$ rpki-client -vvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft File: 4TxHTdRFcajO9AZpTgStasYbJWY.mft (raw, json) Hash identifier: j8Hx6GtwE8BNsadJIW2jE0Kq97jnewyIZK2vCyBFyQI= Subject key identifier: 9D:D7:3B:49:CA:E0:1F:14:56:D5:0B:BB:E9:53:E1:C4:B8:A9:19:B8 Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66 Certificate issuer: /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft Manifest number: 0141 Signing time: Thu 03 Jul 2025 04:29:05 +0000 Manifest this update: Thu 03 Jul 2025 04:29:05 +0000 Manifest next update: Thu 10 Jul 2025 04:29:05 +0000 Files and hashes: 1: 4TxHTdRFcajO9AZpTgStasYbJWY.crl (hash: bpHQfMviMRID29Nm7fL7DbieO6R7+In76Da8W4wZtHQ=) 2: 658CF9F2721411EEAC707910C4F9AE02.roa (hash: q+T3C3H2UjoBgZcZ1La6G7C0poZwdj+81El+MVIEtoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D313, serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566 Validity Not Before: Jul 3 04:29:05 2025 GMT Not After : Jul 10 04:29:05 2025 GMT Subject: CN=68660711-66f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:4c:bb:27:fd:3c:e1:d9:03:f0:f2:bf:85: da:77:1a:1e:55:54:d0:83:5d:e3:0d:8e:c9:75:86: d5:3f:8f:82:34:11:b4:19:47:f9:0b:0f:36:20:be: b4:08:aa:7a:24:ad:f4:81:de:2d:1c:75:ab:a1:8f: 44:32:fd:11:65:ee:28:7f:6d:3f:d4:a7:77:b5:c8: 6b:32:36:2d:f5:51:99:50:ef:31:4c:79:6b:7e:16: 50:cf:eb:b9:02:fc:ca:7c:82:87:23:91:60:3e:e7: 80:18:fd:a2:31:6f:f3:f5:0a:04:08:34:46:c9:61: 3a:4c:53:02:81:d5:8d:d2:b1:7c:e5:74:3d:40:9c: f6:5d:be:c2:1e:d9:aa:11:21:63:79:77:13:1f:c4: cb:db:dd:6d:2c:4d:bf:ea:3c:9d:11:98:4e:df:f4: 3c:5e:6a:76:c5:b5:88:41:8f:4f:7b:92:6a:a2:08: ca:d1:81:b5:a2:c3:41:36:b5:d1:7c:a0:fd:e0:0f: 47:62:87:86:67:c6:14:84:a8:78:05:b8:2f:b1:8c: 70:1b:46:a3:19:05:9c:7b:a3:a1:8d:ba:97:ee:b3: 58:af:61:6a:23:8a:47:8a:e4:0c:d9:95:bc:5f:9c: d8:bd:76:e0:80:31:89:94:0a:96:46:37:a8:c0:bc: a6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D7:3B:49:CA:E0:1F:14:56:D5:0B:BB:E9:53:E1:C4:B8:A9:19:B8 X509v3 Authority Key Identifier: keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1d:90:b5:e7:74:30:91:c1:50:92:65:d9:5f:b0:50:c7:63: 1c:fd:56:3e:d0:92:49:42:60:e1:c6:4f:e5:64:f6:3e:82:0b: 25:0c:a6:2e:63:f7:6c:32:1a:7c:7a:29:0d:b3:32:9d:6c:d1: bc:ca:36:9a:83:3f:37:b2:26:c5:99:32:ee:9c:57:08:13:8d: d5:b3:a0:2c:bf:fa:bc:31:39:e5:66:35:78:58:b7:9a:2d:d9: e0:e9:9b:c2:10:c8:9b:b7:62:c6:1f:da:ad:2b:92:d1:49:7d: bc:f6:2b:b3:0e:49:49:32:fe:b0:c2:a0:8d:e8:b8:e2:56:84: b7:35:45:d9:79:7c:13:26:fa:5f:70:19:b8:9e:3a:be:54:18: bd:8a:0e:32:a1:79:b2:37:d1:6d:5d:9a:cc:fb:5f:e1:18:37: 88:13:16:77:4d:a4:2b:ea:90:0c:fa:0e:31:26:37:47:d0:89: d2:93:95:c4:48:9d:0d:3c:be:d5:18:3f:d4:e3:b6:28:42:03: 25:07:ff:67:ce:b6:7e:65:72:55:54:71:57:5d:81:f9:a0:54: 0a:65:12:48:cd:4d:0d:2d:bb:15:64:16:a9:e2:76:ab:e0:46: ac:5d:ff:45:14:58:d9:e2:cd:67:9b:9b:1a:25:5e:45:fb:ab: 36:50:93:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzMTMxMTAvBgNVBAUTKEUxM0M0NzRERDQ0NTcxQThDRUY0MDY2OTRFMDRBRDZB QzYxQjI1NjYwHhcNMjUwNzAzMDQyOTA1WhcNMjUwNzEwMDQyOTA1WjAYMRYwFAYD VQQDEw02ODY2MDcxMS02NmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsp5Muyf9POHZA/Dyv4XadxoeVVTQg13jDY7JdYbVP4+CNBG0GUf5Cw82IL60 CKp6JK30gd4tHHWroY9EMv0RZe4of20/1Kd3tchrMjYt9VGZUO8xTHlrfhZQz+u5 AvzKfIKHI5FgPueAGP2iMW/z9QoECDRGyWE6TFMCgdWN0rF85XQ9QJz2Xb7CHtmq ESFjeXcTH8TL291tLE2/6jydEZhO3/Q8Xmp2xbWIQY9Pe5JqogjK0YG1osNBNrXR fKD94A9HYoeGZ8YUhKh4BbgvsYxwG0ajGQWce6OhjbqX7rNYr2FqI4pHiuQM2ZW8 X5zYvXbggDGJlAqWRjeowLymqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3XO0nK 4B8UVtULu+lT4cS4qRm4MB8GA1UdIwQYMBaAFOE8R03URXGozvQGaU4ErWrGGyVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDMxMy8wRjIwNzk3NjZF RjUxMUVFODREQTY5ODJDNEY5QUUwMi80VHhIVGRSRmNhak85QVpwVGdTdGFzWWJK V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRUeEhUZFJGY2FqTzlBWnBUZ1N0YXNZYkpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDMxMy8wRjIwNzk3NjZFRjUxMUVFODREQTY5ODJDNEY5QUUwMi80VHhIVGRSRmNh ak85QVpwVGdTdGFzWWJKV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeHZC153QwkcFQkmXZX7BQx2Mc/VY+0JJJQmDhxk/lZPY+ggslDKYu Y/dsMhp8eikNszKdbNG8yjaagz83sibFmTLunFcIE43Vs6Asv/q8MTnlZjV4WLea Ldng6ZvCEMibt2LGH9qtK5LRSX289iuzDklJMv6wwqCN6LjiVoS3NUXZeXwTJvpf cBm4njq+VBi9ig4yoXmyN9FtXZrM+1/hGDeIExZ3TaQr6pAM+g4xJjdH0InSk5XE SJ0NPL7VGD/U47YoQgMlB/9nzrZ+ZXJVVHFXXYH5oFQKZRJIzU0NLbsVZBap4nar 4EasXf9FFFjZ4s1nm5saJV5F+6s2UJPc -----END CERTIFICATE-----Generated at Thu Jul 3 09:34:07 2025 by rpki-client