$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft File: 4suW87BaY-nlR5ZSbszpSjWR5fw.mft (raw, json) Hash identifier: BNTbir7NIvAtSoS8YODRxHRwwVf5b0eDr64STGM14LE= Subject key identifier: D7:C9:D0:AE:20:19:FE:09:15:20:A1:1A:B8:FB:55:8A:52:41:C5:46 Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC Certificate issuer: /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft Manifest number: 0E Signing time: Thu 19 Jun 2025 07:25:42 +0000 Manifest this update: Thu 19 Jun 2025 07:25:42 +0000 Manifest next update: Thu 26 Jun 2025 07:25:42 +0000 Files and hashes: 1: 4suW87BaY-nlR5ZSbszpSjWR5fw.crl (hash: mI08aI5LBi/2hkucYsChlMS/e2WV5E3VE3TXfP7ibKM=) 2: ACCFE0643C9711F08159891EC4F9AE02.roa (hash: lVHhBj6K1C48l+j8zLFa7FZ7WGKYKz6QlN3fyLSlK7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC Validity Not Before: Jun 19 07:25:42 2025 GMT Not After : Jun 26 07:25:42 2025 GMT Subject: CN=6853bb76-4eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:7e:c7:be:c4:8a:d2:06:04:0b:13:8b:14: d7:67:50:fe:8b:dd:62:41:e8:ef:e6:da:3f:ca:27: 0d:31:ba:43:6c:c0:62:51:1b:5b:70:21:46:97:ca: 11:a1:e6:8a:c0:ec:3f:11:cc:8b:1d:52:8e:07:49: 2f:f7:17:01:5f:e7:96:63:e1:b9:26:9e:4d:d7:97: 99:b0:91:f0:86:38:c4:bb:b1:2e:49:ab:ba:ae:39: 30:b1:b8:9b:90:48:ad:bc:6b:f2:d8:65:e8:17:72: a4:17:b8:cb:48:a7:18:72:3a:e4:a8:50:70:6f:d0: 28:3b:f9:cf:0d:49:10:a7:0c:0c:3e:b6:40:91:77: 45:87:65:5e:27:fd:d8:02:5f:d3:df:3f:1d:d9:b7: 62:c7:b6:4a:66:2a:68:11:64:3d:a5:8d:2e:fa:d7: 20:5c:07:29:09:c9:35:ed:ae:77:15:02:92:99:6e: 10:13:da:28:4f:b4:bd:69:1f:fd:11:39:36:03:8e: b8:13:3a:c8:5c:4b:78:0d:a1:9c:a1:79:f9:bc:eb: d2:cb:a2:3e:4d:84:a0:22:7f:ad:d5:f8:27:84:eb: 2d:08:e6:6e:25:70:21:ef:41:cc:fe:91:1a:9c:3f: 62:57:20:3f:95:57:62:31:ea:f4:7b:e2:73:22:b6: 16:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C9:D0:AE:20:19:FE:09:15:20:A1:1A:B8:FB:55:8A:52:41:C5:46 X509v3 Authority Key Identifier: keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ca:9a:4b:08:95:db:ae:51:f8:db:24:3e:f5:4a:7b:5b:3f: b2:c1:26:3d:12:d4:d8:bf:30:ba:4e:08:c6:ab:61:ad:a2:fb: b9:46:97:c1:e3:04:e2:89:3e:1e:78:7b:3c:87:c5:11:00:11: aa:4b:57:68:9f:8e:6d:c3:3f:d8:1c:b6:5b:a4:9a:00:e1:b9: 40:05:38:0c:59:eb:3c:b0:94:74:ad:20:7e:cb:92:3d:7b:04: c6:1f:d1:25:8d:f6:13:24:d5:33:a9:09:33:91:77:04:3d:79: 81:2f:9b:bf:6f:10:94:2d:0d:c9:26:10:c3:50:37:13:35:7c: 27:c6:1a:d5:95:85:8b:8f:9d:ab:e6:5e:87:a5:90:ca:a1:82: 3a:32:72:37:8a:e1:ce:7b:71:f9:e4:68:8a:99:74:ce:58:26: ce:80:dd:95:5e:e3:10:a6:9a:77:68:46:ac:f3:e7:c5:1a:31: 36:0e:76:4f:ee:11:65:ed:9a:8f:9c:b6:55:54:11:96:18:b2: 65:67:47:bf:c4:c2:83:eb:d9:5e:28:93:cf:12:4e:e2:99:f6: 9a:3d:12:5b:10:d2:61:70:c3:2e:51:8e:d4:2a:f4:72:a9:88: d5:1e:0f:8e:a5:01:8b:0d:1b:91:d8:70:fe:8d:72:57:86:86: 8b:74:6e:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 N0I3NDExMC8GA1UEBRMoRTJDQjk2RjNCMDVBNjNFOUU1NDc5NjUyNkVDQ0U5NEEz NTkxRTVGQzAeFw0yNTA2MTkwNzI1NDJaFw0yNTA2MjYwNzI1NDJaMBgxFjAUBgNV BAMTDTY4NTNiYjc2LTRlZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCown7HvsSK0gYECxOLFNdnUP6L3WJB6O/m2j/KJw0xukNswGJRG1twIUaXyhGh 5orA7D8RzIsdUo4HSS/3FwFf55Zj4bkmnk3Xl5mwkfCGOMS7sS5Jq7quOTCxuJuQ SK28a/LYZegXcqQXuMtIpxhyOuSoUHBv0Cg7+c8NSRCnDAw+tkCRd0WHZV4n/dgC X9PfPx3Zt2LHtkpmKmgRZD2ljS761yBcBykJyTXtrncVApKZbhAT2ihPtL1pH/0R OTYDjrgTOshcS3gNoZyhefm869LLoj5NhKAif63V+CeE6y0I5m4lcCHvQcz+kRqc P2JXID+VV2Ix6vR74nMithaXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU18nQriAZ /gkVIKEauPtVilJBxUYwHwYDVR0jBBgwFoAU4suW87BaY+nlR5ZSbszpSjWR5fww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3Qjc0L0FGNjRFNTEwM0JB QTExRjA5NjQyODIxQ0M0RjlBRTAyLzRzdVc4N0JhWS1ubFI1WlNic3pwU2pXUjVm dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNHN1Vzg3QmFZLW5sUjVaU2JzenBTaldSNWZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 Qjc0L0FGNjRFNTEwM0JBQTExRjA5NjQyODIxQ0M0RjlBRTAyLzRzdVc4N0JhWS1u bFI1WlNic3pwU2pXUjVmdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH3KmksIlduuUfjbJD71SntbP7LBJj0S1Ni/MLpOCMarYa2i+7lGl8Hj BOKJPh54ezyHxREAEapLV2ifjm3DP9gctlukmgDhuUAFOAxZ6zywlHStIH7Lkj17 BMYf0SWN9hMk1TOpCTORdwQ9eYEvm79vEJQtDckmEMNQNxM1fCfGGtWVhYuPnavm XoelkMqhgjoycjeK4c57cfnkaIqZdM5YJs6A3ZVe4xCmmndoRqzz58UaMTYOdk/u EWXtmo+ctlVUEZYYsmVnR7/EwoPr2V4ok88STuKZ9po9ElsQ0mFwwy5RjtQq9HKp iNUeD46lAYsNG5HYcP6NcleGhot0bm8= -----END CERTIFICATE-----Generated at Fri Jun 20 04:41:14 2025 by rpki-client