$ rpki-client -vvf rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft File: g4n9Rv74flk96Bz_3N8guiynYB4.mft (raw, json) Hash identifier: bw/aoKGc7PUg/NfyesHlUWHb2tR2MA5czDuhEquGb+c= Subject key identifier: 47:D9:D7:CB:8B:D8:B2:8D:EB:71:C1:1C:53:EE:FA:40:A7:70:23:A9 Authority key identifier: 83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E Certificate issuer: /CN=A91475BA/serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Certificate serial: 081C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft Manifest number: 0817 Signing time: Mon 16 Jun 2025 20:36:39 +0000 Manifest this update: Mon 16 Jun 2025 20:36:38 +0000 Manifest next update: Mon 23 Jun 2025 20:36:38 +0000 Files and hashes: 1: g4n9Rv74flk96Bz_3N8guiynYB4.crl (hash: tWnj7Zzm3H0ye6qisHTNY+uxBvTfJIu2TV0zcvpGFA8=) 2: 1E1D32C22FF311EC9220256BC4F9AE02.roa (hash: pTjj2b7GgJwyDNJuxZHgCMBFpwcbCF/p1EbBwHpmEQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2076 (0x81c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475BA, serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Validity Not Before: Jun 16 20:36:38 2025 GMT Not After : Jun 23 20:36:38 2025 GMT Subject: CN=68508056-53b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f9:0a:a7:e6:cb:c3:d0:ac:94:18:bd:a2:0b: 25:8c:9e:7f:e5:41:12:67:3d:8f:76:bf:75:be:e4: 38:3a:b8:fa:c0:2c:62:6b:e9:5d:38:e6:a7:61:45: af:4a:2b:ca:a3:33:97:0f:e9:50:00:61:ac:c7:73: e8:f2:8d:2a:be:e1:bd:d5:1e:bc:55:aa:16:ef:d7: a6:f0:2b:e7:d1:22:f1:84:ec:72:9c:01:4a:86:36: 96:d4:27:cc:6d:3d:fc:65:4c:03:39:0a:1d:fa:f0: 44:c0:ce:38:a2:29:cf:92:2c:28:e1:be:1b:65:66: 3e:ae:e0:bd:af:dd:89:f6:be:18:fe:3b:57:62:06: 5b:28:e5:13:0f:5c:2b:9c:22:3e:c6:73:88:f0:de: b7:52:4f:eb:79:a1:00:fd:fc:92:1b:14:8d:0c:dd: ab:82:88:13:49:08:19:13:d1:9b:64:bb:33:ec:fd: fd:f6:0d:b8:56:b3:a1:47:20:ed:3d:81:cc:32:5d: a3:16:e2:3a:9e:20:e5:cb:bd:0e:85:43:64:7d:01: c5:ba:cf:60:d3:0e:0c:31:ad:28:3b:6f:55:23:d8: e5:84:af:4c:4a:ea:ad:01:be:18:52:c9:21:3b:bf: b6:c3:3c:ae:9f:ca:77:3e:c0:46:b5:db:89:04:c6: 92:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D9:D7:CB:8B:D8:B2:8D:EB:71:C1:1C:53:EE:FA:40:A7:70:23:A9 X509v3 Authority Key Identifier: keyid:83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1c:3a:94:bc:f8:a4:bb:64:23:bc:21:63:57:42:bc:44:86: a1:0b:70:1a:9e:fd:0a:db:b1:b7:f2:e3:ec:83:f9:e0:0c:7c: 09:8a:09:ba:2f:4d:f1:d7:4d:f8:0a:f5:5b:2a:8d:3d:fc:0e: 12:bc:73:b6:13:53:bb:10:38:6e:82:92:b5:a5:b1:11:e6:24: b6:0e:95:fd:3b:1b:40:dd:17:ef:0b:f9:4c:91:04:ba:90:13: dc:fe:7c:99:3d:1f:ed:dd:d5:d8:4b:ca:5c:ad:d4:ff:9e:71: 3f:53:19:91:b5:05:19:f7:5b:f7:9d:10:34:54:35:b2:22:95: 46:a4:4c:2e:b0:3c:eb:c5:a3:8a:62:72:b2:4d:b5:f6:df:8a: fc:48:a8:66:e6:87:25:7f:11:b5:72:21:f1:b8:24:aa:d4:83: e3:fb:53:11:55:4c:40:2a:b4:22:0b:0f:85:74:3d:e9:47:b3: dc:ec:24:10:1b:df:5f:da:7b:65:92:1d:45:88:f8:6c:c7:a1: b5:6e:56:41:03:77:fc:98:c8:f0:71:35:1d:0d:fa:4a:1f:a0: d4:48:89:d0:89:91:26:c1:0c:8e:75:52:27:b9:96:29:09:5c: 06:d5:f5:60:ba:09:94:58:89:c3:e0:24:5d:12:70:27:e2:6f: c2:9f:5b:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QkExMTAvBgNVBAUTKDgzODlGRDQ2RkVGODdFNTkzREU4MUNGRkRDREYyMEJB MkNBNzYwMUUwHhcNMjUwNjE2MjAzNjM4WhcNMjUwNjIzMjAzNjM4WjAYMRYwFAYD VQQDEw02ODUwODA1Ni01M2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vkKp+bLw9CslBi9ogsljJ5/5UESZz2Pdr91vuQ4Orj6wCxia+ldOOanYUWv SivKozOXD+lQAGGsx3Po8o0qvuG91R68VaoW79em8Cvn0SLxhOxynAFKhjaW1CfM bT38ZUwDOQod+vBEwM44oinPkiwo4b4bZWY+ruC9r92J9r4Y/jtXYgZbKOUTD1wr nCI+xnOI8N63Uk/reaEA/fySGxSNDN2rgogTSQgZE9GbZLsz7P399g24VrOhRyDt PYHMMl2jFuI6niDly70OhUNkfQHFus9g0w4MMa0oO29VI9jlhK9MSuqtAb4YUskh O7+2wzyun8p3PsBGtduJBMaSDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfZ18uL 2LKN63HBHFPu+kCncCOpMB8GA1UdIwQYMBaAFIOJ/Ub++H5ZPegc/9zfILosp2Ae MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVCQS9ENEYwOEVFNkRB RTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZsazk2QnpfM044Z3VpeW5Z QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0bjlSdjc0ZmxrOTZCel8zTjhndWl5bllCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVCQS9ENEYwOEVFNkRBRTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZs azk2QnpfM044Z3VpeW5ZQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKHDqUvPiku2QjvCFjV0K8RIahC3Aanv0K27G38uPsg/ngDHwJigm6 L03x1034CvVbKo09/A4SvHO2E1O7EDhugpK1pbER5iS2DpX9OxtA3RfvC/lMkQS6 kBPc/nyZPR/t3dXYS8pcrdT/nnE/UxmRtQUZ91v3nRA0VDWyIpVGpEwusDzrxaOK YnKyTbX234r8SKhm5oclfxG1ciHxuCSq1IPj+1MRVUxAKrQiCw+FdD3pR7Pc7CQQ G99f2ntlkh1FiPhsx6G1blZBA3f8mMjwcTUdDfpKH6DUSInQiZEmwQyOdVInuZYp CVwG1fVgugmUWInD4CRdEnAn4m/Cn1vu -----END CERTIFICATE-----Generated at Tue Jun 17 15:04:47 2025 by rpki-client