$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft File: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json) Hash identifier: tbEUaLncBXfdTgeZPi/S3S5vgSbzfnVhjKrkIArMB4Y= Subject key identifier: 3A:EC:83:8A:26:52:8D:C9:F9:B3:FD:F4:2C:7F:7E:FC:A2:08:FD:7B Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F Certificate issuer: /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Certificate serial: 0D8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft Manifest number: 0D7D Signing time: Wed 18 Jun 2025 17:53:54 +0000 Manifest this update: Wed 18 Jun 2025 17:53:54 +0000 Manifest next update: Wed 25 Jun 2025 17:53:54 +0000 Files and hashes: 1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: xydpcG19uAlfKzcMjqBFVR96ak8M/ZK3UjIVLjm2g9k=) 2: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: r12gsCo6iUFC5f/jSOBGicDzV0QxP8G0HCiUT+DfDFw=) 3: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: XfxZHGEC6L2I7lf4RHsiD8/699vyTVMdYrB6wZFXmUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3466 (0xd8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Validity Not Before: Jun 18 17:53:54 2025 GMT Not After : Jun 25 17:53:54 2025 GMT Subject: CN=6852fd32-fdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:84:c0:06:c0:d3:fd:c9:cf:c2:6d:15:3d: 6b:e8:e5:97:95:ba:6f:f5:8c:8e:bd:3f:3b:fd:69: 0b:82:3d:06:d2:ad:6a:fd:4e:af:25:2a:e9:8d:fd: 34:d2:3b:02:3a:7f:67:35:71:f0:32:7d:7b:3f:cd: 2c:25:43:84:ea:ea:96:63:98:68:79:36:62:12:1f: 09:9d:f9:43:e3:15:7e:73:0e:6b:33:ec:f4:b0:9b: 91:29:e3:a5:7f:a1:cb:99:80:b2:85:78:9a:0b:71: b4:02:1e:34:c2:5a:d2:d1:86:2c:dc:f5:b8:3b:42: ee:18:33:ce:8c:2b:75:be:c3:45:09:b9:37:2e:11: ab:b5:11:46:bd:03:14:2b:3c:bd:aa:06:48:3f:f4: f9:1f:5d:d1:4f:5d:1a:06:81:ea:92:92:fc:a2:6f: d6:cf:2c:7c:16:08:e8:a3:45:4c:9a:bf:35:0f:6f: b5:a5:cb:6b:f2:ad:4e:f2:5e:14:6a:47:b7:73:6b: 7d:09:a3:ac:a9:d8:65:1b:8d:43:41:97:68:88:20: cb:3a:28:e6:5b:06:b6:fa:19:9f:be:7c:dc:d0:ba: 01:b9:14:67:2d:aa:44:bf:e1:2f:fb:b8:a9:5d:33: fe:19:1a:57:22:87:1f:e7:5d:31:6c:2d:62:f4:4f: 12:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EC:83:8A:26:52:8D:C9:F9:B3:FD:F4:2C:7F:7E:FC:A2:08:FD:7B X509v3 Authority Key Identifier: keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0b:ba:8e:02:f4:8f:be:c6:e0:d4:82:df:82:02:f6:5a:83: 1f:41:84:ff:69:cd:8b:fd:74:37:e2:dc:13:b1:b3:9b:8a:62: 47:2d:27:79:71:f6:7c:21:9c:a8:8d:5c:2c:15:97:3f:c2:03: 95:c4:01:57:19:5a:f2:ce:0f:2d:0b:a7:19:93:b0:9f:2c:ea: c0:7c:2d:68:3e:49:0b:7c:ad:a7:23:e2:7d:17:5a:e0:25:78: ea:da:37:0c:95:1f:97:48:ed:0f:53:92:af:4d:d8:61:bf:e1: 39:de:77:49:27:ba:a4:97:99:ca:e7:66:29:6e:97:07:34:60: fb:9a:83:e7:42:6a:5c:86:cc:91:f4:c4:fd:37:42:b5:7f:ec: 7c:fe:59:24:6a:39:4b:33:81:b7:93:c9:f2:2a:10:20:25:87: 7d:fd:ba:80:d8:02:2f:61:e8:77:b1:0b:f3:d9:ad:03:ee:4e: e3:7e:a5:f0:4d:25:86:79:41:b5:1b:b0:43:0f:9c:a2:4c:14: 5b:ec:28:a6:07:92:ba:58:6e:b1:85:be:8e:09:32:bb:26:2c: 63:e1:36:2e:e9:c0:4d:cc:69:61:49:7d:26:03:d5:45:9d:b2: f5:5b:36:7f:f4:90:a3:57:2d:3a:12:2e:33:32:a2:46:85:09: 8c:ee:b1:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIzNjExMTAvBgNVBAUTKEUwQjlBMkU5OTM5RDU1OEYxOEJFNjIxNzVDOTVENzY4 RDI0NUQzMUYwHhcNMjUwNjE4MTc1MzU0WhcNMjUwNjI1MTc1MzU0WjAYMRYwFAYD VQQDEw02ODUyZmQzMi1mZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjCEwAbA0/3Jz8JtFT1r6OWXlbpv9YyOvT87/WkLgj0G0q1q/U6vJSrpjf00 0jsCOn9nNXHwMn17P80sJUOE6uqWY5hoeTZiEh8JnflD4xV+cw5rM+z0sJuRKeOl f6HLmYCyhXiaC3G0Ah40wlrS0YYs3PW4O0LuGDPOjCt1vsNFCbk3LhGrtRFGvQMU Kzy9qgZIP/T5H13RT10aBoHqkpL8om/Wzyx8Fgjoo0VMmr81D2+1pctr8q1O8l4U ake3c2t9CaOsqdhlG41DQZdoiCDLOijmWwa2+hmfvnzc0LoBuRRnLapEv+Ev+7ip XTP+GRpXIocf510xbC1i9E8SYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrsg4om Uo3J+bP99Cx/fvyiCP17MB8GA1UdIwQYMBaAFOC5oumTnVWPGL5iF1yV12jSRdMf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjM2MS83QzhEODAwQUNB MzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZOFl2bUlYWEpYWGFOSkYw eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMbWk2Wk9kVlk4WXZtSVhYSlhYYU5KRjB4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjM2MS83QzhEODAwQUNBMzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZ OFl2bUlYWEpYWGFOSkYweDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKC7qOAvSPvsbg1ILfggL2WoMfQYT/ac2L/XQ34twTsbObimJHLSd5 cfZ8IZyojVwsFZc/wgOVxAFXGVryzg8tC6cZk7CfLOrAfC1oPkkLfK2nI+J9F1rg JXjq2jcMlR+XSO0PU5KvTdhhv+E53ndJJ7qkl5nK52YpbpcHNGD7moPnQmpchsyR 9MT9N0K1f+x8/lkkajlLM4G3k8nyKhAgJYd9/bqA2AIvYeh3sQvz2a0D7k7jfqXw TSWGeUG1G7BDD5yiTBRb7CimB5K6WG6xhb6OCTK7Jixj4TYu6cBNzGlhSX0mA9VF nbL1WzZ/9JCjVy06Ei4zMqJGhQmM7rHH -----END CERTIFICATE-----Generated at Fri Jun 20 13:26:54 2025 by rpki-client