$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json) Hash identifier: P9Hr/H0Zi8+oaqRJpuOgPD70x2xrWNaxp1rTZOpY5Uk= Subject key identifier: 0B:7C:1F:4F:A2:AE:E9:02:67:CE:92:99:CF:DD:F2:BE:AD:58:03:96 Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft Manifest number: 0165 Signing time: Sun 15 Jun 2025 03:08:33 +0000 Manifest this update: Sun 15 Jun 2025 03:08:32 +0000 Manifest next update: Sun 22 Jun 2025 03:08:32 +0000 Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: KYyXwl9zOCzV/rVBHxZZNDhsmwDtef19RfKAjEL9hJI=) 2: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: st8PwK196xNld8O2k0lKE8037dLGvSfGuDJRF0i8kvY=) 3: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: imnNT9qYRRIcc5JHDTtnRt4iRKv++5OKcbvGmRUGbZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Validity Not Before: Jun 15 03:08:32 2025 GMT Not After : Jun 22 03:08:32 2025 GMT Subject: CN=684e3931-eadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:00:23:b3:0d:9f:a7:45:69:92:63:7a:4e:c5: ab:03:44:07:94:b5:32:7e:0e:5e:58:ab:e9:63:ff: 0b:6f:92:52:17:3f:e2:73:e6:40:f0:a5:f6:e0:2f: 92:39:2f:c6:97:b2:48:32:09:92:fc:12:e5:39:13: 75:f0:80:f3:4d:79:6f:9f:e7:48:3d:42:69:66:da: d2:db:a1:04:32:fa:2d:f1:23:39:e9:fa:4e:2e:9f: 7c:ae:46:ea:0b:94:00:a7:a0:71:d3:cb:24:35:f9: bc:9c:8f:d9:7a:42:b0:55:a2:fb:a3:84:63:29:3d: b0:0c:2d:b6:27:e8:ef:24:31:77:0f:67:68:db:e4: 49:63:bf:79:d9:bd:b7:fe:0e:c6:8c:81:bb:e9:f2: 39:44:f5:28:9b:59:f3:ff:b5:f9:f1:56:1c:a0:07: 14:ae:af:6d:e7:02:cf:ae:d3:5d:78:5c:d8:71:ff: 21:fe:5f:a2:58:ee:71:3e:7f:8e:4a:a1:23:b6:13: 96:f0:2a:a3:09:2f:2b:02:48:c3:a6:2a:01:9b:1b: 01:90:03:b7:7c:c6:3b:26:12:75:60:5e:11:31:73: 0f:67:04:6b:19:9a:0a:f3:15:c8:10:42:88:1e:14: 01:75:97:94:13:7f:15:71:c9:b2:28:72:d5:4b:2a: 2e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7C:1F:4F:A2:AE:E9:02:67:CE:92:99:CF:DD:F2:BE:AD:58:03:96 X509v3 Authority Key Identifier: keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:95:13:6e:5e:1a:da:00:b0:e1:11:e8:6a:f1:52:7e:78:a5: 7d:b3:4c:0e:59:98:aa:ab:ea:23:8a:d8:e7:78:c4:fe:2f:8d: 55:da:fa:c2:44:ce:97:fe:38:4d:4a:fc:76:22:bc:32:ff:9a: 9d:21:06:20:be:00:54:27:14:0a:61:0b:83:dd:9c:49:f1:54: b4:fc:fb:99:7f:c4:c6:01:1a:9b:97:bb:c5:14:3f:c9:35:5a: 3c:a0:42:e3:aa:cb:81:4d:71:e9:9f:ea:3a:ad:f0:27:b4:ea: d7:c4:3c:80:dd:4e:b5:c8:e4:55:b9:aa:1a:7d:43:8a:3a:11: 45:a5:22:68:12:6e:b2:65:c4:df:e8:f0:9c:0d:c0:a1:cc:44: c2:f0:8e:ec:22:8d:10:d6:8c:93:11:45:59:1c:78:59:12:79: b3:2c:92:fd:90:2f:1c:39:85:32:9d:3f:06:2a:6b:4b:29:34: d1:44:32:7a:9b:e2:bc:5e:6c:e1:87:fc:7c:e9:70:a6:4c:bd: 16:cf:02:7b:8b:7b:f8:5a:c2:81:5b:de:21:21:75:71:55:22: dc:b1:8f:a0:16:82:af:27:ac:c5:20:23:17:e2:8c:43:fb:27: e2:06:24:1d:08:f7:b1:e0:24:c0:8d:cf:96:6e:76:41:dd:fd: dd:46:b5:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCNjExMTAvBgNVBAUTKEUzRTEwMEY4MDQwMTNBMDVGOTIyRUUxMUNCNEUwQUJF QTZDMjJCOTgwHhcNMjUwNjE1MDMwODMyWhcNMjUwNjIyMDMwODMyWjAYMRYwFAYD VQQDEw02ODRlMzkzMS1lYWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywAjsw2fp0VpkmN6TsWrA0QHlLUyfg5eWKvpY/8Lb5JSFz/ic+ZA8KX24C+S OS/Gl7JIMgmS/BLlORN18IDzTXlvn+dIPUJpZtrS26EEMvot8SM56fpOLp98rkbq C5QAp6Bx08skNfm8nI/ZekKwVaL7o4RjKT2wDC22J+jvJDF3D2do2+RJY7952b23 /g7GjIG76fI5RPUom1nz/7X58VYcoAcUrq9t5wLPrtNdeFzYcf8h/l+iWO5xPn+O SqEjthOW8CqjCS8rAkjDpioBmxsBkAO3fMY7JhJ1YF4RMXMPZwRrGZoK8xXIEEKI HhQBdZeUE38VccmyKHLVSyoumQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAt8H0+i rukCZ86Smc/d8r6tWAOWMB8GA1UdIwQYMBaAFOPhAPgEAToF+SLuEctOCr6mwiuY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUI2MS83NjE2RDRGQzJB Q0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9nWDVJdTRSeTA0S3ZxYkNL NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtRUEtQVFCT2dYNUl1NFJ5MDRLdnFiQ0s1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUI2MS83NjE2RDRGQzJBQ0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9n WDVJdTRSeTA0S3ZxYkNLNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnlRNuXhraALDhEehq8VJ+eKV9s0wOWZiqq+ojitjneMT+L41V2vrC RM6X/jhNSvx2Irwy/5qdIQYgvgBUJxQKYQuD3ZxJ8VS0/PuZf8TGARqbl7vFFD/J NVo8oELjqsuBTXHpn+o6rfAntOrXxDyA3U61yORVuaoafUOKOhFFpSJoEm6yZcTf 6PCcDcChzETC8I7sIo0Q1oyTEUVZHHhZEnmzLJL9kC8cOYUynT8GKmtLKTTRRDJ6 m+K8Xmzhh/x86XCmTL0WzwJ7i3v4WsKBW94hIXVxVSLcsY+gFoKvJ6zFICMX4oxD +yfiBiQdCPex4CTAjc+WbnZB3f3dRrUl -----END CERTIFICATE-----Generated at Sun Jun 15 09:31:57 2025 by rpki-client