$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft File: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json) Hash identifier: JoebPypbyQhRuKigV807mE9tFpmqr+FJz3wfTkq+06E= Subject key identifier: 10:A3:16:55:01:98:A8:D1:85:CD:BD:42:21:CB:F5:2C:0A:C6:EC:9C Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 Certificate issuer: /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Certificate serial: 076D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft Manifest number: 0764 Signing time: Thu 24 Jul 2025 21:47:45 +0000 Manifest this update: Thu 24 Jul 2025 21:47:45 +0000 Manifest next update: Thu 31 Jul 2025 21:47:45 +0000 Files and hashes: 1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: usvEaeFdxNklZvGQMH7DvT64wFIUJWV39HnNTvbebD4=) 2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: By6Dq5HHVlEkvf0nTtSM0kJMMOYfz+8LI2/AK8Ixb68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 21:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1901 (0x76d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Validity Not Before: Jul 24 21:47:45 2025 GMT Not After : Jul 31 21:47:45 2025 GMT Subject: CN=6882aa01-307f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:31:81:5e:07:43:c4:d3:b6:59:c0:c1:ad:fd: a5:60:13:07:68:d1:87:65:34:ce:ee:1b:7d:96:a9: c6:1f:a2:4a:e5:83:d3:c7:e3:4e:f5:5a:98:b9:87: 09:c2:d1:5d:b0:7e:f6:60:f2:50:31:68:fe:7f:20: 4c:0c:29:c5:e0:84:2f:45:0f:9c:d4:a9:a5:2a:76: 24:8e:b7:f2:b9:b2:68:0c:01:b7:b3:b0:92:5e:26: 68:8f:d8:ba:ca:80:86:ba:43:ad:e5:99:3b:3c:03: 0c:92:3e:7b:70:24:66:1c:5d:cc:f7:80:bd:bc:9b: 82:72:00:58:11:b7:70:49:07:e7:e3:c9:0d:33:f2: 3a:58:e0:d8:44:04:b0:22:aa:bc:48:ac:58:40:50: de:3a:c8:ee:53:3a:e0:d4:31:74:48:de:9f:23:59: 67:ae:2d:8d:03:75:9b:06:8f:d2:97:05:ce:0b:eb: 2b:e4:5c:0b:3f:5b:9a:75:2e:4e:2b:fa:2a:38:bf: 0e:61:04:3f:8a:dd:c4:c5:00:22:0e:a5:f3:d8:d9: 69:4b:2f:ea:e7:fe:be:e2:eb:5c:25:0c:ff:ad:73: 4b:09:7d:e7:6e:2d:23:07:d3:13:1f:c9:3f:fd:5f: 05:23:71:07:1b:8c:e7:0f:b2:f7:20:59:ae:50:e6: 9c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A3:16:55:01:98:A8:D1:85:CD:BD:42:21:CB:F5:2C:0A:C6:EC:9C X509v3 Authority Key Identifier: keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:ff:58:28:29:97:68:f1:19:31:7e:2e:90:25:d6:fe:01:76: 9a:df:3b:73:15:2c:5f:c5:14:64:7b:ca:db:d9:19:51:37:98: 7a:d7:5b:81:4c:e3:e6:a3:d0:33:30:ea:08:e1:c8:e4:77:3f: 37:88:3c:90:05:9e:a4:14:cf:13:02:f7:d3:fb:20:18:69:58: 0e:94:28:7a:25:b1:6d:58:1e:ec:ca:85:b0:8f:5c:b5:09:ab: c4:be:22:eb:5b:f5:87:79:8e:ec:cc:88:00:20:aa:c3:31:45: 2a:65:91:4a:69:8f:42:77:c2:20:8a:b3:c4:11:b7:73:ba:17: 52:43:95:52:18:87:d4:8b:44:2f:7c:9a:22:02:34:0c:ea:d0: 8d:10:8f:8a:15:86:ac:3d:d3:8e:0e:4d:be:95:55:74:aa:d3: c7:49:df:a0:f2:b2:00:7a:34:9f:90:bd:09:a2:02:5e:cd:98: 55:04:3f:07:d0:2c:da:0c:a1:76:68:be:03:a7:9f:15:98:3e: a3:2e:d7:79:42:c3:ae:c2:b9:78:6e:22:0b:60:be:56:9e:41: 06:b7:d4:86:fc:a4:bb:4d:2e:b4:5e:b3:b3:e7:59:6b:b3:34: 72:b1:5e:48:1f:6b:a4:9e:e3:c9:32:fa:b3:f7:00:6a:6b:d6: e7:67:b4:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkyMjAxMTAvBgNVBAUTKEUyQ0ZDNDJCNkEwODE1MEFFRkVGRTcxODlCRTVBRjJC RTU2OEY4QzEwHhcNMjUwNzI0MjE0NzQ1WhcNMjUwNzMxMjE0NzQ1WjAYMRYwFAYD VQQDEw02ODgyYWEwMS0zMDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjGBXgdDxNO2WcDBrf2lYBMHaNGHZTTO7ht9lqnGH6JK5YPTx+NO9VqYuYcJ wtFdsH72YPJQMWj+fyBMDCnF4IQvRQ+c1KmlKnYkjrfyubJoDAG3s7CSXiZoj9i6 yoCGukOt5Zk7PAMMkj57cCRmHF3M94C9vJuCcgBYEbdwSQfn48kNM/I6WODYRASw Iqq8SKxYQFDeOsjuUzrg1DF0SN6fI1lnri2NA3WbBo/SlwXOC+sr5FwLP1uadS5O K/oqOL8OYQQ/it3ExQAiDqXz2NlpSy/q5/6+4utcJQz/rXNLCX3nbi0jB9MTH8k/ /V8FI3EHG4znD7L3IFmuUOaciwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCjFlUB mKjRhc29QiHL9SwKxuycMB8GA1UdIwQYMBaAFOLPxCtqCBUK7+/nGJvlryvlaPjB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTIyMC8xNUNEMUMyMjI4 QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZRcnY3LWNZbS1XdkstVm8t TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRzX0VLMm9JRlFydjctY1ltLVd2Sy1Wby1NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTIyMC8xNUNEMUMyMjI4QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZR cnY3LWNZbS1XdkstVm8tTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ/1goKZdo8Rkxfi6QJdb+AXaa3ztzFSxfxRRke8rb2RlRN5h611uB TOPmo9AzMOoI4cjkdz83iDyQBZ6kFM8TAvfT+yAYaVgOlCh6JbFtWB7syoWwj1y1 CavEviLrW/WHeY7szIgAIKrDMUUqZZFKaY9Cd8IgirPEEbdzuhdSQ5VSGIfUi0Qv fJoiAjQM6tCNEI+KFYasPdOODk2+lVV0qtPHSd+g8rIAejSfkL0JogJezZhVBD8H 0CzaDKF2aL4Dp58VmD6jLtd5QsOuwrl4biILYL5WnkEGt9SG/KS7TS60XrOz51lr szRysV5IH2uknuPJMvqz9wBqa9bnZ7Sh -----END CERTIFICATE-----Generated at Fri Jul 25 07:03:09 2025 by rpki-client