$ rpki-client -vvf rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft File: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft (raw, json) Hash identifier: /MdAxOVgAhfZj7LDxU1GV4mvKHhTHCxkcElnf0tmad4= Subject key identifier: 01:3E:1A:F2:6A:D1:4C:11:97:A1:95:7A:47:86:6A:DC:D2:A5:1F:F7 Authority key identifier: E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F Certificate issuer: /CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F Certificate serial: 0504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft Manifest number: 0501 Signing time: Sat 14 Jun 2025 23:23:18 +0000 Manifest this update: Sat 14 Jun 2025 23:23:18 +0000 Manifest next update: Sat 21 Jun 2025 23:23:18 +0000 Files and hashes: 1: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl (hash: bCOKaqASIVs1XDaDSKXnxWLLj9/HtEJRK05RETJjD2Y=) 2: 914E7A440FE611EC8DD2020EC4F9AE02.roa (hash: +BX7RaNNlsglW/BB60o8n67yb/21GqaNOP3+xpToWWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1284 (0x504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91471DA, serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F Validity Not Before: Jun 14 23:23:18 2025 GMT Not After : Jun 21 23:23:18 2025 GMT Subject: CN=684e0466-013f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:50:79:6a:50:80:fd:3d:58:05:a3:d0:aa:f5: 6a:8e:b6:8f:5a:ab:68:e4:07:05:49:c9:13:67:13: 7e:1a:ae:54:19:67:84:1a:59:9a:ff:ca:b4:d4:f4: 73:3d:b1:2d:af:41:6e:79:0c:b7:18:81:be:14:57: 28:0c:d6:ba:7a:63:12:b8:3b:5d:85:d2:ac:15:a4: 7c:69:24:b1:f6:7c:5f:7e:0c:98:25:ae:4d:38:01: c9:7a:1f:11:78:a5:36:1c:89:7e:d3:ea:1e:ff:96: 7a:0a:b7:a7:30:12:b2:76:2a:11:a3:45:7c:f0:3a: a9:71:bf:fb:49:16:a6:ff:db:f0:8c:63:22:bb:08: 89:46:e9:66:03:d8:e3:a3:93:9b:1d:cf:35:db:0e: 18:65:9a:31:7c:52:7e:ab:fb:24:b3:05:8e:cd:b2: b9:28:5d:92:0c:a1:1a:c6:7e:42:4d:0c:e7:06:e2: 1d:07:33:79:be:be:ae:27:79:be:c3:d1:2e:b7:d5: a7:0e:60:a6:66:06:fc:3b:67:4c:7f:36:24:04:ba: 05:a6:ea:84:52:2a:1e:aa:60:ab:21:24:a1:db:44: 74:ac:b4:c2:ca:03:78:bb:db:cd:0f:1b:2b:bd:71: 03:31:bc:c3:69:16:31:6b:89:ce:eb:c1:e7:d3:67: 7a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3E:1A:F2:6A:D1:4C:11:97:A1:95:7A:47:86:6A:DC:D2:A5:1F:F7 X509v3 Authority Key Identifier: keyid:E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:53:f9:ca:b4:d3:0d:3d:0e:53:43:33:39:d8:f8:11:e0:83: 91:0d:55:ba:30:cf:26:e4:fb:83:b0:84:92:f1:a7:8f:e9:0e: 15:66:3c:7a:17:37:ba:99:5e:f9:c4:28:58:67:3f:e4:e7:97: ee:9c:c9:37:73:a1:67:87:88:b4:60:55:f4:cb:d8:b6:d4:35: 3f:5a:57:29:2a:49:f2:a0:79:60:40:5e:ba:bf:33:77:a1:6f: ea:c6:38:66:89:88:8f:c7:f6:ea:7f:30:56:e0:72:57:1d:e2: 3e:0f:e1:53:79:2c:3f:00:57:84:dc:68:82:39:9e:a4:82:f3: 21:1c:93:29:bb:9f:bc:e9:74:12:c1:0b:7c:b6:a2:01:bf:26: 32:bc:af:15:72:3e:71:ba:50:10:b1:69:67:ed:1a:ee:63:40: ed:78:d2:4d:25:21:eb:45:c4:df:3b:23:42:90:58:7f:9c:ea: 3f:47:35:49:a2:06:a9:0a:4f:39:c2:be:7d:54:97:30:64:0e: 49:a9:a6:e6:fa:f8:24:01:7e:ad:95:d2:3c:f5:93:d3:fb:eb: 6b:5f:e0:f5:6c:31:04:33:9f:fa:54:54:fe:71:7d:e7:51:3a: a9:04:0a:cc:f4:30:70:30:bd:b8:37:52:04:29:fd:57:0b:57: 57:c2:37:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcxREExMTAvBgNVBAUTKEUyNEQwOTU0MTA2MkM2MDhCRTM2M0ZGNjE5Q0NCODQ0 NEREQzNDMkYwHhcNMjUwNjE0MjMyMzE4WhcNMjUwNjIxMjMyMzE4WjAYMRYwFAYD VQQDEw02ODRlMDQ2Ni0wMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVB5alCA/T1YBaPQqvVqjraPWqto5AcFSckTZxN+Gq5UGWeEGlma/8q01PRz PbEtr0FueQy3GIG+FFcoDNa6emMSuDtdhdKsFaR8aSSx9nxffgyYJa5NOAHJeh8R eKU2HIl+0+oe/5Z6CrenMBKydioRo0V88Dqpcb/7SRam/9vwjGMiuwiJRulmA9jj o5ObHc812w4YZZoxfFJ+q/skswWOzbK5KF2SDKEaxn5CTQznBuIdBzN5vr6uJ3m+ w9Eut9WnDmCmZgb8O2dMfzYkBLoFpuqEUioeqmCrISSh20R0rLTCygN4u9vNDxsr vXEDMbzDaRYxa4nO68Hn02d6XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAE+GvJq 0UwRl6GVekeGatzSpR/3MB8GA1UdIwQYMBaAFOJNCVQQYsYIvjY/9hnMuERN3Dwv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzFEQS81MUQ1Nzk0ODBG RTIxMUVDQTREREM5MDlDNEY5QUUwMi80azBKVkJCaXhnaS1Oal8yR2N5NFJFM2NQ QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrMEpWQkJpeGdpLU5qXzJHY3k0UkUzY1BDOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzFEQS81MUQ1Nzk0ODBGRTIxMUVDQTREREM5MDlDNEY5QUUwMi80azBKVkJCaXhn aS1Oal8yR2N5NFJFM2NQQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiU/nKtNMNPQ5TQzM52PgR4IORDVW6MM8m5PuDsISS8aeP6Q4VZjx6 Fze6mV75xChYZz/k55funMk3c6Fnh4i0YFX0y9i21DU/WlcpKknyoHlgQF66vzN3 oW/qxjhmiYiPx/bqfzBW4HJXHeI+D+FTeSw/AFeE3GiCOZ6kgvMhHJMpu5+86XQS wQt8tqIBvyYyvK8Vcj5xulAQsWln7RruY0DteNJNJSHrRcTfOyNCkFh/nOo/RzVJ ogapCk85wr59VJcwZA5Jqabm+vgkAX6tldI89ZPT++trX+D1bDEEM5/6VFT+cX3n UTqpBArM9DBwML24N1IEKf1XC1dXwjf4 -----END CERTIFICATE-----Generated at Sun Jun 15 08:40:39 2025 by rpki-client