$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft File: k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft (raw, json) Hash identifier: 9l+AZCbQvv12Wh5+ZX1b46yrPLJKFV57i4kCmEeq1qw= Subject key identifier: 6E:2B:57:00:F8:F8:AA:D9:5B:F1:97:49:8A:A6:8D:4E:19:45:44:A2 Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft Manifest number: 0156 Signing time: Sat 07 Jun 2025 03:50:49 +0000 Manifest this update: Sat 07 Jun 2025 03:50:48 +0000 Manifest next update: Sat 14 Jun 2025 03:50:48 +0000 Files and hashes: 1: k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl (hash: 4K1X7N07vsDW1kv+ItyV4+DGKwpF272PGvyvOFXlyyA=) 2: F5E4AAFA2A2711F0A842B012C4F9AE02.roa (hash: H1nmQizGEmHz5b1T7forLlMV8zzneRcv/1eW8nb3RPQ=) 3: E0FF171A440411EF85685B0DC4F9AE02.roa (hash: KnSSA1Qq59sJxgKVj3jP8KkbnpUbCwhj2IXQBg8sTYM=) 4: 9442231871C311EEB4110C83C4F9AE02.roa (hash: cPScC0gg9JYSO4uN11odfRIjDwaRFAK9tItwdJFOomM=) 5: 9AE3D69A31ED11EFA537871BC4F9AE02.roa (hash: NLAG2+hX7/iP2bhjkSZBj6P2IECcGb9YySRKnQ4sPC0=) 6: 1E121F0E4E3111EFB88CF076C4F9AE02.roa (hash: wQut+szNL5vwSeq5waVGRK6ZNGbvz3meY2xD3T/hUuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 03:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Validity Not Before: Jun 7 03:50:48 2025 GMT Not After : Jun 14 03:50:48 2025 GMT Subject: CN=6843b719-e2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a2:1d:56:82:a6:2b:22:35:6d:1c:e4:02:c4: 9e:aa:fe:39:d3:73:38:e0:02:9f:b2:85:b6:e8:c4: 32:ad:24:90:07:33:dd:13:b1:19:56:30:a2:69:47: a2:ab:19:77:8f:96:28:1c:16:87:ba:6a:9c:7d:4d: 1d:ea:de:59:1c:ca:f1:77:57:cd:35:11:aa:72:dd: 7d:fc:9a:02:19:55:ea:a1:04:17:02:aa:16:c6:24: f4:ad:15:91:16:07:fc:93:f5:ee:fe:f9:ea:23:6d: 6d:e0:5f:f5:33:ed:1a:5f:f9:d3:18:08:0d:86:9e: eb:4c:1c:07:a9:d0:79:1a:35:0e:22:e8:64:46:5a: 5f:0b:17:33:32:1b:c9:10:41:12:7b:d4:41:04:62: 2e:51:55:3e:9e:18:85:da:c9:df:9a:df:11:67:de: 05:24:62:48:30:43:e4:1b:7a:4e:14:f5:6b:5f:c4: 5d:a4:17:cd:6c:92:39:7a:22:29:54:c9:1f:60:ac: 58:5f:3a:a8:d3:31:5a:92:f4:16:e6:05:c1:e6:5a: fa:59:a5:ac:6b:bd:24:87:7f:c0:9b:b4:2c:9b:ed: 89:fa:c7:0f:8c:af:93:f1:d3:b7:b6:f8:c6:46:ef: 2a:8a:33:63:22:08:5f:c9:2b:20:6e:c5:84:64:d4: c3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2B:57:00:F8:F8:AA:D9:5B:F1:97:49:8A:A6:8D:4E:19:45:44:A2 X509v3 Authority Key Identifier: keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:7d:72:87:40:1c:fd:5a:7c:46:f6:8e:22:c7:50:19:5b:32: