$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft File: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json) Hash identifier: N4sBXQISEOLkOVWJE5z6bLEyU0jN2KTKjFCxkbvNhZM= Subject key identifier: A0:99:9D:96:18:41:EB:71:0F:E0:3A:15:D4:9B:23:92:18:54:CE:A0 Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft Manifest number: 01E2 Signing time: Fri 13 Jun 2025 01:51:36 +0000 Manifest this update: Fri 13 Jun 2025 01:51:35 +0000 Manifest next update: Fri 20 Jun 2025 01:51:35 +0000 Files and hashes: 1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: Y0v2G1RmzfTryVZr76PMDn9b91Nfx4NjJynmr+kdOqQ=) 2: E8F2B1C224E911F0B5C26715C4F9AE02.roa (hash: G8jsJ+mpJjx+P09daIjyz9j+xHd4TGz4K0la+7J5BHY=) 3: C453112224E911F09C66370CC4F9AE02.roa (hash: s/bfR0V4/eCMXH0PO2Yn4B62GfiDwzVSga9VpUyLwbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Validity Not Before: Jun 13 01:51:35 2025 GMT Not After : Jun 20 01:51:35 2025 GMT Subject: CN=684b8428-f9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:d9:cc:56:28:d7:fa:5a:45:91:a7:27:29: 89:41:46:77:f6:a7:91:3e:48:f6:96:9a:94:6f:f2: 4b:c6:0c:36:04:73:43:8b:d5:22:e2:91:ee:b4:91: 49:27:68:92:e1:07:34:6e:a4:9b:31:45:0c:ee:59: 37:de:9a:79:1d:e5:6d:c1:91:f2:d2:34:8c:db:dc: b3:05:19:ca:13:62:bb:48:96:97:29:d3:bc:b2:89: 84:f9:0a:15:48:f5:f1:76:dd:03:80:82:2d:93:03: 25:3d:6c:a0:dc:8d:a6:9c:bc:9b:81:84:70:f2:0c: 28:54:61:c8:01:f7:7a:3c:12:35:6d:fe:bf:ec:34: f2:6b:82:1b:64:20:5f:69:6b:66:e3:2f:2d:d5:6e: 0b:e7:67:19:81:02:83:2a:0b:7e:1f:2b:86:93:78: 68:ce:f3:67:b8:76:c4:ef:7c:85:52:77:6b:31:2b: 10:13:d7:fe:3b:14:4f:21:8f:7a:d8:f8:6d:56:a5: cf:e1:02:9a:bf:c0:ad:6c:96:42:7d:21:a2:89:7f: d0:91:20:2f:2c:1b:bd:2e:00:be:08:5f:32:f4:87: 6d:a1:f1:46:7f:05:42:a0:05:3a:2f:d3:54:8f:55: ca:8d:92:c0:73:b9:50:c6:cb:30:69:9a:f9:84:d9: 8e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:99:9D:96:18:41:EB:71:0F:E0:3A:15:D4:9B:23:92:18:54:CE:A0 X509v3 Authority Key Identifier: keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:85:7c:94:40:b5:97:ad:25:7e:aa:c5:6e:3e:22:71:d1:ec: 6c:e9:e2:28:0f:e3:00:be:a7:dd:e6:99:d5:f6:a7:20:95:12: 7c:c8:57:6a:13:d5:c6:04:f2:c4:18:79:6a:90:c8:92:6f:59: de:41:96:13:ea:a1:1f:2d:69:65:53:d8:ea:ab:c0:9d:0e:e6: 13:82:72:16:f4:da:80:3f:17:34:a8:6a:06:2c:04:49:a8:98: 86:b7:6d:b1:28:3b:70:b1:ff:33:cf:a3:9e:d5:f8:ec:a3:61: 50:fe:54:0b:6c:00:b9:a7:48:44:fe:f4:c9:91:87:06:95:0e: a2:16:c3:9d:b4:64:64:1a:45:34:07:ee:ff:6b:68:d7:c3:b3: 95:3d:09:f5:6e:fe:62:06:e6:4f:55:aa:6e:e8:42:b4:04:0f: bb:7a:07:47:ae:c8:bb:ff:26:25:06:5c:48:90:b4:de:ec:e2: b3:b2:48:de:94:14:6d:4f:ad:d8:4a:f5:f1:1b:ab:ab:4e:df: db:19:05:4c:80:48:38:fd:31:88:7f:a9:62:04:6b:1d:2a:74: 37:54:06:38:7a:7c:b8:56:60:f9:09:74:08:69:0a:83:fc:1a: b4:54:1f:8e:bb:39:fa:6d:bb:c6:f3:8a:c3:78:75:ea:d9:56: 35:a6:c6:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEREYxMTAvBgNVBAUTKEUzRTFDQ0NGODNENTJDQjhBM0M5ODdBODExRTFGODA3 RjMzOTNFN0YwHhcNMjUwNjEzMDE1MTM1WhcNMjUwNjIwMDE1MTM1WjAYMRYwFAYD VQQDEw02ODRiODQyOC1mOWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuPZzFYo1/paRZGnJymJQUZ39qeRPkj2lpqUb/JLxgw2BHNDi9Ui4pHutJFJ J2iS4Qc0bqSbMUUM7lk33pp5HeVtwZHy0jSM29yzBRnKE2K7SJaXKdO8somE+QoV SPXxdt0DgIItkwMlPWyg3I2mnLybgYRw8gwoVGHIAfd6PBI1bf6/7DTya4IbZCBf aWtm4y8t1W4L52cZgQKDKgt+HyuGk3hozvNnuHbE73yFUndrMSsQE9f+OxRPIY96 2PhtVqXP4QKav8CtbJZCfSGiiX/QkSAvLBu9LgC+CF8y9IdtofFGfwVCoAU6L9NU j1XKjZLAc7lQxsswaZr5hNmODwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCZnZYY QetxD+A6FdSbI5IYVM6gMB8GA1UdIwQYMBaAFOPhzM+D1Sy4o8mHqBHh+AfzOT5/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRERi9BMjEyNzY4Qzc2 MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxMaWp5WWVvRWVINEJfTTVQ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtSE16NFBWTExpanlZZW9FZUg0Ql9NNVBuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRERi9BMjEyNzY4Qzc2MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxM aWp5WWVvRWVINEJfTTVQbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuhXyUQLWXrSV+qsVuPiJx0exs6eIoD+MAvqfd5pnV9qcglRJ8yFdq E9XGBPLEGHlqkMiSb1neQZYT6qEfLWllU9jqq8CdDuYTgnIW9NqAPxc0qGoGLARJ qJiGt22xKDtwsf8zz6Oe1fjso2FQ/lQLbAC5p0hE/vTJkYcGlQ6iFsOdtGRkGkU0 B+7/a2jXw7OVPQn1bv5iBuZPVapu6EK0BA+7egdHrsi7/yYlBlxIkLTe7OKzskje lBRtT63YSvXxG6urTt/bGQVMgEg4/TGIf6liBGsdKnQ3VAY4eny4VmD5CXQIaQqD /Bq0VB+Ouzn6bbvG84rDeHXq2VY1psZk -----END CERTIFICATE-----Generated at Sat Jun 14 18:57:43 2025 by rpki-client