$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft File: 4eaQihbsgT2qC9ZHl66dvesJIlc.mft (raw, json) Hash identifier: StqWdE0t9kMwsfmr0g4VHevwqPwPTlzqanJlFE0Awmo= Subject key identifier: C1:1A:AD:2A:35:92:15:22:4E:E4:58:97:DB:38:0E:43:60:84:A6:F6 Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Certificate serial: 3632 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft Manifest number: 3547 Signing time: Sun 04 May 2025 14:28:00 +0000 Manifest this update: Sun 04 May 2025 14:27:59 +0000 Manifest next update: Sun 11 May 2025 14:27:59 +0000 Files and hashes: 1: 4eaQihbsgT2qC9ZHl66dvesJIlc.crl (hash: 5gcFTL2fyEEQFS3LGk5NWw1ZTN1QQCLupNFnXrKYViU=) 2: 77E06D1AA40311EF8998B635C4F9AE02.roa (hash: 9HjOiTTPdQPnwPhOAc/iWZi4RJ25zyBHEgfyIlNASEA=) 3: 94472FA8459511EDA982510FC4F9AE02.roa (hash: c+lWVnyi5AvZK74bdKBUde662hULr8JkfhSNLO1Lvpc=) 4: A12079269AF411EFA211362FC4F9AE02.roa (hash: +gXqwQfyRlVJIIcI7NB2OWJAf5Edf91tYkWEEnvOm5E=) 5: BDA8399C9AF611EF965FEA34C4F9AE02.roa (hash: 0CGWBpSvk9JK0nPDj7r4EUTQEqj0Iy/SjMQMszbWLG8=) 6: 65037DC0F72B11EE94855861C4F9AE02.roa (hash: ja/KSCzV+He4qClpDCozZTp+VTug8dvH4YMcC9ie7eE=) 7: D29FCC80A6BD11EEB785E054C4F9AE02.roa (hash: aD49l3BJ2bA6UcWR6EQleCyB5Kz6FRd2Hgp9G6QkpB8=) 8: 89A6BB88E06911EF9C6CF520C4F9AE02.roa (hash: xcq/WEUSR+w06b6Nwt1nxiayT1ulPnzU6uAyB0f2hwE=) 9: 2286A2E29C7611EF9FB2F666C4F9AE02.roa (hash: /0ENGvuFY619vTTeS7kU7tUdehJkkzcY02gnnGiBCS8=) 10: 2C108BFA765311EF9FDB8175C4F9AE02.roa (hash: QPA7RcxiZk0uNPMYbxw3I0lhjK2b1HztmYt+4lBGT7U=) 11: 72BAF108B39811EFBBCEC71AC4F9AE02.roa (hash: UAjST7Qpm1aFNDJqEnCGjuYfh+z236K5L8ZjMGZFVAo=) 12: 99CB464692B711EF93751E25C4F9AE02.roa (hash: QKiM8VrFZnL/Lc0r4N9mlIoRTYDOc6hhP7chqPzAaR8=) 13: 6DE12084243F11EDB6C9D62AC4F9AE02.roa (hash: UkhJIUL/Ldl3NbumSVZGfmojr5csuiDydS6HI26IpPE=) 14: 6559F04828C511F09C2CD74EC4F9AE02.roa (hash: Q6JyBZa9dUAZWEm5WPgliEngDYA8BKCF4lpnNVbjJOk=) 15: 315775B015F811ECB52DA912C4F9AE02.roa (hash: 7DylzFTXOXediu8an8qP0Zjhz6YMhkKMfzwe8EjxF2Q=) 16: 747C7164462C11ED90035452C4F9AE02.roa (hash: yNkp/KPSLhUlv+dxzffeqFiT5gCKYMvPJXUBj6wHW0A=) 17: DC7EC870132311ED84EFCD51C4F9AE02.roa (hash: 7gyEAftTiDude8qZ+ISH0MbDEa+j6NeYqK16C5bRoow=) 18: 65D8867E28C511F09C2CD74EC4F9AE02.roa (hash: