$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft File: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json) Hash identifier: vTRPAE2RxqqdrNrQHApcAutIupDsD71NWOOi2tyjcFw= Subject key identifier: 29:6B:02:88:BB:1C:EF:DE:8E:AA:88:0F:A9:63:F1:CF:23:B7:83:80 Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 Certificate issuer: /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Certificate serial: 0758 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft Manifest number: 074F Signing time: Thu 12 Jun 2025 21:20:11 +0000 Manifest this update: Thu 12 Jun 2025 21:20:11 +0000 Manifest next update: Thu 19 Jun 2025 21:20:11 +0000 Files and hashes: 1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: N4oRvL1moKZiqsG+vsYosZlX/DI6szphVwqOkD8EHJo=) 2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: By6Dq5HHVlEkvf0nTtSM0kJMMOYfz+8LI2/AK8Ixb68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1880 (0x758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Validity Not Before: Jun 12 21:20:11 2025 GMT Not After : Jun 19 21:20:11 2025 GMT Subject: CN=684b448b-8938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:5e:dd:24:1a:9e:49:b3:19:9e:d6:a8:12: 59:52:54:e1:84:ed:7e:bd:2f:4c:fc:fd:de:60:d5: 80:fe:4c:45:c7:7b:e2:1f:ba:c2:05:bd:58:bd:69: ee:22:d1:21:26:00:7a:7d:8f:d1:f5:1b:14:36:45: 27:6e:be:94:2e:14:8d:b5:53:aa:53:93:b9:ec:7f: c1:2b:6a:d8:a0:ed:20:6c:40:97:97:65:56:3e:52: 3a:36:3a:95:7d:ad:fb:a7:40:b1:6f:b4:34:5d:9b: b4:21:7f:c5:18:95:1d:98:58:51:75:ac:91:ed:37: 0b:33:29:69:45:18:0b:60:ad:eb:b9:6f:d1:65:49: 96:69:d2:d3:2c:36:11:e4:94:f0:8d:d9:41:a5:77: d3:2b:99:00:04:09:11:d9:67:39:c1:7f:27:af:2d: 57:ac:a9:b0:84:da:cf:ca:32:45:a9:34:db:93:f5: 3e:86:09:f2:2c:d1:25:80:d9:e5:93:58:d0:23:36: 64:71:b9:3f:05:cb:00:d5:29:02:a2:ad:76:53:f6: 06:d8:2b:4e:77:61:8f:43:ed:c6:2f:3f:a8:cf:07: 9a:d5:35:b9:85:7a:2e:89:a4:9a:05:2d:42:49:0a: b0:e8:6b:29:41:9a:ca:60:79:e3:dd:ff:c4:86:65: ae:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6B:02:88:BB:1C:EF:DE:8E:AA:88:0F:A9:63:F1:CF:23:B7:83:80 X509v3 Authority Key Identifier: keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:9c:3a:7d:22:d6:9e:a3:a1:29:63:36:79:13:1f:70:45:0a: 5f:a2:07:b2:78:cc:d7:44:3b:be:6f:4f:e1:61:df:5a:d2:67: cb:90:d1:c8:a0:a8:25:d6:af:1f:a1:01:a6:50:d8:dd:45:d7: 9f:ba:d2:2d:fc:90:c1:37:d5:ed:b7:20:98:cd:7f:5e:80:bd: c7:64:4e:7e:77:be:1f:fb:19:ff:45:9d:59:4a:d7:05:f5:87: 5a:79:e9:28:10:c0:d9:87:52:1f:64:fe:99:16:a5:5f:28:f1: e9:9d:92:15:99:d2:db:00:02:93:43:5d:a1:70:17:2b:40:1f: aa:bb:dd:35:34:72:ad:b9:54:72:2e:31:d7:01:71:26:97:1d: f0:36:3b:52:41:3b:68:dc:c2:e7:9f:77:f8:5c:92:6e:6b:d9: 3f:b7:8a:0d:e9:30:46:87:4b:d5:fd:a0:b6:b0:d2:47:a3:c5: 96:6c:a5:ca:51:7a:14:ce:9f:f1:ad:b7:46:d7:53:2a:53:1a: ce:40:5f:a4:e5:9b:b1:54:ff:6c:58:6d:8e:5b:8d:2a:61:eb: b6:78:c7:07:21:85:91:d3:f6:13:57:b0:37:33:a2:5f:60:0f: e4:10:d0:e8:c7:cf:6e:69:18:e2:61:94:d8:df:b1:b7:c9:ed: 13:7b:16:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkyMjAxMTAvBgNVBAUTKEUyQ0ZDNDJCNkEwODE1MEFFRkVGRTcxODlCRTVBRjJC RTU2OEY4QzEwHhcNMjUwNjEyMjEyMDExWhcNMjUwNjE5MjEyMDExWjAYMRYwFAYD VQQDEw02ODRiNDQ4Yi04OTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs71e3SQankmzGZ7WqBJZUlThhO1+vS9M/P3eYNWA/kxFx3viH7rCBb1YvWnu ItEhJgB6fY/R9RsUNkUnbr6ULhSNtVOqU5O57H/BK2rYoO0gbECXl2VWPlI6NjqV fa37p0Cxb7Q0XZu0IX/FGJUdmFhRdayR7TcLMylpRRgLYK3ruW/RZUmWadLTLDYR 5JTwjdlBpXfTK5kABAkR2Wc5wX8nry1XrKmwhNrPyjJFqTTbk/U+hgnyLNElgNnl k1jQIzZkcbk/BcsA1SkCoq12U/YG2CtOd2GPQ+3GLz+ozwea1TW5hXouiaSaBS1C SQqw6GspQZrKYHnj3f/EhmWuywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClrAoi7 HO/ejqqID6lj8c8jt4OAMB8GA1UdIwQYMBaAFOLPxCtqCBUK7+/nGJvlryvlaPjB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTIyMC8xNUNEMUMyMjI4 QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZRcnY3LWNZbS1XdkstVm8t TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRzX0VLMm9JRlFydjctY1ltLVd2Sy1Wby1NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTIyMC8xNUNEMUMyMjI4QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZR cnY3LWNZbS1XdkstVm8tTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnnDp9Itaeo6EpYzZ5Ex9wRQpfogeyeMzXRDu+b0/hYd9a0mfLkNHI oKgl1q8foQGmUNjdRdefutIt/JDBN9XttyCYzX9egL3HZE5+d74f+xn/RZ1ZStcF 9YdaeekoEMDZh1IfZP6ZFqVfKPHpnZIVmdLbAAKTQ12hcBcrQB+qu901NHKtuVRy LjHXAXEmlx3wNjtSQTto3MLnn3f4XJJua9k/t4oN6TBGh0vV/aC2sNJHo8WWbKXK UXoUzp/xrbdG11MqUxrOQF+k5ZuxVP9sWG2OW40qYeu2eMcHIYWR0/YTV7A3M6Jf YA/kENDox89uaRjiYZTY37G3ye0TexZv -----END CERTIFICATE-----Generated at Sat Jun 14 19:11:50 2025 by rpki-client