$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft File: ML4eudOsSdCv7hNTw_nRFnoAexc.mft (raw, json) Hash identifier: ISfh4whflzUkplhmB0ucaxqlBy8L8sLxrDnglbW63CI= Subject key identifier: 9B:8A:A7:9C:34:A4:C9:95:25:9E:CC:29:D1:3B:97:55:5E:0D:01:3A Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17 Certificate issuer: /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft Manifest number: A2 Signing time: Thu 07 Aug 2025 06:51:15 +0000 Manifest this update: Thu 07 Aug 2025 06:51:15 +0000 Manifest next update: Thu 14 Aug 2025 06:51:15 +0000 Files and hashes: 1: ML4eudOsSdCv7hNTw_nRFnoAexc.crl (hash: lkhUGzY84W+YOz1y4OW2oxXZ7Zi4RZnwY0efNTNHWWg=) 2: A8F4AE389D7E11EF91A24C73C4F9AE02.roa (hash: Y1QGQN0nXso2hopLjYxap7U6L3vOEJ5sbYbcbURZoVc=) 3: EBC0BF3A843411EFA205900AC4F9AE02.roa (hash: 1lTg3C6avyOXyGgdRKyCJEw/4DfSTwcprqQ9ajZX1oM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B736, serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17 Validity Not Before: Aug 7 06:51:15 2025 GMT Not After : Aug 14 06:51:15 2025 GMT Subject: CN=68944ce3-89aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:4c:a8:34:fa:25:0a:8c:a7:ec:4f:24:5e: a4:86:8a:4c:5d:d4:ea:70:b7:d8:a9:1e:39:76:21: b7:45:5c:b4:64:9d:a8:35:fa:8b:d5:97:b8:58:7a: cb:28:a5:cb:b8:37:6c:f9:ff:a2:b0:21:d3:b2:f6: 31:6d:46:b9:1e:cf:b9:7b:65:b9:ac:1f:c6:87:ea: e1:fa:fb:c6:64:3d:f3:6d:cd:5f:89:42:c7:0d:04: 2e:7a:c9:4a:dd:fd:67:51:da:56:6a:10:37:12:ba: 95:ac:c7:19:7c:fc:09:ff:78:a6:55:d3:f0:15:1b: 7b:3e:c0:96:f2:64:0c:04:57:d7:0c:32:ab:75:df: 07:91:c0:44:21:86:4f:9f:83:27:74:ce:4c:9e:ce: 47:f2:e8:b9:fe:e1:aa:99:7b:65:e1:e4:be:a6:b9: 65:af:fe:d6:6e:1d:82:8f:12:6d:db:5d:e4:34:3a: 61:1d:55:0a:60:29:9d:b8:e5:fe:bc:fa:2e:d6:c9: 44:fa:11:5e:09:fe:4a:96:45:45:40:5a:a7:71:e2: 2d:95:40:1e:13:19:e1:cf:78:28:ba:86:07:96:b4: 7c:89:3c:4d:e0:e7:62:a1:de:d3:a9:a8:cb:f8:9f: e2:c1:87:c1:0b:33:9f:0d:90:1c:24:dc:96:c5:a6: 7e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8A:A7:9C:34:A4:C9:95:25:9E:CC:29:D1:3B:97:55:5E:0D:01:3A X509v3 Authority Key Identifier: keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:c5:ce:10:64:ea:a6:e9:02:20:c9:d0:f5:55:c8:43:0c:9c: 19:3a:b7:69:7d:18:e2:ff:f4:42:a5:e1:17:a9:c5:90:49:dd: 