$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft File: Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json) Hash identifier: fDO2TRJBxtDagZLbhUvNGwAlDE1MROFSfCgagXbg55U= Subject key identifier: 89:E2:F7:CF:27:2F:9A:B6:5C:F0:71:29:34:91:34:CD:55:4E:F5:AB Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F Certificate issuer: /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft Manifest number: 4A Signing time: Sun 15 Jun 2025 06:27:22 +0000 Manifest this update: Sun 15 Jun 2025 06:27:22 +0000 Manifest next update: Sun 22 Jun 2025 06:27:22 +0000 Files and hashes: 1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: p+6gf02aLqZAh5Heo9MwzkpsNOjJYKxcx9RcspC9AtA=) 2: E8112D9AD95A11EF815C7470C4F9AE02.roa (hash: mG5mPJ9TzgmR6vCAw7pVeBBypwUd04LX9QtyyGLebqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EC5, serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F Validity Not Before: Jun 15 06:27:22 2025 GMT Not After : Jun 22 06:27:22 2025 GMT Subject: CN=684e67ca-6a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:24:bd:0a:88:96:63:c3:f9:92:af:0e:2e:ca: ea:b6:b2:e3:30:05:48:5f:a7:d2:0b:61:7c:c6:2b: 50:97:2f:a9:ae:ff:9b:d8:03:06:dd:23:fd:aa:66: a8:bb:49:1e:46:20:e5:79:c3:0c:b9:8d:17:53:f9: fc:58:22:22:1c:50:c5:4c:3d:7e:a0:23:87:14:64: 28:2e:86:d3:96:89:01:f3:6b:46:37:fc:f1:72:9a: b2:9f:2c:41:61:25:5e:f6:e7:9a:36:7c:a1:96:ab: 10:de:87:68:2d:96:34:0b:54:0a:19:e9:94:79:e8: 8a:aa:0a:6b:c8:42:e5:ed:25:f6:b8:ac:af:6f:3e: 4e:da:4a:38:61:4c:ea:11:fd:16:3c:41:26:02:f9: cf:f8:69:2b:ca:7e:a6:9e:58:f7:50:2a:d7:86:c1: 0c:8c:7d:bf:49:61:67:71:95:b1:14:96:4c:eb:7e: 28:cf:d5:58:22:ab:d9:1a:64:bf:01:94:fd:36:cc: 7b:ca:db:c3:54:e3:90:8b:7e:7c:cc:0d:93:b1:96: a4:6b:b9:8c:3e:d2:f0:b6:3d:9e:4f:f8:c7:50:3e: 17:90:7d:f8:3c:e4:a9:96:c0:d9:ec:1a:22:82:6d: 0f:5b:7d:11:ae:ee:7e:53:2e:f1:1e:89:b2:5f:7a: 5a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E2:F7:CF:27:2F:9A:B6:5C:F0:71:29:34:91:34:CD:55:4E:F5:AB X509v3 Authority Key Identifier: keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:61:3b:60:5c:1c:b5:2c:f0:60:7d:43:55:c4:67:07:90:1d: 17:09:d4:06:42:f6:ae:7d:11:4c:21:a6:8a:c8:78:6d:62:60: 61:ad:05:7b:2d:3d:cf:ba:87:b6:d0:4a:90:7e:db:12:14:dd: 46:ff:54:4f:e6:3a:db:ac:2e:cd:c3:6a:0f:d3:e7:54:30:61: f6:28:87:40:3e:3e:bb:0e:86:36:23:7c:9d:13:70:db:4f:11: 31:63:9d:76:49:0d:fa:c2:9f:d8:e3:b6:01:3b:a5:e2:fa:20: 45:e4:d2:b1:30:2b:7c:ba:8d:92:1f:2c:42:fe:7a:13:d4:0d: a6:9d:6a:18:a5:1e:b8:94:7b:a4:b0:5a:a8:bf:ea:0e:a9:28: 01:4b:d4:dd:38:a2:63:7b:48:48:30:fb:35:10:93:ea:6a:9b: 5a:03:01:92:ce:61:ef:7b:b8:0a:18:c6:9e:87:aa:2a:0f:48: 1f:87:f3:b3:0c:37:f3:d1:47:9e:03:63:5c:17:62:6b:ca:5b: 46:5b:f2:5e:78:ef:00:e7:9a:91:b9:2f:6f:ef:42:5b:61:d6: bb:d2:b3:c0:15:98:d9:bd:f2:e0:e9:fa:90:ba:b9:fe:83:24: dc:12:4f:32:09:af:ef:d7:b6:0d:71:dc:fc:f8:97:97:53:7f: 3b:f7:7a:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEVDNTExMC8GA1UEBRMoM0E1RTEwMjlFNjVDNjM2ODEyMzJEQjY3RDgwNTNERDJG Njk0RTYxRjAeFw0yNTA2MTUwNjI3MjJaFw0yNTA2MjIwNjI3MjJaMBgxFjAUBgNV BAMTDTY4NGU2N2NhLTZhMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMJL0KiJZjw/mSrw4uyuq2suMwBUhfp9ILYXzGK1CXL6mu/5vYAwbdI/2qZqi7 SR5GIOV5wwy5jRdT+fxYIiIcUMVMPX6gI4cUZCguhtOWiQHza0Y3/PFymrKfLEFh JV7255o2fKGWqxDeh2gtljQLVAoZ6ZR56IqqCmvIQuXtJfa4rK9vPk7aSjhhTOoR /RY8QSYC+c/4aSvKfqaeWPdQKteGwQyMfb9JYWdxlbEUlkzrfijP1Vgiq9kaZL8B lP02zHvK28NU45CLfnzMDZOxlqRruYw+0vC2PZ5P+MdQPheQffg85KmWwNnsGiKC bQ9bfRGu7n5TLvEeibJfelrTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUieL3zycv mrZc8HEpNJE0zVVO9aswHwYDVR0jBBgwFoAUOl4QKeZcY2gSMttn2AU90vaU5h8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0RUM1LzgyMzM1QTIwRDk1 QTExRUZBMDJGQjQ2RkM0RjlBRTAyL09sNFFLZVpjWTJnU010dG4yQVU5MHZhVTVo OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2w0UUtlWmNZMmdTTXR0bjJBVTkwdmFVNWg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 RUM1LzgyMzM1QTIwRDk1QTExRUZBMDJGQjQ2RkM0RjlBRTAyL09sNFFLZVpjWTJn U010dG4yQVU5MHZhVTVoOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKlhO2BcHLUs8GB9Q1XEZweQHRcJ1AZC9q59EUwhporIeG1iYGGtBXst Pc+6h7bQSpB+2xIU3Ub/VE/mOtusLs3Dag/T51QwYfYoh0A+PrsOhjYjfJ0TcNtP ETFjnXZJDfrCn9jjtgE7peL6IEXk0rEwK3y6jZIfLEL+ehPUDaadahilHriUe6Sw Wqi/6g6pKAFL1N04omN7SEgw+zUQk+pqm1oDAZLOYe97uAoYxp6HqioPSB+H87MM N/PRR54DY1wXYmvKW0Zb8l547wDnmpG5L2/vQlth1rvSs8AVmNm98uDp+pC6uf6D JNwSTzIJr+/Xtg1x3Pz4l5dTfzv3etY= -----END CERTIFICATE-----Generated at Sun Jun 15 09:34:57 2025 by rpki-client