$ rpki-client -vvf rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft File: a4h-elixD-3igEteKeziwpnCf6E.mft (raw, json) Hash identifier: 90zHNhbLsnhx5584+LJcy0PRejrdh8LjCxmIGeNkP+4= Subject key identifier: 07:37:F4:03:B5:76:48:4D:FB:10:26:54:9C:D5:DA:83:A6:A7:60:5C Authority key identifier: 6B:88:7E:7A:58:B1:0F:ED:E2:80:4B:5E:29:EC:E2:C2:99:C2:7F:A1 Certificate issuer: /CN=A913CBB2/serialNumber=6B887E7A58B10FEDE2804B5E29ECE2C299C27FA1 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft Manifest number: 0161 Signing time: Tue 01 Jul 2025 04:26:53 +0000 Manifest this update: Tue 01 Jul 2025 04:26:53 +0000 Manifest next update: Tue 08 Jul 2025 04:26:53 +0000 Files and hashes: 1: a4h-elixD-3igEteKeziwpnCf6E.crl (hash: KnE9hfhBYALR5sBQ7hvKLoRB2jP6n7PzkL4asmyyLTY=) 2: 26D3EB963B1211EE8ED76E25C4F9AE02.roa (hash: qv3tAt9BON7buTRTVhuMsm15F4b64BUNH1NHpvJGTQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.crl rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CBB2, serialNumber=6B887E7A58B10FEDE2804B5E29ECE2C299C27FA1 Validity Not Before: Jul 1 04:26:53 2025 GMT Not After : Jul 8 04:26:53 2025 GMT Subject: CN=6863638d-da45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:3e:67:9d:4b:05:57:9d:3b:1c:a1:d8:77: 7c:39:ad:67:47:ae:37:37:04:49:1d:c9:9e:2f:9f: 23:79:1d:83:54:17:5e:5e:5a:ca:e8:b5:70:50:0c: 17:9c:bf:17:b6:a7:57:91:ee:da:2c:e4:c8:36:a1: 7f:a7:8c:15:ed:1c:4a:ab:89:bf:7e:68:26:72:00: f9:c5:19:fc:d5:eb:2a:9c:f9:1b:0a:27:6c:37:c0: 23:b5:c4:3f:7b:bf:b4:aa:8c:82:26:5a:74:d2:a4: e4:45:23:80:db:37:51:79:52:3b:08:d1:b6:ba:d5: 95:f2:f3:8c:7f:d6:33:b7:91:40:d1:d9:0a:14:cf: 7e:82:e8:6d:1b:28:8c:b2:03:02:cb:e9:aa:e6:17: 17:b6:db:7a:96:ce:5f:dc:e7:0b:f9:a8:8d:04:b1: e4:61:96:c1:bf:8e:1a:86:d6:7a:b8:06:60:2a:6b: c2:0f:87:b9:5e:c5:d2:1d:6d:f8:98:b9:8e:96:aa: bb:ae:b7:f6:58:8f:13:02:04:ec:fa:3a:57:83:6a: 1f:a0:ca:36:57:30:c3:8a:b3:6e:bb:09:f3:bb:7c: 1b:7e:a2:06:92:1c:b7:dc:09:43:7f:75:27:c3:d2: 62:19:32:e3:9d:45:77:c6:1c:ec:7a:9c:ca:0d:76: 81:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:37:F4:03:B5:76:48:4D:FB:10:26:54:9C:D5:DA:83:A6:A7:60:5C X509v3 Authority Key Identifier: keyid:6B:88:7E:7A:58:B1:0F:ED:E2:80:4B:5E:29:EC:E2:C2:99:C2:7F:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:bb:c6:32:e0:7b:26:c1:65:e6:37:d9:dd:56:60:f9:35:95: 