$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft File: 4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json) Hash identifier: Mi9MXPkPk1liGXqEzTgyMiS5WGbdO82FJ9RbTQKtlv0= Subject key identifier: CD:AF:B6:84:DE:F7:E6:FE:80:7C:53:70:20:69:0A:37:A5:13:C4:21 Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft Manifest number: 01E2 Signing time: Sat 05 Jul 2025 02:58:41 +0000 Manifest this update: Sat 05 Jul 2025 02:58:40 +0000 Manifest next update: Sat 12 Jul 2025 02:58:40 +0000 Files and hashes: 1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: R67VOEFhelUiJHIo0KJ/aSLLjcsqw/WKHe2YD8Z7yH0=) 2: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: fdlRqtNSwYBeTIqhoeb8XWzhK9Fv7Fkpx1Jd+sxZc0I=) 3: 562B3D3E7A9411ED91BE2586C4F9AE02.roa (hash: 7UjEjVVCyN4uGyX9bNWcmVqFnHgs+rp9yqIxKOI8E30=) 4: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: rV9ie1oJtm2rSFQCCjvltoUnDjD6SpJTDB+pUT5QuIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA Validity Not Before: Jul 5 02:58:40 2025 GMT Not After : Jul 12 02:58:40 2025 GMT Subject: CN=686894e1-5dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:4a:ad:92:0b:f9:cb:41:75:f7:77:2a:85: 31:06:71:b0:ad:a8:2b:12:ff:39:9d:92:7c:45:73: 25:a1:6e:28:36:6b:0e:20:af:b6:ad:da:a5:a4:ca: c1:24:03:24:48:9f:e0:c1:e6:20:17:7e:bd:5a:b2: 4a:fe:4c:bd:cd:80:9d:81:05:f1:26:cc:17:25:a1: 86:72:91:78:7a:08:fc:d1:b9:cf:0f:a0:96:e8:db: 7e:84:ef:9a:8b:44:a7:cd:dd:80:09:c2:27:c7:1b: fc:76:c0:59:0c:43:c8:72:f5:d0:d8:fa:f7:37:24: 37:d9:1c:a7:d9:d7:2f:d3:79:ec:0f:95:52:c1:77: 4d:6e:56:0c:a9:b5:eb:aa:e4:32:af:03:5a:c2:ab: 01:e9:c6:cc:e6:c7:7f:fe:7b:68:f0:18:a7:64:f7: 91:ed:34:cc:17:f0:90:30:0c:13:3a:43:72:70:fb: 9f:f6:b2:62:f5:cf:70:87:40:88:c7:a3:f9:01:8d: db:9a:7f:f6:b6:0f:50:48:be:3f:87:dc:cf:26:a6: 73:37:5e:eb:c9:53:0a:f5:49:d9:f3:b8:96:29:6d: dc:6c:14:e0:36:22:b9:c6:8b:34:04:9c:52:81:51: 62:cc:73:f8:44:4c:a9:90:86:6a:74:bd:85:d5:ab: 8c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AF:B6:84:DE:F7:E6:FE:80:7C:53:70:20:69:0A:37:A5:13:C4:21 X509v3 Authority Key Identifier: keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:29:fa:64:f5:51:18:cd:51:bf:e9:1b:4c:4e:d0:43:ba:22: be:74:55:d9:c0:ae:d3:05:54:09:7e:af:bc:31:3d:49:6c:49: f5:c9:23:4c:de:17:7f:df:5e:45:d3:6c:02:b4:92:a0:f1:13: b7:d5:91:ed:10:31:ae:21:ec:66:11:b8:83:f5:29:8a:c1:04: ca:4c:5f:ca:33:45:f2:dc:99:de:fd:90:ea:2d:a5:ab:62:7a: c1:c5:99:a6:bb:6b:35:4a:c7:40:7a:d2:8f:9f:53:e6:00:a7: 9b:33:b0:61:e1:f8:98:a9:63:12:57:b5:9e:da:d1:ba:26:65: 6f:55:22:4a:f7:3b:0f:28:25:91:10:ce:2f:1b:15:55:29:16: 4f:d2:93:3a:2d:33:a1:10:1b:26:d5:9f:b5:cb:c7:65:5a:67: 35:6f:85:b7:7a:85:e0:b1:c7:81:5d:84:fa:60:1e:76:19:f9: 7e:43:5e:27:38:53:23:45:ee:5e:ea:4b:f0:06:8b:7c:b7:ab: 7b:58:eb:a8:e0:69:40:de:83:7a:52:fc:b6:af:56:07:23:16: 00:6f:b2:c5:d8:12:25:c4:29:ff:05:4c:c9:22:3f:19:ff:ba: 96:e2:40:70:98:b1:12:a5:49:ab:c1:51:38:88:4f:16:18:75: 3f:b6:72:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFOTkxMTAvBgNVBAUTKEUyNTM0RDI2Qzc4Qzk3MDE3OTA5OTY0MzhDMTE0MTA4 MjU0Nzc2QUEwHhcNMjUwNzA1MDI1ODQwWhcNMjUwNzEyMDI1ODQwWjAYMRYwFAYD VQQDEw02ODY4OTRlMS01ZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiNKrZIL+ctBdfd3KoUxBnGwragrEv85nZJ8RXMloW4oNmsOIK+2rdqlpMrB JAMkSJ/gweYgF369WrJK/ky9zYCdgQXxJswXJaGGcpF4egj80bnPD6CW6Nt+hO+a i0Snzd2ACcInxxv8dsBZDEPIcvXQ2Pr3NyQ32Ryn2dcv03nsD5VSwXdNblYMqbXr quQyrwNawqsB6cbM5sd//nto8BinZPeR7TTMF/CQMAwTOkNycPuf9rJi9c9wh0CI x6P5AY3bmn/2tg9QSL4/h9zPJqZzN17ryVMK9UnZ87iWKW3cbBTgNiK5xos0BJxS gVFizHP4REypkIZqdL2F1auMWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2vtoTe 9+b+gHxTcCBpCjelE8QhMB8GA1UdIwQYMBaAFOJTTSbHjJcBeQmWQ4wRQQglR3aq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U5OS8wQUNFMTlCMDdB ODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3RjVDWlpEakJGQkNDVkhk cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRsTk5Kc2VNbHdGNUNaWkRqQkZCQ0NWSGRxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0U5OS8wQUNFMTlCMDdBODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3 RjVDWlpEakJGQkNDVkhkcW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWKfpk9VEYzVG/6RtMTtBDuiK+dFXZwK7TBVQJfq+8MT1JbEn1ySNM 3hd/315F02wCtJKg8RO31ZHtEDGuIexmEbiD9SmKwQTKTF/KM0Xy3Jne/ZDqLaWr YnrBxZmmu2s1SsdAetKPn1PmAKebM7Bh4fiYqWMSV7We2tG6JmVvVSJK9zsPKCWR EM4vGxVVKRZP0pM6LTOhEBsm1Z+1y8dlWmc1b4W3eoXgsceBXYT6YB52Gfl+Q14n OFMjRe5e6kvwBot8t6t7WOuo4GlA3oN6Uvy2r1YHIxYAb7LF2BIlxCn/BUzJIj8Z /7qW4kBwmLESpUmrwVE4iE8WGHU/tnIp -----END CERTIFICATE-----Generated at Sun Jul 6 01:01:21 2025 by rpki-client