$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft File: 4eaQihbsgT2qC9ZHl66dvesJIlc.mft (raw, json) Hash identifier: 7BLpGXdlaweFRzk2yajMs8bXAQpyNa2YNEDKsH+uY2w= Subject key identifier: 45:A7:01:7B:93:E0:DC:1C:1C:5C:DD:E7:E3:1C:C7:41:90:A5:D3:16 Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Certificate serial: 365A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft Manifest number: 3569 Signing time: Sat 28 Jun 2025 14:27:45 +0000 Manifest this update: Sat 28 Jun 2025 14:27:45 +0000 Manifest next update: Sat 05 Jul 2025 14:27:45 +0000 Files and hashes: 1: 4eaQihbsgT2qC9ZHl66dvesJIlc.crl (hash: Y8DE7oL2nQn9+UQmQc8y2UAG9CT1ntmbKi6yqU/Iebk=) 2: 77E06D1AA40311EF8998B635C4F9AE02.roa (hash: 9HjOiTTPdQPnwPhOAc/iWZi4RJ25zyBHEgfyIlNASEA=) 3: 50D27D064F4011F0B9682923C4F9AE02.roa (hash: ATjF/OkaAli5uM5JKSTpuXuC82OhJa+1oWAkMp+cg9Y=) 4: 8FA30C8436FA11F087F24B11C4F9AE02.roa (hash: CIOWM46A7OrehJJzF5o6WcXQACQL/brTWBmCYOJEPrI=) 5: 94472FA8459511EDA982510FC4F9AE02.roa (hash: c+lWVnyi5AvZK74bdKBUde662hULr8JkfhSNLO1Lvpc=) 6: 0B28C4E63DA611F0BE531A20C4F9AE02.roa (hash: bCf2+Kf1Gx3ylLxT2UrIXzeFtJkNdW2hW/PFUSCAXGA=) 7: A12079269AF411EFA211362FC4F9AE02.roa (hash: +gXqwQfyRlVJIIcI7NB2OWJAf5Edf91tYkWEEnvOm5E=) 8: BDA8399C9AF611EF965FEA34C4F9AE02.roa (hash: 0CGWBpSvk9JK0nPDj7r4EUTQEqj0Iy/SjMQMszbWLG8=) 9: 65037DC0F72B11EE94855861C4F9AE02.roa (hash: ja/KSCzV+He4qClpDCozZTp+VTug8dvH4YMcC9ie7eE=) 10: D29FCC80A6BD11EEB785E054C4F9AE02.roa (hash: aD49l3BJ2bA6UcWR6EQleCyB5Kz6FRd2Hgp9G6QkpB8=) 11: 89A6BB88E06911EF9C6CF520C4F9AE02.roa (hash: xcq/WEUSR+w06b6Nwt1nxiayT1ulPnzU6uAyB0f2hwE=) 12: 2286A2E29C7611EF9FB2F666C4F9AE02.roa (hash: /0ENGvuFY619vTTeS7kU7tUdehJkkzcY02gnnGiBCS8=) 13: 2C108BFA765311EF9FDB8175C4F9AE02.roa (hash: QPA7RcxiZk0uNPMYbxw3I0lhjK2b1HztmYt+4lBGT7U=) 14: 72BAF108B39811EFBBCEC71AC4F9AE02.roa (hash: UAjST7Qpm1aFNDJqEnCGjuYfh+z236K5L8ZjMGZFVAo=) 15: 6DE12084243F11EDB6C9D62AC4F9AE02.roa (hash: UkhJIUL/Ldl3NbumSVZGfmojr5csuiDydS6HI26IpPE=) 16: DBBD442E3A2C11F09C99C60FC4F9AE02.roa (hash: j7V2cLxBPJmgE9BS61lbh9dr46zqgDVKwuwWKKEatjA=) 17: 6559F04828C511F09C2CD74EC4F9AE02.roa (hash: Q6JyBZa9dUAZWEm5WPgliEngDYA8BKCF4lpnNVbjJOk=) 18: 315775B015F811ECB52DA912C4F9AE02.roa (hash: 7DylzFTXOXediu8an8qP0Zjhz6YMhkKMfzwe8EjxF2Q=) 19: 747C7164462C11ED90035452C4F9AE02.roa (hash: