$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft File: 4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json) Hash identifier: GcSPj2Qy0PuXXJFlXddJyJ65TzQmeb5zIahaXctR+fM= Subject key identifier: C6:29:0E:0A:56:3C:53:3C:40:09:E2:98:B7:F0:55:C4:5F:09:51:62 Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft Manifest number: 01D5 Signing time: Mon 11 Aug 2025 02:51:38 +0000 Manifest this update: Mon 11 Aug 2025 02:51:38 +0000 Manifest next update: Mon 18 Aug 2025 02:51:38 +0000 Files and hashes: 1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: 0PMQie/bc9KulXJz2Eoh+H0m2CPkO3aiqF+jKYV3O7s=) 2: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: V89TVKMG86FWKeqAC80eNKWm9QeM+Xm489cfb+DFW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 02:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Validity Not Before: Aug 11 02:51:38 2025 GMT Not After : Aug 18 02:51:38 2025 GMT Subject: CN=68995aba-9f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:90:72:51:fe:78:9c:14:c7:42:08:1b:43:d6: 78:83:bf:4a:01:10:6e:00:43:e3:6f:40:e8:e1:b7: b9:e1:25:f6:61:dc:57:86:f4:f0:8d:4d:5f:8f:c7: 86:7f:21:80:3c:eb:2e:49:08:d9:38:d3:94:35:93: ba:e9:fd:7a:48:f1:7e:79:e9:fa:e5:1a:e6:ac:c1: dd:2d:cc:54:e4:68:54:c5:2e:4c:8c:75:91:71:4e: 60:0b:42:c7:74:06:03:a9:bd:0c:d1:8f:d1:3f:d0: d0:ca:af:05:d0:8a:59:da:01:5c:63:01:e9:2b:d5: 8e:d8:31:65:bf:13:07:79:a9:d1:3f:10:ba:7e:ca: c8:81:ef:da:1c:34:e5:0a:b3:12:27:2c:83:e1:96: 5f:1f:d8:32:e5:fe:da:d0:1f:f2:67:ad:30:0a:03: 1c:99:9a:40:ff:5b:6e:fa:68:5c:ce:11:18:31:84: 9c:fa:74:26:c3:bd:65:ce:9a:29:22:11:1f:f7:a1: 86:95:3a:96:bf:81:ae:73:d4:22:d3:5a:01:6b:e7: b8:05:66:ce:15:3d:40:e0:5a:c3:b1:f3:04:2f:67: b7:b4:69:c5:c0:2b:ca:02:47:54:95:3f:47:e0:b1: 6c:b7:b0:f4:c0:2d:d8:83:1b:eb:05:24:da:aa:b8: 1a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:29:0E:0A:56:3C:53:3C:40:09:E2:98:B7:F0:55:C4:5F:09:51:62 X509v3 Authority Key Identifier: keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:97:20:52:53:52:f4:2d:d2:c4:3e:f2:50:af:e9:cc:05:eb: e3:45:f4:72:3e:c7:98:11:f0:31:04:22:1e:59:a8:fc:b6:81: 31:53:b7:fa:d3:a9:d8:e8:ca:28:97:ef:f9:70:b1:ae:88:15: 6f:20:89:a0:ff:65:a9:8f:4f:1f:75:3c:e4:60:c9:02:5d:a5: 9b:e2:35:ac:c3:db:fe:c6:b9:2a:32:75:7f:2f:03:b1:87:39: 8e:af:42:d2:37:ef:84:68:76:53:44:8b:75:f8:aa:4c:ce:50: 73:de:3d:0c:f5:dc:b3:03:fd:a1:b6:3d:6b:87:aa:77:6f:4b: 90:c6:99:68:fd:41:f6:33:7f:0a:e1:0b:64:9b:7b:71:f9:aa: 53:4f:6c:96:df:46:17:14:95:e9:77:4a:6f:99:f6:8e:fb:64: d4:e0:90:e7:79:33:e4:c2:7a:c8:2b:45:4a:66:e4:60:7e:96: 5e:26:a4:8b:25:92:95:90:d0:66:8a:06:b4:d0:8a:63:59:6b: ab:2e:6a:8d:d6:57:24:48:fe:ec:22:99:a7:4b:c8:98:82:1f: be:38:22:27:82:92:34:e1:95:0d:84:2e:20:1a:81:bf:d1:c5: f3:e3:cd:4b:91:98:c2:f2:63:d9:c3:05:db:2b:a9:7c:3d:8d: 4a:ce:c4:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0NjkxMTAvBgNVBAUTKEUwRDU0NDVCODBCMTgxN0Y2MkYzQzY0QUE4QzhGNkQ3 RTEzQUUxMDMwHhcNMjUwODExMDI1MTM4WhcNMjUwODE4MDI1MTM4WjAYMRYwFAYD VQQDEw02ODk5NWFiYS05ZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpByUf54nBTHQggbQ9Z4g79KARBuAEPjb0Do4be54SX2YdxXhvTwjU1fj8eG fyGAPOsuSQjZONOUNZO66f16SPF+een65RrmrMHdLcxU5GhUxS5MjHWRcU5gC0LH dAYDqb0M0Y/RP9DQyq8F0IpZ2gFcYwHpK9WO2DFlvxMHeanRPxC6fsrIge/aHDTl CrMSJyyD4ZZfH9gy5f7a0B/yZ60wCgMcmZpA/1tu+mhczhEYMYSc+nQmw71lzpop IhEf96GGlTqWv4Guc9Qi01oBa+e4BWbOFT1A4FrDsfMEL2e3tGnFwCvKAkdUlT9H 4LFst7D0wC3YgxvrBSTaqrgaaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYpDgpW PFM8QAnimLfwVcRfCVFiMB8GA1UdIwQYMBaAFODVRFuAsYF/YvPGSqjI9tfhOuED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTQ2OS9FRkE1NjNDOEE1 QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdYOWk4OFpLcU1qMjEtRTY0 UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROVkVXNEN4Z1g5aTg4WktxTWoyMS1FNjRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTQ2OS9FRkE1NjNDOEE1QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdY OWk4OFpLcU1qMjEtRTY0UU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8lyBSU1L0LdLEPvJQr+nMBevjRfRyPseYEfAxBCIeWaj8toExU7f6 06nY6Mool+/5cLGuiBVvIImg/2Wpj08fdTzkYMkCXaWb4jWsw9v+xrkqMnV/LwOx hzmOr0LSN++EaHZTRIt1+KpMzlBz3j0M9dyzA/2htj1rh6p3b0uQxplo/UH2M38K 4Qtkm3tx+apTT2yW30YXFJXpd0pvmfaO+2TU4JDneTPkwnrIK0VKZuRgfpZeJqSL JZKVkNBmiga00IpjWWurLmqN1lckSP7sIpmnS8iYgh++OCIngpI04ZUNhC4gGoG/ 0cXz481LkZjC8mPZwwXbK6l8PY1KzsR+ -----END CERTIFICATE-----Generated at Wed Aug 13 00:33:19 2025 by rpki-client