$ rpki-client -vvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft File: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json) Hash identifier: Nf3f+/NctI0qglDsza+UEhvAw5/j/88Eb1CPtjeHrHU= Subject key identifier: 36:BE:A7:47:3B:18:13:A3:C6:AD:3F:90:38:56:17:41:E6:FA:7F:C9 Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C Certificate issuer: /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C Certificate serial: 07A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft Manifest number: 07A2 Signing time: Thu 12 Jun 2025 21:00:34 +0000 Manifest this update: Thu 12 Jun 2025 21:00:33 +0000 Manifest next update: Thu 19 Jun 2025 21:00:33 +0000 Files and hashes: 1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: lX8VBNlnLTfAKTvQViI/bwpEWRdnLaxqEE+HUPuAVWI=) 2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: 04Yyac0X4yooHW+vSmS1SL3uVYlQ7JtEGZ1zzlU0iN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1961 (0x7a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C Validity Not Before: Jun 12 21:00:33 2025 GMT Not After : Jun 19 21:00:33 2025 GMT Subject: CN=684b3ff2-063c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:e6:e1:a3:eb:2b:3f:04:ba:de:05:bf:79: 93:df:70:db:b4:9d:cf:a2:d2:9f:61:03:00:42:ff: dc:5f:e8:3c:9c:28:6c:59:c6:9b:cf:32:40:86:94: af:28:21:7a:9f:bd:97:1b:ef:da:ab:8f:dd:e9:32: 10:8e:12:89:6d:0b:1b:fa:aa:1c:e3:a4:6b:07:47: 9e:35:b9:97:b3:87:18:f8:3f:e3:f0:58:37:b3:6d: ea:ff:5e:60:e8:ba:d4:a8:fd:a7:8b:7f:7f:f2:b2: f0:ee:69:7f:ce:b1:4a:52:2f:e1:f0:77:6f:06:fe: 0b:ae:9e:4c:19:32:16:c1:4a:04:b7:02:87:79:4b: e0:4f:fb:fb:c8:33:3d:97:3a:e4:5c:0d:ae:38:e6: 6e:53:78:8e:dc:7c:cb:7f:c7:a3:84:e4:b5:35:eb: 3c:67:7c:d5:8a:9d:8d:fd:7d:19:a0:c7:11:45:ee: 2d:37:f2:f5:88:fe:61:17:40:6c:13:ea:73:5f:01: 27:89:fe:f7:e4:19:7b:db:13:53:49:a8:84:99:22: 10:40:9e:fa:16:9d:0d:98:70:86:8d:63:50:43:c1: 14:51:c8:0f:55:e7:4f:20:5f:d9:74:52:e2:34:c1: 7b:80:34:26:4e:f7:62:ad:fa:fb:87:f5:ad:0c:c4: fb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BE:A7:47:3B:18:13:A3:C6:AD:3F:90:38:56:17:41:E6:FA:7F:C9 X509v3 Authority Key Identifier: keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:dc:55:20:07:82:b1:9d:ec:9e:cd:c9:9e:dc:44:aa:00:e9: b2:fc:a6:cc:19:c9:bf:b0:b3:e7:53:10:c7:50:1f:e8:7f:99: 29:ff:e5:f8:87:ac:80:09:93:c6:6b:09:5b:7a:14:52:f8:45: 3c:73:0f:64:91:d3:cf:3f:82:dc:df:d6:cd:dd:5f:1d:bd:cf: 3c:22:74:a3:21:38:46:37:de:ec:f0:cb:14:ac:05:00:de:13: 60:e5:02:7c:34:d7:6a:28:64:0f:d8:67:78:b7:7a:79:cd:2d: 02:7c:0f:94:09:ec:3b:93:1a:07:c6:f6:af:b9:1d:cb:e8:4a: b5:15:12:db:ff:ef:9d:33:23:fd:e3:89:c4:a6:ab:4d:0f:24: 7b:c3:44:0c:5e:b1:d8:3c:8d:f4:ed:1d:90:86:f3:24:17:52: f6:ac:ad:80:55:15:eb:24:39:29:64:42:b5:2f:06:0d:4d:6f: 3d:87:9a:8c:51:0b:80:f4:bf:38:b8:4b:0e:12:a3:cf:8f:ae: 0f:5d:c0:b8:e7:84:2c:79:ee:bd:6a:a1:c9:6b:79:d8:0a:2c: 54:d7:93:00:3b:7f:5a:3d:0b:96:cc:38:34:1c:d8:40:c4:7d: e3:12:9d:e4:4f:d0:2d:4f:fa:30:a8:aa:60:04:6a:d5:91:39: 83:c5:f0:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwRDYxMTAvBgNVBAUTKEUyRDgxM0Q2NkNFNTBERDkzOEZDM0E1MzJEQjhFREUy QzVCQTc5NUMwHhcNMjUwNjEyMjEwMDMzWhcNMjUwNjE5MjEwMDMzWjAYMRYwFAYD VQQDEw02ODRiM2ZmMi0wNjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyx/m4aPrKz8Eut4Fv3mT33DbtJ3PotKfYQMAQv/cX+g8nChsWcabzzJAhpSv KCF6n72XG+/aq4/d6TIQjhKJbQsb+qoc46RrB0eeNbmXs4cY+D/j8Fg3s23q/15g 6LrUqP2ni39/8rLw7ml/zrFKUi/h8HdvBv4Lrp5MGTIWwUoEtwKHeUvgT/v7yDM9 lzrkXA2uOOZuU3iO3HzLf8ejhOS1Nes8Z3zVip2N/X0ZoMcRRe4tN/L1iP5hF0Bs E+pzXwEnif735Bl72xNTSaiEmSIQQJ76Fp0NmHCGjWNQQ8EUUcgPVedPIF/ZdFLi NMF7gDQmTvdirfr7h/WtDMT7RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDa+p0c7 GBOjxq0/kDhWF0Hm+n/JMB8GA1UdIwQYMBaAFOLYE9Zs5Q3ZOPw6Uy247eLFunlc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjBENi84OUEwRTdBMjA4 NkExMUVCOURGMzM4NDJDNEY5QUUwMi80dGdUMW16bERkazRfRHBUTGJqdDRzVzZl VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR0Z1QxbXpsRGRrNF9EcFRMYmp0NHNXNmVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjBENi84OUEwRTdBMjA4NkExMUVCOURGMzM4NDJDNEY5QUUwMi80dGdUMW16bERk azRfRHBUTGJqdDRzVzZlVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr3FUgB4Kxneyezcme3ESqAOmy/KbMGcm/sLPnUxDHUB/of5kp/+X4 h6yACZPGawlbehRS+EU8cw9kkdPPP4Lc39bN3V8dvc88InSjIThGN97s8MsUrAUA 3hNg5QJ8NNdqKGQP2Gd4t3p5zS0CfA+UCew7kxoHxvavuR3L6Eq1FRLb/++dMyP9 44nEpqtNDyR7w0QMXrHYPI307R2QhvMkF1L2rK2AVRXrJDkpZEK1LwYNTW89h5qM UQuA9L84uEsOEqPPj64PXcC454Qsee69aqHJa3nYCixU15MAO39aPQuWzDg0HNhA xH3jEp3kT9AtT/owqKpgBGrVkTmDxfBX -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:53 2025 by rpki-client