$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft File: R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json) Hash identifier: En9v6MVMdDcCDd8dD4GWsOlsTF4Li5uFHSL1setAAXo= Subject key identifier: BE:1D:13:F1:53:F8:61:FC:0F:7B:E9:0C:78:11:20:04:31:F5:11:92 Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Certificate serial: 027F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft Manifest number: 027A Signing time: Fri 13 Jun 2025 01:12:33 +0000 Manifest this update: Fri 13 Jun 2025 01:12:32 +0000 Manifest next update: Fri 20 Jun 2025 01:12:32 +0000 Files and hashes: 1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: 5Ny6mDUozyS+70MxZqMqn6kfQKX6uxy9x2cEZJfPdwc=) 2: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: GG/AMsbpEzm/NFjGRgk+JWg1MGNbtO4+De0JwZLDbdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Validity Not Before: Jun 13 01:12:32 2025 GMT Not After : Jun 20 01:12:32 2025 GMT Subject: CN=684b7b01-d069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:f6:f5:6c:09:3a:a2:5d:cb:49:be:d3:63: 95:51:56:ae:64:b2:ed:b1:29:57:f6:fd:3a:11:86: 50:32:46:f5:6b:0d:fb:f5:18:56:36:a2:7d:0a:e1: 85:d9:ad:fc:bb:b6:d1:bf:37:78:6f:8a:4c:57:6f: d8:8b:98:b6:3f:65:8b:16:42:6d:08:01:e9:61:2c: 61:04:98:f9:f1:5a:83:86:90:5e:45:2d:80:38:2d: ba:a7:03:c2:ee:0c:5a:4e:95:58:17:03:70:f1:24: 10:28:f8:e3:5a:46:35:be:f5:b8:1c:2c:7a:2d:28: 7b:af:d7:99:dd:7b:d0:3c:ed:46:2c:0b:1a:b7:37: d8:d1:a3:df:81:13:6a:c1:22:a3:01:7f:f1:1f:8a: 17:9d:8a:df:26:1e:ee:dc:69:98:92:56:b5:7c:fa: d5:72:44:43:2b:50:ae:8f:ad:9a:c7:08:c4:60:0d: 9b:c2:a5:59:4e:14:df:ed:4d:31:06:f3:95:7c:a3: af:bd:e3:63:e4:42:74:dd:c0:09:47:dd:5d:ab:5c: 3b:c5:c2:c0:6f:04:6a:a1:f8:fc:a4:f1:c8:f5:78: 92:25:c1:58:7a:6e:92:c3:d5:93:30:86:83:2f:18: e8:c7:94:f7:5f:d2:25:b0:63:64:e1:f3:5f:ff:3f: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1D:13:F1:53:F8:61:FC:0F:7B:E9:0C:78:11:20:04:31:F5:11:92 X509v3 Authority Key Identifier: keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:e7:a6:1d:c6:8d:8a:b6:82:b2:e0:a3:f4:6c:4f:95:82:be: 78:a9:0d:fc:61:6c:ea:94:1e:07:a8:4c:3c:ad:a6:69:69:ec: d8:47:1e:59:c3:2f:88:71:67:bb:1b:0e:53:58:0d:69:0f:d6: 8e:fe:32:73:42:ee:8b:f6:6b:51:e5:8e:dd:4d:d3:17:57:53: a9:95:ea:50:67:76:1d:d4:fe:d8:69:b2:5f:5d:26:79:2d:af: b6:00:d5:63:17:d2:6d:5c:16:7b:53:ef:7e:3c:89:30:f8:eb: dd:c5:6d:bd:16:2f:8f:ac:2a:12:e6:2f:f7:b5:81:0e:90:da: f8:09:0a:df:ec:c3:3f:d4:5d:9c:e7:d1:cb:a5:84:45:f5:ea: 75:61:5d:06:0e:17:c1:34:0c:c4:d2:7c:76:c8:35:c3:31:1c: c8:c6:0d:71:f9:31:2c:3c:e2:88:72:97:5d:eb:1a:60:ad:9b: fd:45:7a:83:d3:21:1d:aa:06:f4:fa:c0:99:4c:83:ef:40:9e: a2:fb:40:14:0b:c5:30:0a:86:28:90:66:76:7d:4c:c2:18:04: dd:66:68:f4:c2:85:b7:ce:f5:fb:a3:29:76:7e:5d:01:c5:4b: ee:cb:2d:6d:6e:56:e1:62:5d:d9:2b:a1:e7:7f:da:b7:42:5f: dc:4c:a2:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThEQzYxMTAvBgNVBAUTKDQ3ODZEQkNDQjVDQzI5NkIxREFCMTc1RTgzQ0M0ODEx QTYzNjE3QzcwHhcNMjUwNjEzMDExMjMyWhcNMjUwNjIwMDExMjMyWjAYMRYwFAYD VQQDEw02ODRiN2IwMS1kMDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBv29WwJOqJdy0m+02OVUVauZLLtsSlX9v06EYZQMkb1aw379RhWNqJ9CuGF 2a38u7bRvzd4b4pMV2/Yi5i2P2WLFkJtCAHpYSxhBJj58VqDhpBeRS2AOC26pwPC 7gxaTpVYFwNw8SQQKPjjWkY1vvW4HCx6LSh7r9eZ3XvQPO1GLAsatzfY0aPfgRNq wSKjAX/xH4oXnYrfJh7u3GmYkla1fPrVckRDK1Cuj62axwjEYA2bwqVZThTf7U0x BvOVfKOvveNj5EJ03cAJR91dq1w7xcLAbwRqofj8pPHI9XiSJcFYem6Sw9WTMIaD Lxjox5T3X9IlsGNk4fNf/z+kdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4dE/FT +GH8D3vpDHgRIAQx9RGSMB8GA1UdIwQYMBaAFEeG28y1zClrHasXXoPMSBGmNhfH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OERDNi80QTAxMjI3QzBG RjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtXc2RxeGRlZzh4SUVhWTJG OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0YmJ6TFhNS1dzZHF4ZGVnOHhJRWFZMkY4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OERDNi80QTAxMjI3QzBGRjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtX c2RxeGRlZzh4SUVhWTJGOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA56Ydxo2KtoKy4KP0bE+Vgr54qQ38YWzqlB4HqEw8raZpaezYRx5Z wy+IcWe7Gw5TWA1pD9aO/jJzQu6L9mtR5Y7dTdMXV1OplepQZ3Yd1P7YabJfXSZ5 La+2ANVjF9JtXBZ7U+9+PIkw+OvdxW29Fi+PrCoS5i/3tYEOkNr4CQrf7MM/1F2c 59HLpYRF9ep1YV0GDhfBNAzE0nx2yDXDMRzIxg1x+TEsPOKIcpdd6xpgrZv9RXqD 0yEdqgb0+sCZTIPvQJ6i+0AUC8UwCoYokGZ2fUzCGATdZmj0woW3zvX7oyl2fl0B xUvuyy1tblbhYl3ZK6Hnf9q3Ql/cTKLk -----END CERTIFICATE-----Generated at Sat Jun 14 18:34:44 2025 by rpki-client