$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft File: 4_FvnXPM7iaTkVokT0S1U6TbPcw.mft (raw, json) Hash identifier: pSjZJaV6jQsrRjwaFimePNqpUzQ/UPv2fEY9LGlak24= Subject key identifier: 59:F2:89:1D:FA:B4:04:84:E4:EC:EE:F3:A4:93:B1:7A:3C:0F:7F:30 Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC Certificate issuer: /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft Manifest number: 66 Signing time: Thu 19 Jun 2025 06:22:51 +0000 Manifest this update: Thu 19 Jun 2025 06:22:50 +0000 Manifest next update: Thu 26 Jun 2025 06:22:50 +0000 Files and hashes: 1: 4_FvnXPM7iaTkVokT0S1U6TbPcw.crl (hash: iiXtem2ftZHy8neVuMxo7ddJYwOjdMUqQMZJOFjdtR4=) 2: 05E4CBECB12911EF993BC12DC4F9AE02.roa (hash: 6bS2IOUFxNL/dxgXXkv7hlgTjA3VB1/wSeyQ+zl4/9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Validity Not Before: Jun 19 06:22:50 2025 GMT Not After : Jun 26 06:22:50 2025 GMT Subject: CN=6853acba-57b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:66:1e:c9:4a:99:53:9a:ff:9d:02:9c:e0:1a: 31:07:00:b9:40:af:dc:56:26:42:11:a6:d4:e3:f9: e3:57:0d:1c:48:fa:11:36:8e:07:19:3e:02:69:47: a5:40:d0:73:c2:51:f5:2e:5e:19:f1:d8:2e:af:06: b7:8b:d6:4d:58:83:2e:c9:e2:a1:d7:e7:71:9d:1d: 17:a9:bf:28:47:ad:b8:25:85:3f:b3:49:8d:63:7c: 3b:a3:f9:8f:24:80:f2:ea:a7:f6:49:2c:0b:a3:a2: ad:84:0a:6a:5a:b5:a3:ea:15:09:2d:5e:ff:6f:ed: fe:46:15:69:a5:16:5a:c3:7f:49:4f:ac:dd:87:1d: 8b:20:17:d3:4c:90:5e:6f:b9:61:2e:2e:b3:1c:fb: d1:d3:7a:25:24:ca:fa:c3:57:82:b0:31:13:ea:4e: 75:f8:b7:7e:b5:5c:85:30:2c:1e:00:df:d1:bf:21: c5:7e:30:a9:bd:07:01:9c:7b:53:62:9a:0b:80:e2: 92:9e:bb:e8:2b:cf:05:33:84:11:5d:6a:98:e1:80: 4c:8d:f1:03:75:9e:fe:57:4f:de:18:66:c0:bf:4c: 0f:70:59:e9:4b:94:f7:f3:1a:0b:ce:ff:7c:9c:fa: e5:e8:93:fa:85:0e:31:67:7e:a3:b2:c7:46:38:4e: 92:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F2:89:1D:FA:B4:04:84:E4:EC:EE:F3:A4:93:B1:7A:3C:0F:7F:30 X509v3 Authority Key Identifier: keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:47:0e:11:b7:ec:bd:92:97:e3:e1:f3:f3:50:65:a7:44:82: f2:61:66:38:ce:7d:79:7a:c8:be:6b:16:0b:57:dc:a4:2b:0d: b1:26:48:c4:4b:7c:b2:4d:9e:ae:c2:b2:8b:27:68:3a:a9:72: f2:be:16:c6:41:a4:69:a0:f9:24:d4:11:2e:b3:85:6f:54:c1: 45:dd:b1:81:8c:05:11:1e:97:f8:94:17:66:ef:e0:90:92:c6: dd:37:be:f1:08:94:69:ef:84:ac:ff:44:28:37:48:80:00:b8: 55:fe:58:54:9e:82:d3:5f:f7:e8:34:17:04:d5:95:f3:c1:34: 1a:28:de:2f:06:b3:8a:c6:3b:de:a0:89:ea:86:b3:28:3a:b9: 0b:ad:c1:26:67:9a:8e:26:95:99:da:19:4d:b6:c2:1e:ae:a6: 7a:7f:4c:89:86:4d:08:5f:df:78:6f:58:ab:52:88:1b:a9:61: 99:d2:5b:11:85:50:85:05:0a:c0:eb:65:9c:b6:7e:08:53:c2: 6f:77:88:47:9f:d1:66:5c:e4:d0:94:21:f3:29:a7:5e:ea:ed: bd:11:57:4c:ff:00:c5:ac:26:c6:5e:d1:10:66:ec:0c:c8:72: 8e:c0:2a:2c:e0:99:a8:00:b0:81:44:46:f1:d8:92:a8:da:fd: 60:1f:36:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUIxMzExMC8GA1UEBRMoRTNGMTZGOUQ3M0NDRUUyNjkzOTE1QTI0NEY0NEI1NTNB NERCM0RDQzAeFw0yNTA2MTkwNjIyNTBaFw0yNTA2MjYwNjIyNTBaMBgxFjAUBgNV BAMTDTY4NTNhY2JhLTU3YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAZh7JSplTmv+dApzgGjEHALlAr9xWJkIRptTj+eNXDRxI+hE2jgcZPgJpR6VA 0HPCUfUuXhnx2C6vBreL1k1Ygy7J4qHX53GdHRepvyhHrbglhT+zSY1jfDuj+Y8k gPLqp/ZJLAujoq2ECmpataPqFQktXv9v7f5GFWmlFlrDf0lPrN2HHYsgF9NMkF5v uWEuLrMc+9HTeiUkyvrDV4KwMRPqTnX4t361XIUwLB4A39G/IcV+MKm9BwGce1Ni mguA4pKeu+grzwUzhBFdapjhgEyN8QN1nv5XT94YZsC/TA9wWelLlPfzGgvO/3yc +uXok/qFDjFnfqOyx0Y4TpLTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWfKJHfq0 BITk7O7zpJOxejwPfzAwHwYDVR0jBBgwFoAU4/FvnXPM7iaTkVokT0S1U6TbPcww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1QjEzLzQ2MzdGQkYyQjEy ODExRUZCNzUwQTUyQkM0RjlBRTAyLzRfRnZuWFBNN2lhVGtWb2tUMFMxVTZUYlBj dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNF9Gdm5YUE03aWFUa1Zva1QwUzFVNlRiUGN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 QjEzLzQ2MzdGQkYyQjEyODExRUZCNzUwQTUyQkM0RjlBRTAyLzRfRnZuWFBNN2lh VGtWb2tUMFMxVTZUYlBjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD1HDhG37L2Sl+Ph8/NQZadEgvJhZjjOfXl6yL5rFgtX3KQrDbEmSMRL fLJNnq7CsosnaDqpcvK+FsZBpGmg+STUES6zhW9UwUXdsYGMBREel/iUF2bv4JCS xt03vvEIlGnvhKz/RCg3SIAAuFX+WFSegtNf9+g0FwTVlfPBNBoo3i8Gs4rGO96g ieqGsyg6uQutwSZnmo4mlZnaGU22wh6upnp/TImGTQhf33hvWKtSiBupYZnSWxGF UIUFCsDrZZy2fghTwm93iEef0WZc5NCUIfMpp17q7b0RV0z/AMWsJsZe0RBm7AzI co7AKizgmagAsIFERvHYkqja/WAfNhw= -----END CERTIFICATE-----Generated at Sat Jun 21 07:07:44 2025 by rpki-client