$ rpki-client -vvf rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft File: 4VLg53x5W1Qih9ZcHk4L8obU1eA.mft (raw, json) Hash identifier: 8WBnKSkVh6a1ZpYZn7K76lVFMMlLsUhFOTqoZcMyaz0= Subject key identifier: 67:DC:8C:7B:F6:93:E7:73:4D:8B:2B:E3:32:C4:3F:6C:F8:E6:25:C1 Authority key identifier: E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0 Certificate issuer: /CN=A912763C/serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0 Certificate serial: 07EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft Manifest number: 07E3 Signing time: Thu 12 Jun 2025 20:43:03 +0000 Manifest this update: Thu 12 Jun 2025 20:43:02 +0000 Manifest next update: Thu 19 Jun 2025 20:43:02 +0000 Files and hashes: 1: 4VLg53x5W1Qih9ZcHk4L8obU1eA.crl (hash: 2/LN1HsXTzZqFpB5nUVaD6DWNo1oPKKsfrJzorF6t0Q=) 2: 22329D14EE6511EAA50E8052C4F9AE02.roa (hash: CrTXUk46Qs0+2Fg8G1Szn+PXGeNBfOdVzoZfC6kMiL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2026 (0x7ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912763C, serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0 Validity Not Before: Jun 12 20:43:02 2025 GMT Not After : Jun 19 20:43:02 2025 GMT Subject: CN=684b3bd6-3bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:e1:f2:ce:dc:ed:dc:3f:98:b3:66:e2:d5: 4c:e0:cf:5e:1d:40:11:e8:16:67:a6:a6:00:d1:60: 96:da:88:fe:b6:af:68:a0:d7:f6:09:3c:de:95:b0: d4:8a:c9:81:88:df:d1:80:e4:db:be:c1:c1:70:01: c1:62:1c:85:02:59:24:15:b5:e5:e2:d0:3f:97:f0: 0d:5c:e4:95:c5:51:6e:2c:88:a5:b4:48:f3:7e:d8: 08:80:2f:e4:cb:10:64:5e:1b:31:15:58:27:37:0d: f5:de:0c:ca:aa:b5:c2:f4:df:4b:1e:95:35:16:cb: 9d:41:7e:38:3e:4b:f8:5d:23:8e:54:c7:a0:04:7a: e0:65:f8:f0:1d:76:05:39:d8:b6:29:38:c0:3c:c0: a0:f9:fb:ce:a0:13:61:4f:7f:72:68:7e:fa:af:32: e4:7f:15:aa:c1:ae:fb:14:84:4e:4d:f3:15:6f:9f: 07:e2:f5:ce:57:20:64:f2:78:b1:cf:9e:f4:e4:bb: 73:a1:98:48:54:85:fa:ae:0c:fb:34:eb:0b:ec:de: 5b:d5:f9:e7:df:e0:22:f7:03:93:d2:29:3e:3d:0b: 0b:02:30:79:2b:33:58:4a:84:9d:af:f2:f8:04:18: 35:0a:24:11:9f:f8:9a:97:2a:f7:14:9c:63:18:45: 14:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DC:8C:7B:F6:93:E7:73:4D:8B:2B:E3:32:C4:3F:6C:F8:E6:25:C1 X509v3 Authority Key Identifier: keyid:E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8a:35:4a:18:91:6d:98:a6:75:05:9d:3d:1b:13:2e:9b:16: 