$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft File: x40eWVkb4MdSTTa9-FyKxuoZD44.mft (raw, json) Hash identifier: dAEucqprYwsMhHXRoNA5OnzpuH8SsktQQgSTcP5EVLU= Subject key identifier: 85:5A:10:8B:2C:FC:64:A0:91:8B:E4:49:3A:D3:8C:2F:54:D7:F8:F5 Authority key identifier: C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E Certificate issuer: /CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft Manifest number: 040A Signing time: Fri 13 Jun 2025 00:53:49 +0000 Manifest this update: Fri 13 Jun 2025 00:53:49 +0000 Manifest next update: Fri 20 Jun 2025 00:53:49 +0000 Files and hashes: 1: x40eWVkb4MdSTTa9-FyKxuoZD44.crl (hash: YAUOl4aJLe1SP2w0b814fF3I1DDG+L8zoSbFFyG1LMc=) 2: 2F9887306F0D11EE9B369C60C4F9AE02.roa (hash: 1zvSdpAHw0fs7lwNzlneLRJlvrtEo2uuRtlcQwqc+2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91554E6, serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Validity Not Before: Jun 13 00:53:49 2025 GMT Not After : Jun 20 00:53:49 2025 GMT Subject: CN=684b769d-2de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:4f:c2:dd:24:76:0d:8e:96:5a:44:83:12: 57:d0:02:db:d9:74:45:56:e3:d7:ee:c8:11:d9:e0: 78:40:ed:5d:32:4b:bd:5b:eb:8a:6e:cf:8f:8f:2b: aa:15:b3:80:0d:5b:e2:f0:a1:9e:21:5f:1f:d7:1b: ab:b7:7a:57:ab:3b:a9:75:db:0c:4d:cc:71:db:b1: 21:14:85:5e:8f:13:93:6c:3f:1e:d4:cd:58:99:12: cd:06:65:62:e1:45:41:a5:52:54:5f:a3:26:55:31: fb:ec:4c:42:e8:63:54:2c:63:bc:59:a4:14:ba:6e: f1:5e:7e:cd:72:21:75:65:23:d3:8d:c0:9d:6a:a2: a2:71:1b:a1:be:a9:84:39:86:93:92:99:3c:08:d5: a0:73:f5:b6:68:13:89:6a:1d:49:f2:6c:55:7d:a5: 37:94:d9:e8:22:68:0e:ae:c0:25:ac:78:aa:16:d7: 17:93:ea:5d:03:c5:9b:30:65:da:17:90:80:36:5e: eb:9f:95:66:24:e0:c6:ed:2a:14:00:5c:78:88:6a: 87:75:60:92:fa:e6:e9:e0:1d:20:b9:05:f7:e6:0d: b6:86:45:b8:25:d7:72:0c:07:ca:2a:4e:3d:aa:b2: ba:fb:f7:54:61:50:11:82:83:24:d2:5f:9f:bc:5f: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5A:10:8B:2C:FC:64:A0:91:8B:E4:49:3A:D3:8C:2F:54:D7:F8:F5 X509v3 Authority Key Identifier: keyid:C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:25:49:b3:47:ad:70:24:45:73:52:89:d3:12:52:e7:96:6b: 51:70:e8:76:a3:f0:0b:14:66:13:a2:69:9e:27:3c:4b:ba:7a: b6:41:1a:0d:cd:63:fd:8d:c5:c4:7d:72:84:90:2a:a8:47:b8: ce:57:8f:96:f3:53:6d:1e:12:5c:d4:be:a7:e7:31:f8:96:1d: c8:94:93:73:ce:be:d2:0f:55:fb:bf:d1:d7:f9:44:b6:3f:65: 22:be:3a:c6:0b:98:b5:3a:92:4a:a7:fe:7b:8e:05:f7:61:00: 28:ba:05:84:d1:39:ee:7e:e1:1b:56:99:8e:5d:fe:cd:28:65: ca:4b:9a:09:c1:a5:86:f4:73:3e:a8:2d:e4:32:be:d2:f2:2f: 86:05:cc:c7:8a:56:38:a5:3e:57:94:51:90:43:2b:84:df:4f: 37:18:4b:a6:c1:9c:bf:46:53:05:05:3f:22:61:cf:b2:98:72: 5d:b7:f6:59:2e:be:45:e5:34:4f:14:8d:4e:88:f7:36:72:a8: 84:5b:e4:0e:1f:2f:bd:27:86:3f:28:60:a9:08:cf:d8:9c:ed: 46:bc:8b:8b:9c:0f:8c:a6:1e:5f:15:9a:62:d8:34:6f:c9:71: 45:b4:36:f5:73:97:0e:91:69:8b:5c:da:c3:ff:dd:95:10:2f: 50:f1:0c:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0RTYxMTAvBgNVBAUTKEM3OEQxRTU5NTkxQkUwQzc1MjREMzZCREY4NUM4QUM2 RUExOTBGOEUwHhcNMjUwNjEzMDA1MzQ5WhcNMjUwNjIwMDA1MzQ5WjAYMRYwFAYD VQQDEw02ODRiNzY5ZC0yZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKlPwt0kdg2OllpEgxJX0ALb2XRFVuPX7sgR2eB4QO1dMku9W+uKbs+Pjyuq FbOADVvi8KGeIV8f1xurt3pXqzupddsMTcxx27EhFIVejxOTbD8e1M1YmRLNBmVi 4UVBpVJUX6MmVTH77ExC6GNULGO8WaQUum7xXn7NciF1ZSPTjcCdaqKicRuhvqmE OYaTkpk8CNWgc/W2aBOJah1J8mxVfaU3lNnoImgOrsAlrHiqFtcXk+pdA8WbMGXa F5CANl7rn5VmJODG7SoUAFx4iGqHdWCS+ubp4B0guQX35g22hkW4JddyDAfKKk49 qrK6+/dUYVARgoMk0l+fvF/UwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVaEIss /GSgkYvkSTrTjC9U1/j1MB8GA1UdIwQYMBaAFMeNHllZG+DHUk02vfhcisbqGQ+O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTRFNi85RjA2Nzc0OEVE NEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRNZFNUVGE5LUZ5S3h1b1pE NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g0MGVXVmtiNE1kU1RUYTktRnlLeHVvWkQ0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTRFNi85RjA2Nzc0OEVENEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRN ZFNUVGE5LUZ5S3h1b1pENDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgJUmzR61wJEVzUonTElLnlmtRcOh2o/ALFGYTommeJzxLunq2QRoN zWP9jcXEfXKEkCqoR7jOV4+W81NtHhJc1L6n5zH4lh3IlJNzzr7SD1X7v9HX+US2 P2UivjrGC5i1OpJKp/57jgX3YQAougWE0TnufuEbVpmOXf7NKGXKS5oJwaWG9HM+ qC3kMr7S8i+GBczHilY4pT5XlFGQQyuE3083GEumwZy/RlMFBT8iYc+ymHJdt/ZZ Lr5F5TRPFI1OiPc2cqiEW+QOHy+9J4Y/KGCpCM/YnO1GvIuLnA+Mph5fFZpi2DRv yXFFtDb1c5cOkWmLXNrD/92VEC9Q8Qwr -----END CERTIFICATE-----Generated at Sat Jun 14 18:45:42 2025 by rpki-client