$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft File: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json) Hash identifier: skgEcUgB8pbp/yqiT4x8LdCYB7YvjMjaEjwP5Pl1gk8= Subject key identifier: 89:76:E4:AC:95:C2:34:6B:BF:3B:77:52:F5:41:0E:CC:EB:3E:91:06 Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE Certificate issuer: /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft Manifest number: 0184 Signing time: Thu 19 Jun 2025 03:02:29 +0000 Manifest this update: Thu 19 Jun 2025 03:02:29 +0000 Manifest next update: Thu 26 Jun 2025 03:02:29 +0000 Files and hashes: 1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: 414ywhvgiuzMD9LLvSMXDZc0DWUYmnSxXedQXgV1crc=) 2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: g/bQAw9THkYcNZaMLuiJQ2Zt7avDBvnfO+P6mLE3afM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273A9, serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE Validity Not Before: Jun 19 03:02:29 2025 GMT Not After : Jun 26 03:02:29 2025 GMT Subject: CN=68537dc5-0b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:03:dc:3c:cb:7e:7e:b1:bc:6e:d2:40:50: d1:a7:75:af:a3:31:4e:ca:85:07:d1:9e:54:70:b9: 15:11:d8:6c:70:7d:c1:b1:ea:45:cf:f7:62:50:8b: b0:cf:36:05:de:92:ee:f9:c0:3d:8e:be:d3:d6:e3: 30:7e:5e:60:c5:80:8b:38:3f:9c:40:7a:2a:d1:a0: cd:32:bd:f5:aa:25:6f:39:ce:5b:93:bd:1e:d2:d1: 2c:89:f3:3f:2d:2f:e9:f6:9c:5a:df:7b:ef:1a:d8: 7a:3a:67:31:52:98:e8:c3:50:3b:9e:7a:fd:a2:3d: b1:04:73:8d:23:ff:84:d6:a5:a8:e0:6d:f6:81:b2: 58:93:29:2a:67:0d:ff:31:da:31:6a:dc:aa:35:84: 09:fa:e6:e5:c3:99:dd:5f:86:af:25:6d:89:a9:4e: 33:86:e9:d0:20:be:f8:14:3c:c2:2b:a7:2c:04:ce: 73:c9:53:96:0e:78:04:b3:c2:8b:0b:21:99:c4:58: 33:95:14:d8:e2:aa:2a:6d:5a:48:49:e9:5a:c4:78: 46:5b:ea:a4:84:03:c2:be:bf:46:97:ef:5a:84:99: a8:9d:fc:4f:53:ee:62:3a:e6:43:c4:b6:ac:a1:1c: b7:f5:e7:82:79:0d:8b:b4:d4:f0:02:6a:d2:1e:6e: fb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:76:E4:AC:95:C2:34:6B:BF:3B:77:52:F5:41:0E:CC:EB:3E:91:06 X509v3 Authority Key Identifier: keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:6b:07:5d:9e:7f:83:a9:14:8c:62:5d:10:2a:b8:d8:df:91: e5:c3:e9:01:28:30:77:61:71:17:be:b1:24:57:f9:12:53:99: ae:ce:9a:a0:bf:49:58:f1:dd:7f:15:78:09:63:56:1d:b4:08: c5:82:4c:96:af:f1:65:50:46:42:87:9e:83:1e:96:dd:6f:5f: 49:38:ee:5b:ad:67:89:f7:f3:ad:da:ff:75:66:cd:f0:76:81: 69:62:b7:e0:74:bc:67:88:13:2c:5c:76:b4:f4:69:e0:42:0b: 5f:5f:12:ed:46:57:5d:4c:7e:ac:98:4a:7f:78:88:37:50:56: 73:00:af:05:d0:55:91:07:16:41:02:fe:28:83:61:49:09:e8: 89:83:f4:93:84:87:ce:9a:a3:28:9b:a9:86:32:81:d7:c8:0d: 14:44:56:2c:87:78:b5:b5:66:da:17:4a:d9:53:64:f1:c7:88: 16:76:93:f5:fe:45:94:61:77:4a:c8:43:9a:c2:6c:9a:46:08: d4:1b:cf:60:c8:f9:e3:21:cd:80:ca:cb:66:24:60:d8:09:c0: f3:5c:fc:54:73:d1:c2:f1:4b:89:22:dd:2f:fb:08:7f:27:72: 6b:12:ff:1f:c3:22:6d:84:5e:28:f4:a0:46:9a:32:b7:d1:d6: 1c:31:f4:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczQTkxMTAvBgNVBAUTKEUwQjQ0NThCOUFCRDMyMDM1MTczNTNFQzgwQkUzMTBD MzY1NTREQUUwHhcNMjUwNjE5MDMwMjI5WhcNMjUwNjI2MDMwMjI5WjAYMRYwFAYD VQQDEw02ODUzN2RjNS0wYjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJwD3DzLfn6xvG7SQFDRp3WvozFOyoUH0Z5UcLkVEdhscH3BsepFz/diUIuw zzYF3pLu+cA9jr7T1uMwfl5gxYCLOD+cQHoq0aDNMr31qiVvOc5bk70e0tEsifM/ LS/p9pxa33vvGth6OmcxUpjow1A7nnr9oj2xBHONI/+E1qWo4G32gbJYkykqZw3/ MdoxatyqNYQJ+ublw5ndX4avJW2JqU4zhunQIL74FDzCK6csBM5zyVOWDngEs8KL CyGZxFgzlRTY4qoqbVpISelaxHhGW+qkhAPCvr9Gl+9ahJmonfxPU+5iOuZDxLas oRy39eeCeQ2LtNTwAmrSHm77bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIl25KyV wjRrvzt3UvVBDszrPpEGMB8GA1UdIwQYMBaAFOC0RYuavTIDUXNT7IC+MQw2VU2u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNBOS9EOEVGMTNDMkZB Q0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1nTlJjMVBzZ0w0eEREWlZU YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMUkZpNXE5TWdOUmMxUHNnTDR4RERaVlRhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNBOS9EOEVGMTNDMkZBQ0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1n TlJjMVBzZ0w0eEREWlZUYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKawddnn+DqRSMYl0QKrjY35Hlw+kBKDB3YXEXvrEkV/kSU5muzpqg v0lY8d1/FXgJY1YdtAjFgkyWr/FlUEZCh56DHpbdb19JOO5brWeJ9/Ot2v91Zs3w doFpYrfgdLxniBMsXHa09GngQgtfXxLtRlddTH6smEp/eIg3UFZzAK8F0FWRBxZB Av4og2FJCeiJg/SThIfOmqMom6mGMoHXyA0URFYsh3i1tWbaF0rZU2Txx4gWdpP1 /kWUYXdKyEOawmyaRgjUG89gyPnjIc2AystmJGDYCcDzXPxUc9HC8UuJIt0v+wh/ J3JrEv8fwyJthF4o9KBGmjK30dYcMfQv -----END CERTIFICATE-----Generated at Fri Jun 20 07:16:51 2025 by rpki-client