ca:d6:6a:4c:29:47:2e:bb:7b:d4:16:d3:29:b8:fc:b6:2b:6f: 1d:92:c0:1b:80:9c:06:34:e6:ee:81:aa:f3:89:96:27:e6:22: 3b:71:98:6b:d2:40:7f:04:c8:00:d7:87:f7:0c:6c:fb:c8:b6: 21:fa:cb:df:96:94:19:ff:c4:58:53:86:b3:7b:62:e4:6d:7b: fa:ca:ff:c0:60:5c:48:ab:33:be:7f:a9:a6:62:cc:fa:5c:f1: 35:63:ef:1b:89:08:2d:2e:bc:fb:b4:6f:6a:c0:23:84:bf:fb: d7:e0:d2:3c:02:d1:89:45:19:4f:ed:d1:59:c4:81:f0:34:cb: 4b:7e:5e:8e:0d:53:a0:ea:f9:30:60:68:b8:3e:50:17:e9:24: 93:03:c4:62:3e:22:7a:46:cf:c0:fa:a3:97:bd:cf:a5:23:76: ae:cf:23:8c:d8:bc:90:52:ab:22:3c:8e:1c:33:c8:06:80:ec: 4d:f2:a4:9c:56:46:6b:f5:ae:4f:b8:73:63:03:44:70:9c:2a: 4f:e7:19:88:6a:bd:07:bc:b0:ea:c9:cd:f5:d9:5a:69:3f:bd: 1e:dc:5b:d6:73:be:18:c2:85:46:ed:68:0a:c1:84:f0:d1:fe: 16:fb:09:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKDkzODc5QjAwRTRCN0ZCQzAxMjYwNzA3Qjc2RDVEMTIw RjQ1QjUzNUIwHhcNMjUwNjA3MDM1MDQ4WhcNMjUwNjE0MDM1MDQ4WjAYMRYwFAYD VQQDEw02ODQzYjcxOS1lMmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqIdVoKmKyI1bRzkAsSeqv4503M44AKfsoW26MQyrSSQBzPdE7EZVjCiaUei qxl3j5YoHBaHumqcfU0d6t5ZHMrxd1fNNRGqct19/JoCGVXqoQQXAqoWxiT0rRWR Fgf8k/Xu/vnqI21t4F/1M+0aX/nTGAgNhp7rTBwHqdB5GjUOIuhkRlpfCxczMhvJ EEESe9RBBGIuUVU+nhiF2snfmt8RZ94FJGJIMEPkG3pOFPVrX8RdpBfNbJI5eiIp VMkfYKxYXzqo0zFakvQW5gXB5lr6WaWsa70kh3/Am7Qsm+2J+scPjK+T8dO3tvjG Ru8qijNjIghfySsgbsWEZNTD5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4rVwD4 +KrZW/GXSYqmjU4ZRUSiMB8GA1UdIwQYMBaAFJOHmwDkt/vAEmBwe3bV0SD0W1Nb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8yODIzMTVEMDUy MDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04QVNZSEI3ZHRYUklQUmJV MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s0ZWJBT1MzLThBU1lIQjdkdFhSSVBSYlUxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Njc4Qy8yODIzMTVEMDUyMDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04 QVNZSEI3ZHRYUklQUmJVMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAfXKHQBz9WnxG9o4ix1AZWzLK1mpMKUcuu3vUFtMpuPy2K28dksAb gJwGNObugarziZYn5iI7cZhr0kB/BMgA14f3DGz7yLYh+svflpQZ/8RYU4aze2Lk bXv6yv/AYFxIqzO+f6mmYsz6XPE1Y+8biQgtLrz7tG9qwCOEv/vX4NI8AtGJRRlP 7dFZxIHwNMtLfl6ODVOg6vkwYGi4PlAX6SSTA8RiPiJ6Rs/A+qOXvc+lI3auzyOM 2LyQUqsiPI4cM8gGgOxN8qScVkZr9a5PuHNjA0RwnCpP5xmIar0HvLDqyc312Vpp P70e3FvWc74YwoVG7WgKwYTw0f4W+wnj -----END CERTIFICATE-----Generated at Sun Jun 8 15:25:58 2025 by rpki-client