yNkp/KPSLhUlv+dxzffeqFiT5gCKYMvPJXUBj6wHW0A=) 20: DC7EC870132311ED84EFCD51C4F9AE02.roa (hash: 7gyEAftTiDude8qZ+ISH0MbDEa+j6NeYqK16C5bRoow=) 21: 65D8867E28C511F09C2CD74EC4F9AE02.roa (hash: TcTPd4eMMCcLVW+z/Iz5N+6zNNeINdC8gkRR70FihUk=) 22: 9237637AE3B411EBB3CB3785C4F9AE02.roa (hash: D2+qn1a1wZL+h7kwp2z2B823UF/6dU6jmlZ/oExUzWg=) 23: 84B94D56F83011EE8B26391DC4F9AE02.roa (hash: x+3QJoK+biDu04dZYkE6o8q8VEGJX6JSOS4hkFBwMrc=) 24: DCAF30B6E4AC11EF86681673C4F9AE02.roa (hash: RJ8QbeHeO//H3km4CF8dlyUAxuujjhRV0yZE0/kTgK4=) 25: F5CB8F0A459D11EDB62F422FC4F9AE02.roa (hash: DEDTu8Mp335AkDMg3gaFXfDzK0w1tPa7JLjvtAutrLM=) 26: 0A84178E9AF411EF9E814F1EC4F9AE02.roa (hash: hOJlqoxrlUtpINT8QJ6ZLskAAoXqjdHTWPwywqudFjk=) 27: DD3BE51AE4AC11EF86681673C4F9AE02.roa (hash: /HNkxLr2GKguKIdLhCHzoCL2O/gBd4HVb/ZePeCAv1M=) 28: 6D39ED3C243F11EDB6C9D62AC4F9AE02.roa (hash: H99nVGQbsYPafXQrgJwMtpH4mRDJmpSZLj52j7VXKlo=) 29: 99F2F124063811F0979FF734C4F9AE02.roa (hash: J7t22bkIZgaNdh1vYPwsQ0womI0AAnM0qE/XGzkYIsM=) 30: 1D1E595CBDF611EFA2777E34C4F9AE02.roa (hash: sG49huEjr4xPL7FiayEtmJCzDdx+1Np8IZn5eqIgraY=) 31: BF177F2A84BF11EEBBE73E40C4F9AE02.roa (hash: XigKpX/uXMk3tgTnzIApDGja+nOFhQHjyXwVymCnRBM=) 32: F7292614459D11EDB62F422FC4F9AE02.roa (hash: 6c9IiDCB0zpbQ1j7pnqUxxTq/OUIiiE1HzQV68EryhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 14:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13914 (0x365a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Validity Not Before: Jun 28 14:27:45 2025 GMT Not After : Jul 5 14:27:45 2025 GMT Subject: CN=685ffbe1-1444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:d8:6b:1f:47:53:44:52:73:ec:97:87:8b: 08:cf:2d:84:dd:14:0b:47:ae:b6:c3:1f:67:e1:2d: 10:cb:0d:a9:6a:78:ba:3f:9b:3e:4f:0d:ae:49:48: 21:e3:2e:e3:c0:3e:70:cd:83:5e:23:af:b1:ec:6c: f9:dd:75:8f:69:39:c4:3f:2b:d0:33:ef:48:71:81: a1:c1:28:18:e9:54:c6:b2:7e:08:05:bb:af:1a:b8: de:c8:e1:f0:1e:5d:da:43:36:df:ac:66:2d:ad:9f: 59:da:6d:18:b2:7b:91:81:ff:c0:ee:20:58:ac:1e: a0:4b:51:80:94:8d:f2:3e:04:a9:7f:1a:d5:68:0a: 9e:c8:64:f0:be:5c:1f:3d:b6:cf:8a:1e:f9:55:b9: 0b:1b:53:3e:f5:33:0d:1d:37:09:07:4c:e8:6c:2a: fb:a9:6a:70:87:f6:e5:c3:02:c0:86:28:de:61:37: f0:c5:8c:6d:cb:15:1d:e2:7e:5a:dd:83:2d:14:aa: c3:58:ae:38:c3:65:16:79:d0:07:55:54:2a:60:fc: 3a:70:bf:67:4f:15:06:ec:e4:05:78:3c:22:bb:11: 