$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json) Hash identifier: 5oKtAhScTyOmHQhtJfwkgpAZa5vt3aFWGoNzUDnDX1M= Subject key identifier: EA:59:AB:2A:43:99:57:5F:A0:A3:C9:6A:1E:A8:9A:59:7F:EE:CF:16 Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87 Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft Manifest number: 8B Signing time: Sun 15 Jun 2025 05:38:01 +0000 Manifest this update: Sun 15 Jun 2025 05:38:00 +0000 Manifest next update: Sun 22 Jun 2025 05:38:00 +0000 Files and hashes: 1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: qvsKD/+dne/b+f+oUydVeg6cj+R0HFf/pr+8WRiJSak=) 2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: vFQI0/WMzcqMUL954AE6vlA2OPOfqfsgIiFbV+UqtL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087 Validity Not Before: Jun 15 05:38:00 2025 GMT Not After : Jun 22 05:38:00 2025 GMT Subject: CN=684e5c38-d1f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:12:55:8e:3a:92:96:7c:c4:67:9c:21:c6:67: 79:2d:98:ec:f8:69:22:f0:13:3b:1b:47:de:59:db: dc:8d:f5:7f:82:a0:4b:c8:b1:7d:3f:58:17:2a:21: b7:8f:9f:80:a7:fa:4d:61:f8:96:b9:f5:94:ae:b1: 6c:a3:f5:e4:9a:32:0f:3b:a7:27:5a:dd:fb:63:4d: 6f:6c:8d:a2:a3:26:28:1e:5c:cd:46:f7:aa:c6:70: 8c:86:9b:a8:e4:72:3d:02:cf:93:03:2c:ee:43:01: 98:05:59:36:2c:4c:3a:07:1f:2d:a1:23:78:ff:91: cc:ea:9a:d9:e9:7a:4d:71:81:a0:03:cf:c0:67:ee: 02:b0:4b:1c:39:1a:4b:47:41:e9:78:4b:52:34:1e: f4:a5:9e:fd:f7:f7:6a:f4:20:3d:47:1e:b3:fe:57: 28:d4:4d:65:58:20:7b:11:89:ca:a1:34:4c:80:af: c3:66:7c:31:e2:15:19:99:52:ac:56:0f:a0:98:93: 90:24:7e:38:78:a4:4c:39:90:2a:db:6b:98:2f:dd: c8:8d:96:a6:ac:84:05:1a:27:20:91:28:ee:ed:05: ee:59:88:17:b0:02:b7:0d:d3:92:c0:31:07:0c:64: 08:0c:c9:44:05:be:46:0a:10:98:fe:f1:d5:f9:59: b4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:59:AB:2A:43:99:57:5F:A0:A3:C9:6A:1E:A8:9A:59:7F:EE:CF:16 X509v3 Authority Key Identifier: keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:39:e8:11:1a:45:11:ea:18:03:70:6e:6f:e9:d8:cc:fb:4d: 26:91:21:46:35:5d:c9:46:24:18:35:30:cd:01:7b:69:6f:0a: 7b:64:32:b1:10:e3:b3:44:e7:23:cc:9d:69:dc:b6:cd:79:67: 4d:47:fb:23:c1:0e:81:c8:79:f6:b0:5c:0a:a8:7b:85:7a:7c: 2b:bb:50:1b:a2:4a:8f:34:cc:2d:fd:67:ad:c8:34:d4:7f:49: 84:b7:a3:7c:76:32:00:55:45:47:a0:89:91:bb:03:24:eb:0b: dd:ad:44:8c:01:69:2f:50:4a:ca:91:4f:72:30:2d:79:8f:b1: d2:ea:7c:8f:a4:2f:1a:c5:f9:f8:81:7b:f6:cc:6c:3f:45:06: 91:1f:2e:ad:4b:67:0f:0b:bb:23:9b:4a:95:8d:06:f3:4b:4f: 4d:23:41:f3:04:d2:20:01:0e:82:ae:cd:f0:94:d2:85:1c:0a: c3:6a:72:5b:7c:45:a9:30:77:2d:f1:bf:9b:31:72:7b:04:96: 72:44:ad:78:53:5f:98:82:ed:b8:40:26:54:07:d9:9e:04:73: 54:a6:14:d0:73:2b:b3:a6:8e:c0:3a:e7:84:23:d2:bb:99:aa: 04:e0:64:40:7b:7c:7a:c2:5c:29:46:97:5a:d5:ea:22:5f:99: 26:67:73:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2MDAxMTAvBgNVBAUTKEUwQjk0NThGNjk4MjVGRjgyOTM4N0IxMzlFODhGRDNC RDY3NDAwODcwHhcNMjUwNjE1MDUzODAwWhcNMjUwNjIyMDUzODAwWjAYMRYwFAYD VQQDEw02ODRlNWMzOC1kMWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BJVjjqSlnzEZ5whxmd5LZjs+Gki8BM7G0feWdvcjfV/gqBLyLF9P1gXKiG3 j5+Ap/pNYfiWufWUrrFso/XkmjIPO6cnWt37Y01vbI2ioyYoHlzNRveqxnCMhpuo 5HI9As+TAyzuQwGYBVk2LEw6Bx8toSN4/5HM6prZ6XpNcYGgA8/AZ+4CsEscORpL R0HpeEtSNB70pZ799/dq9CA9Rx6z/lco1E1lWCB7EYnKoTRMgK/DZnwx4hUZmVKs Vg+gmJOQJH44eKRMOZAq22uYL93IjZamrIQFGicgkSju7QXuWYgXsAK3DdOSwDEH DGQIDMlEBb5GChCY/vHV+Vm0GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpZqypD mVdfoKPJah6omll/7s8WMB8GA1UdIwQYMBaAFOC5RY9pgl/4KTh7E56I/TvWdACH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTYwMC8yMjFCQUVCRTc3 RjExMUVGQUMxMTI5NDJDNEY5QUUwMi80TGxGajJtQ1hfZ3BPSHNUbm9qOU85WjBB SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRMbEZqMm1DWF9ncE9Ic1Rub2o5TzlaMEFJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTYwMC8yMjFCQUVCRTc3RjExMUVGQUMxMTI5NDJDNEY5QUUwMi80TGxGajJtQ1hf Z3BPSHNUbm9qOU85WjBBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsOegRGkUR6hgDcG5v6djM+00mkSFGNV3JRiQYNTDNAXtpbwp7ZDKx EOOzROcjzJ1p3LbNeWdNR/sjwQ6ByHn2sFwKqHuFenwru1AbokqPNMwt/WetyDTU f0mEt6N8djIAVUVHoImRuwMk6wvdrUSMAWkvUErKkU9yMC15j7HS6nyPpC8axfn4 gXv2zGw/RQaRHy6tS2cPC7sjm0qVjQbzS09NI0HzBNIgAQ6Crs3wlNKFHArDanJb fEWpMHct8b+bMXJ7BJZyRK14U1+Ygu24QCZUB9meBHNUphTQcyuzpo7AOueEI9K7 maoE4GRAe3x6wlwpRpda1eoiX5kmZ3MS -----END CERTIFICATE-----Generated at Mon Jun 16 19:31:53 2025 by rpki-client