2f:f6:36:34:b4:63:84:6b:62:d1:17:ee:c0:c4:f2:8a:30:fe: 13:a0:61:70:f3:5e:0c:b3:94:07:78:2c:8f:85:22:33:19:d9: 3d:fe:a9:48:97:f3:39:46:e4:da:ec:06:83:0a:07:dc:d9:22: 47:86:c5:39:77:74:d5:db:fc:9d:c8:d4:9e:af:be:88:6d:8b: f3:c9:ab:69:24:ba:db:d1:47:8f:b5:5e:15:48:af:10:5a:ae: e9:a0:a7:6f:11:b3:3a:fd:86:cd:36:b8:76:dd:a8:fb:81:a8: b3:38:58:73:8d:15:d1:cb:bc:bf:81:37:7a:52:87:d3:c7:69: 32:0c:0f:6e:60:61:8e:7b:36:e8:d1:8e:f4:c1:9e:18:f1:be: ea:5f:f8:29:35:53:b0:c2:ee:c2:f6:a6:d0:cd:0b:7d:cd:34: 36:49:8e:a4:3e:c9:0a:fc:b2:0e:fa:f3:84:2e:88:af:ed:3b: ba:e3:5e:00:41:9b:aa:3c:1f:49:d4:6a:e8:ca:b1:d8:70:bb: e1:45:47:85:48:d1:56:b9:51:31:eb:59:6d:08:cf:8d:22:6b: fd:d1:24:49:f0:0d:60:c2:79:a9:18:ac:09:cb:c2:ea:c0:96: c4:7b:cf:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2M0MxMTAvBgNVBAUTKEUxNTJFMEU3N0M3OTVCNTQyMjg3RDY1QzFFNEUwQkYy ODZENEQ1RTAwHhcNMjUwNjEyMjA0MzAyWhcNMjUwNjE5MjA0MzAyWjAYMRYwFAYD VQQDEw02ODRiM2JkNi0zYmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkDh8s7c7dw/mLNm4tVM4M9eHUAR6BZnpqYA0WCW2oj+tq9ooNf2CTzelbDU ismBiN/RgOTbvsHBcAHBYhyFAlkkFbXl4tA/l/ANXOSVxVFuLIiltEjzftgIgC/k yxBkXhsxFVgnNw313gzKqrXC9N9LHpU1FsudQX44Pkv4XSOOVMegBHrgZfjwHXYF Odi2KTjAPMCg+fvOoBNhT39yaH76rzLkfxWqwa77FIROTfMVb58H4vXOVyBk8nix z5705LtzoZhIVIX6rgz7NOsL7N5b1fnn3+Ai9wOT0ik+PQsLAjB5KzNYSoSdr/L4 BBg1CiQRn/ialyr3FJxjGEUU2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfcjHv2 k+dzTYsr4zLEP2z45iXBMB8GA1UdIwQYMBaAFOFS4Od8eVtUIofWXB5OC/KG1NXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzYzQy9GMjBBQjMxQ0VF NjIxMUVBQTc2NjY0NEVDNEY5QUUwMi80VkxnNTN4NVcxUWloOVpjSGs0TDhvYlUx ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWTGc1M3g1VzFRaWg5WmNIazRMOG9iVTFlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzYzQy9GMjBBQjMxQ0VFNjIxMUVBQTc2NjY0NEVDNEY5QUUwMi80VkxnNTN4NVcx UWloOVpjSGs0TDhvYlUxZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsijVKGJFtmKZ1BZ09GxMumxYv9jY0tGOEa2LRF+7AxPKKMP4ToGFw 814Ms5QHeCyPhSIzGdk9/qlIl/M5RuTa7AaDCgfc2SJHhsU5d3TV2/ydyNSer76I bYvzyatpJLrb0UePtV4VSK8QWq7poKdvEbM6/YbNNrh23aj7gaizOFhzjRXRy7y/ gTd6UofTx2kyDA9uYGGOezbo0Y70wZ4Y8b7qX/gpNVOwwu7C9qbQzQt9zTQ2SY6k PskK/LIO+vOELoiv7Tu6414AQZuqPB9J1GroyrHYcLvhRUeFSNFWuVEx61ltCM+N Imv90SRJ8A1gwnmpGKwJy8LqwJbEe8+w -----END CERTIFICATE-----Generated at Sat Jun 14 19:17:57 2025 by rpki-client