$ rpki-client -vvf rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft File: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft (raw, json) Hash identifier: 1OfEU3J9bOVjJE5T1jgx5OM7oyxwZfSI7KHrqaJdR/E= Subject key identifier: 83:87:DE:81:C6:75:CF:FC:E3:68:56:64:49:F6:97:F4:AB:4E:BA:57 Authority key identifier: E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E Certificate issuer: /CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Certificate serial: 1945 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft Manifest number: 1936 Signing time: Wed 02 Jul 2025 16:32:54 +0000 Manifest this update: Wed 02 Jul 2025 16:32:54 +0000 Manifest next update: Wed 09 Jul 2025 16:32:54 +0000 Files and hashes: 1: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl (hash: x7aLlBAbfherpaMiPgGsP3ENa45MYkAmaMYNildz7ik=) 2: 99AB821E859C11E7A1FEC80AC4F9AE02.roa (hash: P4Ek16t0ZEw/MnJDtAJSlLMC0jHATAWAbBg4OWQTq78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6469 (0x1945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118799, serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Validity Not Before: Jul 2 16:32:54 2025 GMT Not After : Jul 9 16:32:54 2025 GMT Subject: CN=68655f36-df3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ba:1a:1e:ab:22:ab:9a:6b:ad:5b:1f:ee:15: 3f:ec:e4:45:1a:50:66:cd:42:9e:53:aa:21:75:c7: 2f:7f:e3:eb:28:3e:5b:0a:60:a7:85:af:6b:27:18: cc:b9:a8:8d:1d:42:6f:88:67:16:19:59:3e:3a:51: 5d:c6:1f:95:24:79:a0:85:76:b9:c9:0e:d9:72:2c: be:80:67:3f:95:84:2e:56:fe:c4:b4:93:e3:8f:fa: 5e:02:60:ed:36:6d:6b:4f:bf:85:f6:01:c8:09:f0: 21:28:35:37:c6:7c:a0:d3:1f:c9:b7:24:25:7f:10: 5c:85:9a:bd:5d:af:ca:c3:42:83:89:e3:70:b9:82: 24:5d:04:90:e0:bd:41:33:b9:05:9a:be:41:b4:ce: e9:b6:f5:5d:c3:38:28:2a:7f:fb:2e:22:bd:d7:3d: 17:99:0f:ab:43:f7:4d:1d:f7:7e:e6:63:fa:ee:57: 3e:11:74:bb:c1:77:6a:57:60:36:48:71:30:60:c7: 0f:e3:36:e6:3c:1a:d2:05:17:e6:be:de:82:e8:cf: 98:f1:09:3a:49:69:8e:75:84:70:c8:85:a3:6e:92: 82:5b:27:cf:1f:f4:52:f7:0e:e4:6f:dc:13:00:81: e8:ac:d0:20:17:6e:5d:1b:06:c2:5c:14:1a:d6:95: d0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:87:DE:81:C6:75:CF:FC:E3:68:56:64:49:F6:97:F4:AB:4E:BA:57 X509v3 Authority Key Identifier: keyid:E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:0a:b8:2b:b6:81:27:b2:46:22:c3:eb:58:d5:9a:fe:05:bb: 8b:35:d9:75:ac:11:53:fd:74:48:c1:f0:47:48:ee:13:5b:ce: 9e:6c:45:4b:8a:72:60:a2:19:5c:d2:56:a4:0b:c7:a1:6a:82: c6:97:f2:ea:87:a9:7d:42:0c:e7:b8:29:24:dd:fa:fa:c4:cc: 2e:cc:3f:33:06:10:ed:ba:5d:83:f4:e3:fd:f4:12:ca:b7:ca: cc:e4:be:1f:9d:0b:62:85:76:ca:57:c1:db:de:eb:8b:59:82: e8:7c:cc:51:c4:11:07:32:cf:55:c1:1c:cc:09:9e:e7:df:50: ae:52:6f:ec:0a:7e:c3:14:1d:84:72:ef:3f:6d:c2:77:79:7b: 71:22:39:ee:2e:fc:d1:40:88:61:84:53:02:94:ce:60:f1:ed: c3:ce:37:ec:bf:1f:54:24:3b:25:cd:86:e6:87:f9:a7:40:c7: 18:fc:c1:f3:9f:d3:bd:4b:c3:c0:af:13:8a:8c:27:9f:bd:d4: 92:e7:d2:5d:03:5d:08:76:aa:c0:ce:89:8d:d9:67:6e:e7:f8: 43:24:16:27:8e:7b:8a:d9:1e:8e:db:3c:b8:9b:fa:2f:1f:f7: 3e:4d:08:93:ab:e5:51:01:18:9b:75:b4:0a:b1:ad:dd:3c:95: 3b:02:ef:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3OTkxMTAvBgNVBAUTKEUwQ0FBRDE3QzA2OEQ4NjAyQkNDRUI0NjdCNDU1NTEw QkM1MjM5MEUwHhcNMjUwNzAyMTYzMjU0WhcNMjUwNzA5MTYzMjU0WjAYMRYwFAYD VQQDEw02ODY1NWYzNi1kZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07oaHqsiq5prrVsf7hU/7ORFGlBmzUKeU6ohdccvf+PrKD5bCmCnha9rJxjM uaiNHUJviGcWGVk+OlFdxh+VJHmghXa5yQ7Zciy+gGc/lYQuVv7EtJPjj/peAmDt Nm1rT7+F9gHICfAhKDU3xnyg0x/JtyQlfxBchZq9Xa/Kw0KDieNwuYIkXQSQ4L1B M7kFmr5BtM7ptvVdwzgoKn/7LiK91z0XmQ+rQ/dNHfd+5mP67lc+EXS7wXdqV2A2 SHEwYMcP4zbmPBrSBRfmvt6C6M+Y8Qk6SWmOdYRwyIWjbpKCWyfPH/RS9w7kb9wT AIHorNAgF25dGwbCXBQa1pXQnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOH3oHG dc/842hWZEn2l/SrTrpXMB8GA1UdIwQYMBaAFODKrRfAaNhgK8zrRntFVRC8UjkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODc5OS8zMjg3QkZBMjdF QzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJHQXJ6T3RHZTBWVkVMeFNP UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNcXRGOEJvMkdBcnpPdEdlMFZWRUx4U09RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODc5OS8zMjg3QkZBMjdFQzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJH QXJ6T3RHZTBWVkVMeFNPUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxCrgrtoEnskYiw+tY1Zr+BbuLNdl1rBFT/XRIwfBHSO4TW86ebEVL inJgohlc0lakC8ehaoLGl/Lqh6l9QgznuCkk3fr6xMwuzD8zBhDtul2D9OP99BLK t8rM5L4fnQtihXbKV8Hb3uuLWYLofMxRxBEHMs9VwRzMCZ7n31CuUm/sCn7DFB2E cu8/bcJ3eXtxIjnuLvzRQIhhhFMClM5g8e3Dzjfsvx9UJDslzYbmh/mnQMcY/MHz n9O9S8PArxOKjCefvdSS59JdA10IdqrAzomN2Wdu5/hDJBYnjnuK2R6O2zy4m/ov H/c+TQiTq+VRARibdbQKsa3dPJU7Au/1 -----END CERTIFICATE-----Generated at Fri Jul 4 03:03:19 2025 by rpki-client