$ rpki-client -vvf rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft File: 4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft (raw, json) Hash identifier: Mj/ENBJgM+zWqiwPXal5lu90KVkfQ8JpQYfovYHUy8s= Subject key identifier: 67:37:CF:5E:74:E5:99:D6:E1:66:38:C8:01:07:1E:48:3F:D1:C8:BB Authority key identifier: E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF Certificate issuer: /CN=A9110E65/serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft Manifest number: A4 Signing time: Thu 19 Jun 2025 05:30:33 +0000 Manifest this update: Thu 19 Jun 2025 05:30:32 +0000 Manifest next update: Thu 26 Jun 2025 05:30:32 +0000 Files and hashes: 1: 4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl (hash: VZkiORFu9Nu22Uquv1pd+nuxCK0zQK4LT1CAeH79MV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110E65, serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF Validity Not Before: Jun 19 05:30:32 2025 GMT Not After : Jun 26 05:30:32 2025 GMT Subject: CN=6853a078-5d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:fd:be:b6:19:0a:1e:94:9b:28:ef:0d:a4: 70:61:cd:36:7e:53:ba:1a:c2:2e:2f:a1:30:88:9d: 53:96:5d:1b:b8:30:95:d5:21:92:15:92:81:b6:46: 58:74:07:2d:40:40:53:f2:36:03:75:f1:d5:7a:4e: 6e:9a:85:8e:cf:36:ae:e3:4d:0f:f6:c9:11:f6:85: 89:5e:2c:4b:b0:fa:4c:30:58:9d:eb:79:0a:9a:5d: 75:a5:ce:9c:cd:46:28:2d:38:df:86:47:17:b1:74: 39:6b:02:df:bf:d6:01:3d:f8:73:e0:a7:37:cf:d2: f1:83:93:83:d4:6b:af:0a:04:2d:46:54:61:20:a3: 5a:ff:a9:fe:a3:3e:83:3f:a7:b6:2a:63:3a:f3:b6: 58:92:c5:83:d5:56:8c:f8:6a:14:bc:3f:c8:87:1d: c7:a2:c4:34:69:6a:d4:07:e4:80:63:1e:77:0e:9c: 12:89:81:b7:c9:b7:cb:c5:12:c0:58:ab:93:f9:15: 3e:3e:f4:c6:a9:10:60:59:a6:c1:7c:69:e4:af:a9: 7f:f9:6b:a7:33:6b:8f:11:4c:f5:c9:cc:f5:6e:fa: 51:66:33:ba:e3:03:b4:88:98:99:14:21:c7:48:33: 46:7d:30:c9:95:18:41:e0:c3:37:c1:06:4f:f4:90: 02:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:37:CF:5E:74:E5:99:D6:E1:66:38:C8:01:07:1E:48:3F:D1:C8:BB X509v3 Authority Key Identifier: keyid:E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:87:50:8b:2e:60:76:b2:94:12:0c:ef:4e:fc:70:cb:51:01: e0:83:25:a6:7b:7a:02:a1:9b:46:d7:da:83:b8:1d:34:3b:df: ca:79:48:e8:98:be:eb:4c:1c:66:12:d4:ee:6e:6b:ce:06:d5: fa:23:1b:21:b0:1d:8e:f1:ed:c6:89:11:b0:bf:a9:9a:3c:61: c4:ba:6f:e8:15:28:36:5a:e4:08:54:d5:96:67:f2:5d:ec:cc: ee:48:32:9c:47:36:5c:8e:91:19:c0:7e:ea:7e:a0:ef:62:48: 3c:08:09:c5:c2:08:2f:c7:29:87:ed:f0:0d:0a:00:bd:e7:0d: 16:a0:ac:31:04:43:0e:df:ff:e5:22:3a:3f:b6:66:3f:e2:3e: 35:8e:04:f0:fb:02:ea:84:95:4e:59:91:f4:d6:a9:ea:03:f2: 3e:10:aa:1b:f3:bc:de:75:a2:a0:66:5f:7a:cb:2d:74:e7:91: 98:62:e2:c0:41:25:fa:d2:fc:00:ed:47:47:2e:80:a3:0d:38: a9:21:b4:c1:b7:58:13:51:67:10:ad:8e:50:80:2f:17:d2:13: f9:cf:0c:91:f7:18:3d:0b:1a:8c:3c:9e:84:42:3e:9a:7a:13: 8d:ca:74:30:fd:c5:99:01:6c:51:fc:c7:ec:84:84:f1:15:12: 04:a2:7b:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBFNjUxMTAvBgNVBAUTKEUxRDMzMDMxNkMzQTI2ODQyNEQ3MTk3QUJGMzQxMkY3 MjMxMTQxREYwHhcNMjUwNjE5MDUzMDMyWhcNMjUwNjI2MDUzMDMyWjAYMRYwFAYD VQQDEw02ODUzYTA3OC01ZDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv//9vrYZCh6UmyjvDaRwYc02flO6GsIuL6EwiJ1Tll0buDCV1SGSFZKBtkZY dActQEBT8jYDdfHVek5umoWOzzau400P9skR9oWJXixLsPpMMFid63kKml11pc6c zUYoLTjfhkcXsXQ5awLfv9YBPfhz4Kc3z9Lxg5OD1GuvCgQtRlRhIKNa/6n+oz6D P6e2KmM687ZYksWD1VaM+GoUvD/Ihx3HosQ0aWrUB+SAYx53DpwSiYG3ybfLxRLA WKuT+RU+PvTGqRBgWabBfGnkr6l/+WunM2uPEUz1ycz1bvpRZjO64wO0iJiZFCHH SDNGfTDJlRhB4MM3wQZP9JAC3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGc3z150 5ZnW4WY4yAEHHkg/0ci7MB8GA1UdIwQYMBaAFOHTMDFsOiaEJNcZer80EvcjEUHf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEU2NS9DRTIxNkY4NjUz ODAxMUVGQUQ2N0U4NzhDNEY5QUUwMi80ZE13TVd3NkpvUWsxeGw2dnpRUzl5TVJR ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkTXdNV3c2Sm9RazF4bDZ2elFTOXlNUlFkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEU2NS9DRTIxNkY4NjUzODAxMUVGQUQ2N0U4NzhDNEY5QUUwMi80ZE13TVd3Nkpv UWsxeGw2dnpRUzl5TVJRZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/h1CLLmB2spQSDO9O/HDLUQHggyWme3oCoZtG19qDuB00O9/KeUjo mL7rTBxmEtTubmvOBtX6IxshsB2O8e3GiRGwv6maPGHEum/oFSg2WuQIVNWWZ/Jd 7MzuSDKcRzZcjpEZwH7qfqDvYkg8CAnFwggvxymH7fANCgC95w0WoKwxBEMO3//l Ijo/tmY/4j41jgTw+wLqhJVOWZH01qnqA/I+EKob87zedaKgZl96yy1055GYYuLA QSX60vwA7UdHLoCjDTipIbTBt1gTUWcQrY5QgC8X0hP5zwyR9xg9CxqMPJ6EQj6a ehONynQw/cWZAWxR/MfshITxFRIEonuv -----END CERTIFICATE-----Generated at Fri Jun 20 16:30:32 2025 by rpki-client