$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: NFfd0uIfxexyUbnkvYNKtxrAaK8JScdz/e59DKrVqpQ= Subject key identifier: F3:5F:89:8F:54:AC:39:A2:2C:4C:E9:C9:79:8B:4F:49:95:9E:E6:66 Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 07B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 07AF Signing time: Sat 14 Jun 2025 20:59:51 +0000 Manifest this update: Sat 14 Jun 2025 20:59:51 +0000 Manifest next update: Sat 21 Jun 2025 20:59:51 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: wUHokyyt0T2JBSBdluWagrIRECSmLMhLicq2wctHdvg=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: nebZkphHnCGcHsK4OPuyoN2DWSVg+M+V/082vsrCEns=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: tXMl2RtLfZvDGfhyJ5diezkCwv50p552Np4xQThv520=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1977 (0x7b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Jun 14 20:59:51 2025 GMT Not After : Jun 21 20:59:51 2025 GMT Subject: CN=684de2c7-77c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:67:cf:ef:65:9f:d7:23:73:e1:df:9c:8c: ab:87:a1:ea:ba:5e:40:9a:30:80:64:4b:92:dd:cd: b3:8c:21:51:d3:5a:26:52:7d:3a:51:bc:69:91:6c: 6b:4d:ec:cb:42:54:f3:69:49:c6:7f:34:d7:b5:88: 1f:46:09:8d:60:2d:e9:fd:db:cb:11:18:25:95:6e: 53:df:61:c0:91:3d:15:ba:b5:6a:52:91:a2:26:d5: c0:e1:8f:03:59:41:08:b5:e3:74:df:89:d6:d1:77: 51:7d:19:9d:30:48:9d:f6:89:5f:a6:b1:00:28:41: ae:1e:c6:1e:1a:be:c5:65:76:ac:3b:16:19:8e:de: 3a:9b:bb:ac:1a:bc:1e:3c:59:d5:a3:65:1a:75:7a: 50:7c:3b:33:9b:b8:04:28:70:4c:03:90:23:f2:0d: f0:d5:2c:a5:81:6f:2c:ca:36:73:8a:87:5a:09:bc: 0c:a8:4d:25:3f:9c:62:d5:a8:bd:c6:a0:0a:83:44: 28:9a:27:1e:80:ed:c6:29:9a:b5:e2:10:03:8b:93: 0c:ea:4a:f0:f3:63:04:09:02:6b:4b:1e:f9:8a:d4: b9:22:90:23:64:76:bc:7e:ad:4b:13:ce:bf:5c:d8: 03:49:6e:34:4f:85:9b:ab:7e:93:e7:1a:c6:bd:2d: 58:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5F:89:8F:54:AC:39:A2:2C:4C:E9:C9:79:8B:4F:49:95:9E:E6:66 X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:d7:3e:fe:84:cf:c1:ba:a8:86:33:81:ba:46:ba:80:20:0d: e5:ee:e9:6b:df:74:40:e5:8b:5c:29:56:6f:ae:90:ca:98:94: 94:4e:2c:79:66:ce:13:70:69:76:4c:3b:e6:06:cf:8b:1a:ab: 9c:dd:62:e7:b6:b8:41:c7:6d:8f:07:9c:da:81:c3:c3:ea:56: ff:28:53:3b:0d:e4:3a:91:d8:3d:10:84:d5:38:f4:0c:fb:3f: 73:99:92:0b:d6:8e:89:41:d9:78:37:1c:b5:d2:48:e7:66:91: 7b:4f:63:8c:d2:55:ef:84:5c:98:d6:f0:b3:9d:fb:60:46:12: 4f:74:97:62:fb:bd:d7:a8:8b:b2:05:1e:58:b9:7f:7a:29:76: 27:1e:fd:c0:0f:ad:10:72:f1:82:b1:47:8d:f0:ea:56:f8:d3: ee:3c:ea:d7:fd:36:eb:1e:2c:81:b1:f9:ee:17:58:0c:a8:48: 70:dd:17:3d:e2:f5:5b:ca:e5:9f:e5:86:7d:49:8e:23:cb:67: b7:d7:68:d6:11:e7:81:2e:97:ce:83:4d:04:a1:7e:d1:38:8b: 72:bc:e2:ef:e9:83:ad:f3:06:9a:db:4b:40:c5:9a:5f:3f:1c: fc:5e:58:9a:8b:14:3e:c6:74:24:15:a2:1d:08:c8:88:ac:c6: b2:b1:d4:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjUwNjE0MjA1OTUxWhcNMjUwNjIxMjA1OTUxWjAYMRYwFAYD VQQDEw02ODRkZTJjNy03N2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlxnz+9ln9cjc+HfnIyrh6Hqul5AmjCAZEuS3c2zjCFR01omUn06UbxpkWxr TezLQlTzaUnGfzTXtYgfRgmNYC3p/dvLERgllW5T32HAkT0VurVqUpGiJtXA4Y8D WUEIteN034nW0XdRfRmdMEid9olfprEAKEGuHsYeGr7FZXasOxYZjt46m7usGrwe PFnVo2UadXpQfDszm7gEKHBMA5Aj8g3w1SylgW8syjZziodaCbwMqE0lP5xi1ai9 xqAKg0QomicegO3GKZq14hADi5MM6krw82MECQJrSx75itS5IpAjZHa8fq1LE86/ XNgDSW40T4Wbq36T5xrGvS1YgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNfiY9U rDmiLEzpyXmLT0mVnuZmMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA11z7+hM/BuqiGM4G6RrqAIA3l7ulr33RA5YtcKVZvrpDKmJSUTix5 Zs4TcGl2TDvmBs+LGquc3WLntrhBx22PB5zagcPD6lb/KFM7DeQ6kdg9EITVOPQM +z9zmZIL1o6JQdl4Nxy10kjnZpF7T2OM0lXvhFyY1vCznftgRhJPdJdi+73XqIuy BR5YuX96KXYnHv3AD60QcvGCsUeN8OpW+NPuPOrX/TbrHiyBsfnuF1gMqEhw3Rc9 4vVbyuWf5YZ9SY4jy2e312jWEeeBLpfOg00EoX7ROItyvOLv6YOt8waa20tAxZpf Pxz8XliaixQ+xnQkFaIdCMiIrMaysdSD -----END CERTIFICATE-----Generated at Mon Jun 16 08:21:52 2025 by rpki-client