$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft File: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft (raw, json) Hash identifier: Sj67vG9H2QcSmN7IYkBq1z8FGbUKZnLHt8rU8LZzgFw= Subject key identifier: BB:77:0B:6B:DA:68:EC:77:95:65:8D:C2:DC:63:51:69:EB:8B:3F:5D Authority key identifier: E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86 Certificate issuer: /CN=A917D4C4/serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286 Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft Manifest number: 0678 Signing time: Fri 08 Aug 2025 14:49:19 +0000 Manifest this update: Fri 08 Aug 2025 14:49:18 +0000 Manifest next update: Fri 15 Aug 2025 14:49:18 +0000 Files and hashes: 1: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl (hash: GH1u2kj5iQy6lw2PLsILPjva0UVmaDVe3nHOnBUW44g=) 2: 6E325DBC0E2F11EDB4659653C4F9AE02.roa (hash: NS8IXL+/osy1aonTB1YcjpMFwDzkEpu3g9yC5lM136w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D4C4, serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286 Validity Not Before: Aug 8 14:49:18 2025 GMT Not After : Aug 15 14:49:18 2025 GMT Subject: CN=68960e6f-71b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c5:e5:ed:89:9c:47:6d:b4:67:40:7c:07:4e: dc:42:9b:f2:ce:5a:99:03:f9:6d:6e:c3:04:f0:38: 2f:9d:31:bf:1c:6c:8e:dd:8b:32:b1:8c:55:bf:33: 8e:a3:83:7e:13:87:86:df:c6:5b:4c:98:ad:4f:7a: 0c:97:df:8d:31:58:26:f2:76:db:aa:c7:68:3e:8d: 93:14:5a:13:a5:c9:aa:6f:aa:47:8f:1d:2e:bd:d5: 41:5d:d5:12:8a:34:fb:79:9f:64:62:fb:17:b0:41: d4:a6:9f:15:ca:bc:d9:96:34:51:b2:75:dd:c7:07: 1e:71:62:bf:83:7c:bd:9f:25:f4:4a:64:24:e7:2d: c3:19:d5:05:ea:1a:7a:70:81:46:da:ab:91:e8:b7: c1:a1:14:3d:8b:f2:bd:08:77:ae:b5:20:ec:04:bf: 37:d7:ff:a5:68:1c:5c:55:87:6c:48:09:24:5d:0c: 46:a3:13:f5:da:2e:d9:a6:73:a6:df:28:0a:31:61: f5:b4:5c:a7:f6:14:1d:2b:3b:3e:a8:a6:da:eb:b3: 0b:ad:f4:12:53:3a:1d:2c:a1:dd:8f:da:31:44:ee: 0b:2d:52:fb:e3:5c:49:dd:f5:ef:e2:df:77:93:78: 4a:bf:b3:2d:b5:a0:37:36:e7:75:60:3d:40:94:91: e6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:77:0B:6B:DA:68:EC:77:95:65:8D:C2:DC:63:51:69:EB:8B:3F:5D X509v3 Authority Key Identifier: keyid:E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:fc:bf:9d:09:63:a6:59:da:f7:5d:0d:d9:ac:a4:33:95:92: 85:47:00:84:19:01:e9:09:0f:47:e4:3e:51:76:06:d5:87:9b: 5b:95:57:9e:7a:63:9d:91:46:43:9f:ec:20:e9:39:d5:aa:b2: 6b:2e:5e:3b:9f:af:cd:58:49:ea:fc:74:14:2d:89:cc:30:7d: 81:af:fd:66:90:af:a9:93:da:23:e9:be:45:59:db:00:a7:f8: 6e:11:d3:8a:38:8a:ff:21:7c:4f:a3:cc:a8:7c:3b:aa:78:4d: 85:32:67:ff:f3:55:0d:7f:c0:2c:c0:ac:ca:37:cd:98:b7:e0: 28:ca:91:35:61:f3:12:1a:0d:8b:30:2c:6e:39:13:66:f6:52: ed:63:9e:31:1e:50:07:00:f4:50:f5:f0:77:fe:df:1c:cb:ed: 46:e7:bf:82:e7:03:bc:3a:ae:91:0d:b6:9d:66:64:2b:08:25: 48:4e:94:8b:b9:e3:8e:63:c1:c7:e0:34:a7:ce:75:be:0c:11: 24:46:ee:ad:a6:1a:4a:0e:32:f6:80:b6:ce:da:af:fd:64:31: 5a:f0:12:64:68:e6:8d:63:87:70:29:91:e8:98:b3:79:21:91: 05:a4:c6:54:ae:46:e9:7c:84:32:06:75:b2:f5:b9:19:b3:7d: 0e:28:56:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0QzQxMTAvBgNVBAUTKEUwQzg5MjhGOTQ1MTUyMEU2NEQxREVENThGMDcxOTZC NTg2MUIyODYwHhcNMjUwODA4MTQ0OTE4WhcNMjUwODE1MTQ0OTE4WjAYMRYwFAYD VQQDEw02ODk2MGU2Zi03MWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MXl7YmcR220Z0B8B07cQpvyzlqZA/ltbsME8DgvnTG/HGyO3YsysYxVvzOO o4N+E4eG38ZbTJitT3oMl9+NMVgm8nbbqsdoPo2TFFoTpcmqb6pHjx0uvdVBXdUS ijT7eZ9kYvsXsEHUpp8VyrzZljRRsnXdxwcecWK/g3y9nyX0SmQk5y3DGdUF6hp6 cIFG2quR6LfBoRQ9i/K9CHeutSDsBL831/+laBxcVYdsSAkkXQxGoxP12i7ZpnOm 3ygKMWH1tFyn9hQdKzs+qKba67MLrfQSUzodLKHdj9oxRO4LLVL741xJ3fXv4t93 k3hKv7MttaA3Nud1YD1AlJHmtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLt3C2va aOx3lWWNwtxjUWnriz9dMB8GA1UdIwQYMBaAFODIko+UUVIOZNHe1Y8HGWtYYbKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDRDNC80MzlDRjg3QzhE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi80TWlTajVSUlVnNWswZDdWandjWmExaGhz b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNaVNqNVJSVWc1azBkN1Zqd2NaYTFoaHNvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDRDNC80MzlDRjg3QzhEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi80TWlTajVSUlVn NWswZDdWandjWmExaGhzb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDT/L+dCWOmWdr3XQ3ZrKQzlZKFRwCEGQHpCQ9H5D5RdgbVh5tblVee emOdkUZDn+wg6TnVqrJrLl47n6/NWEnq/HQULYnMMH2Br/1mkK+pk9oj6b5FWdsA p/huEdOKOIr/IXxPo8yofDuqeE2FMmf/81UNf8AswKzKN82Yt+AoypE1YfMSGg2L MCxuORNm9lLtY54xHlAHAPRQ9fB3/t8cy+1G57+C5wO8Oq6RDbadZmQrCCVITpSL ueOOY8HH4DSnznW+DBEkRu6tphpKDjL2gLbO2q/9ZDFa8BJkaOaNY4dwKZHomLN5 IZEFpMZUrkbpfIQyBnWy9bkZs30OKFZY -----END CERTIFICATE-----Generated at Sat Aug 9 01:12:26 2025 by rpki-client