$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft File: 4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json) Hash identifier: b70d6gGvVU8rumfUmYLXfJyc5lVNkk6chuIqZ6mnt0s= Subject key identifier: E0:21:DC:7E:AB:5A:84:BA:F5:08:6F:22:60:CC:D6:D1:EF:80:08:ED Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Certificate serial: 0482 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft Manifest number: 0478 Signing time: Sun 20 Jul 2025 20:54:07 +0000 Manifest this update: Sun 20 Jul 2025 20:54:07 +0000 Manifest next update: Sun 27 Jul 2025 20:54:07 +0000 Files and hashes: 1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: PW5Evno1O6/sLPJ71itXrRGiPJ94dktU/DrTLEqzJus=) 2: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: lWr4ljnX2/yEjyiQoz0OgG+PVsyj+yPc7sx1n1rIGWY=) 3: B38D932050EF11EC8583962BC4F9AE02.roa (hash: vGjVKyfhGouNwPbyNw8ueo4siItyyWgs22PxyDfp4xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Validity Not Before: Jul 20 20:54:07 2025 GMT Not After : Jul 27 20:54:07 2025 GMT Subject: CN=687d576f-1250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c2:e2:85:2d:65:d1:59:2d:13:85:57:44:78: f3:8f:62:6f:81:f8:ea:b7:6f:07:f0:8a:8a:76:0a: 67:06:5e:6f:0a:a0:ba:2d:b4:b4:d2:22:1f:b3:1e: b1:a7:39:63:44:97:d8:f4:c5:01:60:51:ea:66:6f: dc:61:9b:70:32:74:80:71:5b:0f:47:98:f4:6d:c8: 1a:4b:46:4d:d3:6c:26:ff:56:4d:0e:4d:40:43:de: 0d:58:38:6e:50:ab:cf:39:1b:aa:d6:d0:b5:ce:08: f1:48:1b:ad:8c:82:7d:44:c5:bb:a9:87:b2:df:6e: 2a:d3:37:ea:45:0b:73:be:18:04:20:13:0a:93:ca: d9:01:77:e3:0b:2e:48:48:f5:a7:3d:92:2b:25:03: 98:c9:ad:cd:8c:82:40:d4:a5:21:ca:63:3d:47:65: 00:5e:62:bf:d2:88:2f:ad:a8:e2:90:7f:7c:48:4c: 2e:c6:e3:41:35:1b:c4:bf:2a:15:ea:5c:f3:56:ff: 22:d3:5c:23:90:33:18:5c:56:64:d5:c4:e6:f1:10: 10:8a:12:88:9b:2f:b2:ae:2b:7e:cf:02:e4:a7:60: d4:25:39:a6:a4:95:d1:39:96:c5:f9:c3:34:7d:ba: ef:31:19:a4:3d:b5:59:db:2c:06:9c:94:ea:2d:b0: 64:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:21:DC:7E:AB:5A:84:BA:F5:08:6F:22:60:CC:D6:D1:EF:80:08:ED X509v3 Authority Key Identifier: keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:bf:5c:1a:d3:93:5b:08:4e:7e:d7:1e:d0:68:56:77:a9:9a: 5f:d3:6a:b4:29:7a:4e:09:24:ef:43:f1:e0:84:68:27:63:5a: 4c:fc:c7:f7:59:13:db:4b:a8:2f:2b:29:23:43:2c:db:3c:7a: 0f:91:bd:72:23:10:04:f1:ad:08:4c:10:f4:14:e4:06:f4:60: 18:66:a1:01:21:73:b0:a1:4c:e4:15:6c:82:be:6a:ab:fd:8c: f6:43:cd:e3:c4:84:45:14:db:20:f1:b4:4d:ff:d1:b1:87:60: e1:92:61:c1:d8:0a:ba:66:35:d3:78:b0:5d:49:d2:8c:e6:15: 02:ca:c1:29:a5:38:61:11:a2:c4:20:cb:e2:81:ce:93:b3:5b: 27:bc:ab:95:9a:f2:b4:86:d9:76:6c:d8:9b:d3:ce:42:d9:82: 81:e7:19:9b:08:37:94:1a:d2:bb:7e:1b:45:b0:ce:77:d1:72: cb:c9:f6:b4:3e:c7:dd:83:ce:5f:7a:7d:78:4b:db:4d:64:10: e4:bb:e5:5d:7b:1e:6d:ff:b6:2a:6e:61:d6:0f:08:0c:d1:94: 83:e3:4a:5a:b4:2d:aa:37:05:6a:d4:2c:d0:96:35:df:6c:4a: b5:d5:fc:a0:3b:7e:63:14:cd:91:98:47:83:d8:cc:04:f4:97: e1:03:ef:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5 NTNCMzZFNTEwHhcNMjUwNzIwMjA1NDA3WhcNMjUwNzI3MjA1NDA3WjAYMRYwFAYD VQQDEw02ODdkNTc2Zi0xMjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cLihS1l0VktE4VXRHjzj2Jvgfjqt28H8IqKdgpnBl5vCqC6LbS00iIfsx6x pzljRJfY9MUBYFHqZm/cYZtwMnSAcVsPR5j0bcgaS0ZN02wm/1ZNDk1AQ94NWDhu UKvPORuq1tC1zgjxSButjIJ9RMW7qYey324q0zfqRQtzvhgEIBMKk8rZAXfjCy5I SPWnPZIrJQOYya3NjIJA1KUhymM9R2UAXmK/0ogvrajikH98SEwuxuNBNRvEvyoV 6lzzVv8i01wjkDMYXFZk1cTm8RAQihKImy+yrit+zwLkp2DUJTmmpJXROZbF+cM0 fbrvMRmkPbVZ2ywGnJTqLbBkuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAh3H6r WoS69QhvImDM1tHvgAjtMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVCMC9FMzJDODdDQzUwRDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERK OWxXVV9HNkppZnlWT3pibEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0v1wa05NbCE5+1x7QaFZ3qZpf02q0KXpOCSTvQ/HghGgnY1pM/Mf3 WRPbS6gvKykjQyzbPHoPkb1yIxAE8a0ITBD0FOQG9GAYZqEBIXOwoUzkFWyCvmqr /Yz2Q83jxIRFFNsg8bRN/9Gxh2DhkmHB2Aq6ZjXTeLBdSdKM5hUCysEppThhEaLE IMvigc6Ts1snvKuVmvK0htl2bNib085C2YKB5xmbCDeUGtK7fhtFsM530XLLyfa0 Psfdg85fen14S9tNZBDku+Vdex5t/7YqbmHWDwgM0ZSD40patC2qNwVq1CzQljXf bEq11fygO35jFM2RmEeD2MwE9JfhA+8P -----END CERTIFICATE-----Generated at Sun Jul 20 22:35:19 2025 by rpki-client