TcTPd4eMMCcLVW+z/Iz5N+6zNNeINdC8gkRR70FihUk=) 19: 9237637AE3B411EBB3CB3785C4F9AE02.roa (hash: D2+qn1a1wZL+h7kwp2z2B823UF/6dU6jmlZ/oExUzWg=) 20: 84B94D56F83011EE8B26391DC4F9AE02.roa (hash: x+3QJoK+biDu04dZYkE6o8q8VEGJX6JSOS4hkFBwMrc=) 21: 665D263C1F7D11F086021130C4F9AE02.roa (hash: zIDdFiLmB7SZiMfYZmxLBvvbytOrJ+/9451wcDrEKE4=) 22: DCAF30B6E4AC11EF86681673C4F9AE02.roa (hash: RJ8QbeHeO//H3km4CF8dlyUAxuujjhRV0yZE0/kTgK4=) 23: F5CB8F0A459D11EDB62F422FC4F9AE02.roa (hash: DEDTu8Mp335AkDMg3gaFXfDzK0w1tPa7JLjvtAutrLM=) 24: 0A84178E9AF411EF9E814F1EC4F9AE02.roa (hash: hOJlqoxrlUtpINT8QJ6ZLskAAoXqjdHTWPwywqudFjk=) 25: DD3BE51AE4AC11EF86681673C4F9AE02.roa (hash: /HNkxLr2GKguKIdLhCHzoCL2O/gBd4HVb/ZePeCAv1M=) 26: 6D39ED3C243F11EDB6C9D62AC4F9AE02.roa (hash: H99nVGQbsYPafXQrgJwMtpH4mRDJmpSZLj52j7VXKlo=) 27: 99F2F124063811F0979FF734C4F9AE02.roa (hash: J7t22bkIZgaNdh1vYPwsQ0womI0AAnM0qE/XGzkYIsM=) 28: 1D1E595CBDF611EFA2777E34C4F9AE02.roa (hash: sG49huEjr4xPL7FiayEtmJCzDdx+1Np8IZn5eqIgraY=) 29: BF177F2A84BF11EEBBE73E40C4F9AE02.roa (hash: XigKpX/uXMk3tgTnzIApDGja+nOFhQHjyXwVymCnRBM=) 30: F7292614459D11EDB62F422FC4F9AE02.roa (hash: 6c9IiDCB0zpbQ1j7pnqUxxTq/OUIiiE1HzQV68EryhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13874 (0x3632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Validity Not Before: May 4 14:27:59 2025 GMT Not After : May 11 14:27:59 2025 GMT Subject: CN=68177970-41b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ec:9c:98:84:7a:83:2c:99:0d:3f:5d:d3:4c: 91:0c:7b:bb:4f:2a:65:99:7f:1f:78:d4:12:56:78: e1:46:df:f3:86:9e:a0:b7:61:8b:46:66:be:4e:4c: 76:bf:2d:02:56:e6:4d:1e:b5:42:8e:ed:70:14:86: db:b3:c5:d3:36:3a:f5:75:2d:5a:e6:4e:30:3c:bd: 70:e5:0f:16:ba:cd:05:2f:eb:82:62:b1:96:1d:b5: d8:56:43:b5:a5:fb:b0:2b:ad:1b:a4:58:5c:f4:50: 43:42:d5:f0:f4:e9:28:16:4f:36:e8:36:3b:1e:29: 47:2d:d0:a6:42:b1:ee:bd:b5:9d:3b:9d:2c:dd:a5: 9b:e5:60:dd:fe:f4:ee:23:4a:35:25:42:7c:2c:4f: 4d:4c:73:e9:f7:7c:d9:f9:7f:af:9a:9a:22:e7:04: bd:fc:74:68:99:28:ac:f6:8f:16:8d:0f:8c:fa:06: 3f:fe:7a:b5:b6:eb:3a:b7:4e:3d:4c:8d:dd:4b:c2: ad:c9:bb:5e:54:03:4d:89:93:4b:60:19:9a:87:52: 14:e5:47:74:7f:ec:b2:93:93:0c:1a:f3:54:9e:99: 0d:ed:e1:7c:7e:ab:16:10:b7:de:ec:08:47:02:bc: ac:e2:87:e3:10:b8:fd:1f:f7:36:3f:a7:24:b0:2b: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1A:AD:2A:35:92:15:22:4E:E4:58:97:DB:38:0E:43:60:84:A6:F6 X509v3 Authority Key Identifier: keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6d:8b:38:be:1f:87:59:51:40:44:32:9b:1a:a3:bc:f3:b3: db:f9:80:ab:bb:6b:bc:90:8f:3b:98:61:51:57:01:64:f2:bc: ca:bd:5e:fd:92:fb:84:7b:82:25:f9:8a:b6:db:14:74:ef:32: 08:64:23:ef:ed:26:fc:b9:24:ed:08:74:a3:cf:69:d1:d4:01: ae:6c:ac:03:61:32:7e:78:5d:52:b0:53:2b:a8:39:e0:8d:cc: 8a:0d:ce:f3:cd:12:6b:80:b3:80:d4:78:d1:4c:24:ef:81:4a: ab:0e:0f:8b:76:45:d5:59:04:3a:ab:4f:8d:4a:36:d5:28:8a: ef:45:e2:2d:e2:41:69:1c:d1:47:ff:3b:cc:87:79:4a:64:9c: a0:98:ce:10:d7:f3:45:00:f1:0e:b6:e8:e1:40:bb:1f:7c:c4: 44:6c:75:49:1a:03:b2:f5:cd:36:b3:5d:e5:e3:14:e2:71:3e: 2c:c7:5e:f7:d1:69:39:a8:f0:7c:c2:b9:24:77:c0:01:78:db: 3a:b5:35:3b:26:9a:00:88:bb:9d:6c:b2:f0:32:e0:fd:4f:47: 78:7d:26:96:5e:42:e5:38:d1:24:b7:23:b1:00:55:3f:50:24: 75:bc:2e:4a:72:26:b5:e2:b9:72:66:e1:fa:a0:27:26:33:a8: 8f:97:f5:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE RUIwOTIyNTcwHhcNMjUwNTA0MTQyNzU5WhcNMjUwNTExMTQyNzU5WjAYMRYwFAYD VQQDEw02ODE3Nzk3MC00MWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOycmIR6gyyZDT9d00yRDHu7TyplmX8feNQSVnjhRt/zhp6gt2GLRma+Tkx2 vy0CVuZNHrVCju1wFIbbs8XTNjr1dS1a5k4wPL1w5Q8Wus0FL+uCYrGWHbXYVkO1 pfuwK60bpFhc9FBDQtXw9OkoFk826DY7HilHLdCmQrHuvbWdO50s3aWb5WDd/vTu I0o1JUJ8LE9NTHPp93zZ+X+vmpoi5wS9/HRomSis9o8WjQ+M+gY//nq1tus6t049 TI3dS8KtybteVANNiZNLYBmah1IU5Ud0f+yyk5MMGvNUnpkN7eF8fqsWELfe7AhH Arys4ofjELj9H/c2P6cksCtJpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEarSo1 khUiTuRYl9s4DkNghKb2MB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTBBRC84QjVFNzVGRTFEODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dU MnFDOVpIbDY2ZHZlc0pJbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvbYs4vh+HWVFARDKbGqO887Pb+YCru2u8kI87mGFRVwFk8rzKvV79 kvuEe4Il+Yq22xR07zIIZCPv7Sb8uSTtCHSjz2nR1AGubKwDYTJ+eF1SsFMrqDng jcyKDc7zzRJrgLOA1HjRTCTvgUqrDg+LdkXVWQQ6q0+NSjbVKIrvReIt4kFpHNFH /zvMh3lKZJygmM4Q1/NFAPEOtujhQLsffMREbHVJGgOy9c02s13l4xTicT4sx173 0Wk5qPB8wrkkd8ABeNs6tTU7JpoAiLudbLLwMuD9T0d4fSaWXkLlONEktyOxAFU/ UCR1vC5Kcia14rlyZuH6oCcmM6iPl/Xa -----END CERTIFICATE-----Generated at Mon May 5 05:12:47 2025 by rpki-client