7f:53:a9:8e:c7:6e:56:1b:07:76:06:c2:47:dc:88:5c:48:c9: 5b:1f:84:92:f3:76:74:5a:8d:8d:cb:32:8f:aa:22:5d:21:39: ba:cc:28:34:de:5a:4d:a3:60:b8:53:8a:76:a3:d5:90:0e:c2: ee:be:fb:ea:62:1d:25:55:b0:7d:b0:20:78:ab:5c:26:35:78: 11:9a:3a:5e:26:db:fa:8c:e6:66:58:7e:4e:a8:65:be:73:78: 19:e4:f8:04:fa:12:05:d0:c9:c1:fa:e8:e8:36:b5:2f:64:c5: 45:28:0d:49:78:4d:f6:1e:15:00:a4:6c:fa:8d:6f:cf:9f:7d: 6b:61:28:b9:3c:93:4f:4e:99:bf:e8:a5:14:42:3a:1e:2a:89: 3c:89:64:de:b0:ff:cc:b1:fb:82:ce:ca:ee:5c:cf:71:6c:68: d8:a6:48:f4:be:ac:5e:df:95:4c:83:b5:ac:b3:9e:20:f3:86: c3:05:28:4f:44:fa:c1:63:2d:b0:5e:c5:50:44:2b:ca:25:24: ad:18:46:39:5b:c7:66:76:cf:5f:b1:74:24:a1:c9:72:89:99: 93:18:b5:49:db:b7:f8:ce:6e:59:80:11:cb:d6:0c:7d:3f:48: ba:a4:67:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCQjIxMTAvBgNVBAUTKDZCODg3RTdBNThCMTBGRURFMjgwNEI1RTI5RUNFMkMy OTlDMjdGQTEwHhcNMjUwNzAxMDQyNjUzWhcNMjUwNzA4MDQyNjUzWjAYMRYwFAYD VQQDEw02ODYzNjM4ZC1kYTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLo+Z51LBVedOxyh2Hd8Oa1nR643NwRJHcmeL58jeR2DVBdeXlrK6LVwUAwX nL8XtqdXke7aLOTINqF/p4wV7RxKq4m/fmgmcgD5xRn81esqnPkbCidsN8AjtcQ/ e7+0qoyCJlp00qTkRSOA2zdReVI7CNG2utWV8vOMf9Yzt5FA0dkKFM9+guhtGyiM sgMCy+mq5hcXttt6ls5f3OcL+aiNBLHkYZbBv44ahtZ6uAZgKmvCD4e5XsXSHW34 mLmOlqq7rrf2WI8TAgTs+jpXg2ofoMo2VzDDirNuuwnzu3wbfqIGkhy33AlDf3Un w9JiGTLjnUV3xhzsepzKDXaB5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAc39AO1 dkhN+xAmVJzV2oOmp2BcMB8GA1UdIwQYMBaAFGuIfnpYsQ/t4oBLXins4sKZwn+h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0JCMi9CNDAzMjIzMDNC MTExMUVFOTYxOUJCODBDNEY5QUUwMi9hNGgtZWxpeEQtM2lnRXRlS2V6aXdwbkNm NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0aC1lbGl4RC0zaWdFdGVLZXppd3BuQ2Y2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0JCMi9CNDAzMjIzMDNCMTExMUVFOTYxOUJCODBDNEY5QUUwMi9hNGgtZWxpeEQt M2lnRXRlS2V6aXdwbkNmNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5u8Yy4HsmwWXmN9ndVmD5NZV/U6mOx25WGwd2BsJH3IhcSMlbH4SS 83Z0Wo2NyzKPqiJdITm6zCg03lpNo2C4U4p2o9WQDsLuvvvqYh0lVbB9sCB4q1wm NXgRmjpeJtv6jOZmWH5OqGW+c3gZ5PgE+hIF0MnB+ujoNrUvZMVFKA1JeE32HhUA pGz6jW/Pn31rYSi5PJNPTpm/6KUUQjoeKok8iWTesP/MsfuCzsruXM9xbGjYpkj0 vqxe35VMg7Wss54g84bDBShPRPrBYy2wXsVQRCvKJSStGEY5W8dmds9fsXQkocly iZmTGLVJ27f4zm5ZgBHL1gx9P0i6pGdS -----END CERTIFICATE-----Generated at Thu Jul 3 05:21:28 2025 by rpki-client