$ rpki-client -vvf rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft File: 4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft (raw, json) Hash identifier: //DEzEjNnKdh6LanQ5rzhB+5mW03aMS/7oTiRQGNGg0= Subject key identifier: 83:A6:D1:EC:23:49:D3:FB:03:13:2E:D8:BE:A3:22:59:2A:5A:CE:AF Authority key identifier: E2:B7:A2:FC:C2:D7:CC:B9:93:D5:32:CF:AB:B2:7F:AD:B2:48:DD:17 Certificate issuer: /CN=A915C948/serialNumber=E2B7A2FCC2D7CCB993D532CFABB27FADB248DD17 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft Manifest number: 014A Signing time: Thu 19 Jun 2025 03:39:38 +0000 Manifest this update: Thu 19 Jun 2025 03:39:37 +0000 Manifest next update: Thu 26 Jun 2025 03:39:37 +0000 Files and hashes: 1: 4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl (hash: b3XxNtgEAC+tFfR8XYUifCQC4gzhy8JDSgk5gNinyVw=) 2: BED765785B0411EE94E4143EC4F9AE02.roa (hash: nzuv2qiqFy7RBa+xOMRhwb33N3s9hvdrnFdUnSAlhPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C948, serialNumber=E2B7A2FCC2D7CCB993D532CFABB27FADB248DD17 Validity Not Before: Jun 19 03:39:37 2025 GMT Not After : Jun 26 03:39:37 2025 GMT Subject: CN=6853867a-da57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bf:0d:89:13:2a:00:35:81:41:a0:e7:c0:85: e1:e7:80:f8:75:54:2f:14:d1:29:46:ad:2d:44:07: c1:99:dd:ae:a4:6e:a2:28:d8:56:c8:d2:7d:f9:47: df:a3:80:60:19:c5:01:a1:66:ab:9a:de:b0:77:24: 8b:14:9e:c0:16:52:9d:23:f0:be:f4:3f:3a:eb:09: 0d:9e:92:fb:d1:5f:87:4d:2f:43:46:18:27:d1:cc: 15:1a:6e:14:10:54:f9:d8:01:77:e0:0b:ca:41:a8: 11:10:a5:e2:db:dd:b3:52:a3:d0:55:31:08:7f:65: 16:bf:d6:a1:7c:32:63:d2:c5:6d:c0:44:2b:fe:3d: 38:ac:61:f1:aa:fc:03:b6:4a:53:1d:9d:45:d1:5f: c4:27:61:d7:14:bb:ec:17:4d:4d:03:a2:93:34:e6: 1b:7a:4d:a9:fd:5a:97:ef:60:c6:6c:fd:90:d1:71: a3:0e:81:b9:d4:8a:c9:82:64:3f:10:34:b1:fd:9c: 7e:af:d3:7e:5c:29:8b:8d:48:7c:95:63:80:c4:93: 61:bd:f8:93:7e:e5:68:66:14:06:7a:5a:27:7a:42: b2:35:70:18:3e:83:a7:51:37:51:2c:8c:e5:18:c6: 9a:fa:e5:67:f6:97:8d:d0:b5:8e:44:b4:ae:e9:cf: 71:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A6:D1:EC:23:49:D3:FB:03:13:2E:D8:BE:A3:22:59:2A:5A:CE:AF X509v3 Authority Key Identifier: keyid:E2:B7:A2:FC:C2:D7:CC:B9:93:D5:32:CF:AB:B2:7F:AD:B2:48:DD:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:1a:45:82:88:e4:76:c7:79:dd:25:b7:f4:24:5f:38:d1:1b: 