$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft File: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft (raw, json) Hash identifier: J7HEKCsHoe7gg0Tb8g/hFcmXxmZ+EQyj7BouhkdJ9g8= Subject key identifier: 09:B3:5F:13:62:B9:D7:26:CA:37:D8:D9:A9:D6:F0:7F:3C:FE:DC:2A Authority key identifier: E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86 Certificate issuer: /CN=A917D4C4/serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286 Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft Manifest number: 065D Signing time: Mon 16 Jun 2025 14:49:43 +0000 Manifest this update: Mon 16 Jun 2025 14:49:42 +0000 Manifest next update: Mon 23 Jun 2025 14:49:42 +0000 Files and hashes: 1: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl (hash: Ep98QGLJmJfksAAAZxhXTu8HTHT+by8U7u4fjCaZsSk=) 2: 6E325DBC0E2F11EDB4659653C4F9AE02.roa (hash: NS8IXL+/osy1aonTB1YcjpMFwDzkEpu3g9yC5lM136w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 14:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D4C4, serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286 Validity Not Before: Jun 16 14:49:42 2025 GMT Not After : Jun 23 14:49:42 2025 GMT Subject: CN=68502f07-8cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:36:0e:2b:bc:c5:04:05:22:b7:f5:19:d4: 3b:9d:3e:c4:39:a2:1c:33:42:0c:6e:bc:1b:79:fe: b1:a7:09:3d:d7:cd:dc:c5:a1:91:88:97:39:2d:be: 1f:59:42:1a:47:02:b6:30:96:df:e0:45:7e:33:84: 93:b5:ac:4e:8b:79:02:01:0a:30:9f:6d:21:53:bc: 97:7f:38:f5:59:56:a6:47:c8:90:c9:ff:7a:22:1c: d4:0e:79:3c:6f:4c:61:f9:3c:5c:83:20:d5:0d:f7: 14:a7:c5:48:6f:c9:26:85:b7:c2:9d:4f:33:71:53: 26:fd:87:06:87:37:bb:bf:7f:e0:66:db:ba:7c:fb: 14:bb:2f:60:3d:b2:03:36:b9:59:e1:7c:87:51:9b: 4f:43:62:a7:56:fb:35:af:d9:66:0f:04:9b:ac:89: 5f:62:79:7c:a6:72:e1:cb:49:1a:a3:b6:84:15:7f: 9a:eb:10:16:f5:45:77:63:85:e1:43:c0:de:df:44: 17:11:4f:f7:bc:1d:79:5a:6f:02:64:d9:83:58:e4: a8:0c:0c:2f:3a:f2:34:59:b7:36:85:f5:15:fc:6a: e7:c2:5c:bc:c3:75:e2:f6:85:16:43:92:2e:84:e8: 55:62:ab:69:76:34:41:0d:71:8b:d9:26:62:ef:ef: a5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B3:5F:13:62:B9:D7:26:CA:37:D8:D9:A9:D6:F0:7F:3C:FE:DC:2A X509v3 Authority Key Identifier: keyid:E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:4a:33:fa:1c:ab:66:38:28:af:cb:08:67:41:b1:93:27:90: 8b:07:30:bb:65:55:fe:34:27:4a:05:cd:7a:49:e1:34:71:05: 64:03:f0:c7:7d:56:84:6d:fe:28:ca:89:18:e6:23:b8:0d:27: 3a:d1:71:4d:12:4c:6f:14:ca:f5:e6:2f:12:3a:ef:16:e7:7d: e2:a4:91:9e:08:1b:e3:a9:ee:80:9d:dc:3f:22:0a:ed:2f:81: 16:77:19:b8:19:fd:8e:0f:09:42:09:e6:d4:7d:92:c6:c9:f0: 95:c4:40:8f:68:36:72:8a:72:26:a1:12:0b:b4:fc:3f:65:c2: 51:79:b0:5b:d5:27:c7:4a:14:2a:1b:63:54:6e:fa:79:b6:3d: 89:83:5a:0f:3c:f8:ae:dd:b3:f5:0c:f4:ad:a8:c6:19:a6:a4: b9:8e:a1:6e:71:71:21:9e:a1:b8:48:dd:2b:2a:1f:b7:fe:bd: ce:1e:0d:47:e0:d7:f9:a1:fe:e9:19:4c:6b:8c:25:5b:e1:be: 21:d2:b0:ea:3a:b9:06:bb:cf:09:5b:b6:17:b4:59:79:21:b8: 6d:a8:ff:09:f4:76:ff:71:27:42:63:d4:65:a4:b0:71:85:85: f3:51:6c:98:ad:2c:6d:ef:df:cf:97:4e:da:9e:5e:17:c0:48: 95:96:a4:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0QzQxMTAvBgNVBAUTKEUwQzg5MjhGOTQ1MTUyMEU2NEQxREVENThGMDcxOTZC NTg2MUIyODYwHhcNMjUwNjE2MTQ0OTQyWhcNMjUwNjIzMTQ0OTQyWjAYMRYwFAYD VQQDEw02ODUwMmYwNy04Y2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviQ2Diu8xQQFIrf1GdQ7nT7EOaIcM0IMbrwbef6xpwk9183cxaGRiJc5Lb4f WUIaRwK2MJbf4EV+M4STtaxOi3kCAQown20hU7yXfzj1WVamR8iQyf96IhzUDnk8 b0xh+TxcgyDVDfcUp8VIb8kmhbfCnU8zcVMm/YcGhze7v3/gZtu6fPsUuy9gPbID NrlZ4XyHUZtPQ2KnVvs1r9lmDwSbrIlfYnl8pnLhy0kao7aEFX+a6xAW9UV3Y4Xh Q8De30QXEU/3vB15Wm8CZNmDWOSoDAwvOvI0Wbc2hfUV/Grnwly8w3Xi9oUWQ5Iu hOhVYqtpdjRBDXGL2SZi7++lzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmzXxNi udcmyjfY2anW8H88/twqMB8GA1UdIwQYMBaAFODIko+UUVIOZNHe1Y8HGWtYYbKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDRDNC80MzlDRjg3QzhE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi80TWlTajVSUlVnNWswZDdWandjWmExaGhz b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNaVNqNVJSVWc1azBkN1Zqd2NaYTFoaHNvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDRDNC80MzlDRjg3QzhEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi80TWlTajVSUlVn NWswZDdWandjWmExaGhzb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5SjP6HKtmOCivywhnQbGTJ5CLBzC7ZVX+NCdKBc16SeE0cQVkA/DH fVaEbf4oyokY5iO4DSc60XFNEkxvFMr15i8SOu8W533ipJGeCBvjqe6Andw/Igrt L4EWdxm4Gf2ODwlCCebUfZLGyfCVxECPaDZyinImoRILtPw/ZcJRebBb1SfHShQq G2NUbvp5tj2Jg1oPPPiu3bP1DPStqMYZpqS5jqFucXEhnqG4SN0rKh+3/r3OHg1H 4Nf5of7pGUxrjCVb4b4h0rDqOrkGu88JW7YXtFl5IbhtqP8J9Hb/cSdCY9RlpLBx hYXzUWyYrSxt79/Pl07anl4XwEiVlqQL -----END CERTIFICATE-----Generated at Wed Jun 18 06:12:01 2025 by rpki-client