$ rpki-client -vvf rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft File: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft (raw, json) Hash identifier: d5/BYYpfQ+B1Fqj9OFZYoRofezk58xPKmJPDe1nSxi0= Subject key identifier: 19:A3:C9:C7:A2:62:03:4C:81:F1:B5:A2:B2:F7:6D:B6:6D:22:02:1B Authority key identifier: E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E Certificate issuer: /CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Certificate serial: 1944 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft Manifest number: 1935 Signing time: Mon 30 Jun 2025 16:35:31 +0000 Manifest this update: Mon 30 Jun 2025 16:35:31 +0000 Manifest next update: Mon 07 Jul 2025 16:35:31 +0000 Files and hashes: 1: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl (hash: IT+nmbLMqsNYuvkqTGKRHvfhtzfJS2Z7Qcm1lXCToWI=) 2: 99AB821E859C11E7A1FEC80AC4F9AE02.roa (hash: P4Ek16t0ZEw/MnJDtAJSlLMC0jHATAWAbBg4OWQTq78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6468 (0x1944) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118799, serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Validity Not Before: Jun 30 16:35:31 2025 GMT Not After : Jul 7 16:35:31 2025 GMT Subject: CN=6862bcd3-69e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ff:ad:dd:18:41:91:37:36:fb:9d:61:83:ae: 4b:c5:42:e8:f2:db:21:c7:7d:d9:82:94:55:be:01: 7d:28:e0:a3:fb:02:12:4b:d2:2e:f8:d5:34:21:7e: fc:c4:4e:83:37:92:02:a4:7b:08:fb:be:d1:18:db: 79:94:73:22:68:63:d4:d2:ab:77:41:31:73:8d:24: 4b:4e:75:93:88:11:b7:24:fb:94:36:06:ea:de:c9: 70:3c:f5:9c:b3:cd:58:fe:a8:1b:d0:3c:a8:1a:0a: 93:f6:75:b6:a9:61:e0:78:ae:54:b3:95:b2:1e:9a: c7:2b:23:01:4c:d0:50:75:3d:24:cb:81:d0:00:4d: 5b:4f:69:9b:bf:14:56:87:d7:4e:87:0b:38:9c:e7: fd:90:b1:52:24:f7:6d:04:1e:80:83:f1:72:99:1d: fa:c3:df:51:53:9b:04:a4:2d:4c:38:f7:98:67:e9: 6a:b7:91:de:9c:ae:91:a3:3d:43:7b:60:a8:ae:f3: 58:e9:27:cd:d1:29:b6:27:49:1b:bc:a4:d8:3e:fe: 04:92:47:a9:1b:c8:34:86:49:4b:ce:11:9c:5e:b6: 15:a6:28:c9:1b:a5:c4:3f:55:cd:2b:78:b8:9d:6c: ee:01:4d:1c:18:ef:72:d8:8f:36:da:39:a3:fd:1a: 53:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A3:C9:C7:A2:62:03:4C:81:F1:B5:A2:B2:F7:6D:B6:6D:22:02:1B X509v3 Authority Key Identifier: keyid:E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:c3:20:92:93:a3:c5:4a:62:55:f1:9c:ab:b2:16:0b:82:e3: fa:87:1a:37:13:5e:a9:9b:8c:2d:aa:d5:83:01:39:55:7b:12: b3:b1:0c:7a:c6:a6:91:e4:e9:fb:42:51:66:e5:7c:48:a1:21: 06:9f:7b:d5:3b:61:02:5e:43:fb:5d:66:6c:11:f4:cb:79:88: cc:2e:21:c3:74:d4:0e:55:81:44:46:32:95:00:58:b9:44:44: a4:f4:f9:b9:00:1c:2c:1a:86:0e:1b:09:69:5a:79:5a:66:08: 80:23:b2:da:c9:1b:c5:b2:63:ae:53:20:b5:d2:17:3b:5b:ab: 62:d6:f5:0e:42:e4:19:72:bf:d0:cc:0a:52:c1:f5:0d:4f:bf: 34:05:fb:80:4e:7d:69:ba:04:9b:da:47:88:37:60:dd:6e:4f: 4a:5f:11:56:0c:28:16:98:76:b4:e8:02:90:b5:eb:15:1f:b9: 96:06:3d:d5:d6:65:b5:90:57:93:25:3b:78:fa:50:86:b5:1d: 69:b2:db:25:80:ae:b9:82:c4:1a:21:50:6f:25:57:3a:43:d9: 1c:1f:29:2d:9a:a9:65:a1:9d:fb:28:6f:98:b8:8c:b0:76:00: ed:81:24:4e:bc:2d:f9:5a:f8:78:45:3d:80:6b:25:7f:f8:9b: 1c:36:f4:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3OTkxMTAvBgNVBAUTKEUwQ0FBRDE3QzA2OEQ4NjAyQkNDRUI0NjdCNDU1NTEw QkM1MjM5MEUwHhcNMjUwNjMwMTYzNTMxWhcNMjUwNzA3MTYzNTMxWjAYMRYwFAYD VQQDEw02ODYyYmNkMy02OWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0P+t3RhBkTc2+51hg65LxULo8tshx33ZgpRVvgF9KOCj+wISS9Iu+NU0IX78 xE6DN5ICpHsI+77RGNt5lHMiaGPU0qt3QTFzjSRLTnWTiBG3JPuUNgbq3slwPPWc s81Y/qgb0DyoGgqT9nW2qWHgeK5Us5WyHprHKyMBTNBQdT0ky4HQAE1bT2mbvxRW h9dOhws4nOf9kLFSJPdtBB6Ag/FymR36w99RU5sEpC1MOPeYZ+lqt5HenK6Roz1D e2CorvNY6SfN0Sm2J0kbvKTYPv4EkkepG8g0hklLzhGcXrYVpijJG6XEP1XNK3i4 nWzuAU0cGO9y2I822jmj/RpTbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmjycei YgNMgfG1orL3bbZtIgIbMB8GA1UdIwQYMBaAFODKrRfAaNhgK8zrRntFVRC8UjkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODc5OS8zMjg3QkZBMjdF QzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJHQXJ6T3RHZTBWVkVMeFNP UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNcXRGOEJvMkdBcnpPdEdlMFZWRUx4U09RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODc5OS8zMjg3QkZBMjdFQzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJH QXJ6T3RHZTBWVkVMeFNPUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5wyCSk6PFSmJV8ZyrshYLguP6hxo3E16pm4wtqtWDATlVexKzsQx6 xqaR5On7QlFm5XxIoSEGn3vVO2ECXkP7XWZsEfTLeYjMLiHDdNQOVYFERjKVAFi5 RESk9Pm5ABwsGoYOGwlpWnlaZgiAI7LayRvFsmOuUyC10hc7W6ti1vUOQuQZcr/Q zApSwfUNT780BfuATn1pugSb2keIN2Ddbk9KXxFWDCgWmHa06AKQtesVH7mWBj3V 1mW1kFeTJTt4+lCGtR1pstslgK65gsQaIVBvJVc6Q9kcHyktmqlloZ37KG+YuIyw dgDtgSROvC35Wvh4RT2AayV/+JscNvTx -----END CERTIFICATE-----Generated at Wed Jul 2 01:52:14 2025 by rpki-client