$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft File: 4Loijq-YEvBn0v87-AaJVpjJOXc.mft (raw, json) Hash identifier: tBicI7kRxBwAYQHatzKt8NINbMGMj1GVVU8En/0P86Q= Subject key identifier: 42:24:BD:2E:34:E4:2A:20:E7:AC:DE:13:D4:82:61:EB:19:BF:D2:B7 Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Certificate serial: 069B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft Manifest number: 0640 Signing time: Fri 30 May 2025 23:10:08 +0000 Manifest this update: Fri 30 May 2025 23:10:08 +0000 Manifest next update: Fri 06 Jun 2025 23:10:08 +0000 Files and hashes: 1: 4Loijq-YEvBn0v87-AaJVpjJOXc.crl (hash: HWs4crnsytdGqyItDENdaXzl5vsUksMRF54+J0ePrqc=) 2: 5D81DB7C51B611ECA674F080C4F9AE02.roa (hash: Wj9VGGJ6joH5JctKZSMF6/1uGPocxQOWRALuCrLB1RI=) 3: D396006E251C11EEAB8BE444C4F9AE02.roa (hash: 9u1pwHKpVreKyVfB8nkyg0RNfC4miwkyLL7dTpwha4U=) 4: B91AACE86C8A11EEA934912FC4F9AE02.roa (hash: BRqUa6lx1hCo3MEvTs8NlHFfgRjiFksL6MonNo6Ic5M=) 5: D304973AC1E011EE81429B3EC4F9AE02.roa (hash: yYeYBpFrN5yAKPhvdNbBpvXOyw5PkXSnUg/nn3TG4vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1691 (0x69b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164D60, serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Validity Not Before: May 30 23:10:08 2025 GMT Not After : Jun 6 23:10:08 2025 GMT Subject: CN=683a3ad0-9dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c8:f6:a5:ad:6c:3d:b3:0d:fe:7d:b7:fe:4a: e4:de:73:27:fe:f0:ac:ee:f6:6b:1d:9a:db:96:44: d7:c8:de:6b:b1:be:f5:af:f2:5d:03:18:f3:f8:47: d9:d3:01:8d:c9:59:ba:29:d5:27:67:5b:98:b6:a5: 64:18:24:09:a3:20:94:3d:b1:65:2e:b4:f4:64:8a: a6:bf:ac:b7:88:0a:f2:64:81:af:a8:0a:e7:80:8f: cf:86:be:9d:eb:6f:e0:8c:ef:d6:d5:c9:c5:d4:48: 63:f8:27:97:fd:72:2c:e8:97:37:1c:eb:d2:24:37: bd:8b:00:28:93:4e:ee:93:e9:c6:df:97:18:0b:6c: d9:51:d7:73:fa:bb:3d:03:26:d5:fb:78:00:e7:3d: be:0d:09:b6:1b:2d:79:05:65:cc:ee:3f:07:c1:45: 2e:8c:5f:7e:a9:3a:ce:35:41:a9:41:73:ac:98:64: bd:a4:a5:d0:38:16:e9:ef:d3:4d:55:12:30:b1:4b: 08:9c:1a:ec:6f:0f:40:5f:9d:b4:46:58:28:bc:4c: 21:bb:13:c4:d7:30:38:30:ce:ee:ee:4c:1f:db:d3: c5:4a:ad:eb:9a:c0:e4:91:30:76:8d:24:7d:70:c6: e4:7f:e1:26:68:09:7c:8b:13:8a:4e:25:8f:1a:b4: 5c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:24:BD:2E:34:E4:2A:20:E7:AC:DE:13:D4:82:61:EB:19:BF:D2:B7 X509v3 Authority Key Identifier: keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:1f:e8:52:3d:60:86:71:86:9d:a4:7d:08:69:94:2f:d6:d9: bc:2a:3a:f8:38:7b:bb:1c:7c:39:36:f8:15:8a:07:9a:fc:7a: 1e:4f:b7:95:f5:1e:e3:97:f0:97:c4:0f:b1:a8:fd:f0:7a:52: 95:70:16:2a:bc:1f:48:62:0b:1f:3d:17:11:8b:1a:92:8e:ad: 48:5b:93:b1:37:38:be:61:6b:42:25:15:4e:63:dc:c6:19:6e: 2b:4d:d5:05:df:57:d6:40:21:d8:52:9d:8b:46:a5:7f:78:83: 82:f4:13:e6:73:a3:0b:89:f3:1b:91:d7:08:5f:14:f4:d4:28: 50:78:51:fd:2f:ed:13:7a:e3:8e:a8:da:aa:e7:be:ef:03:f0: 50:68:3b:e0:d8:c4:a8:14:5e:41:8c:1f:f3:a1:2c:c5:3c:2b: 9b:a4:0d:c1:84:95:30:8a:29:12:7c:f1:a0:6b:ce:db:e4:6d: fc:13:0c:e6:c3:e7:3e:65:aa:e8:e9:90:75:91:7c:b8:b8:5d: e2:65:11:54:3c:ad:6f:2d:ce:01:6f:54:bb:d3:05:55:c9:32: 73:c1:78:72:7e:21:10:67:7b:b8:e4:ee:1e:7c:1d:9b:9b:96: a9:f5:0f:b8:8e:89:ba:f0:5d:c4:29:ca:c8:e4:8b:3b:ad:1e: f4:d5:46:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRENjAxMTAvBgNVBAUTKEUwQkEyMjhFQUY5ODEyRjA2N0QyRkYzQkY4MDY4OTU2 OThDOTM5NzcwHhcNMjUwNTMwMjMxMDA4WhcNMjUwNjA2MjMxMDA4WjAYMRYwFAYD VQQDEw02ODNhM2FkMC05ZGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMj2pa1sPbMN/n23/krk3nMn/vCs7vZrHZrblkTXyN5rsb71r/JdAxjz+EfZ 0wGNyVm6KdUnZ1uYtqVkGCQJoyCUPbFlLrT0ZIqmv6y3iAryZIGvqArngI/Phr6d 62/gjO/W1cnF1Ehj+CeX/XIs6Jc3HOvSJDe9iwAok07uk+nG35cYC2zZUddz+rs9 AybV+3gA5z2+DQm2Gy15BWXM7j8HwUUujF9+qTrONUGpQXOsmGS9pKXQOBbp79NN VRIwsUsInBrsbw9AX520RlgovEwhuxPE1zA4MM7u7kwf29PFSq3rmsDkkTB2jSR9 cMbkf+EmaAl8ixOKTiWPGrRc0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIkvS40 5Cog56zeE9SCYesZv9K3MB8GA1UdIwQYMBaAFOC6Io6vmBLwZ9L/O/gGiVaYyTl3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEQ2MC85RTBERTM5MkI0 NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2Qm4wdjg3LUFhSlZwakpP WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMb2lqcS1ZRXZCbjB2ODctQWFKVnBqSk9YYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEQ2MC85RTBERTM5MkI0NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2 Qm4wdjg3LUFhSlZwakpPWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRH+hSPWCGcYadpH0IaZQv1tm8Kjr4OHu7HHw5NvgVigea/HoeT7eV 9R7jl/CXxA+xqP3welKVcBYqvB9IYgsfPRcRixqSjq1IW5OxNzi+YWtCJRVOY9zG GW4rTdUF31fWQCHYUp2LRqV/eIOC9BPmc6MLifMbkdcIXxT01ChQeFH9L+0TeuOO qNqq577vA/BQaDvg2MSoFF5BjB/zoSzFPCubpA3BhJUwiikSfPGga87b5G38Ewzm w+c+Zaro6ZB1kXy4uF3iZRFUPK1vLc4Bb1S70wVVyTJzwXhyfiEQZ3u45O4efB2b m5ap9Q+4jom68F3EKcrI5Is7rR701UZC -----END CERTIFICATE-----Generated at Sat May 31 17:57:46 2025 by rpki-client