3f:28:44:8a:9b:16:40:df:2b:ed:2e:5a:df:d2:21:fa:13:23: b3:b9:c4:da:e1:14:0c:3f:34:1b:34:30:8d:43:5d:a0:cd:d3: 46:ac:56:85:e8:04:ea:43:43:32:25:71:79:5d:4d:45:46:ec: ed:76:45:ca:68:20:38:5d:ad:0d:77:e6:d1:86:e1:dc:7f:88: 8a:55:7f:7d:59:c4:cb:a4:23:51:d6:05:e8:24:a0:29:b9:57: 4b:5c:34:7d:b5:a4:cd:a6:60:17:5c:aa:43:22:52:c6:da:a4: 0b:a0:66:ab:97:ae:6f:d6:80:3b:cd:e0:6a:1d:96:df:9b:8b: c7:74:4b:a8:f5:27:4b:1f:54:ed:49:dd:69:7f:c6:e6:5e:a3: 6d:a6:3d:ce:8c:2f:6f:59:48:fc:3c:ee:d2:c6:d5:67:83:d2: cf:81:fd:f1:50:38:dc:42:21:7d:ab:c4:c0:61:f3:8c:2f:2e: 59:81:42:36:d3:26:2e:18:8d:ad:da:e0:8c:74:4a:33:b1:24: 76:9b:9e:a8:56:25:d1:10:bd:96:1c:92:57:54:a3:48:28:90: f7:d2:bc:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I3MzYxMTAvBgNVBAUTKDMwQkUxRUI5RDNBQzQ5RDBBRkVFMTM1M0MzRjlEMTE2 N0EwMDdCMTcwHhcNMjUwODA3MDY1MTE1WhcNMjUwODE0MDY1MTE1WjAYMRYwFAYD VQQDEw02ODk0NGNlMy04OWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZFMqDT6JQqMp+xPJF6khopMXdTqcLfYqR45diG3RVy0ZJ2oNfqL1Ze4WHrL KKXLuDds+f+isCHTsvYxbUa5Hs+5e2W5rB/Gh+rh+vvGZD3zbc1fiULHDQQueslK 3f1nUdpWahA3ErqVrMcZfPwJ/3imVdPwFRt7PsCW8mQMBFfXDDKrdd8HkcBEIYZP n4MndM5Mns5H8ui5/uGqmXtl4eS+prllr/7Wbh2CjxJt213kNDphHVUKYCmduOX+ vPou1slE+hFeCf5KlkVFQFqnceItlUAeExnhz3gouoYHlrR8iTxN4Odiod7TqajL +J/iwYfBCzOfDZAcJNyWxaZ+zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuKp5w0 pMmVJZ7MKdE7l1VeDQE6MB8GA1UdIwQYMBaAFDC+HrnTrEnQr+4TU8P50RZ6AHsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjczNi9GMTMzRUYwQzg0 MkQxMUVGOTlFODNEODRDNEY5QUUwMi9NTDRldWRPc1NkQ3Y3aE5Ud19uUkZub0Fl eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01MNGV1ZE9zU2RDdjdoTlR3X25SRm5vQWV4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjczNi9GMTMzRUYwQzg0MkQxMUVGOTlFODNEODRDNEY5QUUwMi9NTDRldWRPc1Nk Q3Y3aE5Ud19uUkZub0FleGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCxc4QZOqm6QIgydD1VchDDJwZOrdpfRji//RCpeEXqcWQSd0/KESK mxZA3yvtLlrf0iH6EyOzucTa4RQMPzQbNDCNQ12gzdNGrFaF6ATqQ0MyJXF5XU1F RuztdkXKaCA4Xa0Nd+bRhuHcf4iKVX99WcTLpCNR1gXoJKApuVdLXDR9taTNpmAX XKpDIlLG2qQLoGarl65v1oA7zeBqHZbfm4vHdEuo9SdLH1TtSd1pf8bmXqNtpj3O jC9vWUj8PO7SxtVng9LPgf3xUDjcQiF9q8TAYfOMLy5ZgUI20yYuGI2t2uCMdEoz sSR2m56oViXREL2WHJJXVKNIKJD30rxq -----END CERTIFICATE-----Generated at Sat Aug 9 03:02:33 2025 by rpki-client