$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft File: 4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft (raw, json) Hash identifier: IpqXPugC2Tfs2He/FaOc8CR4N1YcHszg38ARYCsHt0Y= Subject key identifier: E8:A1:0A:08:FA:C2:EB:CC:2F:26:BB:A9:36:A0:88:C2:0D:E7:FE:30 Authority key identifier: E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA Certificate issuer: /CN=A914E1C1/serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA Certificate serial: 027F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft Manifest number: 0279 Signing time: Tue 17 Jun 2025 01:15:53 +0000 Manifest this update: Tue 17 Jun 2025 01:15:52 +0000 Manifest next update: Tue 24 Jun 2025 01:15:52 +0000 Files and hashes: 1: 4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl (hash: Y/gt5xHmYJaTO7Ag29IYthnX9Wkv0/kfu8WNePQRrkk=) 2: 2541D62A7F9811ED93508538C4F9AE02.roa (hash: FUd/qskXH7I3VsZeo9p50JOxxkxMPP4+8p2jo1T6M4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1C1, serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA Validity Not Before: Jun 17 01:15:52 2025 GMT Not After : Jun 24 01:15:52 2025 GMT Subject: CN=6850c1c8-7de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:88:ae:a8:d8:0b:fb:80:6a:94:63:32:ef: 5e:d5:3e:3a:b5:52:6e:dc:e0:0d:55:f4:48:43:c8: 35:e4:ac:19:c4:0d:e8:c6:2a:75:f9:83:6a:79:54: ce:42:84:f9:e9:ff:d3:be:b2:af:bb:9a:01:51:b5: 30:98:ed:14:b2:00:c4:42:61:31:3c:9a:55:1f:04: 0f:8b:93:b0:87:36:63:60:75:f7:13:4b:b7:25:63: 5c:63:55:8b:8b:4d:08:20:15:68:42:79:08:68:44: 0f:48:95:a2:8b:58:08:f7:d1:73:7f:5e:fb:bf:2f: 32:0e:10:fe:e1:ee:39:ec:62:d1:49:f8:1a:13:43: 40:cf:8d:b6:c3:db:fb:f3:77:0c:f4:62:3b:43:2f: a3:ec:58:16:5c:84:31:a1:ee:d3:96:60:53:fd:8e: dc:f4:8b:5d:da:d5:99:2e:26:a0:75:f4:cf:05:d8: 4d:ca:8e:89:3b:94:86:43:ae:f4:32:5b:76:ed:2b: 94:1b:d1:9a:eb:14:09:4a:ae:0d:92:28:51:8a:d0: 81:c4:69:38:6c:4d:0c:39:83:9a:63:27:33:20:83: d9:cd:aa:97:7d:37:d9:75:9b:94:4e:27:af:bd:53: 1c:9f:17:95:c7:5b:f3:f8:a6:44:4d:f6:61:2d:d1: dd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A1:0A:08:FA:C2:EB:CC:2F:26:BB:A9:36:A0:88:C2:0D:E7:FE:30 X509v3 Authority Key Identifier: keyid:E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:c7:df:b6:32:b3:99:cf:e8:92:b4:89:c0:98:c4:d6:54:a8: 0a:9c:39:88:27:0c:14:81:a5:97:57:2a:6f:ce:8a:1c:9d:76: c6:1e:38:93:7f:8e:30:84:98:48:d1:dc:50:de:fb:d0:16:7d: 38:b8:b1:f3:74:39:b4:e9:f2:6a:99:89:ef:55:ea:88:3f:83: bd:ba:25:fa:36:58:f6:fb:8d:88:3e:fa:ec:8c:b0:8d:e0:46: e7:36:0e:02:07:a6:7b:eb:c2:44:83:39:e9:02:aa:65:6f:71: a5:67:23:4a:07:a3:5e:17:ac:e8:54:df:3e:93:35:66:eb:7a: 10:37:49:c1:da:cf:2e:86:63:93:d4:67:2b:3e:3d:be:20:8b: 9d:3b:20:ad:61:f9:ac:f3:2a:0b:e5:b6:96:a7:f4:b5:cd:da: 5b:8c:01:4f:af:f3:08:76:1b:8a:3f:41:4c:e0:a4:63:dd:af: 57:71:5e:b5:eb:ae:6a:f9:08:62:92:ec:4f:06:8f:50:59:6d: 55:d9:a4:b0:18:cf:0f:73:86:17:95:15:fb:25:d6:ca:f0:3c: d3:51:c8:ea:37:a5:9f:4b:70:5f:5e:37:ad:a1:36:a1:fb:46: df:06:13:ec:33:a1:83:90:04:ea:5e:50:64:5a:e3:5d:13:5a: 46:5c:ea:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxQzExMTAvBgNVBAUTKEUzRjMxNTREOTg4Mjc2QTJGNTQxRTVFQTYyODE4Qzc3 MEJCQjgwRUEwHhcNMjUwNjE3MDExNTUyWhcNMjUwNjI0MDExNTUyWjAYMRYwFAYD VQQDEw02ODUwYzFjOC03ZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvw+IrqjYC/uAapRjMu9e1T46tVJu3OANVfRIQ8g15KwZxA3oxip1+YNqeVTO QoT56f/TvrKvu5oBUbUwmO0UsgDEQmExPJpVHwQPi5OwhzZjYHX3E0u3JWNcY1WL i00IIBVoQnkIaEQPSJWii1gI99Fzf177vy8yDhD+4e457GLRSfgaE0NAz422w9v7 83cM9GI7Qy+j7FgWXIQxoe7TlmBT/Y7c9Itd2tWZLiagdfTPBdhNyo6JO5SGQ670 Mlt27SuUG9Ga6xQJSq4NkihRitCBxGk4bE0MOYOaYyczIIPZzaqXfTfZdZuUTiev vVMcnxeVx1vz+KZETfZhLdHdPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOihCgj6 wuvMLya7qTagiMIN5/4wMB8GA1UdIwQYMBaAFOPzFU2Ygnai9UHl6mKBjHcLu4Dq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFDMS9EQkU1RjJDQTEw QzcxMUVEOEJCM0I3NURDNEY5QUUwMi80X01WVFppQ2RxTDFRZVhxWW9HTWR3dTdn T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfTVZUWmlDZHFMMVFlWHFZb0dNZHd1N2dPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFDMS9EQkU1RjJDQTEwQzcxMUVEOEJCM0I3NURDNEY5QUUwMi80X01WVFppQ2Rx TDFRZVhxWW9HTWR3dTdnT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnx9+2MrOZz+iStInAmMTWVKgKnDmIJwwUgaWXVypvzoocnXbGHjiT f44whJhI0dxQ3vvQFn04uLHzdDm06fJqmYnvVeqIP4O9uiX6Nlj2+42IPvrsjLCN 4EbnNg4CB6Z768JEgznpAqplb3GlZyNKB6NeF6zoVN8+kzVm63oQN0nB2s8uhmOT 1GcrPj2+IIudOyCtYfms8yoL5baWp/S1zdpbjAFPr/MIdhuKP0FM4KRj3a9XcV61 665q+QhikuxPBo9QWW1V2aSwGM8Pc4YXlRX7JdbK8DzTUcjqN6WfS3BfXjetoTah +0bfBhPsM6GDkATqXlBkWuNdE1pGXOqr -----END CERTIFICATE-----Generated at Wed Jun 18 21:52:33 2025 by rpki-client