PPgMOTytTqzwvVH7mf45HrLNwInjPhfO6ooQ=) 2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: hFRxkLpFxynkLA+bgk7ZWKTxrIef2z810IITJ3Z3KSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1971 (0x7b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Aug 4 21:53:52 2025 GMT Not After : Aug 11 21:53:52 2025 GMT Subject: CN=68912bf0-520f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:4e:99:7b:fb:44:7d:83:15:c4:0e:cd:82: 5e:3e:8d:4e:de:a3:67:55:b6:71:e6:9f:d8:6f:a6: f4:17:03:90:7e:dd:37:6d:44:12:e2:e1:18:19:10: ea:aa:cb:e4:66:05:31:a7:e5:51:5f:f3:e1:8c:3d: 37:48:5b:86:7b:3a:43:8f:87:d8:f2:1b:9b:a5:46: 72:c9:91:19:11:33:e6:ef:03:f4:97:98:23:fc:8f: 16:d0:b3:98:ed:ce:26:09:17:fb:b5:5c:f6:65:c9: 16:9e:ab:10:c9:20:95:a8:a6:f3:86:29:f0:39:a9: 6e:81:b9:81:fc:0b:9a:00:9b:e1:c3:97:a2:a4:6f: 3d:6a:13:1c:ee:56:eb:69:ae:cc:46:da:32:8d:25: 84:26:45:b5:4c:e8:d1:67:d2:a7:51:3a:1f:17:ea: ed:46:e7:b7:1d:6e:9e:e2:bc:6a:f5:8c:26:89:51: ce:00:f5:35:74:06:3a:23:96:e1:e3:11:ad:3c:14: 2d:b7:fb:13:0f:fe:e7:fb:6f:10:6e:93:f5:c6:22: ff:d7:cb:82:41:ee:c6:cb:93:fd:c8:b2:03:64:fa: 9e:14:66:c3:42:ec:50:53:02:b1:37:77:62:53:d3: a6:de:a0:1b:04:8a:8d:38:79:2e:b1:f2:6a:3c:ef: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:72:D5:78:3F:C1:BB:5C:9D:79:7F:3F:E3:F4:F1:75:D8:CD:AD:42 X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:7c:90:f8:33:a8:4e:23:c7:b0:fe:a7:c0:eb:45:f5:91:17: 3f:88:75:9f:8f:7b:8a:3e:c2:84:e0:0f:49:01:4b:79:c4:81: e5:43:cb:ae:d9:b6:bd:f7:bf:84:f5:46:c7:63:23:32:d6:fc: 67:a0:a3:42:f7:15:ac:f5:51:76:09:8e:1f:d4:a0:da:f4:b2: e9:8c:c2:58:f0:ba:19:e1:6d:11:a0:10:42:b3:4b:aa:a4:d1: 24:ae:7b:f9:d3:8f:35:ea:ee:f1:db:af:ca:dc:b8:5f:65:38: 86:46:b3:08:00:cd:5f:6e:ce:a9:88:d1:eb:b0:1b:6f:c8:10: 0e:ec:2f:9d:24:58:a3:12:70:96:f0:06:0c:ce:54:5d:89:7a: 90:53:88:1e:6b:dc:79:eb:fb:cc:36:8f:7d:88:09:80:9b:54: b1:ed:92:d1:8a:62:21:8e:65:e3:bf:19:2f:fc:da:87:71:bb: 9c:51:1e:d4:c2:ec:d4:75:5e:7b:aa:1d:b3:fb:91:44:50:fc: a9:6b:ca:19:c7:ef:3c:62:f6:8c:d4:f0:4e:c4:54:59:1f:b6: 99:0e:b8:5f:b4:7b:f8:d3:a6:36:32:bd:18:8a:5f:54:8c:15: b0:ee:ac:3c:f5:86:f3:5b:35:94:c0:5b:88:d3:2b:34:e0:92: cb:fc:b3:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjUwODA0MjE1MzUyWhcNMjUwODExMjE1MzUyWjAYMRYwFAYD VQQDEw02ODkxMmJmMC01MjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdZOmXv7RH2DFcQOzYJePo1O3qNnVbZx5p/Yb6b0FwOQft03bUQS4uEYGRDq qsvkZgUxp+VRX/PhjD03SFuGezpDj4fY8hubpUZyyZEZETPm7wP0l5gj/I8W0LOY 7c4mCRf7tVz2ZckWnqsQySCVqKbzhinwOalugbmB/AuaAJvhw5eipG89ahMc7lbr aa7MRtoyjSWEJkW1TOjRZ9KnUTofF+rtRue3HW6e4rxq9YwmiVHOAPU1dAY6I5bh 4xGtPBQtt/sTD/7n+28QbpP1xiL/18uCQe7Gy5P9yLIDZPqeFGbDQuxQUwKxN3di U9Om3qAbBIqNOHkusfJqPO8OXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJy1Xg/ wbtcnXl/P+P08XXYza1CMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTAyNy8yNTA1Q0VEQzI1NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1Vu YlBUcGpUZG10akRYNF9nWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnfJD4M6hOI8ew/qfA60X1kRc/iHWfj3uKPsKE4A9JAUt5xIHlQ8uu 2ba997+E9UbHYyMy1vxnoKNC9xWs9VF2CY4f1KDa9LLpjMJY8LoZ4W0RoBBCs0uq pNEkrnv504816u7x26/K3LhfZTiGRrMIAM1fbs6piNHrsBtvyBAO7C+dJFijEnCW 8AYMzlRdiXqQU4gea9x56/vMNo99iAmAm1Sx7ZLRimIhjmXjvxkv/NqHcbucUR7U wuzUdV57qh2z+5FEUPypa8oZx+88YvaM1PBOxFRZH7aZDrhftHv406Y2Mr0Yil9U jBWw7qw89YbzWzWUwFuI0ys04JLL/LNF -----END CERTIFICATE-----Generated at Tue Aug 5 17:21:04 2025 by rpki-client