$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json) Hash identifier: drIJ7oYdICX8sMGSz9UKA4+dMszdikc0gj5J2U2GW3A= Subject key identifier: CA:2D:14:98:D3:A2:6E:04:76:DB:5E:BB:E0:03:4F:EB:D5:B4:21:9D Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 0792 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft Manifest number: 0771 Signing time: Fri 06 Jun 2025 21:42:55 +0000 Manifest this update: Fri 06 Jun 2025 21:42:55 +0000 Manifest next update: Fri 13 Jun 2025 21:42:55 +0000 Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: ebJyyq3lHP7AgVrLl2PeOYlPWlxtW/laWOIbWSFHCmg=) 2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 3/Y1r0LMBII6zW5USQairn62r7Znj5u8VXmSgbR98nY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 21:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1938 (0x792) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Jun 6 21:42:55 2025 GMT Not After : Jun 13 21:42:55 2025 GMT Subject: CN=684360df-be00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:2f:46:be:cd:6d:9b:47:68:1e:8f:61:eb: c3:08:c1:e9:38:95:43:b9:76:d6:b4:c8:4a:ef:52: 8b:47:04:c6:a4:2e:59:bc:55:9d:52:6d:ef:1e:95: 0a:34:3f:6a:a1:c8:65:0f:78:ac:5b:d4:cd:fd:1d: ac:cc:b0:01:99:0e:5d:50:b3:71:4d:c7:eb:92:75: ec:58:0f:57:c9:a6:49:49:33:81:b1:67:16:71:e0: c1:9e:82:4d:d9:1e:84:0c:ed:7b:9d:30:36:b6:4d: ff:9b:17:7d:68:cb:d2:27:74:30:7e:a4:b6:39:2f: b7:15:95:aa:54:42:bc:e2:a0:d2:35:45:51:b1:19: 15:72:09:24:87:0c:b7:99:f5:c1:8f:02:45:93:ea: be:55:21:08:ba:4a:5f:8d:54:54:49:b3:8b:9e:c1: e8:1d:3b:8e:02:66:b5:a7:d2:67:db:c1:ae:09:44: 31:34:8a:be:bc:0f:e5:53:1e:6d:01:0b:46:12:9c: be:74:1a:0d:fc:3c:21:b7:12:82:e0:60:fa:6e:91: 1c:92:6e:75:d4:56:03:19:97:e9:16:34:7e:4f:63: c8:1f:65:46:cf:51:09:1c:21:23:60:a3:76:6f:57: e6:9c:9f:8a:b4:51:94:7d:91:20:a6:e6:d8:37:1d: a1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2D:14:98:D3:A2:6E:04:76:DB:5E:BB:E0:03:4F:EB:D5:B4:21:9D X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:08:37:3b:be:0f:68:18:26:97:0d:89:fc:7b:85:00:e4:2b: cd:03:b2:8d:e1:36:8d:59:0f:18:82:e3:04:60:92:0d:c2:c8: 85:62:67:d4:3f:94:2d:e5:4c:16:31:d6:d7:4f:9b:5f:f2:8a: 85:79:d5:10:a6:6d:3d:d1:ef:8e:2b:bf:a6:f1:ed:87:41:97: 0b:77:4a:48:59:4f:71:a7:73:83:1b:6d:eb:05:f5:eb:64:7f: 26:fb:d7:62:30:c0:f3:da:83:34:4a:c7:ce:bb:26:6d:f8:95: 09:f7:49:17:9f:8d:6f:2e:cf:90:a4:1b:89:23:9c:5c:bd:99: 64:dc:df:cb:b8:55:66:41:bc:67:b5:6c:54:fe:ad:98:46:e2: f6:4b:5d:46:65:06:01:b1:38:0c:da:d5:4a:d4:11:e8:82:de: 38:1a:15:51:8a:65:83:0a:f5:1f:49:de:b0:8b:94:75:16:bc: 63:cd:17:21:f5:9a:93:9c:b9:fc:8b:55:72:c8:e4:6a:f9:2e: 08:bd:a2:c0:2c:a5:dd:23:75:27:43:7c:e8:3b:63:65:da:fc: 56:8e:ac:a4:a1:eb:e2:c2:e1:7b:39:d0:db:bb:a7:31:c7:6d: 05:cb:e3:9c:27:ed:b9:48:d8:6d:30:da:ab:ce:0f:ab:2f:a1: 39:4d:7a:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjUwNjA2MjE0MjU1WhcNMjUwNjEzMjE0MjU1WjAYMRYwFAYD VQQDEw02ODQzNjBkZi1iZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYYvRr7NbZtHaB6PYevDCMHpOJVDuXbWtMhK71KLRwTGpC5ZvFWdUm3vHpUK ND9qochlD3isW9TN/R2szLABmQ5dULNxTcfrknXsWA9XyaZJSTOBsWcWceDBnoJN 2R6EDO17nTA2tk3/mxd9aMvSJ3QwfqS2OS+3FZWqVEK84qDSNUVRsRkVcgkkhwy3 mfXBjwJFk+q+VSEIukpfjVRUSbOLnsHoHTuOAma1p9Jn28GuCUQxNIq+vA/lUx5t AQtGEpy+dBoN/DwhtxKC4GD6bpEckm511FYDGZfpFjR+T2PIH2VGz1EJHCEjYKN2 b1fmnJ+KtFGUfZEgpubYNx2hqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMotFJjT om4Edtteu+ADT+vVtCGdMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTAyNy8yNTA1Q0VEQzI1NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1Vu YlBUcGpUZG10akRYNF9nWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJCDc7vg9oGCaXDYn8e4UA5CvNA7KN4TaNWQ8YguMEYJINwsiFYmfU P5Qt5UwWMdbXT5tf8oqFedUQpm090e+OK7+m8e2HQZcLd0pIWU9xp3ODG23rBfXr ZH8m+9diMMDz2oM0SsfOuyZt+JUJ90kXn41vLs+QpBuJI5xcvZlk3N/LuFVmQbxn tWxU/q2YRuL2S11GZQYBsTgM2tVK1BHogt44GhVRimWDCvUfSd6wi5R1FrxjzRch 9ZqTnLn8i1VyyORq+S4IvaLALKXdI3UnQ3zoO2Nl2vxWjqykoeviwuF7OdDbu6cx x20Fy+OcJ+25SNhtMNqrzg+rL6E5TXqJ -----END CERTIFICATE-----Generated at Sat Jun 7 23:15:25 2025 by rpki-client