$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json) Hash identifier: CjIDcLf8KGlILb7hw5FfGSebcRlu98JYE/R/L1X0yPc= Subject key identifier: A3:63:8B:27:22:39:48:54:73:24:60:01:BE:E3:41:05:AC:9F:94:71 Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft Manifest number: 0162 Signing time: Mon 09 Jun 2025 03:02:07 +0000 Manifest this update: Mon 09 Jun 2025 03:02:07 +0000 Manifest next update: Mon 16 Jun 2025 03:02:07 +0000 Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: 0mCAX8Vkfn0ChT5KX8s8ra2ARMNmlDT0664oykE+xDE=) 2: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: st8PwK196xNld8O2k0lKE8037dLGvSfGuDJRF0i8kvY=) 3: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: imnNT9qYRRIcc5JHDTtnRt4iRKv++5OKcbvGmRUGbZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 03:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Validity Not Before: Jun 9 03:02:07 2025 GMT Not After : Jun 16 03:02:07 2025 GMT Subject: CN=68464eaf-26cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bf:05:86:3b:00:32:a1:ce:76:d7:00:b9:c0: 34:88:14:5b:85:cb:e5:9b:34:c2:cb:24:fc:ae:d6: 53:7b:10:35:8d:a6:d7:2f:14:92:3e:ee:be:b7:34: 00:3f:a1:ec:9b:f1:b1:c7:38:2e:75:95:d2:33:b2: c7:64:89:eb:27:92:05:b3:84:28:0b:f8:1d:64:c7: dc:48:d3:77:f5:52:d1:f9:af:9b:5f:51:be:5a:fb: 2b:4f:40:c6:1a:a2:23:8e:5f:b2:19:5c:a6:c8:a9: 5b:ad:00:76:f9:89:e8:1d:93:81:63:35:7c:85:fb: 9f:cc:de:7b:72:e1:02:05:df:06:ef:24:73:b8:29: 38:5f:b9:54:10:47:17:25:f2:7c:15:99:ac:7b:bd: 0e:eb:c2:91:c0:70:0b:d4:8d:c9:53:9a:6f:4f:39: a0:fc:9d:40:97:7e:84:06:53:a8:f9:c3:0d:63:73: 62:28:ce:89:77:0c:60:a7:7b:c2:62:4f:0f:ff:50: bb:7c:9b:ba:fb:83:9e:ff:ed:63:ea:9e:1c:a6:60: f2:61:4f:29:35:9e:fc:63:c9:2f:f9:81:ee:65:ea: db:e1:ad:7a:d5:d7:03:91:f6:fe:c9:38:21:0c:62: 51:d1:f1:a6:62:45:23:84:63:df:7a:65:50:37:5c: 81:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:63:8B:27:22:39:48:54:73:24:60:01:BE:E3:41:05:AC:9F:94:71 X509v3 Authority Key Identifier: keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:cf:f5:fa:77:79:33:4b:a2:34:79:c3:ab:73:fc:95:1f:14: bd:55:2d:e1:94:c1:63:34:f9:5a:8a:3e:bd:e0:c8:e9:0b:2a: ad:53:73:e0:0b:a9:e3:74:a2:e1:9c:78:8c:9f:7b:51:76:86: 07:6b:ff:aa:a2:42:91:d4:f0:c5:af:0a:43:37:4d:c9:40:9b: 3d:ac:ed:7e:d6:f6:a0:0f:c0:8c:64:c6:cf:5b:f3:2f:fb:1b: 4c:30:9b:fc:67:e8:54:8b:76:bd:44:00:e5:2e:ed:ff:5c:b6: a3:05:68:2c:d8:fe:95:2f:ba:f5:a8:2d:85:1b:d5:3d:3a:6f: 83:ec:eb:d6:c8:01:80:6b:90:b6:d6:98:4a:30:49:26:43:dc: b1:24:97:69:a3:d3:00:b9:f7:55:15:50:06:11:9d:be:12:11: 8a:62:fb:4a:2c:dc:4c:70:2a:ec:fc:64:7a:e0:75:fe:d7:3c: 0e:cc:9d:df:5c:2e:83:49:4e:b6:bf:a9:cd:e1:49:23:bf:ff: b8:7c:5a:30:df:da:a8:e5:ff:2c:26:70:64:f6:29:14:e1:41: d3:0d:eb:2b:68:fa:cf:45:9a:3e:52:86:ae:f6:8b:d3:a3:c6: 7a:e6:e9:be:05:f4:b7:9a:cf:fa:71:97:30:29:70:25:0a:bf: c6:c5:91:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCNjExMTAvBgNVBAUTKEUzRTEwMEY4MDQwMTNBMDVGOTIyRUUxMUNCNEUwQUJF QTZDMjJCOTgwHhcNMjUwNjA5MDMwMjA3WhcNMjUwNjE2MDMwMjA3WjAYMRYwFAYD VQQDEw02ODQ2NGVhZi0yNmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtr8FhjsAMqHOdtcAucA0iBRbhcvlmzTCyyT8rtZTexA1jabXLxSSPu6+tzQA P6Hsm/GxxzgudZXSM7LHZInrJ5IFs4QoC/gdZMfcSNN39VLR+a+bX1G+WvsrT0DG GqIjjl+yGVymyKlbrQB2+YnoHZOBYzV8hfufzN57cuECBd8G7yRzuCk4X7lUEEcX JfJ8FZmse70O68KRwHAL1I3JU5pvTzmg/J1Al36EBlOo+cMNY3NiKM6Jdwxgp3vC Yk8P/1C7fJu6+4Oe/+1j6p4cpmDyYU8pNZ78Y8kv+YHuZerb4a161dcDkfb+yTgh DGJR0fGmYkUjhGPfemVQN1yB4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNjiyci OUhUcyRgAb7jQQWsn5RxMB8GA1UdIwQYMBaAFOPhAPgEAToF+SLuEctOCr6mwiuY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUI2MS83NjE2RDRGQzJB Q0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9nWDVJdTRSeTA0S3ZxYkNL NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtRUEtQVFCT2dYNUl1NFJ5MDRLdnFiQ0s1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUI2MS83NjE2RDRGQzJBQ0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9n WDVJdTRSeTA0S3ZxYkNLNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJz/X6d3kzS6I0ecOrc/yVHxS9VS3hlMFjNPlaij694MjpCyqtU3Pg C6njdKLhnHiMn3tRdoYHa/+qokKR1PDFrwpDN03JQJs9rO1+1vagD8CMZMbPW/Mv +xtMMJv8Z+hUi3a9RADlLu3/XLajBWgs2P6VL7r1qC2FG9U9Om+D7OvWyAGAa5C2 1phKMEkmQ9yxJJdpo9MAufdVFVAGEZ2+EhGKYvtKLNxMcCrs/GR64HX+1zwOzJ3f XC6DSU62v6nN4Ukjv/+4fFow39qo5f8sJnBk9ikU4UHTDesraPrPRZo+Uoau9ovT o8Z65um+BfS3ms/6cZcwKXAlCr/GxZEu -----END CERTIFICATE-----Generated at Tue Jun 10 16:03:56 2025 by rpki-client