$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft File: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json) Hash identifier: 4koA9o7W6qf5YQVZTHd9fPXKX6m8m9L3rsQ8abVr26I= Subject key identifier: 46:5B:AF:A3:C5:AD:6F:EC:9C:0C:1E:1C:D9:ED:53:4E:17:7E:60:82 Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F Certificate issuer: /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Certificate serial: 0D7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft Manifest number: 0D71 Signing time: Fri 30 May 2025 18:08:09 +0000 Manifest this update: Fri 30 May 2025 18:08:09 +0000 Manifest next update: Fri 06 Jun 2025 18:08:09 +0000 Files and hashes: 1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: uPK98sFDcAdLGzs6elHhpAUe4KI2+GJ8x6qV7sr5AWM=) 2: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: farohxRDBQ9VasCgVSwSJ3ojZEnteNVPGizonI3QnXo=) 3: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: idQquXKRevDwjAJCqVW+rFJv8DkXtp2+vMql8G3VE3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3452 (0xd7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Validity Not Before: May 30 18:08:09 2025 GMT Not After : Jun 6 18:08:09 2025 GMT Subject: CN=6839f409-b3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c1:4a:2e:37:da:c3:27:63:e1:a1:57:f5:cc: ca:2f:99:3e:54:9d:e0:fe:b1:11:40:a0:98:ca:2b: d8:4f:48:4b:4c:5f:16:3e:c5:64:fc:4b:90:16:37: c0:2a:4e:4d:3e:91:6a:ae:60:fd:80:dc:43:02:26: c7:68:bb:09:63:66:8d:bd:7b:13:86:f6:fe:84:da: fd:ff:63:5c:a6:76:b4:3a:65:1f:dd:d5:b2:c0:90: 60:ec:9a:ab:4b:01:5f:2e:7c:90:51:ea:cc:e8:8b: b2:5f:54:ab:cb:01:5e:87:fe:c5:d9:e8:0a:a0:db: 5f:f8:c1:97:01:20:85:61:e4:fe:4c:bc:95:44:71: 59:b5:93:c5:aa:4e:11:5f:99:2c:37:dc:98:17:8c: c5:fe:2e:e2:d8:fe:81:56:88:22:66:02:59:d7:5a: dc:d0:f0:fa:e0:9a:c7:de:25:c1:ce:9d:6b:60:2c: ce:a8:42:2c:ac:6b:1a:b1:0a:bc:bf:65:6a:ff:b8: 93:0a:cb:13:eb:7e:da:90:e2:ab:0d:59:be:31:0e: 0b:70:2c:1e:2f:f2:c3:86:26:84:17:a6:f8:93:e9: 15:d0:0c:02:5a:c6:ac:98:7f:5a:93:b4:a8:f5:91: 0d:23:5c:56:3b:33:06:f3:a7:f4:04:b5:02:bc:18: 15:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5B:AF:A3:C5:AD:6F:EC:9C:0C:1E:1C:D9:ED:53:4E:17:7E:60:82 X509v3 Authority Key Identifier: keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:b7:4a:0a:06:5e:aa:a3:82:c1:22:33:12:ee:d4:99:08:9e: 92:f8:5e:a6:bf:4b:45:fd:24:59:ff:a9:55:34:14:6f:45:48: 46:ef:a0:9b:dd:57:c3:8c:1b:40:ae:6b:69:e1:06:95:70:63: 71:96:90:99:cf:25:77:23:2c:df:42:b8:f2:81:22:7e:bf:f8: 8c:46:65:21:c2:f1:be:05:58:d0:ea:be:5a:39:6a:2b:3b:47: a9:e7:be:1c:e4:76:da:46:f4:4e:46:1e:78:a3:15:7b:3b:cd: 22:ce:7c:7c:d6:e1:13:db:c8:bf:2f:75:95:39:01:a9:bc:bb: 69:87:cb:9f:b7:7d:2f:6f:03:fd:39:2a:78:a2:ca:ca:ce:34: a7:f9:c9:f6:c5:64:ad:eb:77:b0:26:31:85:33:61:85:81:a1: 7a:2b:3b:fb:62:0a:86:31:96:c8:48:ec:7b:b2:70:27:37:f4: aa:2d:ea:d2:1a:77:5d:bf:6f:73:13:3a:0b:4f:b1:c5:93:f5: 36:70:a1:ef:66:c0:19:5c:53:21:e0:a4:fb:4f:9e:9a:19:4d: da:06:06:37:5c:dc:79:45:32:cd:46:53:4a:f4:5f:d7:a7:2a: 62:3c:dc:d9:50:02:f5:d3:72:f4:b2:12:59:d1:92:67:5e:49: aa:69:98:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIzNjExMTAvBgNVBAUTKEUwQjlBMkU5OTM5RDU1OEYxOEJFNjIxNzVDOTVENzY4 RDI0NUQzMUYwHhcNMjUwNTMwMTgwODA5WhcNMjUwNjA2MTgwODA5WjAYMRYwFAYD VQQDEw02ODM5ZjQwOS1iM2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMFKLjfawydj4aFX9czKL5k+VJ3g/rERQKCYyivYT0hLTF8WPsVk/EuQFjfA Kk5NPpFqrmD9gNxDAibHaLsJY2aNvXsThvb+hNr9/2Ncpna0OmUf3dWywJBg7Jqr SwFfLnyQUerM6IuyX1SrywFeh/7F2egKoNtf+MGXASCFYeT+TLyVRHFZtZPFqk4R X5ksN9yYF4zF/i7i2P6BVogiZgJZ11rc0PD64JrH3iXBzp1rYCzOqEIsrGsasQq8 v2Vq/7iTCssT637akOKrDVm+MQ4LcCweL/LDhiaEF6b4k+kV0AwCWsasmH9ak7So 9ZENI1xWOzMG86f0BLUCvBgVrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZbr6PF rW/snAweHNntU04XfmCCMB8GA1UdIwQYMBaAFOC5oumTnVWPGL5iF1yV12jSRdMf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjM2MS83QzhEODAwQUNB MzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZOFl2bUlYWEpYWGFOSkYw eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMbWk2Wk9kVlk4WXZtSVhYSlhYYU5KRjB4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjM2MS83QzhEODAwQUNBMzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZ OFl2bUlYWEpYWGFOSkYweDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8t0oKBl6qo4LBIjMS7tSZCJ6S+F6mv0tF/SRZ/6lVNBRvRUhG76Cb 3VfDjBtArmtp4QaVcGNxlpCZzyV3IyzfQrjygSJ+v/iMRmUhwvG+BVjQ6r5aOWor O0ep574c5HbaRvRORh54oxV7O80iznx81uET28i/L3WVOQGpvLtph8uft30vbwP9 OSp4osrKzjSn+cn2xWSt63ewJjGFM2GFgaF6Kzv7YgqGMZbISOx7snAnN/SqLerS Gnddv29zEzoLT7HFk/U2cKHvZsAZXFMh4KT7T56aGU3aBgY3XNx5RTLNRlNK9F/X pypiPNzZUAL103L0shJZ0ZJnXkmqaZiN -----END CERTIFICATE-----Generated at Sat May 31 17:47:25 2025 by rpki-client