$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: uUYRG0DLxtwp3SH09wDCHVsjjlnosd3OyzKdzEVC8oU= Subject key identifier: 71:6D:47:D8:34:59:C2:90:48:09:1F:C2:98:C7:8D:7C:D8:4F:82:36 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 02DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 02B0 Signing time: Sat 09 Aug 2025 02:39:29 +0000 Manifest this update: Sat 09 Aug 2025 02:39:28 +0000 Manifest next update: Sat 16 Aug 2025 02:39:28 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: 2th3ja0t9FzKUKXi4Fjw8n/HoNJVdjhKkIyWUzKjjAM=) 2: CC647BDECAC711EF80553A61C4F9AE02.roa (hash: wcGSkIclIE1toilkxNzAK4TRkSG87FAdX9jhsTJGr7o=) 3: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: JFnHafVEFMtRqzbULiHqCAleWGn7lYd8UUBXcTVaExM=) 4: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: opJO4K7YZ/e2DX+s/GDo4FYN3UUPRtbZmQRgFxg+ZXw=) 5: 3632957E441311EE8A03A472C4F9AE02.roa (hash: nC156FtWNisRyJ+sZJC0neQfTsLbF3t6cdGqYP4uj+g=) 6: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: Iqn/bXqznhtCorMWZ+Zjcj+q0RdF1Ri2rDqeHKOqgrA=) 7: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: i8rhzfoYVzIteA50gdYKsP0L/C+up3cTPTY1lRFjLJk=) 8: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: 0yjNoUcfSfQzsQDEWyMesVRiNf3mWHbgqFSp6Aeqe88=) 9: 3D34A750A88111ED80831318C4F9AE02.roa (hash: x8f88T4/0fygwChpTG7CDDG+BVQvHAjTQvhSaAfGmUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Aug 9 02:39:28 2025 GMT Not After : Aug 16 02:39:28 2025 GMT Subject: CN=6896b4e0-03f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:c0:41:dc:08:1d:3e:3a:92:be:19:8c:f2: 35:86:2b:5d:2a:2a:8f:d6:ce:cf:9a:20:5e:21:91: ac:14:e1:7d:a4:f3:e0:f2:7f:7f:00:fd:38:68:b7: 8e:0d:ef:2b:89:0c:51:8d:16:55:2b:1a:80:4e:8b: 7d:89:a1:70:e6:23:41:32:d2:3b:44:9a:14:88:e8: 8d:85:3a:41:a7:62:f6:ad:5b:84:e3:bb:97:70:36: 65:77:2e:b7:c4:3c:14:31:c0:eb:2a:d9:9c:59:69: 41:ce:f5:49:52:1f:a9:06:e8:00:f7:65:db:ef:41: 11:44:80:c2:e3:8a:fb:6b:14:43:92:72:2b:90:bc: 7c:a7:4d:2f:91:e3:17:07:b4:3c:5f:0e:5c:4b:75: 30:0b:be:12:6b:8e:17:71:21:01:26:5b:4b:3a:26: c8:e3:e9:16:6d:40:90:46:e7:67:f7:d8:66:2d:5c: 24:5b:a4:c1:07:98:91:cc:97:dd:4d:70:60:d1:9a: 37:da:af:0f:c9:4e:4c:35:dc:ce:f6:4b:c7:4e:27: 54:76:ad:6e:d9:30:38:a3:55:cb:59:83:72:60:8c: a2:30:e3:b3:bb:19:c2:ea:58:a3:96:be:52:84:f6: b1:1b:fd:42:90:1e:ac:9a:20:ca:96:8a:37:5a:76: a7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6D:47:D8:34:59:C2:90:48:09:1F:C2:98:C7:8D:7C:D8:4F:82:36 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:d1:f8:6c:b1:61:28:54:6b:e6:9c:5b:63:1f:6f:0b:1f:85: 3d:79:00:a4:7c:fa:b5:e7:48:d4:33:66:71:d3:b1:39:d6:db: 0b:ad:3c:c2:c8:b5:37:53:36:a6:c1:ee:d2:30:2d:b3:ae:43: e4:82:23:2e:7d:5f:c5:72:d8:b0:18:6c:6b:44:48:38:71:d6: 89:66:f3:65:ab:82:7f:52:91:19:cc:06:25:d4:91:49:e6:a7: 48:7c:41:86:b1:e6:7b:ef:ec:88:41:57:59:8d:39:b8:0f:ac: 4b:be:21:9d:e3:51:0d:f7:6d:bf:b1:1e:03:48:e3:6c:fa:88: 43:53:c8:2e:a7:e8:9f:f5:a7:f2:34:53:c3:43:6e:14:4d:14: 5d:c3:7a:3b:3a:98:ed:51:7b:fa:e2:8f:99:78:2f:b6:3a:5b: 96:7b:34:0d:0e:38:3d:30:bc:8e:ff:67:f1:d9:5b:4c:c1:44: 38:4f:f3:42:24:d9:7c:ae:dc:28:f7:ce:d1:fc:2a:0a:d4:0f: 45:eb:1f:d6:95:9d:00:c7:53:e2:35:70:9a:31:6b:72:b9:50: ef:d2:bd:94:ed:56:ca:34:86:76:4a:60:f5:25:0b:24:f4:5e: 46:0d:68:dd:3a:f5:a7:d1:9c:ee:cf:0b:c6:1a:49:3d:2f:c8: 79:83:cc:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjUwODA5MDIzOTI4WhcNMjUwODE2MDIzOTI4WjAYMRYwFAYD VQQDEw02ODk2YjRlMC0wM2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXbAQdwIHT46kr4ZjPI1hitdKiqP1s7PmiBeIZGsFOF9pPPg8n9/AP04aLeO De8riQxRjRZVKxqATot9iaFw5iNBMtI7RJoUiOiNhTpBp2L2rVuE47uXcDZldy63 xDwUMcDrKtmcWWlBzvVJUh+pBugA92Xb70ERRIDC44r7axRDknIrkLx8p00vkeMX B7Q8Xw5cS3UwC74Sa44XcSEBJltLOibI4+kWbUCQRudn99hmLVwkW6TBB5iRzJfd TXBg0Zo32q8PyU5MNdzO9kvHTidUdq1u2TA4o1XLWYNyYIyiMOOzuxnC6lijlr5S hPaxG/1CkB6smiDKloo3WnanxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFtR9g0 WcKQSAkfwpjHjXzYT4I2MB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF0fhssWEoVGvmnFtjH28LH4U9eQCkfPq150jUM2Zx07E51tsLrTzC yLU3Uzamwe7SMC2zrkPkgiMufV/FctiwGGxrREg4cdaJZvNlq4J/UpEZzAYl1JFJ 5qdIfEGGseZ77+yIQVdZjTm4D6xLviGd41EN922/sR4DSONs+ohDU8gup+if9afy NFPDQ24UTRRdw3o7OpjtUXv64o+ZeC+2OluWezQNDjg9MLyO/2fx2VtMwUQ4T/NC JNl8rtwo987R/CoK1A9F6x/WlZ0Ax1PiNXCaMWtyuVDv0r2U7VbKNIZ2SmD1JQsk 9F5GDWjdOvWn0ZzuzwvGGkk9L8h5g8yk -----END CERTIFICATE-----Generated at Sun Aug 10 16:09:58 2025 by rpki-client