$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft File: 5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json) Hash identifier: NussrKi51orJv/zZNZwJKKNgmfl5NjJjC2zXgQq9ZFg= Subject key identifier: 4B:CC:0C:52:51:E7:E3:B8:14:3D:64:2C:D1:67:E1:EF:DE:3D:A3:61 Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 Certificate issuer: /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft Manifest number: 0218 Signing time: Thu 03 Jul 2025 02:22:39 +0000 Manifest this update: Thu 03 Jul 2025 02:22:38 +0000 Manifest next update: Thu 10 Jul 2025 02:22:38 +0000 Files and hashes: 1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: lqBsIXd/yX2lWF4KWZzRhHSWlfkGWKqEionT9Y8r7Q8=) 2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: rXyXJ/J6rVFIkAmCNmdDPvJdD/VKGdNuveHL3e4vBN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B44, serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Validity Not Before: Jul 3 02:22:38 2025 GMT Not After : Jul 10 02:22:38 2025 GMT Subject: CN=6865e96e-7499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:fd:9c:db:17:82:3a:0e:82:e0:95:25:d4:13: 04:0a:88:dc:b6:63:73:1b:d8:69:18:c4:8d:22:c4: ee:0b:95:dd:af:b7:3f:75:68:91:6c:ba:01:62:c1: 40:3c:e4:85:3c:dc:98:a3:38:c4:01:b9:b3:dd:5f: ed:9e:e5:6f:71:a5:ae:8b:c5:36:17:04:be:9b:ec: dc:d1:5d:0e:cb:0f:f7:fe:73:31:d2:32:9f:9b:74: 7d:34:86:8c:f4:97:ee:79:0d:e8:6f:58:8c:ab:45: e6:26:7a:8f:87:9a:67:9f:b8:ce:d5:e7:2d:2e:f5: 3d:ac:42:92:1f:e3:9f:02:ec:fa:aa:42:da:d3:49: cc:ec:ea:65:df:2e:03:ca:64:6e:54:a3:29:e3:5c: 72:a3:f0:43:eb:a0:f6:7b:10:34:18:fc:26:6f:5e: ac:79:68:69:dc:4d:91:d4:1b:7a:38:5c:ab:2e:d3: 3d:6e:c8:0f:0c:1f:3d:3a:aa:de:d7:09:5a:e6:a3: f4:0c:7e:dd:08:87:eb:d6:27:66:c6:8c:49:47:0a: dd:52:e3:c6:45:41:ae:6c:fe:93:7d:00:39:e3:98: df:5d:05:cc:0d:bb:25:a9:8a:c6:ff:65:d8:61:cb: 6b:52:f1:1d:f0:d8:d8:8a:f2:f6:f1:ad:e3:86:67: db:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CC:0C:52:51:E7:E3:B8:14:3D:64:2C:D1:67:E1:EF:DE:3D:A3:61 X509v3 Authority Key Identifier: keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:3b:b8:3e:7a:69:89:2d:f3:c3:1a:6a:3f:d7:35:52:d2:60: b8:97:22:b2:85:aa:eb:b2:65:c8:23:aa:f0:77:ff:c9:9b:49: aa:df:6f:99:e6:0a:64:08:5d:ef:24:10:28:83:b6:8f:e7:99: 4e:0c:b4:61:e3:a5:19:1b:20:d0:d2:d3:6b:81:fe:32:28:b3: d9:60:60:0b:b3:fa:1c:ad:bf:4e:28:44:94:24:14:71:95:7d: 08:cf:92:53:1b:b5:d1:02:42:7d:b7:53:91:53:8f:fe:73:7d: 84:ce:9f:6c:a7:29:12:fc:1d:06:31:1a:3f:e1:67:b8:e6:c4: 49:2e:3d:66:75:38:30:6f:59:a0:29:a9:4e:05:10:b7:e5:5f: 40:22:3c:4b:fa:74:04:70:aa:cb:e9:cc:d3:e1:79:0c:f5:9c: 3c:e3:2b:ae:6a:9e:16:e0:4f:2c:b0:4f:13:e1:b7:e9:ed:1d: 53:f9:3f:81:f9:45:5a:70:15:aa:57:9f:41:89:8c:eb:eb:35: f9:02:1d:db:e9:63:2d:cd:8d:11:df:5e:c7:98:88:c9:9d:b6: f2:c1:46:19:ac:a3:94:00:34:10:a0:03:88:b4:cc:37:af:4b: 61:c9:a0:7f:0e:da:a5:d4:4f:56:eb:07:2f:d9:e6:ff:7b:23: 40:92:d7:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDQxMTAvBgNVBAUTKEU0NkUxODlEQzhFOTEwQTFBQkJFMkUzNjRERDA4MTc3 NUNFNDg0NjAwHhcNMjUwNzAzMDIyMjM4WhcNMjUwNzEwMDIyMjM4WjAYMRYwFAYD VQQDEw02ODY1ZTk2ZS03NDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9v2c2xeCOg6C4JUl1BMECojctmNzG9hpGMSNIsTuC5Xdr7c/dWiRbLoBYsFA POSFPNyYozjEAbmz3V/tnuVvcaWui8U2FwS+m+zc0V0Oyw/3/nMx0jKfm3R9NIaM 9JfueQ3ob1iMq0XmJnqPh5pnn7jO1ectLvU9rEKSH+OfAuz6qkLa00nM7Opl3y4D ymRuVKMp41xyo/BD66D2exA0GPwmb16seWhp3E2R1Bt6OFyrLtM9bsgPDB89Oqre 1wla5qP0DH7dCIfr1idmxoxJRwrdUuPGRUGubP6TfQA545jfXQXMDbslqYrG/2XY YctrUvEd8NjYivL28a3jhmfbnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvMDFJR 5+O4FD1kLNFn4e/ePaNhMB8GA1UdIwQYMBaAFORuGJ3I6RChq74uNk3QgXdc5IRg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0NC9BRDBENjFGODNB NkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVLR3J2aTQyVGRDQmQxemto R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNFluY2pwRUtHcnZpNDJUZENCZDF6a2hHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0NC9BRDBENjFGODNBNkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVL R3J2aTQyVGRDQmQxemtoR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjO7g+emmJLfPDGmo/1zVS0mC4lyKyharrsmXII6rwd//Jm0mq32+Z 5gpkCF3vJBAog7aP55lODLRh46UZGyDQ0tNrgf4yKLPZYGALs/ocrb9OKESUJBRx lX0Iz5JTG7XRAkJ9t1ORU4/+c32Ezp9spykS/B0GMRo/4We45sRJLj1mdTgwb1mg KalOBRC35V9AIjxL+nQEcKrL6czT4XkM9Zw84yuuap4W4E8ssE8T4bfp7R1T+T+B +UVacBWqV59BiYzr6zX5Ah3b6WMtzY0R317HmIjJnbbywUYZrKOUADQQoAOItMw3 r0thyaB/Dtql1E9W6wcv2eb/eyNAkteb -----END CERTIFICATE-----Generated at Thu Jul 3 10:47:46 2025 by rpki-client