$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft File: 4eaQihbsgT2qC9ZHl66dvesJIlc.mft (raw, json) Hash identifier: 25doS73gtJklRix8iXBXoyeNWpttipII/Gxp1lHsKLI= Subject key identifier: A5:10:65:33:F0:55:F9:18:77:C0:61:EC:65:24:17:A7:65:42:4D:45 Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Certificate serial: 365B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft Manifest number: 356A Signing time: Mon 30 Jun 2025 14:32:38 +0000 Manifest this update: Mon 30 Jun 2025 14:32:37 +0000 Manifest next update: Mon 07 Jul 2025 14:32:37 +0000 Files and hashes: 1: 4eaQihbsgT2qC9ZHl66dvesJIlc.crl (hash: 6xq+bL3O00ewJ58IdRPYUdOqW8CN8Dt9+iw/Jd6xzmQ=) 2: 77E06D1AA40311EF8998B635C4F9AE02.roa (hash: 9HjOiTTPdQPnwPhOAc/iWZi4RJ25zyBHEgfyIlNASEA=) 3: 50D27D064F4011F0B9682923C4F9AE02.roa (hash: ATjF/OkaAli5uM5JKSTpuXuC82OhJa+1oWAkMp+cg9Y=) 4: 8FA30C8436FA11F087F24B11C4F9AE02.roa (hash: CIOWM46A7OrehJJzF5o6WcXQACQL/brTWBmCYOJEPrI=) 5: 94472FA8459511EDA982510FC4F9AE02.roa (hash: c+lWVnyi5AvZK74bdKBUde662hULr8JkfhSNLO1Lvpc=) 6: 0B28C4E63DA611F0BE531A20C4F9AE02.roa (hash: bCf2+Kf1Gx3ylLxT2UrIXzeFtJkNdW2hW/PFUSCAXGA=) 7: A12079269AF411EFA211362FC4F9AE02.roa (hash: +gXqwQfyRlVJIIcI7NB2OWJAf5Edf91tYkWEEnvOm5E=) 8: BDA8399C9AF611EF965FEA34C4F9AE02.roa (hash: 0CGWBpSvk9JK0nPDj7r4EUTQEqj0Iy/SjMQMszbWLG8=) 9: 65037DC0F72B11EE94855861C4F9AE02.roa (hash: ja/KSCzV+He4qClpDCozZTp+VTug8dvH4YMcC9ie7eE=) 10: D29FCC80A6BD11EEB785E054C4F9AE02.roa (hash: aD49l3BJ2bA6UcWR6EQleCyB5Kz6FRd2Hgp9G6QkpB8=) 11: 89A6BB88E06911EF9C6CF520C4F9AE02.roa (hash: xcq/WEUSR+w06b6Nwt1nxiayT1ulPnzU6uAyB0f2hwE=) 12: 2286A2E29C7611EF9FB2F666C4F9AE02.roa (hash: /0ENGvuFY619vTTeS7kU7tUdehJkkzcY02gnnGiBCS8=) 13: 2C108BFA765311EF9FDB8175C4F9AE02.roa (hash: QPA7RcxiZk0uNPMYbxw3I0lhjK2b1HztmYt+4lBGT7U=) 14: 72BAF108B39811EFBBCEC71AC4F9AE02.roa (hash: UAjST7Qpm1aFNDJqEnCGjuYfh+z236K5L8ZjMGZFVAo=) 15: 6DE12084243F11EDB6C9D62AC4F9AE02.roa (hash: UkhJIUL/Ldl3NbumSVZGfmojr5csuiDydS6HI26IpPE=) 16: DBBD442E3A2C11F09C99C60FC4F9AE02.roa (hash: j7V2cLxBPJmgE9BS61lbh9dr46zqgDVKwuwWKKEatjA=) 17: 6559F04828C511F09C2CD74EC4F9AE02.roa (hash: Q6JyBZa9dUAZWEm5WPgliEngDYA8BKCF4lpnNVbjJOk=) 18: 315775B015F811ECB52DA912C4F9AE02.roa (hash: 7DylzFTXOXediu8an8qP0Zjhz6YMhkKMfzwe8EjxF2Q=) 19: 747C7164462C11ED90035452C4F9AE02.roa (hash: yNkp/KPSLhUlv+dxzffeqFiT5gCKYMvPJXUBj6wHW0A=) 20: DC7EC870132311ED84EFCD51C4F9AE02.roa (hash: 7gyEAftTiDude8qZ+ISH0MbDEa+j6NeYqK16C5bRoow=) 21: 65D8867E28C511F09C2CD74EC4F9AE02.roa (hash: TcTPd4eMMCcLVW+z/Iz5N+6zNNeINdC8gkRR70FihUk=) 22: 9237637AE3B411EBB3CB3785C4F9AE02.roa (hash: D2+qn1a1wZL+h7kwp2z2B823UF/6dU6jmlZ/oExUzWg=) 23: 84B94D56F83011EE8B26391DC4F9AE02.roa (hash: x+3QJoK+biDu04dZYkE6o8q8VEGJX6JSOS4hkFBwMrc=) 24: DCAF30B6E4AC11EF86681673C4F9AE02.roa (hash: RJ8QbeHeO//H3km4CF8dlyUAxuujjhRV0yZE0/kTgK4=) 25: F5CB8F0A459D11EDB62F422FC4F9AE02.roa (hash: DEDTu8Mp335AkDMg3gaFXfDzK0w1tPa7JLjvtAutrLM=) 26: 0A84178E9AF411EF9E814F1EC4F9AE02.roa (hash: hOJlqoxrlUtpINT8QJ6ZLskAAoXqjdHTWPwywqudFjk=) 27: DD3BE51AE4AC11EF86681673C4F9AE02.roa (hash: /HNkxLr2GKguKIdLhCHzoCL2O/gBd4HVb/ZePeCAv1M=) 28: 6D39ED3C243F11EDB6C9D62AC4F9AE02.roa (hash: H99nVGQbsYPafXQrgJwMtpH4mRDJmpSZLj52j7VXKlo=) 29: 99F2F124063811F0979FF734C4F9AE02.roa (hash: J7t22bkIZgaNdh1vYPwsQ0womI0AAnM0qE/XGzkYIsM=) 30: 1D1E595CBDF611EFA2777E34C4F9AE02.roa (hash: sG49huEjr4xPL7FiayEtmJCzDdx+1Np8IZn5eqIgraY=) 31: BF177F2A84BF11EEBBE73E40C4F9AE02.roa (hash: XigKpX/uXMk3tgTnzIApDGja+nOFhQHjyXwVymCnRBM=) 32: F7292614459D11EDB62F422FC4F9AE02.roa (hash: 6c9IiDCB0zpbQ1j7pnqUxxTq/OUIiiE1HzQV68EryhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13915 (0x365b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Validity Not Before: Jun 30 14:32:37 2025 GMT Not After : Jul 7 14:32:37 2025 GMT Subject: CN=6862a005-c19a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f2:70:5f:bf:52:00:75:82:e3:2c:47:3e:6b: 01:0d:40:f8:41:b0:56:fd:a2:83:8c:46:5b:f4:9c: 88:0d:4a:73:7b:f5:18:0e:84:36:9a:37:8b:8d:e2: 1b:58:17:44:4e:8d:37:2a:67:fd:8e:18:99:36:c1: 85:5e:a8:2b:f3:d2:8c:4e:10:e6:38:2f:30:ff:db: 2c:e4:4a:27:84:ba:b9:4c:87:db:16:fa:42:d3:71: d6:1e:4b:1c:cc:28:f3:c5:0d:99:bc:13:da:5a:f3: de:62:c2:e3:86:80:84:27:b8:64:02:14:93:cd:bb: c0:6b:42:14:2a:f0:53:d7:46:62:9c:ce:de:5a:8e: 02:c1:ef:a5:03:32:2f:8d:6c:23:8a:4a:29:91:c0: ae:0b:c7:fb:01:c4:9e:30:15:41:4d:7d:52:ad:89: a5:4c:aa:b5:17:40:6b:d3:cd:2f:ac:82:5d:9f:02: 66:2c:81:8b:da:d7:7a:b5:e7:df:8d:10:b2:0f:a8: 94:cd:ae:9a:a8:57:4f:94:fc:fc:f5:7c:b5:cb:38: 54:0c:f6:b2:99:d6:6e:ac:86:41:0a:34:14:e5:be: a0:be:b2:1e:8b:3c:3b:25:49:df:8d:5a:42:d5:de: 