$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft File: 4JlhFVCKOtWZFdurzLaW26C0zHI.mft (raw, json) Hash identifier: slePmj6LuJdiToSz1ojb/h9mPyK3jyy1tCQLJRVTg1Q= Subject key identifier: F4:A3:29:0D:B1:F6:CB:C9:CB:CC:BD:7F:24:35:F9:17:9F:05:D7:E6 Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72 Certificate issuer: /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72 Certificate serial: 0583 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft Manifest number: 0564 Signing time: Wed 02 Jul 2025 23:43:29 +0000 Manifest this update: Wed 02 Jul 2025 23:43:29 +0000 Manifest next update: Wed 09 Jul 2025 23:43:29 +0000 Files and hashes: 1: 4JlhFVCKOtWZFdurzLaW26C0zHI.crl (hash: +Xw2KMlujMoNcY3kIvzJ8Yyz2eQG4h21Le7oSFd19U4=) 2: BA758AE2212711F0A7DCCB5BC4F9AE02.roa (hash: m8lEVsnh3DvG0KEPCp4MW7Ow9L5MLhKDggw4WLNqc68=) 3: 03C7AA80F01111ED9C345840C4F9AE02.roa (hash: Am8OlNfTP5V8Kx5g/Dv+15S2O7P9HWujy6NfIY4x9VA=) 4: 04E8D402F01111ED9C345840C4F9AE02.roa (hash: aw0GsE7/msiXwaZd5f0HibklFhBHtqZY6llDRI4HTZY=) 5: F650791EF01411ED9210D060C4F9AE02.roa (hash: 4IZfBEYxdxWId8yUiHx63z7AlPcjMCqr2gmuQDYBUpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1411 (0x583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153CE9, serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72 Validity Not Before: Jul 2 23:43:29 2025 GMT Not After : Jul 9 23:43:29 2025 GMT Subject: CN=6865c421-943d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1e:a1:51:e0:39:8e:7a:7b:f7:ae:74:40:ed: 6e:c1:55:f0:fd:cf:30:02:6d:d2:f5:a4:ad:41:90: 59:fd:6f:ec:80:43:37:6e:2f:15:e3:2f:66:4d:f7: d7:5d:5c:4f:e1:9a:e5:02:76:7d:99:c3:a9:25:92: 3b:9b:66:3c:da:5c:d2:c9:c1:62:c3:8a:5a:a6:50: 81:41:8a:87:8b:f3:6d:70:63:80:b5:e3:80:62:79: 9b:a5:39:f9:59:54:cc:1b:33:6f:b4:39:b7:18:54: 8c:a9:38:6d:fd:ae:da:23:c8:2f:b0:2b:c1:87:2b: 8a:3f:a4:b2:02:c6:06:c9:5f:45:cf:9b:92:77:86: f7:d3:9c:2d:ee:41:ba:48:a7:33:c8:62:2e:11:3d: 0d:cb:f0:eb:c4:d3:b4:1c:df:b3:75:96:9a:cf:c2: 05:8f:86:a6:62:79:c1:f7:b5:92:20:a1:00:4d:02: e1:be:70:17:ed:58:8e:6b:b2:2b:3a:57:1c:f1:5a: 5b:72:8a:dd:cf:7c:d8:d0:35:65:46:be:44:9b:f7: 4f:85:6f:db:6c:d5:0a:f9:88:a9:92:c2:19:e4:10: 2f:e9:38:4f:c1:e4:41:3c:2c:9b:7d:a2:ad:bc:99: 5b:74:5c:29:65:33:8f:6e:0d:bd:b8:30:36:f7:e6: 7a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A3:29:0D:B1:F6:CB:C9:CB:CC:BD:7F:24:35:F9:17:9F:05:D7:E6 X509v3 Authority Key Identifier: keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:de:5e:4b:7e:61:cd:1c:a9:93:e0:9f:3b:5c:40:03:69:ba: 27:3f:76:c5:dc:56:13:86:e2:d9:2b:38:22:19:d1:3f:ca:ad: 30:b5:e3:60:86:ef:f4:11:5f:ee:d2:22:ce:83:aa:69:c7:4e: 0e:fa:de:4d:d5:fc:e2:dd:15:3e:ce:4b:9d:2d:9f:5c:97:53: 63:5b:d1:3f:33:72:99:3b:77:13:e6:2e:29:56:52:5a:d0:9e: 10:41:dd:17:f7:2b:f9:63:c0:44:8f:6b:72:e1:d1:2d:d7:4f: 5f:6d:03:79:0d:87:49:83:ec:cd:33:9c:61:65:20:29:e6:b3: fe:ed:51:05:b3:6f:bf:61:53:c4:6b:3d:94:9c:c7:f6:fb:eb: 7f:93:41:e4:f4:f6:68:48:3e:68:c7:fb:a3:4a:d7:f1:b7:96: 0c:fc:f2:ab:37:9d:07:4a:c7:71:26:02:de:3b:0f:66:1c:13: fa:73:b7:e9:8c:b4:63:a1:5b:ae:43:a6:e8:7b:4b:b3:46:89: f8:9b:1c:7f:9c:2b:5e:09:73:13:65:95:74:c5:d3:56:e5:a8: 06:7c:c4:dc:81:2d:15:ab:cf:8f:c9:8f:10:a3:cc:74:b0:4e: 76:c0:62:08:cc:63:7c:59:32:f4:b2:07:4f:87:ba:b6:74:d9: 04:ce:ca:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDRTkxMTAvBgNVBAUTKEUwOTk2MTE1NTA4QTNBRDU5OTE1REJBQkNDQjY5NkRC QTBCNENDNzIwHhcNMjUwNzAyMjM0MzI5WhcNMjUwNzA5MjM0MzI5WjAYMRYwFAYD VQQDEw02ODY1YzQyMS05NDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1x6hUeA5jnp79650QO1uwVXw/c8wAm3S9aStQZBZ/W/sgEM3bi8V4y9mTffX XVxP4ZrlAnZ9mcOpJZI7m2Y82lzSycFiw4paplCBQYqHi/NtcGOAteOAYnmbpTn5 WVTMGzNvtDm3GFSMqTht/a7aI8gvsCvBhyuKP6SyAsYGyV9Fz5uSd4b305wt7kG6 SKczyGIuET0Ny/DrxNO0HN+zdZaaz8IFj4amYnnB97WSIKEATQLhvnAX7ViOa7Ir Olcc8Vpbcordz3zY0DVlRr5Em/dPhW/bbNUK+YipksIZ5BAv6ThPweRBPCybfaKt vJlbdFwpZTOPbg29uDA29+Z6BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSjKQ2x 9svJy8y9fyQ1+RefBdfmMB8GA1UdIwQYMBaAFOCZYRVQijrVmRXbq8y2ltugtMxy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0NFOS8wQUIxRDM5NkY1 MTUxMUVCOUVGRTA3NTBDNEY5QUUwMi80SmxoRlZDS090V1pGZHVyekxhVzI2QzB6 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKbGhGVkNLT3RXWkZkdXJ6TGFXMjZDMHpISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0NFOS8wQUIxRDM5NkY1MTUxMUVCOUVGRTA3NTBDNEY5QUUwMi80SmxoRlZDS090 V1pGZHVyekxhVzI2QzB6SEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO3l5LfmHNHKmT4J87XEADabonP3bF3FYThuLZKzgiGdE/yq0wteNg hu/0EV/u0iLOg6ppx04O+t5N1fzi3RU+zkudLZ9cl1NjW9E/M3KZO3cT5i4pVlJa 0J4QQd0X9yv5Y8BEj2ty4dEt109fbQN5DYdJg+zNM5xhZSAp5rP+7VEFs2+/YVPE az2UnMf2++t/k0Hk9PZoSD5ox/ujStfxt5YM/PKrN50HSsdxJgLeOw9mHBP6c7fp jLRjoVuuQ6boe0uzRon4mxx/nCteCXMTZZV0xdNW5agGfMTcgS0Vq8+PyY8Qo8x0 sE52wGIIzGN8WTL0sgdPh7q2dNkEzsrv -----END CERTIFICATE-----Generated at Thu Jul 3 06:03:31 2025 by rpki-client