$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json) Hash identifier: bwlQpCZvRBgXHi4UbHuLX0QQH3/rIXcynSfkkRwBAnk= Subject key identifier: 6A:B4:50:B7:7E:7B:7A:31:90:61:7F:4D:5E:79:AE:B6:B2:B9:43:F2 Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft Manifest number: 016D Signing time: Tue 01 Jul 2025 04:18:54 +0000 Manifest this update: Tue 01 Jul 2025 04:18:54 +0000 Manifest next update: Tue 08 Jul 2025 04:18:54 +0000 Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: h1gzwK1yICUl8Ad+uvywXNw0jw3wRG3/YPKA38lmU9I=) 2: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: st8PwK196xNld8O2k0lKE8037dLGvSfGuDJRF0i8kvY=) 3: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: imnNT9qYRRIcc5JHDTtnRt4iRKv++5OKcbvGmRUGbZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Validity Not Before: Jul 1 04:18:54 2025 GMT Not After : Jul 8 04:18:54 2025 GMT Subject: CN=686361ae-8f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d6:11:56:fc:52:20:25:f3:f1:87:74:b4:86: 9e:e9:72:6f:10:a5:84:84:4b:91:9c:b9:94:80:e4: 72:ce:ef:88:f7:c5:3a:dc:41:4c:7a:f8:ad:87:53: d4:f4:fd:1c:4f:3d:f8:cd:c3:d2:97:f7:cc:2b:bb: cb:46:1e:e6:1e:e2:b3:6c:b7:2d:d8:7e:66:90:3b: 90:9a:5f:c8:84:fe:c5:d8:39:7f:e6:81:d7:e7:e7: d6:c9:6e:05:81:34:ec:d5:0c:39:b7:9b:d4:9b:6a: a7:50:53:8d:4f:41:c3:04:fa:89:ac:ab:f9:42:82: 4a:a4:f6:36:33:bd:4a:30:c4:f5:3b:96:be:a6:9d: ed:fd:c1:78:d8:82:cd:47:04:9b:b7:95:00:b9:3f: 19:9a:3e:04:44:d6:d5:3a:21:f6:3d:4a:f1:57:8c: c6:2e:f5:58:b6:31:d9:44:c2:48:a0:87:53:21:a7: 93:41:e1:19:3a:6e:a8:bd:72:4a:32:89:4d:bc:27: 10:d1:f1:68:19:ec:ea:e4:de:fc:b9:4f:76:9c:bd: 91:da:90:0b:69:70:21:89:a7:0e:5b:17:98:2a:cb: af:3b:53:00:b4:52:1f:b6:00:94:ff:45:c3:62:ce: dc:b9:a4:40:77:b2:15:77:ad:1f:f6:a1:8a:5c:27: d5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B4:50:B7:7E:7B:7A:31:90:61:7F:4D:5E:79:AE:B6:B2:B9:43:F2 X509v3 Authority Key Identifier: keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:58:31:39:e6:51:31:c0:6d:5d:5f:37:83:82:a7:8b:d5:f3: 8e:cd:ad:50:65:e2:b1:33:7a:06:1c:78:4c:e1:98:84:71:78: a5:1d:c8:81:5e:23:f0:86:d9:c8:d1:4e:66:af:f4:a7:20:23: 16:9e:61:48:8a:97:3f:d6:c4:56:eb:dd:38:69:2c:b7:ca:4a: 05:cf:87:16:d9:49:e2:e6:f7:39:2c:b3:98:d3:3b:ea:c0:74: b8:e9:e0:03:f7:b3:4a:78:fa:9d:f8:d6:b9:74:9e:f9:0b:30: 27:98:2c:eb:9b:1e:9d:d1:64:3c:09:07:5b:e4:a6:ea:96:2b: 13:3c:ec:74:a1:48:11:c8:e2:f9:48:d2:e0:0a:12:10:79:04: 5e:f1:76:29:ff:cd:4d:94:e5:f6:dc:bc:27:fa:e0:1c:7c:06: c6:8d:b5:c2:2d:5f:7e:28:3e:53:e2:cd:0b:a9:70:46:c8:53: d9:8f:9a:4c:61:af:ce:e9:bd:2f:d6:2c:b7:63:da:2f:fa:55: 55:c4:cd:69:64:e3:e6:80:03:a9:50:30:bb:0c:ff:e9:76:ad: c2:a8:7a:e2:5d:c8:3e:23:a7:0a:a5:22:7f:3e:71:58:37:5e: 7a:9a:f1:58:a2:9d:e5:08:3d:df:83:06:5d:67:ff:a7:6a:d0: f9:8a:b3:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCNjExMTAvBgNVBAUTKEUzRTEwMEY4MDQwMTNBMDVGOTIyRUUxMUNCNEUwQUJF QTZDMjJCOTgwHhcNMjUwNzAxMDQxODU0WhcNMjUwNzA4MDQxODU0WjAYMRYwFAYD VQQDEw02ODYzNjFhZS04ZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NYRVvxSICXz8Yd0tIae6XJvEKWEhEuRnLmUgORyzu+I98U63EFMevith1PU 9P0cTz34zcPSl/fMK7vLRh7mHuKzbLct2H5mkDuQml/IhP7F2Dl/5oHX5+fWyW4F gTTs1Qw5t5vUm2qnUFONT0HDBPqJrKv5QoJKpPY2M71KMMT1O5a+pp3t/cF42ILN RwSbt5UAuT8Zmj4ERNbVOiH2PUrxV4zGLvVYtjHZRMJIoIdTIaeTQeEZOm6ovXJK MolNvCcQ0fFoGezq5N78uU92nL2R2pALaXAhiacOWxeYKsuvO1MAtFIftgCU/0XD Ys7cuaRAd7IVd60f9qGKXCfVmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGq0ULd+ e3oxkGF/TV55rrayuUPyMB8GA1UdIwQYMBaAFOPhAPgEAToF+SLuEctOCr6mwiuY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUI2MS83NjE2RDRGQzJB Q0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9nWDVJdTRSeTA0S3ZxYkNL NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtRUEtQVFCT2dYNUl1NFJ5MDRLdnFiQ0s1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUI2MS83NjE2RDRGQzJBQ0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9n WDVJdTRSeTA0S3ZxYkNLNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4WDE55lExwG1dXzeDgqeL1fOOza1QZeKxM3oGHHhM4ZiEcXilHciB XiPwhtnI0U5mr/SnICMWnmFIipc/1sRW6904aSy3ykoFz4cW2Uni5vc5LLOY0zvq wHS46eAD97NKePqd+Na5dJ75CzAnmCzrmx6d0WQ8CQdb5KbqlisTPOx0oUgRyOL5 SNLgChIQeQRe8XYp/81NlOX23Lwn+uAcfAbGjbXCLV9+KD5T4s0LqXBGyFPZj5pM Ya/O6b0v1iy3Y9ov+lVVxM1pZOPmgAOpUDC7DP/pdq3CqHriXcg+I6cKpSJ/PnFY N156mvFYop3lCD3fgwZdZ/+natD5irOc -----END CERTIFICATE-----Generated at Wed Jul 2 23:27:20 2025 by rpki-client