$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: Ev8JrHxlnx1+mPVvpZ3jiVU8cjgDv5SZCV2EbJV/apc= Subject key identifier: D6:71:86:25:7E:B2:EA:1F:0E:B3:FF:F6:1D:0D:2F:D0:93:75:DC:B9 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 02C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 029B Signing time: Thu 03 Jul 2025 02:07:22 +0000 Manifest this update: Thu 03 Jul 2025 02:07:21 +0000 Manifest next update: Thu 10 Jul 2025 02:07:21 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: M/N6+GPbmwCh37GSakzG3xlg1U5KGxex0TQ/V9xuGIo=) 2: CC647BDECAC711EF80553A61C4F9AE02.roa (hash: JjvbSqdanHSpYIcMXGp+ZgcFpNIRiyjhFnX93ubLPo8=) 3: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: voNhvFt+rl48+RXxjQWaNEIjDq7tMEczadZRVwJF374=) 4: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: J3Ksm9WsEr0TXjLLhaQloclJKmSPXVrqrAzTlf/eKtU=) 5: 3632957E441311EE8A03A472C4F9AE02.roa (hash: hc0GUtEKKEGW9gMZlTO39H3fWKoJ6wdGBAjVqIVrLxQ=) 6: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: SMaX3aa/UFh43gcKCcEgmT4cm/dWEuQesSH3aBzRpfE=) 7: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: 74i29heKayX8ulpi57w5YoL9mLrlBcexKja8YJG8ecM=) 8: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: I/sFHc7XYiJ8eT0AIMA2+7XdYKHUvmlkXtbK7T+Me2I=) 9: 3D34A750A88111ED80831318C4F9AE02.roa (hash: a76JQF1qiEmLZKSWyiAc52KnTZOIYMAyGXRjtxdQkfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 706 (0x2c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Jul 3 02:07:21 2025 GMT Not After : Jul 10 02:07:21 2025 GMT Subject: CN=6865e5d9-b82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:82:ed:8f:50:42:e1:62:72:26:f2:b1:49: 71:83:d6:3a:a9:02:3a:74:74:a2:f0:c1:2a:64:7c: de:90:9e:41:e3:6e:9a:a0:74:a4:13:f7:39:77:61: ea:10:5d:f8:6e:01:20:0e:f3:6b:d4:82:86:a7:36: 4c:06:f7:93:26:6a:00:35:d0:36:c0:16:34:ee:a3: 5e:fe:94:64:e9:20:6d:22:8a:26:a9:26:9b:9d:27: d5:54:8a:84:27:c6:39:7f:15:5b:19:0f:1d:3d:ee: 29:a8:f2:d9:29:c8:b2:b5:13:d9:7f:c1:3b:ea:81: bc:b3:88:a3:22:b0:d7:c0:b2:cc:8e:03:73:9c:fb: 18:18:c1:1d:b3:f7:34:a6:f1:8f:7f:c3:95:95:1f: 37:ae:cd:0f:fe:4a:45:2f:50:f4:86:c8:0e:da:65: 4d:5d:ef:23:76:57:6e:19:01:6a:87:9f:73:cc:16: 1f:9f:06:ee:ad:b5:67:5c:b8:d7:d0:8f:88:87:2f: 7b:eb:9a:b3:28:75:61:92:50:bf:70:d1:71:35:3b: 78:d4:5e:e8:86:e3:21:66:7b:ad:e8:a0:93:54:d9: e0:84:f6:86:6c:27:b1:88:2c:14:0b:72:7d:be:c7: 61:47:33:4e:f9:20:9f:5c:73:7e:e4:a7:91:41:c8: 3d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:71:86:25:7E:B2:EA:1F:0E:B3:FF:F6:1D:0D:2F:D0:93:75:DC:B9 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:42:8c:6d:73:9e:01:41:43:d1:1b:30:f5:5d:4b:c1:69:39: 75:a5:5d:93:f1:30:23:63:2f:aa:8a:84:26:21:ad:1d:28:6a: 01:42:97:89:4e:54:e2:37:4a:a7:f4:33:4f:4e:07:1e:58:7e: 7f:76:5f:8a:ce:9f:a4:52:e8:72:51:04:ba:de:cc:21:c8:32: a0:d1:81:db:15:58:a0:98:ea:5c:11:29:05:4c:d0:dd:95:42: 3f:3e:f8:fd:ac:a0:be:b6:34:7e:6a:ba:66:c9:db:ae:34:30: 7f:82:d1:60:66:29:c1:28:77:22:a3:36:4c:c6:5d:f6:8a:03: 19:80:48:01:ee:3b:ec:e5:91:d8:b6:78:56:ea:ab:15:ec:07: ae:a9:bd:24:27:bd:72:9b:32:4e:a9:2f:1e:95:92:f2:4c:a4: f9:c5:0c:68:bf:6d:b4:91:90:d9:e8:80:5c:4f:25:85:11:04: 09:1b:da:ee:59:7b:0d:a7:a0:73:55:a7:b9:c3:de:06:7c:5f: f5:4b:f5:6b:e3:d3:bd:9c:d3:dc:aa:9e:7f:c0:86:ea:09:1f: c5:e4:0a:81:e9:68:f1:a9:9e:53:cb:a6:f7:9a:83:54:b4:06: 5c:9d:2a:ef:6a:80:24:38:7e:4d:51:15:6f:e1:a4:1b:e1:0f: 0b:9b:19:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjUwNzAzMDIwNzIxWhcNMjUwNzEwMDIwNzIxWjAYMRYwFAYD VQQDEw02ODY1ZTVkOS1iODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9qC7Y9QQuFicibysUlxg9Y6qQI6dHSi8MEqZHzekJ5B426aoHSkE/c5d2Hq EF34bgEgDvNr1IKGpzZMBveTJmoANdA2wBY07qNe/pRk6SBtIoomqSabnSfVVIqE J8Y5fxVbGQ8dPe4pqPLZKciytRPZf8E76oG8s4ijIrDXwLLMjgNznPsYGMEds/c0 pvGPf8OVlR83rs0P/kpFL1D0hsgO2mVNXe8jdlduGQFqh59zzBYfnwburbVnXLjX 0I+Ihy9765qzKHVhklC/cNFxNTt41F7ohuMhZnut6KCTVNnghPaGbCexiCwUC3J9 vsdhRzNO+SCfXHN+5KeRQcg9EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZxhiV+ suofDrP/9h0NL9CTddy5MB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrQoxtc54BQUPRGzD1XUvBaTl1pV2T8TAjYy+qioQmIa0dKGoBQpeJ TlTiN0qn9DNPTgceWH5/dl+Kzp+kUuhyUQS63swhyDKg0YHbFVigmOpcESkFTNDd lUI/Pvj9rKC+tjR+arpmyduuNDB/gtFgZinBKHciozZMxl32igMZgEgB7jvs5ZHY tnhW6qsV7Aeuqb0kJ71ymzJOqS8elZLyTKT5xQxov220kZDZ6IBcTyWFEQQJG9ru WXsNp6BzVae5w94GfF/1S/Vr49O9nNPcqp5/wIbqCR/F5AqB6WjxqZ5Ty6b3moNU tAZcnSrvaoAkOH5NURVv4aQb4Q8LmxnA -----END CERTIFICATE-----Generated at Thu Jul 3 10:21:14 2025 by rpki-client