$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: xSlEqdv8xpJRVInP7M3AyYEYKZgwJzViGSiMZ1I9eZ8= Subject key identifier: 74:17:B7:36:92:D3:7E:BC:5B:11:08:7D:C9:A0:F0:39:98:27:50:D0 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 02B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 0292 Signing time: Sun 15 Jun 2025 01:26:29 +0000 Manifest this update: Sun 15 Jun 2025 01:26:28 +0000 Manifest next update: Sun 22 Jun 2025 01:26:28 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: YgnogH3mSjtPs8XGetsQ3am+B3pgu9aCzizr6ERDHVg=) 2: CC647BDECAC711EF80553A61C4F9AE02.roa (hash: JjvbSqdanHSpYIcMXGp+ZgcFpNIRiyjhFnX93ubLPo8=) 3: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: voNhvFt+rl48+RXxjQWaNEIjDq7tMEczadZRVwJF374=) 4: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: J3Ksm9WsEr0TXjLLhaQloclJKmSPXVrqrAzTlf/eKtU=) 5: 3632957E441311EE8A03A472C4F9AE02.roa (hash: hc0GUtEKKEGW9gMZlTO39H3fWKoJ6wdGBAjVqIVrLxQ=) 6: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: SMaX3aa/UFh43gcKCcEgmT4cm/dWEuQesSH3aBzRpfE=) 7: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: 74i29heKayX8ulpi57w5YoL9mLrlBcexKja8YJG8ecM=) 8: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: I/sFHc7XYiJ8eT0AIMA2+7XdYKHUvmlkXtbK7T+Me2I=) 9: 3D34A750A88111ED80831318C4F9AE02.roa (hash: a76JQF1qiEmLZKSWyiAc52KnTZOIYMAyGXRjtxdQkfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Jun 15 01:26:28 2025 GMT Not After : Jun 22 01:26:28 2025 GMT Subject: CN=684e2145-d7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:c1:ab:1d:0d:ac:f4:bf:24:9d:3c:dd:c2: 83:d1:68:e1:ba:ce:56:b3:34:32:02:b0:69:bb:ee: 87:9c:db:dc:71:19:d1:e5:13:8c:a0:98:3f:a2:a5: 97:3e:43:8a:2c:a6:74:5c:ac:11:e9:ea:d9:57:61: 55:0e:e4:7b:d2:70:e9:ab:0e:24:e2:fc:16:f1:3e: c5:d3:51:f0:d7:4d:d7:b0:1c:13:1b:a1:77:f0:f0: 36:e7:c8:79:d0:39:52:30:ea:45:ba:ca:d4:f5:13: 84:a3:72:b3:b1:03:05:cb:03:42:07:da:83:7a:de: 26:f2:b8:3b:3a:38:c6:de:c0:2c:50:52:42:db:ae: 8f:94:d2:4a:24:79:73:01:80:1f:6c:0a:71:2b:62: f9:2a:06:29:11:f0:88:bf:a8:fe:c1:3b:e3:01:da: d7:4d:89:f0:9f:b4:49:6d:04:71:7f:3e:d3:37:93: 47:5d:30:63:8b:f9:af:8f:b4:43:ae:5a:77:91:7d: b9:3a:4d:fd:dc:01:d8:34:4b:59:44:cb:40:05:7a: 73:b0:58:6e:36:53:8f:51:db:b1:a0:d9:5f:66:e1: aa:e0:46:22:2c:f2:58:38:b4:a4:ce:92:8b:11:9b: 3d:8b:af:9d:1d:19:97:a1:8a:7f:9e:33:0e:2b:d3: cc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:17:B7:36:92:D3:7E:BC:5B:11:08:7D:C9:A0:F0:39:98:27:50:D0 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:a5:7d:09:a9:a6:40:7e:48:af:df:2a:3d:64:73:a1:f1:c4: 41:8c:63:95:e5:4c:46:36:29:41:5b:1c:27:05:32:be:d3:6b: 88:6e:6a:cc:b9:b4:5e:e0:dc:e0:35:15:fd:c6:45:7c:06:65: 5c:0c:c7:3e:1e:12:dc:de:7b:7a:3a:f2:0c:e9:c7:9b:0b:b1: 4e:6c:49:d8:da:87:35:3d:e4:81:81:d2:63:a7:c7:c0:4c:53: dd:4c:b2:e6:c1:4f:79:2d:07:92:fc:05:b6:07:53:75:88:f2: 31:43:18:34:33:df:2d:64:08:30:5b:79:6c:31:69:0b:c0:c4: 06:c7:42:6c:5e:7b:1d:a0:0b:5a:62:89:2a:28:b7:8c:13:c9: c7:21:63:4f:60:5b:d3:af:8e:89:78:8e:b2:47:3e:a9:7e:9b: 90:0a:b5:00:69:b2:e3:15:dd:da:4a:5a:7e:f0:92:14:da:84: dc:78:10:59:51:b9:1c:82:44:86:3d:d3:68:6d:84:71:57:54: 28:b3:06:36:42:c2:cf:9a:ae:44:fc:df:f5:65:ff:4d:f3:6e: 0c:44:27:d4:38:50:d8:23:43:25:7f:d9:04:b1:3e:05:b4:0b: 98:00:54:bc:f0:4c:fb:c0:d4:e9:0c:0f:c5:a5:74:57:42:34: a2:e5:cb:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjUwNjE1MDEyNjI4WhcNMjUwNjIyMDEyNjI4WjAYMRYwFAYD VQQDEw02ODRlMjE0NS1kN2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYzBqx0NrPS/JJ083cKD0Wjhus5WszQyArBpu+6HnNvccRnR5ROMoJg/oqWX PkOKLKZ0XKwR6erZV2FVDuR70nDpqw4k4vwW8T7F01Hw103XsBwTG6F38PA258h5 0DlSMOpFusrU9ROEo3KzsQMFywNCB9qDet4m8rg7OjjG3sAsUFJC266PlNJKJHlz AYAfbApxK2L5KgYpEfCIv6j+wTvjAdrXTYnwn7RJbQRxfz7TN5NHXTBji/mvj7RD rlp3kX25Ok393AHYNEtZRMtABXpzsFhuNlOPUduxoNlfZuGq4EYiLPJYOLSkzpKL EZs9i6+dHRmXoYp/njMOK9PMpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQXtzaS 0368WxEIfcmg8DmYJ1DQMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGpX0JqaZAfkiv3yo9ZHOh8cRBjGOV5UxGNilBWxwnBTK+02uIbmrM ubRe4NzgNRX9xkV8BmVcDMc+HhLc3nt6OvIM6cebC7FObEnY2oc1PeSBgdJjp8fA TFPdTLLmwU95LQeS/AW2B1N1iPIxQxg0M98tZAgwW3lsMWkLwMQGx0JsXnsdoAta YokqKLeME8nHIWNPYFvTr46JeI6yRz6pfpuQCrUAabLjFd3aSlp+8JIU2oTceBBZ UbkcgkSGPdNobYRxV1QoswY2QsLPmq5E/N/1Zf9N824MRCfUOFDYI0Mlf9kEsT4F tAuYAFS88Ez7wNTpDA/FpXRXQjSi5csn -----END CERTIFICATE-----Generated at Sun Jun 15 08:49:40 2025 by rpki-client