$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft File: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json) Hash identifier: DRTXsHQERaiHBDZlFy/UFijtQrXFnTkEw4M38SkmWP8= Subject key identifier: 8F:B7:F3:9D:1C:AD:AB:C3:0D:0D:8F:40:4E:2F:20:EA:17:ED:38:8D Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F Certificate issuer: /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Certificate serial: 0D91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft Manifest number: 0D84 Signing time: Wed 02 Jul 2025 18:09:55 +0000 Manifest this update: Wed 02 Jul 2025 18:09:54 +0000 Manifest next update: Wed 09 Jul 2025 18:09:54 +0000 Files and hashes: 1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: lrpEIDCe1szraFAU4lBC6ctVWkfOhKlZYCR81tHKPXM=) 2: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: r12gsCo6iUFC5f/jSOBGicDzV0QxP8G0HCiUT+DfDFw=) 3: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: XfxZHGEC6L2I7lf4RHsiD8/699vyTVMdYrB6wZFXmUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3473 (0xd91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Validity Not Before: Jul 2 18:09:54 2025 GMT Not After : Jul 9 18:09:54 2025 GMT Subject: CN=686575f2-5314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ec:01:b4:8d:d8:62:3b:92:ef:ae:f8:dd:31: 61:a2:cb:98:35:ec:46:9c:e6:82:7e:75:2b:e8:3a: b1:85:66:41:7d:97:82:c7:cd:6b:1c:4f:40:44:5d: cd:cf:f1:f5:6f:54:26:82:17:c1:df:65:7e:83:3e: 68:d5:03:cf:be:5f:2a:e4:ac:53:3b:3a:34:84:83: d9:17:3b:08:46:7e:3a:0d:25:5b:85:d1:b3:45:ea: 21:f7:56:18:e1:7a:6e:e5:88:1a:1e:7c:7d:9e:17: 7b:34:ba:99:24:1c:67:6e:3f:82:56:bc:49:26:1f: 4b:d2:79:65:47:a0:40:54:b5:28:98:a5:88:5b:09: 78:d1:28:06:2c:17:a8:b3:6f:6d:29:2f:c4:e5:d7: 4d:b5:3f:54:4e:64:f3:a2:03:79:44:e8:54:9c:50: 6e:4d:a0:11:fd:4c:57:60:47:37:1e:45:4c:31:75: 3c:7a:c1:a9:6f:68:c5:0c:b6:e1:ec:3f:71:f9:25: 40:65:cd:9e:8d:79:93:c7:a7:46:54:b0:41:1e:57: ce:3a:5c:38:73:3a:d3:8f:10:2e:b9:d8:13:0d:cd: 57:83:5b:0f:1c:63:9c:ff:8e:06:c5:64:aa:91:d6: a5:da:4e:2d:33:5b:52:fe:ef:ab:75:d5:76:9a:8a: 06:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B7:F3:9D:1C:AD:AB:C3:0D:0D:8F:40:4E:2F:20:EA:17:ED:38:8D X509v3 Authority Key Identifier: keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:99:16:70:61:cb:e8:f6:7a:77:93:3d:bc:a3:05:62:d0:b2: 51:d6:55:68:b0:78:25:a2:99:09:a2:53:45:8e:15:c9:a4:47: b3:3f:94:df:04:17:4c:9d:51:72:cb:28:7c:e8:df:14:ca:e5: 5e:0e:b4:80:94:db:40:d7:34:4b:3a:c1:79:8d:b1:8f:91:dc: f8:c2:8e:a2:4e:51:1c:b8:67:50:77:cb:30:e5:8d:e2:ce:23: c4:c3:a5:b7:69:12:49:d8:dc:7b:a0:db:71:11:49:42:8a:66: 0e:5f:66:09:d9:0f:91:5b:a8:50:14:5e:41:4f:5b:e8:1b:5e: 00:0f:58:ff:11:76:0d:0b:4f:fb:6a:a9:89:aa:76:8c:52:08: fc:04:7f:a8:46:fa:48:22:ee:49:56:30:6f:01:11:0b:ce:92: 1a:0c:98:59:da:38:b2:a4:44:97:a1:ad:42:dc:da:63:c5:44: 1a:cd:b2:31:7f:5f:c7:0e:32:54:3a:a5:57:ae:c2:b1:7c:95: d4:5f:c0:d4:a1:03:4e:20:22:39:f6:5d:8a:7a:60:4f:65:60: e7:8c:b2:46:33:83:9c:4c:9f:8e:2c:bf:9e:30:cd:90:55:dc: 2a:58:a0:8b:25:cb:fa:47:ba:bd:db:75:54:11:34:61:c8:00: 64:9f:63:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIzNjExMTAvBgNVBAUTKEUwQjlBMkU5OTM5RDU1OEYxOEJFNjIxNzVDOTVENzY4 RDI0NUQzMUYwHhcNMjUwNzAyMTgwOTU0WhcNMjUwNzA5MTgwOTU0WjAYMRYwFAYD VQQDEw02ODY1NzVmMi01MzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOwBtI3YYjuS76743TFhosuYNexGnOaCfnUr6DqxhWZBfZeCx81rHE9ARF3N z/H1b1QmghfB32V+gz5o1QPPvl8q5KxTOzo0hIPZFzsIRn46DSVbhdGzReoh91YY 4Xpu5YgaHnx9nhd7NLqZJBxnbj+CVrxJJh9L0nllR6BAVLUomKWIWwl40SgGLBeo s29tKS/E5ddNtT9UTmTzogN5ROhUnFBuTaAR/UxXYEc3HkVMMXU8esGpb2jFDLbh 7D9x+SVAZc2ejXmTx6dGVLBBHlfOOlw4czrTjxAuudgTDc1Xg1sPHGOc/44GxWSq kdal2k4tM1tS/u+rddV2mooGzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+3850c ravDDQ2PQE4vIOoX7TiNMB8GA1UdIwQYMBaAFOC5oumTnVWPGL5iF1yV12jSRdMf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjM2MS83QzhEODAwQUNB MzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZOFl2bUlYWEpYWGFOSkYw eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMbWk2Wk9kVlk4WXZtSVhYSlhYYU5KRjB4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjM2MS83QzhEODAwQUNBMzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZ OFl2bUlYWEpYWGFOSkYweDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChmRZwYcvo9np3kz28owVi0LJR1lVosHglopkJolNFjhXJpEezP5Tf BBdMnVFyyyh86N8UyuVeDrSAlNtA1zRLOsF5jbGPkdz4wo6iTlEcuGdQd8sw5Y3i ziPEw6W3aRJJ2Nx7oNtxEUlCimYOX2YJ2Q+RW6hQFF5BT1voG14AD1j/EXYNC0/7 aqmJqnaMUgj8BH+oRvpIIu5JVjBvARELzpIaDJhZ2jiypESXoa1C3NpjxUQazbIx f1/HDjJUOqVXrsKxfJXUX8DUoQNOICI59l2KemBPZWDnjLJGM4OcTJ+OLL+eMM2Q VdwqWKCLJcv6R7q923VUETRhyABkn2NN -----END CERTIFICATE-----Generated at Thu Jul 3 09:52:16 2025 by rpki-client