2f:b7:7d:45:06:2e:d0:1b:ed:b2:ff:a6:69:cf:8d: 96:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:10:65:33:F0:55:F9:18:77:C0:61:EC:65:24:17:A7:65:42:4D:45 X509v3 Authority Key Identifier: keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:6d:c2:26:38:e0:5c:23:16:75:b2:29:4a:70:07:5e:26:83: e9:08:b4:a2:f4:e7:6f:c5:09:d7:58:5d:c2:89:2b:80:9a:0e: 62:38:67:71:2c:15:dc:e3:9f:e8:b4:78:c4:39:d7:11:1e:b1: 71:11:63:3a:6b:2b:ca:cd:9e:14:0a:8e:86:19:0e:62:5a:74: c5:6c:c6:ab:b7:44:a9:7d:ff:e5:72:b0:84:e5:bf:80:2a:d9: 61:a7:c6:3c:a0:9f:d1:55:12:86:e2:ca:d7:25:ed:cf:72:7e: f6:fe:9a:40:11:2c:a4:65:a4:29:c1:c4:77:74:11:54:75:c1: 22:5f:c6:05:c2:f8:d4:78:e6:c2:18:ca:29:bf:aa:0f:46:ce: 08:2a:e6:86:74:5c:21:96:d3:cd:b3:cc:46:e9:9e:bb:2a:03: 8b:a4:41:81:5f:85:64:92:9b:0a:9b:a5:09:f4:66:a2:68:11: ee:f1:0f:97:45:e7:d4:a7:eb:dd:ca:29:22:39:c2:f9:df:0f: e4:7d:ca:db:fc:9c:02:80:a1:73:f1:4d:3a:c4:c3:d7:eb:9c: 01:7e:c0:d3:d1:1b:83:88:b5:bc:db:35:55:99:8c:a6:0d:a3: d0:73:42:c5:81:8f:38:18:4f:a9:c1:1d:07:b8:2b:05:61:67: 09:39:83:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE RUIwOTIyNTcwHhcNMjUwNjMwMTQzMjM3WhcNMjUwNzA3MTQzMjM3WjAYMRYwFAYD VQQDEw02ODYyYTAwNS1jMTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/JwX79SAHWC4yxHPmsBDUD4QbBW/aKDjEZb9JyIDUpze/UYDoQ2mjeLjeIb WBdETo03Kmf9jhiZNsGFXqgr89KMThDmOC8w/9ss5EonhLq5TIfbFvpC03HWHksc zCjzxQ2ZvBPaWvPeYsLjhoCEJ7hkAhSTzbvAa0IUKvBT10ZinM7eWo4Cwe+lAzIv jWwjikopkcCuC8f7AcSeMBVBTX1SrYmlTKq1F0Br080vrIJdnwJmLIGL2td6teff jRCyD6iUza6aqFdPlPz89Xy1yzhUDPaymdZurIZBCjQU5b6gvrIeizw7JUnfjVpC 1d4vt31FBi7QG+2y/6Zpz42WFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUQZTPw VfkYd8Bh7GUkF6dlQk1FMB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTBBRC84QjVFNzVGRTFEODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dU MnFDOVpIbDY2ZHZlc0pJbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgbcImOOBcIxZ1silKcAdeJoPpCLSi9OdvxQnXWF3CiSuAmg5iOGdx LBXc45/otHjEOdcRHrFxEWM6ayvKzZ4UCo6GGQ5iWnTFbMart0Spff/lcrCE5b+A Ktlhp8Y8oJ/RVRKG4srXJe3Pcn72/ppAESykZaQpwcR3dBFUdcEiX8YFwvjUeObC GMopv6oPRs4IKuaGdFwhltPNs8xG6Z67KgOLpEGBX4VkkpsKm6UJ9GaiaBHu8Q+X RefUp+vdyikiOcL53w/kfcrb/JwCgKFz8U06xMPX65wBfsDT0RuDiLW82zVVmYym DaPQc0LFgY84GE+pwR0HuCsFYWcJOYOE -----END CERTIFICATE-----Generated at Wed Jul 2 03:35:10 2025 by rpki-client