$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json) Hash identifier: ZT6wzS4aPI6e6XgHBcBRQlJCPGWTT2iYtuFUQCqtQcI= Subject key identifier: 02:07:79:E0:20:AB:29:0F:55:28:F3:77:6B:1B:5E:EF:59:CA:39:D0 Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 151C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft Manifest number: 14D4 Signing time: Mon 16 Jun 2025 16:55:15 +0000 Manifest this update: Mon 16 Jun 2025 16:55:15 +0000 Manifest next update: Mon 23 Jun 2025 16:55:15 +0000 Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: s/ElrMeadX0LqrC8nSQ9a8zrZB9NCPnFUp/A58VXc84=) 2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: gzRITOkOOGrTx/TsBYiR/c3khv1Gc2m9Qh3FJnnq+g4=) 3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: wDUkAV/G8nH6a42xA1jspBcH2CyrvgBJPhHTMVF0vF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5404 (0x151c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Jun 16 16:55:15 2025 GMT Not After : Jun 23 16:55:15 2025 GMT Subject: CN=68504c73-242f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:05:ab:e1:0d:c8:ad:32:46:8f:c5:31:3a:d4: f6:19:e5:ed:77:37:3a:4a:94:fb:62:a1:2a:8a:51: 65:d4:4d:1b:63:78:8b:25:d8:a1:8b:78:97:54:c7: 66:f6:5e:1b:c4:9e:a0:30:a1:bd:6c:43:31:a7:c1: a0:77:b4:b7:ec:39:31:27:96:46:30:be:1d:c8:1e: 87:56:ae:7d:8d:ae:aa:dc:f4:a4:d4:af:0d:3e:ec: 32:b6:ca:db:52:a5:56:5c:37:da:01:20:d7:12:58: 0a:86:15:5a:da:ac:0d:30:3c:53:aa:a8:92:5c:ce: 2c:01:f6:77:5c:04:ae:ca:9b:4b:be:a5:d1:47:7f: 79:85:e0:61:8b:9d:5d:d1:37:7b:de:bd:18:4d:45: 4d:3d:40:ea:2c:01:80:93:c5:1e:9a:f8:e1:89:41: e5:0f:6e:6f:39:d5:c7:93:4c:64:7a:0c:40:e1:4c: 52:4d:8f:5f:c0:ad:fd:b7:73:e0:e7:29:aa:41:17: 1f:7e:1e:91:0e:ee:26:43:d3:c9:3a:77:f5:65:18: 88:3f:dc:d5:4c:45:e1:44:03:8a:ef:64:4c:39:09: 74:74:cd:f1:a4:dc:d6:22:4d:fb:4b:6d:68:20:f7: 58:1e:2c:30:d3:95:c2:1e:77:21:76:51:57:9a:12: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:07:79:E0:20:AB:29:0F:55:28:F3:77:6B:1B:5E:EF:59:CA:39:D0 X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:f5:40:9e:6c:c0:f6:93:24:fa:cf:2c:69:b1:a4:86:7c:83: ec:89:e8:cf:fb:1b:27:50:7f:0f:da:e2:45:b6:03:67:2b:20: d8:ea:e6:97:42:85:55:70:23:7f:2a:80:20:3e:9f:d2:6c:40: eb:81:3d:c3:1d:03:1a:7e:ca:fb:a4:3a:fb:84:55:87:01:89: 7e:0d:cb:68:34:56:c9:bd:4d:b1:9d:01:cb:10:64:76:30:87: a7:82:cd:e6:de:87:b4:b5:57:e9:a0:68:e7:31:68:37:e0:11: e6:d3:5b:b5:29:6d:78:b7:02:d5:7c:86:85:d5:3f:1b:49:f9: 4e:25:92:cc:81:8e:cc:91:a3:38:70:28:50:46:d6:e3:0a:c8: b3:01:c1:0f:ee:a6:e7:9b:8e:11:52:c1:e5:0d:f6:eb:5f:f3: 4e:22:2f:54:38:69:0e:c2:ae:75:5b:a6:36:fd:4f:9a:39:ee: 75:87:89:56:34:c7:7b:fc:41:7e:d6:01:22:a8:c0:a7:35:aa: 0c:67:1e:9b:b7:47:7e:1f:30:4e:a5:6b:09:fb:05:a7:c1:97: 68:41:1d:18:46:09:b5:47:08:2c:78:3f:f0:02:55:3d:fb:a8: 45:36:ba:13:f0:61:9c:d7:9d:30:96:cf:0f:d0:2f:85:5e:a3: 9d:ad:34:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjUwNjE2MTY1NTE1WhcNMjUwNjIzMTY1NTE1WjAYMRYwFAYD VQQDEw02ODUwNGM3My0yNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6AWr4Q3IrTJGj8UxOtT2GeXtdzc6SpT7YqEqilFl1E0bY3iLJdihi3iXVMdm 9l4bxJ6gMKG9bEMxp8Ggd7S37DkxJ5ZGML4dyB6HVq59ja6q3PSk1K8NPuwytsrb UqVWXDfaASDXElgKhhVa2qwNMDxTqqiSXM4sAfZ3XASuyptLvqXRR395heBhi51d 0Td73r0YTUVNPUDqLAGAk8UemvjhiUHlD25vOdXHk0xkegxA4UxSTY9fwK39t3Pg 5ymqQRcffh6RDu4mQ9PJOnf1ZRiIP9zVTEXhRAOK72RMOQl0dM3xpNzWIk37S21o IPdYHiww05XCHnchdlFXmhLa9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIHeeAg qykPVSjzd2sbXu9ZyjnQMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDFENS9ENEJFMDBENDYzRTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3 TmptZWNXM0NJY296ajFpMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDe9UCebMD2kyT6zyxpsaSGfIPsiejP+xsnUH8P2uJFtgNnKyDY6uaX QoVVcCN/KoAgPp/SbEDrgT3DHQMafsr7pDr7hFWHAYl+DctoNFbJvU2xnQHLEGR2 MIengs3m3oe0tVfpoGjnMWg34BHm01u1KW14twLVfIaF1T8bSflOJZLMgY7MkaM4 cChQRtbjCsizAcEP7qbnm44RUsHlDfbrX/NOIi9UOGkOwq51W6Y2/U+aOe51h4lW NMd7/EF+1gEiqMCnNaoMZx6bt0d+HzBOpWsJ+wWnwZdoQR0YRgm1RwgseD/wAlU9 +6hFNroT8GGc150wls8P0C+FXqOdrTTm -----END CERTIFICATE-----Generated at Mon Jun 16 23:26:31 2025 by rpki-client