$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft File: 4Loijq-YEvBn0v87-AaJVpjJOXc.mft (raw, json) Hash identifier: 4QZF+o3OzD3oplML/2bCSpvOGHmwVOI/v6SIxpJOaWs= Subject key identifier: 80:79:5E:36:82:0F:3A:8E:CD:61:16:0C:7D:EE:FD:D6:04:C7:4C:D5 Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Certificate serial: 06AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft Manifest number: 0651 Signing time: Wed 02 Jul 2025 23:13:00 +0000 Manifest this update: Wed 02 Jul 2025 23:12:59 +0000 Manifest next update: Wed 09 Jul 2025 23:12:59 +0000 Files and hashes: 1: 4Loijq-YEvBn0v87-AaJVpjJOXc.crl (hash: FJC0KJtpu+eWXUKeB9005fgIXaX4CKmRYiJg2oqtJW4=) 2: 5D81DB7C51B611ECA674F080C4F9AE02.roa (hash: Wj9VGGJ6joH5JctKZSMF6/1uGPocxQOWRALuCrLB1RI=) 3: D396006E251C11EEAB8BE444C4F9AE02.roa (hash: 9u1pwHKpVreKyVfB8nkyg0RNfC4miwkyLL7dTpwha4U=) 4: B91AACE86C8A11EEA934912FC4F9AE02.roa (hash: BRqUa6lx1hCo3MEvTs8NlHFfgRjiFksL6MonNo6Ic5M=) 5: D304973AC1E011EE81429B3EC4F9AE02.roa (hash: yYeYBpFrN5yAKPhvdNbBpvXOyw5PkXSnUg/nn3TG4vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1708 (0x6ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164D60, serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Validity Not Before: Jul 2 23:12:59 2025 GMT Not After : Jul 9 23:12:59 2025 GMT Subject: CN=6865bcfc-57e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:94:b8:90:4d:2a:91:70:9c:6a:e0:af:7c:2f: 0e:d0:04:a2:0f:fc:66:24:78:2a:43:13:18:ca:94: 72:35:ef:82:55:8c:56:70:a6:a2:80:7c:dc:c7:0a: 88:d3:8e:73:b5:4a:6b:f6:b7:0a:72:fe:37:89:fa: 99:e5:42:c0:5f:97:f2:25:a5:25:14:3c:de:37:62: ce:65:e4:17:09:c6:83:f6:0b:54:35:4e:fa:8c:73: 22:ec:0f:83:49:85:f0:83:89:c8:4f:67:fe:ff:1b: 4e:8b:01:a8:7a:a2:c3:55:dd:90:88:02:14:11:c7: 15:bf:78:71:8f:87:c7:9f:cd:4f:b5:17:d9:f1:65: 89:e7:3c:97:a6:7c:9f:8c:b9:6e:ca:b2:27:12:cd: e2:11:1d:dc:7d:6c:24:7e:c3:48:81:e4:cb:9a:ca: 46:39:16:a3:c5:1a:eb:ca:6e:a2:6e:5f:1b:72:27: d6:f0:83:33:45:7e:33:f5:87:bd:5c:13:b1:c7:fb: 2d:bb:c7:e7:1d:8e:18:25:3b:33:53:e5:0c:61:44: b7:90:76:5f:81:db:9c:a4:60:00:a7:ac:0a:b8:b2: 40:9f:75:2a:e4:77:93:ac:df:38:f8:d5:e5:8f:58: 69:ed:96:67:f8:68:f6:7f:dc:b3:84:5c:c7:56:11: da:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:79:5E:36:82:0F:3A:8E:CD:61:16:0C:7D:EE:FD:D6:04:C7:4C:D5 X509v3 Authority Key Identifier: keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:f9:04:6e:9f:6d:ef:d4:2b:57:15:88:cb:97:73:9c:b6:99: 