$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft File: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft (raw, json) Hash identifier: 1yMcQcpZzwQJkwKiwQq5YGZImW3kOMJFkDaxFNjxBBw= Subject key identifier: B3:D6:46:F1:44:E3:19:6F:5A:C2:8C:C5:B7:AA:9C:AE:AB:8F:70:3F Authority key identifier: E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16 Certificate issuer: /CN=A9188CCC/serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft Manifest number: 0159 Signing time: Sun 15 Jun 2025 03:19:47 +0000 Manifest this update: Sun 15 Jun 2025 03:19:47 +0000 Manifest next update: Sun 22 Jun 2025 03:19:47 +0000 Files and hashes: 1: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl (hash: 8sb/VBVbr51jagN8HVokqsHtLYpqQkSfGcaWNHXcABY=) 2: 9B2C760CD89B11EF8D75534EC4F9AE02.roa (hash: xl5aD0CkAXn3HLD4UrJj4+rSpG0xnpxW+n1qEQtppVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188CCC, serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16 Validity Not Before: Jun 15 03:19:47 2025 GMT Not After : Jun 22 03:19:47 2025 GMT Subject: CN=684e3bd3-e86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6e:fd:b8:68:9d:d8:33:44:80:30:98:a8:da: fd:03:a3:37:c6:4e:0d:a1:04:8f:a2:41:73:ba:63: 79:ea:6c:78:fb:ab:3f:ee:07:73:34:76:6a:c7:2d: 6b:8f:85:ed:4d:29:37:45:66:8a:29:46:d5:40:e2: a8:8f:0a:12:4c:c1:c0:b5:3f:f3:bc:51:3b:15:7e: 94:a8:4a:ca:99:2b:1c:d4:53:4c:3c:db:9b:4a:34: 9b:6c:45:c7:a2:ad:86:85:94:88:33:58:ca:0d:55: 23:cf:f8:a1:02:cb:58:59:e3:f0:5f:93:83:27:da: 9f:13:94:b0:70:fb:27:58:38:d6:34:6a:8f:9c:2b: 1e:c8:6a:f1:bc:d0:83:be:fd:f3:44:5e:be:8e:bf: 8c:43:57:3e:83:e7:77:5e:f7:3d:fe:06:18:6d:f2: a9:7f:9b:d2:4d:c8:2b:46:b1:80:bd:d9:01:a1:27: 5d:dc:da:c0:ea:c6:fd:62:cc:c3:c5:14:18:0d:a8: 62:ad:c7:92:e7:77:96:f9:d4:8c:ad:33:98:e8:8e: c3:94:46:bc:26:96:a8:78:ca:84:7a:2b:97:f6:0b: af:39:4f:0d:23:72:88:9e:7a:a4:db:60:c7:36:5d: fd:d8:14:d4:b4:c8:fb:26:8c:19:6c:13:9b:27:fc: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D6:46:F1:44:E3:19:6F:5A:C2:8C:C5:B7:AA:9C:AE:AB:8F:70:3F X509v3 Authority Key Identifier: keyid:E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fd:c5:d0:c5:7e:d9:a9:64:34:dc:d7:c0:0c:0e:aa:08:2d: d0:3a:07:a0:20:86:06:85:01:f7:2f:ef:22:71:5f:9a:72:90: 7b:09:1a:b0:43:1d:3b:11:07:77:b7:50:68:56:0c:0d:61:cc: 83:43:24:02:d9:c7:3c:dd:79:24:33:01:99:be:ae:e4:18:ae: b4:c9:d7:fe:41:8a:b6:a9:ce:92:5c:d0:76:f1:a9:cd:0a:5c: ec:09:47:b1:c7:b1:06:e9:e9:89:c7:c5:0e:b5:a6:6a:2c:c0: f5:57:34:bd:ca:45:e3:f8:87:74:9e:9f:74:cf:f6:e9:8a:f5: a8:e7:c6:93:85:31:7f:9b:0d:66:c6:49:24:dd:3e:5a:4c:03: dd:5f:44:c1:51:b6:e5:fd:f1:e9:d8:a0:2d:aa:af:cf:ac:37: 9e:db:5a:de:5a:bb:2e:02:74:02:c7:c1:27:05:09:f3:63:8c: 41:13:55:7d:f8:99:73:c4:f1:dc:a7:75:29:f8:7b:55:74:7d: ee:03:de:6e:7b:54:db:4b:55:98:5d:b9:4d:2e:8b:5c:12:04: 97:91:89:3b:cf:83:3a:4c:3e:af:a0:ac:4e:5c:0d:cf:d4:25: 87:f7:46:eb:1a:4f:00:f0:41:4b:0d:fc:39:dc:34:1b:03:d4: 07:9d:91:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhDQ0MxMTAvBgNVBAUTKEUyMzFEMzA5MjdFNDlBNkEyMkQ5RjZBQ0Q3MDYxMDNC RTNFNURDMTYwHhcNMjUwNjE1MDMxOTQ3WhcNMjUwNjIyMDMxOTQ3WjAYMRYwFAYD VQQDEw02ODRlM2JkMy1lODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4W79uGid2DNEgDCYqNr9A6M3xk4NoQSPokFzumN56mx4+6s/7gdzNHZqxy1r j4XtTSk3RWaKKUbVQOKojwoSTMHAtT/zvFE7FX6UqErKmSsc1FNMPNubSjSbbEXH oq2GhZSIM1jKDVUjz/ihAstYWePwX5ODJ9qfE5SwcPsnWDjWNGqPnCseyGrxvNCD vv3zRF6+jr+MQ1c+g+d3Xvc9/gYYbfKpf5vSTcgrRrGAvdkBoSdd3NrA6sb9YszD xRQYDahirceS53eW+dSMrTOY6I7DlEa8JpaoeMqEeiuX9guvOU8NI3KInnqk22DH Nl392BTUtMj7JowZbBObJ/yEkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPWRvFE 4xlvWsKMxbeqnK6rj3A/MB8GA1UdIwQYMBaAFOIx0wkn5JpqItn2rNcGEDvj5dwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OENDQy83RTZFMDAxNDQ1 NDcxMUVFQUNEMzVGNDFDNEY5QUUwMi80akhUQ1Nma21tb2kyZmFzMXdZUU8tUGwz QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqSFRDU2ZrbW1vaTJmYXMxd1lRTy1QbDNCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OENDQy83RTZFMDAxNDQ1NDcxMUVFQUNEMzVGNDFDNEY5QUUwMi80akhUQ1Nma21t b2kyZmFzMXdZUU8tUGwzQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv/cXQxX7ZqWQ03NfADA6qCC3QOgegIIYGhQH3L+8icV+acpB7CRqw Qx07EQd3t1BoVgwNYcyDQyQC2cc83XkkMwGZvq7kGK60ydf+QYq2qc6SXNB28anN ClzsCUexx7EG6emJx8UOtaZqLMD1VzS9ykXj+Id0np90z/bpivWo58aThTF/mw1m xkkk3T5aTAPdX0TBUbbl/fHp2KAtqq/PrDee21reWrsuAnQCx8EnBQnzY4xBE1V9 +JlzxPHcp3Up+HtVdH3uA95ue1TbS1WYXblNLotcEgSXkYk7z4M6TD6voKxOXA3P 1CWH90brGk8A8EFLDfw53DQbA9QHnZEv -----END CERTIFICATE-----Generated at Sun Jun 15 07:17:02 2025 by rpki-client