$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft File: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json) Hash identifier: Bs33/oFj54OxUCiYjpRsgtMRoKkVd+N7X4MoJzfKuSs= Subject key identifier: 3A:BB:8B:17:8C:75:B4:56:D9:19:4A:57:CA:17:72:95:5D:E6:5F:90 Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 Certificate issuer: /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Certificate serial: 0762 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft Manifest number: 0759 Signing time: Wed 02 Jul 2025 21:53:42 +0000 Manifest this update: Wed 02 Jul 2025 21:53:42 +0000 Manifest next update: Wed 09 Jul 2025 21:53:42 +0000 Files and hashes: 1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: oE9WWGhNj1PqMvQCgIXG5QbQmFNSJXWrtcPEz4iih3Q=) 2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: By6Dq5HHVlEkvf0nTtSM0kJMMOYfz+8LI2/AK8Ixb68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1890 (0x762) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Validity Not Before: Jul 2 21:53:42 2025 GMT Not After : Jul 9 21:53:42 2025 GMT Subject: CN=6865aa66-312e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8c:cc:45:51:81:01:0d:1b:82:fa:a1:1c:c9: 4d:7a:47:55:83:69:7e:e4:34:2a:15:ae:cd:6d:ac: 41:55:63:ca:f7:87:83:7e:33:5e:21:01:16:12:25: fe:06:99:5b:09:16:ac:1f:84:ee:c2:5f:08:4d:a0: 28:4d:70:fc:a5:26:17:29:dc:a2:64:50:3e:91:cc: b9:a4:f2:58:9e:f1:86:15:6e:d5:a7:a3:b3:ae:4b: 99:eb:5d:4b:d3:ef:4d:0d:f8:be:6d:55:87:0a:93: 2d:2f:cf:55:59:09:36:14:f7:ac:30:95:77:d8:bf: 56:6c:94:0b:cb:ac:83:9b:52:d8:65:d5:6e:c0:b3: 16:b0:6d:ca:23:83:9c:38:e8:94:b6:a5:49:db:1d: 2f:82:70:f8:e1:18:12:db:6b:e0:6c:ac:a2:62:ae: bb:34:0b:73:97:57:b7:46:43:d9:6b:dc:53:d7:3c: be:37:bb:2f:f6:08:fe:6b:8b:fd:b1:75:d9:03:19: f9:ae:86:e7:a8:26:e5:f9:8a:e6:61:c3:10:cf:2a: dc:76:6d:27:18:6d:57:24:f6:fe:8b:b2:ef:5c:af: f1:30:c5:4a:b0:9e:03:dd:d5:8b:ad:8c:b3:de:eb: cb:22:6c:a4:a2:ae:e5:66:5d:fe:76:6c:8d:75:9f: 98:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BB:8B:17:8C:75:B4:56:D9:19:4A:57:CA:17:72:95:5D:E6:5F:90 X509v3 Authority Key Identifier: keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d3:f5:f5:c9:d6:61:85:20:01:d6:11:21:63:5a:e0:95:68: 95:c8:f4:ed:b1:78:ec:38:9d:b0:28:96:ae:8a:e0:60:7f:22: 04:f7:cb:ad:39:15:cf:ba:53:00:0c:76:c1:99:d7:d6:a9:ff: 2a:e7:c3:ef:fd:fa:68:61:03:5e:bb:b8:3e:84:9b:07:62:27: a1:d6:66:42:39:46:a7:27:64:74:14:05:28:09:18:7a:24:25: 9e:15:87:34:13:03:33:53:74:00:34:4c:db:d0:29:1f:6b:7c: 57:d7:04:9f:56:d1:65:23:75:a4:8f:3f:f3:96:8f:c8:ac:4f: bc:f2:e3:fb:50:ab:f8:bb:18:27:f1:31:11:0e:a5:43:bc:a5: aa:90:2e:22:30:25:05:fb:2d:ce:b1:ce:26:ac:e2:62:bd:4d: 98:7b:28:17:4c:ea:b8:a3:e2:d1:4e:74:83:c3:ad:3a:2f:eb: 56:95:06:5f:ea:6c:70:2c:1a:e4:d6:51:32:3b:65:b1:73:92: 28:70:a1:5f:d9:22:19:a5:c8:1c:8e:95:e8:9d:69:c2:23:b4: e3:2f:88:8f:2a:95:d9:ce:70:ea:49:83:92:34:5b:e9:31:72: 76:a1:81:b5:19:97:cd:79:93:14:02:b3:cd:21:83:2b:99:ff: b1:c8:78:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkyMjAxMTAvBgNVBAUTKEUyQ0ZDNDJCNkEwODE1MEFFRkVGRTcxODlCRTVBRjJC RTU2OEY4QzEwHhcNMjUwNzAyMjE1MzQyWhcNMjUwNzA5MjE1MzQyWjAYMRYwFAYD VQQDEw02ODY1YWE2Ni0zMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIzMRVGBAQ0bgvqhHMlNekdVg2l+5DQqFa7NbaxBVWPK94eDfjNeIQEWEiX+ BplbCRasH4Tuwl8ITaAoTXD8pSYXKdyiZFA+kcy5pPJYnvGGFW7Vp6OzrkuZ611L 0+9NDfi+bVWHCpMtL89VWQk2FPesMJV32L9WbJQLy6yDm1LYZdVuwLMWsG3KI4Oc OOiUtqVJ2x0vgnD44RgS22vgbKyiYq67NAtzl1e3RkPZa9xT1zy+N7sv9gj+a4v9 sXXZAxn5robnqCbl+YrmYcMQzyrcdm0nGG1XJPb+i7LvXK/xMMVKsJ4D3dWLrYyz 3uvLImykoq7lZl3+dmyNdZ+YPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDq7ixeM dbRW2RlKV8oXcpVd5l+QMB8GA1UdIwQYMBaAFOLPxCtqCBUK7+/nGJvlryvlaPjB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTIyMC8xNUNEMUMyMjI4 QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZRcnY3LWNZbS1XdkstVm8t TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRzX0VLMm9JRlFydjctY1ltLVd2Sy1Wby1NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTIyMC8xNUNEMUMyMjI4QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZR cnY3LWNZbS1XdkstVm8tTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg0/X1ydZhhSAB1hEhY1rglWiVyPTtsXjsOJ2wKJauiuBgfyIE98ut ORXPulMADHbBmdfWqf8q58Pv/fpoYQNeu7g+hJsHYieh1mZCOUanJ2R0FAUoCRh6 JCWeFYc0EwMzU3QANEzb0Ckfa3xX1wSfVtFlI3Wkjz/zlo/IrE+88uP7UKv4uxgn 8TERDqVDvKWqkC4iMCUF+y3Osc4mrOJivU2YeygXTOq4o+LRTnSDw606L+tWlQZf 6mxwLBrk1lEyO2Wxc5IocKFf2SIZpcgcjpXonWnCI7TjL4iPKpXZznDqSYOSNFvp MXJ2oYG1GZfNeZMUArPNIYMrmf+xyHgV -----END CERTIFICATE-----Generated at Fri Jul 4 06:51:50 2025 by rpki-client