60:9d:77:43:a7:8e:a7:de:7b:42:d9:01:a6:44:d1:13:37:e8: bc:8b:ab:c1:f8:c2:ec:b4:f0:c6:07:71:62:ca:50:b5:4f:4c: 23:fc:ea:b3:73:dc:c3:32:a8:fc:39:f6:3d:06:c8:41:e4:a3: fb:06:30:fe:41:54:f2:c0:a5:e6:18:e8:73:cf:0e:d2:24:be: 7a:15:35:5f:d1:8f:dc:f0:15:35:b6:8e:c4:dd:e2:52:1f:54: ec:54:1d:65:a9:65:e5:6d:3f:20:de:8a:52:76:df:03:43:c1: 92:23:84:09:48:5a:d6:2f:1f:63:af:a5:03:50:34:a0:a1:0d: 38:7e:4e:49:51:cd:40:36:46:52:f7:ff:9e:41:9f:6d:d1:db: 32:24:d4:e7:99:e5:36:ac:26:fe:15:05:56:30:33:9d:16:30: e6:5a:06:29:b4:e6:4f:6b:a9:85:39:63:29:ad:77:fe:42:af: 5a:db:9b:37:65:5f:b1:40:10:bc:c6:9b:ca:57:59:ae:87:b3: 54:c7:9a:0d:43:01:ae:09:a3:58:95:55:3a:bd:51:54:90:fc: fa:42:27:3e:ee:50:9b:e8:8c:48:b3:1f:c1:f9:1c:ca:11:55: 9b:3a:a3:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRENjAxMTAvBgNVBAUTKEUwQkEyMjhFQUY5ODEyRjA2N0QyRkYzQkY4MDY4OTU2 OThDOTM5NzcwHhcNMjUwNzAyMjMxMjU5WhcNMjUwNzA5MjMxMjU5WjAYMRYwFAYD VQQDEw02ODY1YmNmYy01N2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZS4kE0qkXCcauCvfC8O0ASiD/xmJHgqQxMYypRyNe+CVYxWcKaigHzcxwqI 045ztUpr9rcKcv43ifqZ5ULAX5fyJaUlFDzeN2LOZeQXCcaD9gtUNU76jHMi7A+D SYXwg4nIT2f+/xtOiwGoeqLDVd2QiAIUEccVv3hxj4fHn81PtRfZ8WWJ5zyXpnyf jLluyrInEs3iER3cfWwkfsNIgeTLmspGORajxRrrym6ibl8bcifW8IMzRX4z9Ye9 XBOxx/stu8fnHY4YJTszU+UMYUS3kHZfgducpGAAp6wKuLJAn3Uq5HeTrN84+NXl j1hp7ZZn+Gj2f9yzhFzHVhHalwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIB5XjaC DzqOzWEWDH3u/dYEx0zVMB8GA1UdIwQYMBaAFOC6Io6vmBLwZ9L/O/gGiVaYyTl3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEQ2MC85RTBERTM5MkI0 NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2Qm4wdjg3LUFhSlZwakpP WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMb2lqcS1ZRXZCbjB2ODctQWFKVnBqSk9YYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEQ2MC85RTBERTM5MkI0NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2 Qm4wdjg3LUFhSlZwakpPWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI+QRun23v1CtXFYjLl3OctplgnXdDp46n3ntC2QGmRNETN+i8i6vB +MLstPDGB3FiylC1T0wj/Oqzc9zDMqj8OfY9BshB5KP7BjD+QVTywKXmGOhzzw7S JL56FTVf0Y/c8BU1to7E3eJSH1TsVB1lqWXlbT8g3opSdt8DQ8GSI4QJSFrWLx9j r6UDUDSgoQ04fk5JUc1ANkZS9/+eQZ9t0dsyJNTnmeU2rCb+FQVWMDOdFjDmWgYp tOZPa6mFOWMprXf+Qq9a25s3ZV+xQBC8xpvKV1muh7NUx5oNQwGuCaNYlVU6vVFU kPz6Qic+7lCb6IxIsx/B+RzKEVWbOqOD -----END CERTIFICATE-----Generated at Thu Jul 3 12:27:18 2025 by rpki-client