7d:1d:bf:c0:0d:c9:40:d0:0c:84:80:15:49:36:51: 15:52:8c:77:d7:a0:ef:6c:1f:2e:4d:dd:5f:60:4e: a3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A7:01:7B:93:E0:DC:1C:1C:5C:DD:E7:E3:1C:C7:41:90:A5:D3:16 X509v3 Authority Key Identifier: keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9b:90:52:1b:8c:de:90:20:88:4c:44:96:40:61:47:80:98: fb:fd:c5:1d:95:a6:79:14:db:17:06:bc:12:3f:16:eb:fb:11: 3f:ac:41:c7:5b:0d:1d:ce:d4:6f:c0:de:15:cb:d6:c6:84:96: 39:73:38:a6:b1:9e:3f:70:ea:bf:38:f3:fc:4b:40:90:60:e8: 0a:90:8b:45:57:16:81:24:04:bb:14:04:e3:7a:f4:a5:28:87: 92:15:c8:2e:aa:c6:b6:2b:31:9f:aa:d4:fc:19:9d:ee:12:81: bf:93:4a:dc:08:17:8a:1e:07:25:41:bc:1b:0e:83:54:5d:eb: 6f:45:7c:fb:9c:c4:b1:4b:e2:ec:22:4e:71:da:47:94:00:ae: ea:16:0e:9b:64:f6:f2:e3:23:a9:b6:c7:f1:f0:7b:e9:22:f4: 22:a3:6d:b4:04:c5:08:89:66:d4:48:d1:f4:02:7c:51:15:07: 84:41:f0:76:68:4d:2d:3c:91:27:de:5d:c2:a5:29:c6:91:58: e2:e3:0f:61:68:7a:f2:68:24:74:8b:85:11:b0:3d:4d:e7:39: ff:06:17:f4:12:25:cb:ba:2c:9e:ad:9f:2d:fb:c4:61:88:4f: 0b:c6:de:db:c6:2d:2f:b5:ee:91:a6:b0:cd:87:30:f5:dd:62: e7:97:1f:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE RUIwOTIyNTcwHhcNMjUwNjI4MTQyNzQ1WhcNMjUwNzA1MTQyNzQ1WjAYMRYwFAYD VQQDEw02ODVmZmJlMS0xNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4/Yax9HU0RSc+yXh4sIzy2E3RQLR662wx9n4S0Qyw2pani6P5s+Tw2uSUgh 4y7jwD5wzYNeI6+x7Gz53XWPaTnEPyvQM+9IcYGhwSgY6VTGsn4IBbuvGrjeyOHw Hl3aQzbfrGYtrZ9Z2m0YsnuRgf/A7iBYrB6gS1GAlI3yPgSpfxrVaAqeyGTwvlwf PbbPih75VbkLG1M+9TMNHTcJB0zobCr7qWpwh/blwwLAhijeYTfwxYxtyxUd4n5a 3YMtFKrDWK44w2UWedAHVVQqYPw6cL9nTxUG7OQFeDwiuxF9Hb/ADclA0AyEgBVJ NlEVUox316DvbB8uTd1fYE6j1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWnAXuT 4NwcHFzd5+Mcx0GQpdMWMB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTBBRC84QjVFNzVGRTFEODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dU MnFDOVpIbDY2ZHZlc0pJbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdm5BSG4zekCCITESWQGFHgJj7/cUdlaZ5FNsXBrwSPxbr+xE/rEHH Ww0dztRvwN4Vy9bGhJY5czimsZ4/cOq/OPP8S0CQYOgKkItFVxaBJAS7FATjevSl KIeSFcguqsa2KzGfqtT8GZ3uEoG/k0rcCBeKHgclQbwbDoNUXetvRXz7nMSxS+Ls Ik5x2keUAK7qFg6bZPby4yOptsfx8HvpIvQio220BMUIiWbUSNH0AnxRFQeEQfB2 aE0tPJEn3l3CpSnGkVji4w9haHryaCR0i4URsD1N5zn/Bhf0EiXLuiyerZ8t+8Rh iE8Lxt7bxi0vte6RprDNhzD13WLnlx8D -----END CERTIFICATE-----Generated at Sun Jun 29 06:42:33 2025 by rpki-client