$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft File: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json) Hash identifier: qk3WTFB4KLA0/kacsB2Z8lzWoEs0DDMPLB/Xcun4zh8= Subject key identifier: 24:B8:8F:58:7C:B4:34:DC:39:1A:17:A7:21:91:2A:45:34:8B:C4:34 Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 Certificate issuer: /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Certificate serial: 076C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft Manifest number: 0763 Signing time: Tue 22 Jul 2025 21:53:41 +0000 Manifest this update: Tue 22 Jul 2025 21:53:40 +0000 Manifest next update: Tue 29 Jul 2025 21:53:40 +0000 Files and hashes: 1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: 5/Ce1grAr0TeUQLK0e8dRJ2Ekw2/KcI3IzYbPfni8zY=) 2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: By6Dq5HHVlEkvf0nTtSM0kJMMOYfz+8LI2/AK8Ixb68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 21:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1900 (0x76c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Validity Not Before: Jul 22 21:53:40 2025 GMT Not After : Jul 29 21:53:40 2025 GMT Subject: CN=68800864-4af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a4:c0:c7:7e:22:0e:e7:df:a2:60:b4:53:70: 3a:c7:a6:a9:4e:3a:45:2e:cd:4e:e6:ad:60:4f:ad: 2d:8d:ff:0e:2f:55:8f:6b:8d:6e:0b:b0:e0:7c:3f: 5f:5a:f8:72:74:99:ad:05:c1:12:4e:ef:85:e8:dd: ef:2d:90:7a:ee:c7:06:49:98:fa:62:18:5d:a9:28: f3:0c:da:16:9f:14:7c:d0:27:82:0c:03:8d:e4:22: 39:0a:f2:e4:4f:47:21:a9:85:83:fd:03:d1:93:30: e3:e7:3e:fc:17:17:f0:f3:29:60:86:c3:4e:d8:fb: ed:9d:5d:43:c2:6d:ae:02:69:d1:cf:8a:ed:11:5c: 18:cd:73:1a:3a:9a:26:24:24:07:f2:8e:50:91:fc: 8e:d3:f7:5e:d7:1c:87:45:d2:19:5a:6f:54:e9:86: f9:e5:32:f0:b2:fb:13:1b:4b:ad:a2:ea:f7:3b:95: 2c:9a:64:53:6a:08:25:0f:cf:ca:1e:9b:9f:15:20: 4f:7f:26:d5:e2:75:13:48:cf:f6:2d:4d:be:9b:13: 42:85:d9:00:49:95:43:a9:87:54:af:c4:4e:33:60: 41:da:d3:4b:45:58:cc:ff:1f:c2:06:9a:d4:7e:fb: 4a:ff:dd:59:1d:c2:24:18:85:0c:ca:11:6b:3a:3d: 19:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B8:8F:58:7C:B4:34:DC:39:1A:17:A7:21:91:2A:45:34:8B:C4:34 X509v3 Authority Key Identifier: keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f9:ea:6f:8e:c6:d3:8b:1a:c9:f4:b2:c2:0c:ea:14:a8:33: 3a:ce:10:24:f1:9a:b3:8d:20:15:84:91:99:c1:fe:1c:07:9c: 57:48:df:ac:70:36:b7:dc:a7:9b:3f:01:1d:67:d5:84:bb:6e: 60:3a:80:70:81:ae:4f:ff:07:35:33:d2:93:a1:29:9a:1a:ca: f8:bc:ca:79:6f:1d:b0:e4:2e:42:42:40:79:61:47:cb:d5:4e: 11:e6:ae:c7:42:70:15:df:ab:fb:6b:2f:f7:96:ae:51:f0:55: a0:90:0a:18:55:6a:46:22:7f:38:f5:45:16:9e:25:6a:4c:3a: 3c:ec:d9:99:77:92:f8:8b:84:87:5b:d8:d4:64:02:1a:52:5b: 00:ef:01:9a:79:b8:d2:06:d4:0e:e3:a9:8b:e0:9e:bf:76:e3: 63:09:20:35:82:2d:bb:68:73:27:e6:25:79:ad:ad:19:e5:56: 48:3a:7d:e7:75:30:5a:d4:3d:e4:64:9d:79:b2:16:64:fd:f4: 79:45:3a:bc:ac:07:41:a7:b9:d1:f6:52:57:d3:c3:2a:0e:26: e1:91:37:a3:4f:a6:e2:a2:17:5f:e5:11:e7:00:b6:07:ce:5d: 04:f7:4a:0e:46:53:18:af:f9:c4:bf:a1:4d:19:1a:8b:10:61: ea:1d:dd:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkyMjAxMTAvBgNVBAUTKEUyQ0ZDNDJCNkEwODE1MEFFRkVGRTcxODlCRTVBRjJC RTU2OEY4QzEwHhcNMjUwNzIyMjE1MzQwWhcNMjUwNzI5MjE1MzQwWjAYMRYwFAYD VQQDEw02ODgwMDg2NC00YWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlaTAx34iDuffomC0U3A6x6apTjpFLs1O5q1gT60tjf8OL1WPa41uC7DgfD9f WvhydJmtBcESTu+F6N3vLZB67scGSZj6YhhdqSjzDNoWnxR80CeCDAON5CI5CvLk T0chqYWD/QPRkzDj5z78Fxfw8ylghsNO2PvtnV1Dwm2uAmnRz4rtEVwYzXMaOpom JCQH8o5QkfyO0/de1xyHRdIZWm9U6Yb55TLwsvsTG0utour3O5UsmmRTagglD8/K HpufFSBPfybV4nUTSM/2LU2+mxNChdkASZVDqYdUr8ROM2BB2tNLRVjM/x/CBprU fvtK/91ZHcIkGIUMyhFrOj0Z9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCS4j1h8 tDTcORoXpyGRKkU0i8Q0MB8GA1UdIwQYMBaAFOLPxCtqCBUK7+/nGJvlryvlaPjB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTIyMC8xNUNEMUMyMjI4 QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZRcnY3LWNZbS1XdkstVm8t TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRzX0VLMm9JRlFydjctY1ltLVd2Sy1Wby1NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTIyMC8xNUNEMUMyMjI4QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZR cnY3LWNZbS1XdkstVm8tTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8+epvjsbTixrJ9LLCDOoUqDM6zhAk8ZqzjSAVhJGZwf4cB5xXSN+s cDa33KebPwEdZ9WEu25gOoBwga5P/wc1M9KToSmaGsr4vMp5bx2w5C5CQkB5YUfL 1U4R5q7HQnAV36v7ay/3lq5R8FWgkAoYVWpGIn849UUWniVqTDo87NmZd5L4i4SH W9jUZAIaUlsA7wGaebjSBtQO46mL4J6/duNjCSA1gi27aHMn5iV5ra0Z5VZIOn3n dTBa1D3kZJ15shZk/fR5RTq8rAdBp7nR9lJX08MqDibhkTejT6biohdf5RHnALYH zl0E90oORlMYr/nEv6FNGRqLEGHqHd0k -----END CERTIFICATE-----Generated at Thu Jul 24 12:13:12 2025 by rpki-client