$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft File: 4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json) Hash identifier: mU5F0CIftE8s2wMFJCLdSfKmsnDmC7cK/gqeULNCkoY= Subject key identifier: A5:0C:23:86:35:68:F3:30:3E:F8:0F:88:A7:72:14:8B:64:33:F8:34 Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft Manifest number: 01D8 Signing time: Sun 15 Jun 2025 02:04:55 +0000 Manifest this update: Sun 15 Jun 2025 02:04:55 +0000 Manifest next update: Sun 22 Jun 2025 02:04:55 +0000 Files and hashes: 1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: 8ASZb22cNshulqrLLuMi39Da8joEDbHyd4rY/2zlRWQ=) 2: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: fdlRqtNSwYBeTIqhoeb8XWzhK9Fv7Fkpx1Jd+sxZc0I=) 3: 562B3D3E7A9411ED91BE2586C4F9AE02.roa (hash: 7UjEjVVCyN4uGyX9bNWcmVqFnHgs+rp9yqIxKOI8E30=) 4: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: rV9ie1oJtm2rSFQCCjvltoUnDjD6SpJTDB+pUT5QuIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA Validity Not Before: Jun 15 02:04:55 2025 GMT Not After : Jun 22 02:04:55 2025 GMT Subject: CN=684e2a47-8363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:82:b4:8c:d1:49:8b:a9:89:e5:71:b0:66:1c: 48:74:51:b8:9a:6a:3d:82:2b:16:6c:a7:6d:f2:90: 6d:4a:5d:af:d8:23:8d:9b:c5:9b:0d:a6:0f:08:1c: 4d:66:47:fe:b4:75:c0:df:a1:53:99:a3:e9:06:3b: 32:15:7b:f3:8d:98:00:d0:95:88:f8:4d:e4:dc:6b: da:19:0b:f8:b8:ba:ab:e0:6c:7c:18:bd:ac:45:7c: b6:6d:0e:b6:69:6b:78:ac:8c:b0:66:f6:94:99:13: a3:5f:3d:64:20:9d:3e:e3:5a:f0:55:54:de:0d:a3: 5b:97:8b:86:6c:31:b0:6b:34:f8:b3:bc:c8:e1:86: 0d:33:a3:8c:51:ce:c0:8e:32:6b:17:ce:7f:a8:06: 48:7b:30:67:11:b6:e6:c9:cc:f1:79:29:57:4f:8f: b4:fd:00:64:db:fc:93:a3:09:29:31:b5:4d:77:d6: ce:e6:82:de:cb:84:df:08:2f:70:6b:89:9a:40:df: 0c:84:ba:05:cb:fe:2f:57:b6:89:67:16:e4:46:d4: d0:9a:e1:ed:31:26:29:2e:92:e0:1c:07:ff:f9:6e: bb:3b:ce:73:c7:75:1b:bf:7b:d8:7a:8d:26:7b:6a: 67:31:f1:ba:ec:b0:c0:b4:61:bf:1d:b2:39:08:88: 32:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0C:23:86:35:68:F3:30:3E:F8:0F:88:A7:72:14:8B:64:33:F8:34 X509v3 Authority Key Identifier: keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:00:c4:b6:41:8a:b1:49:da:aa:1e:b3:28:ca:70:c3:0c:8e: 9f:44:a7:0b:79:42:f7:c6:b4:38:ce:64:75:ef:1a:0a:28:89: 49:6d:8a:a8:b0:db:8e:c1:1c:c8:c5:8b:6c:7a:42:84:bb:ff: 43:cc:f7:c9:80:28:0d:23:39:eb:c9:c6:8f:a2:b3:5c:4b:bc: 94:6a:07:09:42:7c:0e:1f:e2:93:7f:28:1a:f8:e5:b6:09:bf: 48:88:00:53:90:25:22:8b:a5:24:23:b1:ce:88:ff:b3:b4:e9: 7e:e1:51:39:37:d4:99:bc:62:45:f3:df:1a:1c:01:3b:b8:5a: 72:dd:f8:de:fa:fd:46:b7:ac:ef:c7:bd:4c:fc:60:84:fe:30: 06:45:6d:6e:b2:9f:52:37:be:df:cb:5d:8e:57:ab:70:c8:3f: 23:51:e1:0d:4c:41:9c:12:ee:dc:4a:ed:50:2a:dc:0b:13:9b: 11:70:54:ae:d1:7f:72:c5:29:db:d3:4b:11:30:c5:8d:62:31: bd:99:42:4d:87:eb:03:11:96:0d:a4:01:41:b5:71:81:b9:80: 16:e6:24:f0:9d:c6:59:9e:fc:3f:c2:08:39:c9:1b:c6:aa:0b: 8c:d0:ab:ad:f9:73:67:01:01:5e:b7:f3:34:97:62:24:9c:03: 75:3b:8f:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFOTkxMTAvBgNVBAUTKEUyNTM0RDI2Qzc4Qzk3MDE3OTA5OTY0MzhDMTE0MTA4 MjU0Nzc2QUEwHhcNMjUwNjE1MDIwNDU1WhcNMjUwNjIyMDIwNDU1WjAYMRYwFAYD VQQDEw02ODRlMmE0Ny04MzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIK0jNFJi6mJ5XGwZhxIdFG4mmo9gisWbKdt8pBtSl2v2CONm8WbDaYPCBxN Zkf+tHXA36FTmaPpBjsyFXvzjZgA0JWI+E3k3GvaGQv4uLqr4Gx8GL2sRXy2bQ62 aWt4rIywZvaUmROjXz1kIJ0+41rwVVTeDaNbl4uGbDGwazT4s7zI4YYNM6OMUc7A jjJrF85/qAZIezBnEbbmyczxeSlXT4+0/QBk2/yTowkpMbVNd9bO5oLey4TfCC9w a4maQN8MhLoFy/4vV7aJZxbkRtTQmuHtMSYpLpLgHAf/+W67O85zx3Ubv3vYeo0m e2pnMfG67LDAtGG/HbI5CIgyGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUMI4Y1 aPMwPvgPiKdyFItkM/g0MB8GA1UdIwQYMBaAFOJTTSbHjJcBeQmWQ4wRQQglR3aq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U5OS8wQUNFMTlCMDdB ODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3RjVDWlpEakJGQkNDVkhk cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRsTk5Kc2VNbHdGNUNaWkRqQkZCQ0NWSGRxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0U5OS8wQUNFMTlCMDdBODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3 RjVDWlpEakJGQkNDVkhkcW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuAMS2QYqxSdqqHrMoynDDDI6fRKcLeUL3xrQ4zmR17xoKKIlJbYqo sNuOwRzIxYtsekKEu/9DzPfJgCgNIznrycaPorNcS7yUagcJQnwOH+KTfyga+OW2 Cb9IiABTkCUii6UkI7HOiP+ztOl+4VE5N9SZvGJF898aHAE7uFpy3fje+v1Gt6zv x71M/GCE/jAGRW1usp9SN77fy12OV6twyD8jUeENTEGcEu7cSu1QKtwLE5sRcFSu 0X9yxSnb00sRMMWNYjG9mUJNh+sDEZYNpAFBtXGBuYAW5iTwncZZnvw/wgg5yRvG qguM0Kut+XNnAQFet/M0l2IknAN1O49y -----END CERTIFICATE-----Generated at Sun Jun 15 12:45:53 2025 by rpki-client