$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft File: R4tJDpOd3d8hrKx4y5MZinuBRIU.mft (raw, json) Hash identifier: lL9pcUhhcCgYodXDUJnCGhQ7XbrBbvwK369o8IG4jIQ= Subject key identifier: E6:2E:C5:F6:0A:5B:8D:7F:80:FD:50:03:44:D8:7E:DE:FA:0C:5A:CD Authority key identifier: 47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 Certificate issuer: /CN=A91427E2/serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft Manifest number: 78 Signing time: Fri 13 Jun 2025 05:42:19 +0000 Manifest this update: Fri 13 Jun 2025 05:42:18 +0000 Manifest next update: Fri 20 Jun 2025 05:42:18 +0000 Files and hashes: 1: R4tJDpOd3d8hrKx4y5MZinuBRIU.crl (hash: 14/B2kc+5TkfGdvdC80/nCLLz6vZkyor+SGSxK/u2kQ=) 2: 534DAEB2935111EF98AA8C86C4F9AE02.roa (hash: uOl4+NzZB6fPlXrYszF0PeNPfsE4Pp9BL5TML7ATF7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Validity Not Before: Jun 13 05:42:18 2025 GMT Not After : Jun 20 05:42:18 2025 GMT Subject: CN=684bba3a-1e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2c:7b:a6:af:f4:9e:fb:0c:bc:6f:1e:c9:ea: 53:0e:e8:35:32:87:bf:07:97:76:83:48:ba:bb:8a: 00:e4:61:3b:fb:f6:16:a5:7f:5d:0a:3c:52:71:af: 71:f0:45:3a:73:e2:b3:64:e0:a9:93:30:b2:31:06: a8:8e:e8:fd:49:1d:ee:3a:89:c1:eb:26:e4:23:21: cf:57:44:f2:df:e6:c3:77:f7:b7:21:60:8f:e8:65: f3:64:93:80:35:b3:b0:74:cc:bf:e8:7b:9d:1a:55: e9:cc:a5:52:b1:74:b8:7e:ec:2f:19:b9:38:c5:da: 1b:f1:b8:6b:7f:39:e0:77:bc:f4:30:68:c7:40:03: 89:85:d1:3c:05:e8:c1:0b:88:70:a2:38:bf:50:8c: 3c:fb:d5:f2:94:1c:a7:fa:22:c2:93:89:47:61:9f: 81:c2:d9:bc:be:49:7a:92:98:43:0f:fe:ab:37:46: a3:9b:76:81:14:d7:7f:21:fe:3e:49:cd:97:f4:15: 79:29:67:60:5d:55:31:5e:09:f4:8b:65:75:43:08: 5a:2a:da:83:3e:0e:d6:52:c6:08:8e:69:c6:e9:7c: 63:4d:6c:1d:fb:5e:d6:a9:cd:85:90:c9:76:db:48: 20:2a:18:ab:a4:52:d5:8b:8e:b2:10:f4:d2:ed:97: 05:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2E:C5:F6:0A:5B:8D:7F:80:FD:50:03:44:D8:7E:DE:FA:0C:5A:CD X509v3 Authority Key Identifier: keyid:47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:5d:89:4d:9d:99:15:a2:10:eb:28:58:c6:8e:6f:87:e6:6c: 63:c7:7e:63:4c:27:54:b6:e3:96:57:ac:aa:cd:3e:5b:31:c9: f4:8f:dd:b1:8c:3d:53:f4:38:42:89:a6:71:48:68:f1:97:79: 2c:20:e6:26:be:12:8d:9e:50:23:4d:fa:aa:08:dd:40:8e:bf: 06:dd:3c:65:c8:59:7b:9f:ca:03:26:3a:ce:66:1a:84:4e:25: 22:35:ff:2b:dd:a0:63:b5:f2:64:88:08:f2:0e:f7:6f:be:00: 43:40:1a:48:f3:48:5b:f2:3e:d8:13:7a:c6:fa:f3:e6:bc:d7: 68:0f:7c:ef:46:22:32:54:42:9e:ea:b7:af:62:c8:ee:38:29: 2e:32:3f:49:35:df:31:0c:21:2c:c8:0b:ce:3a:37:1f:9f:9f: 66:f1:e0:04:55:bf:02:db:3c:82:92:49:31:83:9f:1f:f6:f2: 78:d1:b7:f2:a3:d8:48:eb:a5:15:d2:c4:18:a2:78:7e:7c:5f: 31:b3:76:94:86:5a:d5:9b:42:14:89:dc:0b:23:13:84:57:e5: b7:3c:76:c1:40:16:de:2f:f6:6e:3e:24:e4:3a:d2:7d:3b:ef: c2:6f:42:e7:12:d6:9f:6d:2b:b8:88:09:c1:83:91:d6:89:28: 25:84:73:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjdFMjExMC8GA1UEBRMoNDc4QjQ5MEU5MzlERERERjIxQUNBQzc4Q0I5MzE5OEE3 QjgxNDQ4NTAeFw0yNTA2MTMwNTQyMThaFw0yNTA2MjAwNTQyMThaMBgxFjAUBgNV BAMTDTY4NGJiYTNhLTFlNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLLHumr/Se+wy8bx7J6lMO6DUyh78Hl3aDSLq7igDkYTv79half10KPFJxr3Hw RTpz4rNk4KmTMLIxBqiO6P1JHe46icHrJuQjIc9XRPLf5sN397chYI/oZfNkk4A1 s7B0zL/oe50aVenMpVKxdLh+7C8ZuTjF2hvxuGt/OeB3vPQwaMdAA4mF0TwF6MEL iHCiOL9QjDz71fKUHKf6IsKTiUdhn4HC2by+SXqSmEMP/qs3RqObdoEU138h/j5J zZf0FXkpZ2BdVTFeCfSLZXVDCFoq2oM+DtZSxgiOacbpfGNNbB37XtapzYWQyXbb SCAqGKukUtWLjrIQ9NLtlwX9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5i7F9gpb jX+A/VADRNh+3voMWs0wHwYDVR0jBBgwFoAUR4tJDpOd3d8hrKx4y5MZinuBRIUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyN0UyLzc4M0RGQkM0OTM1 MDExRUZCQUNFMDA0Q0M0RjlBRTAyL1I0dEpEcE9kM2Q4aHJLeDR5NU1aaW51QlJJ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjR0SkRwT2QzZDhockt4NHk1TVppbnVCUklVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy N0UyLzc4M0RGQkM0OTM1MDExRUZCQUNFMDA0Q0M0RjlBRTAyL1I0dEpEcE9kM2Q4 aHJLeDR5NU1aaW51QlJJVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADRdiU2dmRWiEOsoWMaOb4fmbGPHfmNMJ1S245ZXrKrNPlsxyfSP3bGM PVP0OEKJpnFIaPGXeSwg5ia+Eo2eUCNN+qoI3UCOvwbdPGXIWXufygMmOs5mGoRO JSI1/yvdoGO18mSICPIO92++AENAGkjzSFvyPtgTesb68+a812gPfO9GIjJUQp7q t69iyO44KS4yP0k13zEMISzIC846Nx+fn2bx4ARVvwLbPIKSSTGDnx/28njRt/Kj 2EjrpRXSxBiieH58XzGzdpSGWtWbQhSJ3AsjE4RX5bc8dsFAFt4v9m4+JOQ60n07 78JvQucS1p9tK7iICcGDkdaJKCWEc30= -----END CERTIFICATE-----Generated at Sat Jun 14 19:00:23 2025 by rpki-client