$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft File: 4RvPp2LU9ssvatCdA6lA4P6qAfg.mft (raw, json) Hash identifier: HY1t2XlTzsOyt/3Dn5iXnCMf3okqixAtxY92BjA+rKQ= Subject key identifier: 97:8B:DC:16:85:1F:82:5F:8A:43:E3:E3:13:E7:71:EB:9E:8F:DD:B1 Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 Certificate issuer: /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Certificate serial: 1EE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft Manifest number: 1EE2 Signing time: Wed 18 Jun 2025 16:02:47 +0000 Manifest this update: Wed 18 Jun 2025 16:02:46 +0000 Manifest next update: Wed 25 Jun 2025 16:02:46 +0000 Files and hashes: 1: 4RvPp2LU9ssvatCdA6lA4P6qAfg.crl (hash: nLgEcXCi2btVUt46KNuYdMjQtCoKpawMpWXFKwC/auo=) 2: DB92DE200AEF11ECB7243C0FC4F9AE02.roa (hash: jUBoH/NsE+2KO1Z4hcom5Ddnhv0XpfeG1RJbEdRDm9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7913 (0x1ee9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Validity Not Before: Jun 18 16:02:46 2025 GMT Not After : Jun 25 16:02:46 2025 GMT Subject: CN=6852e327-6821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c9:ae:20:ac:86:88:43:a7:57:70:83:62:33: 1a:da:a6:af:15:7a:32:b7:cd:7b:f6:21:74:fe:28: 85:99:71:2f:12:c6:4f:b2:5d:52:77:b5:35:56:bd: 8e:9a:e6:12:01:e3:1e:19:27:5e:0b:b7:67:3b:aa: 65:70:a2:5d:8f:ea:a6:67:d9:40:1d:4b:47:32:1c: 20:30:dd:eb:41:f8:ec:d9:d0:87:c8:43:de:dd:d3: 1d:a3:94:d1:d4:b5:6f:d2:60:1e:95:c3:74:ae:60: 02:ee:a0:20:77:33:c7:6a:c8:8f:b8:6f:1e:24:0f: fa:80:da:93:dd:19:90:c2:5b:0a:6b:28:0b:4c:99: da:f5:da:e7:94:de:76:2d:f0:8c:00:02:40:f1:cc: 29:72:b0:87:0c:74:49:a7:23:6b:a1:8b:7d:b5:03: 87:ef:63:be:09:16:bc:e6:10:39:44:9d:b7:4b:8f: 1f:e9:a1:d8:5d:68:45:7b:25:d4:32:28:f5:25:d7: da:a6:5a:8e:1e:37:dd:b9:75:93:79:72:3f:73:ae: 81:de:b6:50:54:5f:0d:f4:42:ee:0a:b2:e4:4f:f3: 49:ad:ce:d1:7a:51:0f:e9:88:df:37:ed:cb:8a:4d: 46:f5:54:83:ab:ae:38:58:75:d4:06:82:fd:8e:46: cf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8B:DC:16:85:1F:82:5F:8A:43:E3:E3:13:E7:71:EB:9E:8F:DD:B1 X509v3 Authority Key Identifier: keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d2:a9:78:f2:0c:85:1b:9b:48:e6:57:4b:c4:ef:af:38:15: c8:37:97:2b:8f:b3:d3:5f:71:25:67:61:e7:01:c0:d8:da:ce: 23:b1:35:7a:fa:87:f2:3b:2d:93:c8:35:ca:50:6d:b3:a7:4f: 2e:74:57:8a:33:7a:98:53:6f:33:1b:e6:ad:f9:97:c5:02:fb: e8:95:66:35:7e:bf:99:74:86:44:a7:8b:22:87:32:8a:fe:7e: e3:3d:c6:0d:d8:63:b0:a2:39:da:60:36:37:b5:32:bd:e8:ad: 05:e9:1e:87:fb:c5:39:03:26:1c:fe:24:52:27:c1:61:d7:b8: da:51:3f:21:51:1e:90:b0:a5:96:3c:57:41:64:3a:89:f3:a3: 71:80:ef:7a:88:2e:84:5d:07:ed:dc:33:32:d8:74:8a:83:15: 92:a7:ed:b0:d6:02:25:d7:68:29:4f:31:76:53:db:5a:9c:bf: 90:2c:e2:be:a1:0e:01:c2:61:06:8a:4e:f0:20:7c:67:e4:4a: a8:7c:98:d0:41:92:cf:95:0e:14:91:ae:24:c8:b3:7c:79:8e: 41:f8:1c:f2:9a:5d:af:f7:39:9e:04:13:5b:a2:28:b3:b1:6e: b2:04:77:a9:32:ed:fe:ad:2a:9f:01:dc:12:88:2a:47:e2:2b: 11:d4:4e:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAwRjUxMTAvBgNVBAUTKEUxMUJDRkE3NjJENEY2Q0IyRjZBRDA5RDAzQTk0MEUw RkVBQTAxRjgwHhcNMjUwNjE4MTYwMjQ2WhcNMjUwNjI1MTYwMjQ2WjAYMRYwFAYD VQQDEw02ODUyZTMyNy02ODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA98muIKyGiEOnV3CDYjMa2qavFXoyt8179iF0/iiFmXEvEsZPsl1Sd7U1Vr2O muYSAeMeGSdeC7dnO6plcKJdj+qmZ9lAHUtHMhwgMN3rQfjs2dCHyEPe3dMdo5TR 1LVv0mAelcN0rmAC7qAgdzPHasiPuG8eJA/6gNqT3RmQwlsKaygLTJna9drnlN52 LfCMAAJA8cwpcrCHDHRJpyNroYt9tQOH72O+CRa85hA5RJ23S48f6aHYXWhFeyXU Mij1JdfaplqOHjfduXWTeXI/c66B3rZQVF8N9ELuCrLkT/NJrc7RelEP6YjfN+3L ik1G9VSDq644WHXUBoL9jkbPQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeL3BaF H4JfikPj4xPnceuej92xMB8GA1UdIwQYMBaAFOEbz6di1PbLL2rQnQOpQOD+qgH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDBGNS9EOUU5NTJGNDVF RjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlzc3ZhdENkQTZsQTRQNnFB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSdlBwMkxVOXNzdmF0Q2RBNmxBNFA2cUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDBGNS9EOUU5NTJGNDVFRjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlz c3ZhdENkQTZsQTRQNnFBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB80ql48gyFG5tI5ldLxO+vOBXIN5crj7PTX3ElZ2HnAcDY2s4jsTV6 +ofyOy2TyDXKUG2zp08udFeKM3qYU28zG+at+ZfFAvvolWY1fr+ZdIZEp4sihzKK /n7jPcYN2GOwojnaYDY3tTK96K0F6R6H+8U5AyYc/iRSJ8Fh17jaUT8hUR6QsKWW PFdBZDqJ86NxgO96iC6EXQft3DMy2HSKgxWSp+2w1gIl12gpTzF2U9tanL+QLOK+ oQ4BwmEGik7wIHxn5EqofJjQQZLPlQ4Uka4kyLN8eY5B+Bzyml2v9zmeBBNboiiz sW6yBHepMu3+rSqfAdwSiCpH4isR1E7E -----END CERTIFICATE-----Generated at Thu Jun 19 22:04:29 2025 by rpki-client