$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft File: g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json) Hash identifier: cFMnDxutAGG+SD9XWI+dq9qwLiw4G78xDLLtXjSviwI= Subject key identifier: 7A:30:4B:45:AE:F6:8B:EF:6C:47:79:A9:AB:BB:59:73:8A:23:93:5E Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41 Certificate issuer: /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft Manifest number: 79 Signing time: Sat 09 Aug 2025 07:23:50 +0000 Manifest this update: Sat 09 Aug 2025 07:23:50 +0000 Manifest next update: Sat 16 Aug 2025 07:23:50 +0000 Files and hashes: 1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: AyMOp0zXTAJZqB3KKeNLnToTrzzXIuIIEFabL+z8uuk=) 2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: zf4VXC00w+/l84Z7TgltHAME/FckYYEPpSyVri8Ai2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241 Validity Not Before: Aug 9 07:23:50 2025 GMT Not After : Aug 16 07:23:50 2025 GMT Subject: CN=6896f786-4313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:98:ff:f7:93:ea:94:ad:b7:9c:d8:e9:22: cb:bb:08:77:d2:2b:bc:85:a0:da:ed:98:23:25:23: 3a:73:1b:0c:77:ff:bc:a8:ee:9f:96:67:cd:12:3f: 11:f8:4a:d4:01:a4:1c:7a:47:00:68:06:0e:75:41: f6:b5:bf:99:0e:47:eb:0a:2d:cc:1e:b7:f3:a4:1a: 0f:39:bf:56:bf:73:d6:fe:60:d7:2a:aa:ef:36:58: 06:32:41:7c:69:4d:10:03:9a:03:5a:41:cf:e7:6d: 02:37:fa:fe:8e:c4:88:27:61:d9:e6:4e:9a:70:72: db:be:3b:20:cf:cc:0e:d4:0d:a8:72:5f:3e:39:b8: aa:5b:18:e5:c3:05:8b:5d:32:af:c2:01:d7:ca:96: 32:24:8d:2b:e1:9d:d7:dd:51:0e:99:0d:60:5d:0e: 9c:f5:3a:4d:11:8a:54:11:55:99:4a:59:6b:63:17: 29:8f:24:28:bb:71:72:6b:80:45:8e:c6:93:40:8f: 59:ce:72:b9:39:64:83:39:22:68:63:1e:74:13:14: 9a:79:8a:18:40:73:7c:33:78:a7:7d:8a:f3:aa:d2: a0:18:48:1a:8c:41:08:aa:95:be:97:f9:4c:36:42: 8b:89:75:85:7a:37:3e:28:6e:d7:b8:e6:e7:74:1c: 1b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:30:4B:45:AE:F6:8B:EF:6C:47:79:A9:AB:BB:59:73:8A:23:93:5E X509v3 Authority Key Identifier: keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e1:c5:ff:ad:b7:f4:93:0c:1d:a6:eb:9b:49:26:d3:f1:09: 0c:ad:0e:b6:86:3e:5e:7a:ff:6b:51:a5:1b:3d:f1:0c:6c:6f: 92:83:72:d6:77:16:26:ca:2d:74:53:b7:9a:11:5c:74:d9:9c: 83:5f:82:7c:31:28:47:ac:af:72:59:1c:8c:07:84:37:e9:bf: 44:88:56:b0:9f:53:b6:51:6e:3f:6a:e2:2e:bf:17:41:72:11: 42:7c:19:6e:99:ab:09:48:fb:dc:5a:e8:ee:9e:c9:aa:0b:4f: fb:78:40:86:0c:11:77:a2:bc:8b:bc:48:7c:0c:5e:9e:69:0b: d9:da:07:7f:29:66:f4:95:e5:f7:9d:f2:fa:52:88:12:3e:59: 40:2b:a3:77:0b:1a:56:fa:ce:f1:e9:c2:aa:65:af:8d:a3:01: e8:3b:4d:f7:d9:9e:96:68:c6:a7:40:d2:b7:bf:c6:72:09:a2: 00:77:a1:e6:b6:33:1a:5f:18:9f:59:87:e0:a5:af:2b:90:8d: 63:33:a3:6a:ba:29:04:ed:e6:47:1c:66:35:97:f5:7e:50:b9: 98:99:2c:b7:5c:30:13:95:e5:09:2a:12:1f:fd:04:2d:6a:d5: 99:41:bb:46:de:f2:b2:3e:26:a9:df:0b:eb:cc:a9:c6:fc:7f: 7d:0d:ee:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkI5QTExMC8GA1UEBRMoODM4RkJEMEIzOTVFQTkwNzA2QzZDMjg5QUMyNkIwRDcz OEEwNDI0MTAeFw0yNTA4MDkwNzIzNTBaFw0yNTA4MTYwNzIzNTBaMBgxFjAUBgNV BAMTDTY4OTZmNzg2LTQzMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2PZj/95PqlK23nNjpIsu7CHfSK7yFoNrtmCMlIzpzGwx3/7yo7p+WZ80SPxH4 StQBpBx6RwBoBg51Qfa1v5kOR+sKLcwet/OkGg85v1a/c9b+YNcqqu82WAYyQXxp TRADmgNaQc/nbQI3+v6OxIgnYdnmTppwctu+OyDPzA7UDahyXz45uKpbGOXDBYtd Mq/CAdfKljIkjSvhndfdUQ6ZDWBdDpz1Ok0RilQRVZlKWWtjFymPJCi7cXJrgEWO xpNAj1nOcrk5ZIM5ImhjHnQTFJp5ihhAc3wzeKd9ivOq0qAYSBqMQQiqlb6X+Uw2 QouJdYV6Nz4obte45ud0HBvLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUejBLRa72 i+9sR3mpq7tZc4ojk14wHwYDVR0jBBgwFoAUg4+9CzleqQcGxsKJrCaw1zigQkEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCQjlBLzQxMzkwQkNBQ0ZG MzExRUY5MDYyRTUyMUM0RjlBRTAyL2c0LTlDemxlcVFjR3hzS0pyQ2F3MXppZ1Fr RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZzQtOUN6bGVxUWNHeHNLSnJDYXcxemlnUWtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC QjlBLzQxMzkwQkNBQ0ZGMzExRUY5MDYyRTUyMUM0RjlBRTAyL2c0LTlDemxlcVFj R3hzS0pyQ2F3MXppZ1FrRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACvhxf+tt/STDB2m65tJJtPxCQytDraGPl56/2tRpRs98Qxsb5KDctZ3 FibKLXRTt5oRXHTZnINfgnwxKEesr3JZHIwHhDfpv0SIVrCfU7ZRbj9q4i6/F0Fy EUJ8GW6ZqwlI+9xa6O6eyaoLT/t4QIYMEXeivIu8SHwMXp5pC9naB38pZvSV5fed 8vpSiBI+WUAro3cLGlb6zvHpwqplr42jAeg7TffZnpZoxqdA0re/xnIJogB3oea2 MxpfGJ9Zh+ClryuQjWMzo2q6KQTt5kccZjWX9X5QuZiZLLdcMBOV5QkqEh/9BC1q 1ZlBu0be8rI+JqnfC+vMqcb8f30N7pY= -----END CERTIFICATE-----Generated at Sat Aug 9 15:12:19 2025 by rpki-client