$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json) Hash identifier: iXdVOnUeW/N40rpXucrzjt8AGMvnIQjj6wkTvlVN4L8= Subject key identifier: F1:E0:97:34:81:41:F1:01:F0:FC:03:5D:4A:A0:7D:E6:2A:E9:A0:81 Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft Manifest number: 04A5 Signing time: Sat 09 Aug 2025 00:25:48 +0000 Manifest this update: Sat 09 Aug 2025 00:25:47 +0000 Manifest next update: Sat 16 Aug 2025 00:25:47 +0000 Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: X1G874zJLW0YwDHfytpn+tWbfCOQNMNiO9ohvkLUMnM=) 2: CF272560413111ECB71E086AC4F9AE02.roa (hash: DFm7D2HD21ulEvvyR2LKRVZi0MMQ+cGXUer0vQ5hcd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Validity Not Before: Aug 9 00:25:47 2025 GMT Not After : Aug 16 00:25:47 2025 GMT Subject: CN=6896958c-8356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a5:3e:7b:ca:26:61:90:0e:9c:59:86:60:aa: 5a:ae:63:12:1f:3c:41:31:81:2a:f6:b2:2b:6b:8f: f4:e4:69:d6:c2:2a:e0:88:5d:cd:6e:88:29:21:b5: 63:e7:14:23:70:07:a5:3d:9c:f5:d9:c6:f8:c2:11: a4:33:e9:64:a5:06:84:82:b4:86:06:b4:cc:54:e1: 13:b8:43:ab:1d:ee:05:23:95:d4:f3:8f:c2:2f:5a: 39:69:8a:aa:98:0c:eb:aa:e4:95:fd:f5:89:74:eb: 93:8b:40:1b:99:33:64:72:42:a4:16:d5:8b:3a:ce: 36:d2:4f:21:a8:a4:d3:c2:0d:91:37:9b:7e:d4:bc: 0b:d6:3b:fe:cb:ae:e4:8a:1a:0b:e1:ba:51:99:bd: 78:83:69:39:70:4c:cd:8b:e0:d8:0d:5d:35:31:5f: 53:49:b8:ea:a1:f8:1b:d0:d4:3b:43:ac:e0:b8:ee: d4:36:de:14:b4:4e:d0:b2:55:54:02:4a:a6:1a:98: 89:1b:d4:5b:76:e4:aa:02:53:ea:1a:e0:54:ad:48: 66:5a:a2:95:0e:b0:2c:26:f0:73:6a:4a:40:e0:8f: c7:b4:54:dc:68:e5:91:af:03:6b:8a:fa:12:54:21: a2:15:71:ab:cb:7b:e0:cf:d8:80:2a:20:61:16:3b: 70:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E0:97:34:81:41:F1:01:F0:FC:03:5D:4A:A0:7D:E6:2A:E9:A0:81 X509v3 Authority Key Identifier: keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fd:35:8e:44:31:45:4d:01:22:62:ac:74:fd:f5:c1:bf:ea: cf:f7:4e:cf:fa:49:b2:6e:a4:d1:17:6d:a7:0a:34:4e:e1:de: f0:ec:d9:86:b1:f4:f2:00:02:de:c3:af:b1:14:77:06:d1:e7: f6:47:24:2a:35:f3:4e:39:a2:87:38:14:04:99:a0:17:3e:30: 5f:68:e3:c1:75:68:dc:51:86:72:94:96:a9:a7:ef:a9:74:cf: d7:c7:38:18:58:08:20:ed:7e:03:71:57:26:54:29:4a:88:4f: 14:ac:e9:1c:31:83:82:8d:39:36:86:07:a0:4c:fa:2c:9f:8b: e6:59:5e:96:ba:8b:14:7e:da:cf:61:d7:a8:3f:7b:a3:0f:49: 36:43:c4:9d:f3:21:92:df:07:8e:55:cc:bd:61:6f:db:60:cb: 32:4f:2c:a3:37:6e:9d:ff:2e:55:da:6a:86:77:22:4f:b2:e4: de:45:9f:bc:92:d0:8b:cb:d0:9c:55:56:9f:67:52:61:ad:33: 01:53:e5:39:7b:62:7f:bf:b4:17:85:da:70:ae:d9:ed:3a:5b: fa:31:a0:1d:4b:0d:9b:7b:8d:b3:9b:9b:f8:00:a1:d5:7d:b0: 5b:8c:80:7e:bb:5d:76:95:93:60:ea:5e:51:e1:bc:07:bf:2e: 23:f2:28:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMjQxMTAvBgNVBAUTKDMxRjM3ODNDN0ExRUQ3ODNGQzFGREE3NDFGNkE3NTI5 RDVBNUU2QTAwHhcNMjUwODA5MDAyNTQ3WhcNMjUwODE2MDAyNTQ3WjAYMRYwFAYD VQQDEw02ODk2OTU4Yy04MzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6U+e8omYZAOnFmGYKparmMSHzxBMYEq9rIra4/05GnWwirgiF3NbogpIbVj 5xQjcAelPZz12cb4whGkM+lkpQaEgrSGBrTMVOETuEOrHe4FI5XU84/CL1o5aYqq mAzrquSV/fWJdOuTi0AbmTNkckKkFtWLOs420k8hqKTTwg2RN5t+1LwL1jv+y67k ihoL4bpRmb14g2k5cEzNi+DYDV01MV9TSbjqofgb0NQ7Q6zguO7UNt4UtE7QslVU AkqmGpiJG9RbduSqAlPqGuBUrUhmWqKVDrAsJvBzakpA4I/HtFTcaOWRrwNrivoS VCGiFXGry3vgz9iAKiBhFjtwuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHglzSB QfEB8PwDXUqgfeYq6aCBMB8GA1UdIwQYMBaAFDHzeDx6HteD/B/adB9qdSnVpeag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIyNC81RkZDOUVGNjQx MjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0UDhIOXAwSDJwMUtkV2w1 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mTjRQSG9lMTRQOEg5cDBIMnAxS2RXbDVxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIyNC81RkZDOUVGNjQxMjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0 UDhIOXAwSDJwMUtkV2w1cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL/TWORDFFTQEiYqx0/fXBv+rP907P+kmybqTRF22nCjRO4d7w7NmG sfTyAALew6+xFHcG0ef2RyQqNfNOOaKHOBQEmaAXPjBfaOPBdWjcUYZylJapp++p dM/XxzgYWAgg7X4DcVcmVClKiE8UrOkcMYOCjTk2hgegTPosn4vmWV6WuosUftrP YdeoP3ujD0k2Q8Sd8yGS3weOVcy9YW/bYMsyTyyjN26d/y5V2mqGdyJPsuTeRZ+8 ktCLy9CcVVafZ1JhrTMBU+U5e2J/v7QXhdpwrtntOlv6MaAdSw2be42zm5v4AKHV fbBbjIB+u112lZNg6l5R4bwHvy4j8ihZ -----END CERTIFICATE-----Generated at Sat Aug 9 14:21:33 2025 by rpki-client