$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft File: R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json) Hash identifier: HWu3B+ztGAERjRBk9OntmuXyZh8E0hOIBV4GjnW4wNo= Subject key identifier: 4A:64:E4:47:B4:B3:23:B0:54:52:FA:45:E5:40:2E:14:3F:50:13:05 Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft Manifest number: 0282 Signing time: Sun 29 Jun 2025 01:12:43 +0000 Manifest this update: Sun 29 Jun 2025 01:12:42 +0000 Manifest next update: Sun 06 Jul 2025 01:12:42 +0000 Files and hashes: 1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: N0xOlOdnp++9q2oPLeICrk5ePWbINH/ygNVcccYDk2c=) 2: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: GG/AMsbpEzm/NFjGRgk+JWg1MGNbtO4+De0JwZLDbdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Validity Not Before: Jun 29 01:12:42 2025 GMT Not After : Jul 6 01:12:42 2025 GMT Subject: CN=6860930b-3f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:99:45:85:35:47:ea:97:0f:cd:51:24:a4:a6: 55:7d:62:f3:2a:e5:51:a0:c6:43:b8:34:12:56:7c: dc:39:61:68:17:05:a5:60:d1:b2:dd:d0:d9:7e:16: b5:60:f0:c2:ac:f4:0f:c0:9e:70:77:2c:d2:be:b7: d9:c0:8d:f9:b4:91:d4:dd:e3:ce:a3:b0:27:38:8f: e1:37:05:87:f6:d3:d3:0e:f2:eb:4e:3c:4d:f7:0d: 41:33:8e:e6:a1:76:3d:ad:d1:ab:88:df:21:53:96: 2b:11:c8:ab:ed:03:f2:c9:08:1b:84:75:b5:2a:f4: c1:41:09:62:6c:d6:a3:bd:e0:c3:f8:52:de:2d:a0: 02:a6:12:4e:ff:f4:35:68:e3:de:2f:c5:66:a8:e9: 65:a2:b7:25:27:39:a2:f6:50:e5:9e:e1:a9:ef:92: 67:a9:20:6a:44:70:de:1d:29:0c:79:fb:02:5b:06: 8e:3f:fa:28:a0:a3:18:7f:44:fc:7f:14:c1:11:6b: ca:be:f7:63:93:2f:10:76:e4:6d:ea:fe:2d:03:3c: 89:46:ce:46:51:a3:b5:62:89:5d:b2:c7:29:89:30: c8:cb:2c:9c:01:86:ef:c1:10:47:c0:6f:21:e9:e4: db:6e:56:e0:0f:7d:03:a6:95:4c:d1:ba:ef:eb:5e: 47:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:64:E4:47:B4:B3:23:B0:54:52:FA:45:E5:40:2E:14:3F:50:13:05 X509v3 Authority Key Identifier: keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:d8:fc:99:39:0a:81:c4:55:7d:f9:81:c3:26:ae:33:14:2b: 09:03:7d:c5:74:5c:76:73:50:ef:8f:0a:fc:c3:6a:32:a0:1a: 6a:1c:37:e3:78:83:81:8e:c5:4e:4b:4c:06:63:66:a2:18:0e: 6f:d0:5f:53:a1:87:c0:72:a7:3d:ff:83:df:55:c5:72:b3:e3: c8:3d:21:df:44:aa:1d:4d:b3:3b:9e:29:da:7b:bf:ed:ca:46: b1:8e:36:d3:f7:d6:b5:49:0c:7b:39:0d:4b:47:1e:e7:19:89: d9:0b:28:1e:a8:f1:f5:7c:99:ff:d4:57:4e:5b:ec:8d:11:69: 4f:2d:0d:91:7b:a8:9a:33:2f:ad:87:0a:5b:55:0d:91:b4:95: 9e:c4:e4:de:75:41:08:8c:23:c9:15:38:64:5b:32:e1:64:4e: ab:31:e7:c8:94:a1:88:19:d7:8b:7a:f3:3d:ba:e1:84:f5:9e: a3:03:c7:fc:88:70:24:be:82:ec:6f:65:3a:e9:82:67:33:ef: 16:3c:fc:b9:14:6a:c7:91:89:4a:f8:f9:31:2f:cb:ff:2e:9e: f6:a2:cb:dd:f9:bf:37:b6:21:c5:09:e3:87:c6:da:2a:59:f4: bd:8c:31:45:76:34:d6:29:ab:96:3b:e9:d3:d4:03:61:be:9f: dd:c8:a8:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThEQzYxMTAvBgNVBAUTKDQ3ODZEQkNDQjVDQzI5NkIxREFCMTc1RTgzQ0M0ODEx QTYzNjE3QzcwHhcNMjUwNjI5MDExMjQyWhcNMjUwNzA2MDExMjQyWjAYMRYwFAYD VQQDEw02ODYwOTMwYi0zZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JlFhTVH6pcPzVEkpKZVfWLzKuVRoMZDuDQSVnzcOWFoFwWlYNGy3dDZfha1 YPDCrPQPwJ5wdyzSvrfZwI35tJHU3ePOo7AnOI/hNwWH9tPTDvLrTjxN9w1BM47m oXY9rdGriN8hU5YrEcir7QPyyQgbhHW1KvTBQQlibNajveDD+FLeLaACphJO//Q1 aOPeL8VmqOllorclJzmi9lDlnuGp75JnqSBqRHDeHSkMefsCWwaOP/oooKMYf0T8 fxTBEWvKvvdjky8QduRt6v4tAzyJRs5GUaO1YoldsscpiTDIyyycAYbvwRBHwG8h 6eTbblbgD30DppVM0brv615HBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpk5Ee0 syOwVFL6ReVALhQ/UBMFMB8GA1UdIwQYMBaAFEeG28y1zClrHasXXoPMSBGmNhfH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OERDNi80QTAxMjI3QzBG RjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtXc2RxeGRlZzh4SUVhWTJG OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0YmJ6TFhNS1dzZHF4ZGVnOHhJRWFZMkY4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OERDNi80QTAxMjI3QzBGRjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtX c2RxeGRlZzh4SUVhWTJGOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs2PyZOQqBxFV9+YHDJq4zFCsJA33FdFx2c1Dvjwr8w2oyoBpqHDfj eIOBjsVOS0wGY2aiGA5v0F9ToYfAcqc9/4PfVcVys+PIPSHfRKodTbM7ninae7/t ykaxjjbT99a1SQx7OQ1LRx7nGYnZCygeqPH1fJn/1FdOW+yNEWlPLQ2Re6iaMy+t hwpbVQ2RtJWexOTedUEIjCPJFThkWzLhZE6rMefIlKGIGdeLevM9uuGE9Z6jA8f8 iHAkvoLsb2U66YJnM+8WPPy5FGrHkYlK+PkxL8v/Lp72osvd+b83tiHFCeOHxtoq WfS9jDFFdjTWKauWO+nT1ANhvp/dyKgW -----END CERTIFICATE-----Generated at Sun Jun 29 15:09:02 2025 by rpki-client