$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json) Hash identifier: Ej9teNjj273iIYmIiHopS6c23Zh6ntKJ1pPNpBew6cc= Subject key identifier: 7B:AE:89:F9:88:E6:D0:76:AA:D0:A3:CF:1C:76:D4:0F:3A:F1:75:DB Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Certificate serial: 41B760B39A0F419F6CC58BE64067C3C7EAF76549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft Manifest number: 0304 Signing time: Thu 03 Jul 2025 02:16:54 +0000 Manifest this update: Thu 03 Jul 2025 02:11:54 +0000 Manifest next update: Fri 04 Jul 2025 03:58:54 +0000 Files and hashes: 1: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: SbkxL+7COZ6Tytm7k2uPgmc/+iWRhYRcOoIgx0LtkYU=) 2: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: IuJmEVUfqCPytnG8AEOkj/ZoGEMJgsuh1bHlpcX48s4=) 3: 4B1987D5160068092602529871C93EA320045A75.crl (hash: 9iBRTC+GO79lcJB8+1vzdRzI+aTCoAo0NN7dQN20ujU=) 4: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: h2bSnnI9a+kGlKn3GxEShW8TmFpFzCWMgYRzWIvLc4c=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 03:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b7:60:b3:9a:0f:41:9f:6c:c5:8b:e6:40:67:c3:c7:ea:f7:65:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75 Validity Not Before: Jul 3 02:11:54 2025 GMT Not After : Jul 4 03:58:54 2025 GMT Subject: CN=7BAE89F988E6D076AAD0A3CF1C76D40F3AF175DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:75:1d:d3:41:74:6a:0d:ca:14:d8:29:66: 69:f8:e1:5d:77:f2:4c:41:1e:9d:49:9a:e1:b2:36: 01:46:ba:51:31:fb:a8:80:e5:3f:0a:71:41:f9:12: 22:4d:ac:ba:c5:9f:81:4d:14:58:d9:8e:b9:6e:52: 94:49:d2:4c:96:49:9d:d4:9a:15:fe:a2:e4:4d:1d: 57:8e:66:a8:ec:d5:83:86:fb:0f:2e:31:b4:05:fb: 2e:74:99:b3:f1:26:98:63:7b:b4:5b:b7:8d:fc:11: ce:d7:f6:8a:b5:43:5b:e4:24:16:3a:03:d7:53:a9: 0c:19:29:d7:f3:99:82:9b:3d:28:d2:ab:2c:44:98: ca:e8:af:d9:4d:5a:3f:d3:01:58:71:ca:12:e8:04: 7e:22:4f:02:67:90:13:73:09:89:d5:47:83:f8:d3: 04:9c:55:3f:a5:44:18:f8:4c:95:06:ea:e8:73:2d: 5d:4d:c5:b8:f7:66:a3:ca:7c:5e:4f:5b:13:1a:3c: 37:83:7c:99:2f:a0:db:e0:ea:d7:f1:68:1d:e2:e7: c8:42:23:0f:1a:a4:ad:91:49:af:01:1d:40:a6:f8: 76:ec:55:d8:c8:38:04:fc:26:75:ea:f8:5c:95:7a: dd:cf:3d:36:5f:f7:f1:f3:17:cd:ce:68:b5:13:eb: 5a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AE:89:F9:88:E6:D0:76:AA:D0:A3:CF:1C:76:D4:0F:3A:F1:75:DB X509v3 Authority Key Identifier: keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c6:98:43:9a:05:ae:9f:56:ec:af:e0:d0:fe:8d:ae:99:ea: d3:3e:b4:40:37:c6:80:a5:82:03:0a:83:e6:8f:91:67:3b:d5: 41:e8:6c:82:65:b7:89:e7:58:bf:cb:fd:93:d5:e6:b0:5e:2b: 1a:86:a2:f8:65:cc:78:a4:ba:28:53:f6:78:8a:14:83:69:32: 8e:93:ea:f1:3c:dd:58:57:bb:28:63:d5:b2:e6:1d:c7:c5:b5: 26:92:4e:25:73:80:a8:a8:80:05:f4:3b:5f:10:e7:5e:ab:17: 2d:90:df:b2:93:d7:b6:41:c6:47:f5:16:20:8b:57:93:b4:84: f8:8d:44:d4:40:0c:1b:95:70:a9:68:3b:d7:c4:9e:25:be:ab: aa:c7:d1:5b:35:22:db:fc:a0:f2:ce:1e:c5:54:d2:48:29:80: 36:a2:23:0f:fc:42:3d:35:ff:d9:d7:b6:2d:3a:59:ad:99:3b: 90:f5:8a:67:b7:07:d2:fe:89:dc:2b:d5:9c:24:36:e5:02:f8: 1e:13:91:d0:5f:55:8c:b7:6e:04:e5:e2:6f:52:98:fb:cd:06: 9e:fa:56:ca:df:9b:76:7c:81:0f:01:21:e6:6a:75:ad:be:cb: 07:ba:e9:5b:33:4f:5e:60:5e:1c:d9:01:15:48:8b:11:37:bf: 26:bf:76:56 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQbdgs5oPQZ9sxYvmQGfDx+r3ZUkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2 MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI1MDcwMzAyMTE1NFoX DTI1MDcwNDAzNTg1NFowMzExMC8GA1UEAxMoN0JBRTg5Rjk4OEU2RDA3NkFBRDBB M0NGMUM3NkQ0MEYzQUYxNzVEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAQdR3TQXRqDcoU2ClmafjhXXfyTEEenUma4bI2AUa6UTH7qIDlPwpxQfkS Ik2susWfgU0UWNmOuW5SlEnSTJZJndSaFf6i5E0dV45mqOzVg4b7Dy4xtAX7LnSZ s/EmmGN7tFu3jfwRztf2irVDW+QkFjoD11OpDBkp1/OZgps9KNKrLESYyuiv2U1a P9MBWHHKEugEfiJPAmeQE3MJidVHg/jTBJxVP6VEGPhMlQbq6HMtXU3FuPdmo8p8 Xk9bExo8N4N8mS+g2+Dq1/FoHeLnyEIjDxqkrZFJrwEdQKb4duxV2Mg4BPwmder4 XJV63c89Nl/38fMXzc5otRPrWksCAwEAAaOCAhswggIXMB0GA1UdDgQWBBR7ron5 iObQdqrQo88cdtQPOvF12zAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAOMaYQ5oFrp9W7K/g0P6Nrpnq0z60QDfGgKWCAwqD5o+RZzvV QehsgmW3iedYv8v9k9XmsF4rGoai+GXMeKS6KFP2eIoUg2kyjpPq8TzdWFe7KGPV suYdx8W1JpJOJXOAqKiABfQ7XxDnXqsXLZDfspPXtkHGR/UWIItXk7SE+I1E1EAM G5VwqWg718SeJb6rqsfRWzUi2/yg8s4exVTSSCmANqIjD/xCPTX/2de2LTpZrZk7 kPWKZ7cH0v6J3CvVnCQ25QL4HhOR0F9VjLduBOXib1KY+80GnvpWyt+bdnyBDwEh 5mp1rb7LB7rpWzNPXmBeHNkBFUiLETe/Jr92Vg== -----END CERTIFICATE-----Generated at Thu Jul 3 18:50:52 2025 by rpki-client