49:ad:48:0a:19:d8:81:cf:b5:78:af:28:2f:d0:8a:98:68:fa: 2c:88:a3:aa:42:47:45:1c:ba:93:bd:d6:9f:f5:49:af:c3:6c: b2:29:56:04:ab:a6:ca:b9:19:e7:d7:2d:3e:a4:d4:0b:cf:06: 45:8b:6b:ad:4e:0d:85:71:14:70:24:4f:e6:db:1b:7b:cd:96: c8:70:82:87:68:a0:9a:93:72:b1:39:9f:3a:aa:85:d6:cc:aa: 27:45:bf:1b:7d:7a:b9:13:3b:1e:36:b9:fe:ae:d2:31:71:49: fb:21:a7:7e:27:5b:88:46:6e:ca:d9:a7:f7:d5:df:5f:41:6c: ac:82:ac:19:e9:95:17:f2:c8:27:af:68:0c:66:45:8c:0a:83: 53:18:9f:92:66:ae:74:b7:76:a0:01:e6:51:3c:96:5b:c3:56: db:ed:9c:46:5e:05:bd:24:88:94:3e:b3:4d:bc:4a:20:2d:24: 7e:e6:dd:98:ea:4e:9f:e7:ca:fd:4c:ad:1e:d0:1b:fb:56:55: dc:c8:06:a8:7c:69:f6:b2:13:7c:8a:62:d4:3a:88:e1:01:8a: 00:57:cf:12:68:ad:0d:eb:4d:03:ea:0d:22:2d:75:91:a9:24: d0:d3:43:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM5NDgxMTAvBgNVBAUTKEUyQjdBMkZDQzJEN0NDQjk5M0Q1MzJDRkFCQjI3RkFE QjI0OEREMTcwHhcNMjUwNjE5MDMzOTM3WhcNMjUwNjI2MDMzOTM3WjAYMRYwFAYD VQQDEw02ODUzODY3YS1kYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2L8NiRMqADWBQaDnwIXh54D4dVQvFNEpRq0tRAfBmd2upG6iKNhWyNJ9+Uff o4BgGcUBoWarmt6wdySLFJ7AFlKdI/C+9D866wkNnpL70V+HTS9DRhgn0cwVGm4U EFT52AF34AvKQagREKXi292zUqPQVTEIf2UWv9ahfDJj0sVtwEQr/j04rGHxqvwD tkpTHZ1F0V/EJ2HXFLvsF01NA6KTNOYbek2p/VqX72DGbP2Q0XGjDoG51IrJgmQ/ EDSx/Zx+r9N+XCmLjUh8lWOAxJNhvfiTfuVoZhQGelonekKyNXAYPoOnUTdRLIzl GMaa+uVn9peN0LWORLSu6c9xIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOm0ewj SdP7AxMu2L6jIlkqWs6vMB8GA1UdIwQYMBaAFOK3ovzC18y5k9Uyz6uyf62ySN0X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qzk0OC9CQjk3NjgzMjU1 MkMxMUVFQUIwNDlGNjlDNEY5QUUwMi80cmVpX01MWHpMbVQxVExQcTdKX3JiSkkz UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRyZWlfTUxYekxtVDFUTFBxN0pfcmJKSTNSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qzk0OC9CQjk3NjgzMjU1MkMxMUVFQUIwNDlGNjlDNEY5QUUwMi80cmVpX01MWHpM bVQxVExQcTdKX3JiSkkzUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJGkWCiOR2x3ndJbf0JF840RtJrUgKGdiBz7V4rygv0IqYaPosiKOq QkdFHLqTvdaf9Umvw2yyKVYEq6bKuRnn1y0+pNQLzwZFi2utTg2FcRRwJE/m2xt7 zZbIcIKHaKCak3KxOZ86qoXWzKonRb8bfXq5EzseNrn+rtIxcUn7Iad+J1uIRm7K 2af31d9fQWysgqwZ6ZUX8sgnr2gMZkWMCoNTGJ+SZq50t3agAeZRPJZbw1bb7ZxG XgW9JIiUPrNNvEogLSR+5t2Y6k6f58r9TK0e0Bv7VlXcyAaofGn2shN8imLUOojh AYoAV88SaK0N600D6g0iLXWRqSTQ00PY -----END CERTIFICATE-----Generated at Thu Jun 19 11:09:42 2025 by rpki-client