$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft File: 4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json) Hash identifier: 6f9Hs2+sgdPY2bGYQR9jk7taCzNBatl5H6nl4KEQcnE= Subject key identifier: B0:F4:AE:39:4F:67:33:9B:B8:03:82:8D:43:36:A9:DD:66:7E:54:37 Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Certificate serial: 0479 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft Manifest number: 046F Signing time: Wed 02 Jul 2025 21:04:52 +0000 Manifest this update: Wed 02 Jul 2025 21:04:51 +0000 Manifest next update: Wed 09 Jul 2025 21:04:51 +0000 Files and hashes: 1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: iuimiPDr/fUufdwQE6XrTME8wt8/+uK2hABgJJEnKpg=) 2: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: lWr4ljnX2/yEjyiQoz0OgG+PVsyj+yPc7sx1n1rIGWY=) 3: B38D932050EF11EC8583962BC4F9AE02.roa (hash: vGjVKyfhGouNwPbyNw8ueo4siItyyWgs22PxyDfp4xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1145 (0x479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Validity Not Before: Jul 2 21:04:51 2025 GMT Not After : Jul 9 21:04:51 2025 GMT Subject: CN=68659ef3-3bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:4b:24:cb:ea:27:2b:89:39:e1:6d:5a:32: a7:d9:69:7d:08:04:f8:94:e2:1b:ff:78:ca:b9:5c: 58:49:bb:e6:4b:1a:f1:73:37:e8:fb:53:e3:84:7b: 26:c2:28:ea:9d:91:3b:22:31:28:47:8f:cc:a0:79: c3:29:44:a7:37:6d:55:db:9e:c9:5d:43:d7:5a:49: 6e:ec:03:86:76:9b:1e:c7:cc:83:3a:56:23:3f:22: 05:69:24:1d:13:47:30:d3:9e:0c:32:4b:6b:ba:64: a0:fe:90:22:b8:eb:9d:43:94:47:08:79:10:1a:01: 8f:dd:d4:1d:85:79:17:6b:5b:a0:4f:7c:08:5a:c0: 22:9a:64:33:e7:b5:a5:91:66:4e:84:db:3c:4d:2e: 37:ec:09:47:ad:88:61:f0:21:cd:c4:83:c8:f1:7a: 36:19:ae:6e:51:9b:c0:0f:41:09:d9:30:aa:7c:09: 6c:00:6e:b0:6e:61:80:bf:4f:09:ae:2b:5a:38:85: 3f:f4:d5:e2:80:aa:c1:74:20:7f:69:b0:e1:df:07: 80:6a:13:61:97:69:e9:12:b1:b4:45:e7:bb:d8:7a: 05:11:d2:d9:69:b2:c9:ad:02:c1:ba:99:ae:2e:4a: 71:19:98:a2:ac:35:fb:43:60:d7:9d:39:b4:a4:6b: e7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F4:AE:39:4F:67:33:9B:B8:03:82:8D:43:36:A9:DD:66:7E:54:37 X509v3 Authority Key Identifier: keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0d:06:3d:b6:0f:ec:2d:ab:c4:f7:6a:89:b7:7a:f6:1a:44: 45:53:c5:fc:f7:e0:14:70:bb:78:f6:a2:79:77:d6:4c:7e:d3: b6:9b:7d:c2:8e:d5:05:84:1e:0b:f2:66:b1:f7:8d:9a:a8:c4: 5e:57:03:00:ea:c5:5b:66:c3:2c:9b:c1:99:0c:ac:bb:79:e2: 03:de:a9:cd:07:d1:83:e8:d4:af:2a:83:f2:8a:0a:c3:aa:0f: 19:d8:57:37:75:38:32:28:6d:2b:d4:8d:c4:ba:8e:6c:d6:eb: 99:67:7d:d2:ca:3c:7b:ae:89:ef:56:0e:bb:94:a3:33:53:16: 01:ad:10:e7:84:ee:b5:b5:87:80:59:f1:d3:9e:2c:ed:88:e2: c3:50:c8:63:50:fb:74:60:dd:14:7e:5a:0b:d9:df:8e:3f:57: 57:f4:39:61:cd:41:d0:f4:2b:c7:78:8c:31:58:56:16:8e:15: aa:6d:d8:47:7a:ce:fa:56:30:59:c0:05:0d:b9:39:16:08:84: 40:83:1a:20:c4:dd:e8:60:b9:dc:4d:f3:eb:83:35:39:eb:d7: 1e:43:78:49:43:e7:a4:63:17:79:9e:a9:b5:a6:ce:66:51:85: ef:94:5b:79:7c:64:e7:ac:c5:9f:07:c2:23:50:4d:53:33:7c: 5f:bc:50:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5 NTNCMzZFNTEwHhcNMjUwNzAyMjEwNDUxWhcNMjUwNzA5MjEwNDUxWjAYMRYwFAYD VQQDEw02ODY1OWVmMy0zYmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/BLJMvqJyuJOeFtWjKn2Wl9CAT4lOIb/3jKuVxYSbvmSxrxczfo+1PjhHsm wijqnZE7IjEoR4/MoHnDKUSnN21V257JXUPXWklu7AOGdpsex8yDOlYjPyIFaSQd E0cw054MMktrumSg/pAiuOudQ5RHCHkQGgGP3dQdhXkXa1ugT3wIWsAimmQz57Wl kWZOhNs8TS437AlHrYhh8CHNxIPI8Xo2Ga5uUZvAD0EJ2TCqfAlsAG6wbmGAv08J ritaOIU/9NXigKrBdCB/abDh3weAahNhl2npErG0Ree72HoFEdLZabLJrQLBupmu LkpxGZiirDX7Q2DXnTm0pGvn7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLD0rjlP ZzObuAOCjUM2qd1mflQ3MB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVCMC9FMzJDODdDQzUwRDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERK OWxXVV9HNkppZnlWT3pibEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdDQY9tg/sLavE92qJt3r2GkRFU8X89+AUcLt49qJ5d9ZMftO2m33C jtUFhB4L8max942aqMReVwMA6sVbZsMsm8GZDKy7eeID3qnNB9GD6NSvKoPyigrD qg8Z2Fc3dTgyKG0r1I3Euo5s1uuZZ33Syjx7ronvVg67lKMzUxYBrRDnhO61tYeA WfHTniztiOLDUMhjUPt0YN0UfloL2d+OP1dX9DlhzUHQ9CvHeIwxWFYWjhWqbdhH es76VjBZwAUNuTkWCIRAgxogxN3oYLncTfPrgzU569ceQ3hJQ+ekYxd5nqm1ps5m UYXvlFt5fGTnrMWfB8IjUE1TM3xfvFBz -----END CERTIFICATE-----Generated at Thu Jul 3 10:03:28 2025 by rpki-client