$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft File: 4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json) Hash identifier: OpLid641uHTLM9k2p+jmBrrZ3+9zjbRY3wsxz4FXQ/k= Subject key identifier: 27:A3:46:73:49:C5:77:31:95:37:CE:F7:67:28:44:17:00:C5:E3:F6 Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft Manifest number: 027B Signing time: Sat 19 Jul 2025 02:08:38 +0000 Manifest this update: Sat 19 Jul 2025 02:08:37 +0000 Manifest next update: Sat 26 Jul 2025 02:08:37 +0000 Files and hashes: 1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: XG7j8g3qrGudd6iWG0gwbvZaZBnxn33P2RN4sp2/3fA=) 2: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: axhlzcql8Um5s2iVqGj/BuPhDZVy8siOPCHeHdpqbOU=) 3: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: ldX/DKDOg9xZhESj3T5OZ1Y87w44jU1f3a2RytTmEgo=) 4: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: RgIHOi6o2CyuImHKbYCkxFcAJ9v5chcNqvLkjQHCgqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Validity Not Before: Jul 19 02:08:37 2025 GMT Not After : Jul 26 02:08:37 2025 GMT Subject: CN=687afe26-20e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:f1:2b:cc:3b:84:f6:e2:3b:e8:f6:e3:9b: 48:67:13:d7:39:b0:6d:c3:de:61:00:ca:3b:a3:4e: 9c:0d:86:62:88:40:e6:e1:9b:5e:54:e7:9e:56:f3: 04:8f:31:00:a2:9a:df:af:c7:d9:aa:59:39:cb:49: 2b:db:42:49:5b:3d:e5:95:e8:fc:1a:ba:2e:88:3d: 74:16:ef:56:af:21:c1:ee:70:07:6b:b3:35:ef:b9: f7:e1:d3:a6:5b:bd:14:72:04:3c:5e:06:3e:22:08: 5c:b3:6a:cd:67:1a:e4:d2:aa:c8:36:2f:c7:35:5f: b2:21:e0:ac:5b:dc:dc:57:b9:23:b6:d4:2d:61:19: 9d:77:c1:5b:20:09:91:6b:55:69:7f:b8:eb:ce:3b: 26:91:fd:0f:92:8a:45:18:e0:5c:9c:b5:cf:19:3e: 84:f1:8d:ad:6b:74:1b:7c:4b:8b:1c:6f:b4:2a:ce: ca:99:ae:0a:d2:52:d7:cd:24:61:6f:48:c7:a2:bc: 97:80:8f:dc:08:ad:f0:88:c2:f5:b8:a9:7b:8c:72: 3a:6d:1b:71:b7:68:d5:8d:51:75:c2:51:c3:69:72: 93:ea:1a:7b:b2:ac:38:01:fe:69:29:f7:47:f5:53: 35:3d:b2:5e:df:f5:f2:78:5a:f2:c5:81:80:94:d5: 24:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A3:46:73:49:C5:77:31:95:37:CE:F7:67:28:44:17:00:C5:E3:F6 X509v3 Authority Key Identifier: keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d9:60:13:f7:88:00:83:60:b9:d5:1f:5c:fb:26:12:d6:91: ce:26:11:85:c8:02:d1:de:8e:1c:10:7e:69:a6:6c:5f:1d:c4: 13:c8:54:b0:ef:a5:29:e0:4a:a9:fc:03:5c:5c:23:c3:8b:b8: b2:88:f2:b8:69:b3:4c:37:d1:96:de:bc:b9:df:6e:42:33:48: 80:16:7f:73:d8:d4:8a:d1:ec:14:68:a6:c2:34:09:db:f3:21: d6:07:94:da:22:83:d1:4f:ff:ee:7e:aa:33:13:aa:7a:84:2d: 1f:f3:12:8d:e0:f4:f3:e7:52:b8:28:0a:b7:80:17:c1:f4:d4: cc:1e:4c:5f:4b:4c:bd:e3:28:d8:ae:4f:5c:f8:60:cb:d4:63: 91:29:03:5c:e8:d3:3b:8a:eb:52:c4:bb:1c:6f:ac:5a:a0:03: 85:7a:f7:47:fe:17:a7:c2:b0:40:db:f6:7a:74:eb:c3:ef:ff: 59:a0:82:dd:8b:18:6b:2b:df:f4:12:a3:1b:1e:50:6f:3b:ff: 4d:29:e4:03:80:7f:25:33:af:2a:09:be:f0:7c:d1:ea:d0:85: 31:e4:00:ac:23:f2:53:e7:7a:18:07:2d:00:19:48:6a:cf:bb: c0:e2:68:21:26:41:a3:bc:86:74:11:91:ca:0a:68:57:d3:c3: ac:29:39:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz Rjg2MDI5QTIwHhcNMjUwNzE5MDIwODM3WhcNMjUwNzI2MDIwODM3WjAYMRYwFAYD VQQDEw02ODdhZmUyNi0yMGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwXxK8w7hPbiO+j245tIZxPXObBtw95hAMo7o06cDYZiiEDm4ZteVOeeVvME jzEAoprfr8fZqlk5y0kr20JJWz3llej8GrouiD10Fu9WryHB7nAHa7M177n34dOm W70UcgQ8XgY+Ighcs2rNZxrk0qrINi/HNV+yIeCsW9zcV7kjttQtYRmdd8FbIAmR a1Vpf7jrzjsmkf0PkopFGOBcnLXPGT6E8Y2ta3QbfEuLHG+0Ks7Kma4K0lLXzSRh b0jHoryXgI/cCK3wiML1uKl7jHI6bRtxt2jVjVF1wlHDaXKT6hp7sqw4Af5pKfdH 9VM1PbJe3/XyeFryxYGAlNUkowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCejRnNJ xXcxlTfO92coRBcAxeP2MB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2 QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc0MC8zNTI4QjBDQzE2QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9H ZE1hVW5zTzRvTGNfaGdLYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc2WAT94gAg2C51R9c+yYS1pHOJhGFyALR3o4cEH5ppmxfHcQTyFSw 76Up4Eqp/ANcXCPDi7iyiPK4abNMN9GW3ry5325CM0iAFn9z2NSK0ewUaKbCNAnb 8yHWB5TaIoPRT//ufqozE6p6hC0f8xKN4PTz51K4KAq3gBfB9NTMHkxfS0y94yjY rk9c+GDL1GORKQNc6NM7iutSxLscb6xaoAOFevdH/henwrBA2/Z6dOvD7/9ZoILd ixhrK9/0EqMbHlBvO/9NKeQDgH8lM68qCb7wfNHq0IUx5ACsI/JT53oYBy0AGUhq z7vA4mghJkGjvIZ0EZHKCmhX08OsKTle -----END CERTIFICATE-----Generated at Sun Jul 20 06:26:04 2025 by rpki-client