$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft File: 4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json) Hash identifier: QxcpIe04iJ2GIlvi4TVll0YwAyq7jVAcWlm4k8ZyxhU= Subject key identifier: D3:4A:1F:90:00:BA:F8:E8:0A:F2:8F:0F:25:81:CE:44:03:6A:F1:AC Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1 Certificate issuer: /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1 Certificate serial: 06AB Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft Manifest number: 0688 Signing time: Wed 18 Jun 2025 16:53:12 +0000 Manifest this update: Wed 18 Jun 2025 16:53:11 +0000 Manifest next update: Wed 25 Jun 2025 16:53:11 +0000 Files and hashes: 1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: iCTMdZcbtbeb88zzXbtvfQT2xgBuNmGK1zzjEza7bmU=) 2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: M9JBLSmTZK+WGHWP4PBl4vCGB8OpE/d5KiAWANLVB54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1707 (0x6ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1 Validity Not Before: Jun 18 16:53:11 2025 GMT Not After : Jun 25 16:53:11 2025 GMT Subject: CN=6852eef7-0e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:e7:e6:9e:48:b4:83:79:cc:83:fe:55:44: 3d:39:f8:bd:f0:ef:e9:76:f6:fb:3e:53:5b:05:c7: 61:c2:3b:04:e2:f0:09:56:c6:d9:8b:76:3c:6f:a5: db:ce:54:86:c6:12:20:8d:21:da:f3:fc:3c:93:37: ce:91:98:63:0a:07:90:83:5e:e3:16:ea:2b:3f:9e: 47:7f:86:1e:79:fe:d7:8f:03:d6:85:5d:1f:78:de: 0a:0a:5a:f9:fc:05:2a:28:f1:dc:61:00:ed:1f:34: f4:fb:2d:83:9e:18:bc:5d:4d:94:3e:c2:a8:55:7c: 2e:33:5c:ba:25:b9:a7:91:e4:61:6b:d0:c5:54:e3: cf:0a:80:c8:d4:6b:f8:96:77:11:50:c1:12:69:3a: b8:b2:94:3c:23:d3:b7:a0:ac:9b:d8:ad:49:b7:31: de:73:00:0d:78:ad:e0:74:eb:1d:3e:f2:56:39:0a: 5e:39:2c:92:ff:03:02:50:a4:a6:06:d6:db:98:30: 4b:43:df:6f:18:0c:06:fc:cc:cf:34:a3:08:9b:09: 49:71:1f:29:56:48:ee:66:8f:ae:44:a2:49:8d:61: 8f:09:5f:ce:48:23:63:b7:da:6a:58:1c:b1:9f:c9: e7:42:12:cd:18:66:8e:b7:a1:61:56:73:9b:66:1c: 04:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4A:1F:90:00:BA:F8:E8:0A:F2:8F:0F:25:81:CE:44:03:6A:F1:AC X509v3 Authority Key Identifier: keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:76:db:54:a6:b6:cb:e0:e4:04:5d:db:c1:83:68:03:62:9c: 28:d5:6d:00:41:46:19:d0:2a:91:0c:60:48:30:f5:ae:d1:69: 9e:d4:79:ac:d6:3a:43:6b:3c:bf:15:a6:a4:18:9d:d2:53:4b: 06:15:ef:ee:b3:20:0d:d2:5c:bb:f2:c2:0f:61:12:c0:3f:bb: 95:3f:89:8e:34:61:65:05:12:df:3f:75:d4:c6:07:9f:4e:8a: c0:c9:85:bf:67:14:51:dd:f0:3e:74:1d:f7:3e:a6:8b:d6:8c: 82:42:83:10:ba:cd:dc:74:39:f2:27:7b:f8:68:32:ec:96:e1: 37:53:94:69:75:7f:93:00:c0:af:8e:7d:86:0f:5d:7a:84:22: b5:e2:55:82:f1:76:74:86:1f:8b:1c:51:10:7c:cf:b5:c1:52: 95:8d:79:17:87:27:69:3a:75:22:67:12:65:c7:6d:e7:6f:7e: 59:41:2e:6f:8a:3b:bb:64:62:18:c6:de:ca:c2:fd:7f:bd:48: bc:c8:f8:74:ed:5e:bd:7d:61:80:d8:53:9a:64:82:5a:c8:0f: 53:5f:a2:f9:01:9c:ec:db:f8:7d:ea:ff:c6:09:73:d3:cf:f3: b3:aa:e9:f5:b7:77:23:5f:ef:dd:78:0d:9c:98:1c:cb:cd:60: 80:fa:fc:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEUyNDNGM0JFODI1NTY5QkIxNkFDQjM3NEJDOThEQUJF NjkwQjE3QzEwHhcNMjUwNjE4MTY1MzExWhcNMjUwNjI1MTY1MzExWjAYMRYwFAYD VQQDEw02ODUyZWVmNy0wZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBDn5p5ItIN5zIP+VUQ9Ofi98O/pdvb7PlNbBcdhwjsE4vAJVsbZi3Y8b6Xb zlSGxhIgjSHa8/w8kzfOkZhjCgeQg17jFuorP55Hf4Yeef7XjwPWhV0feN4KClr5 /AUqKPHcYQDtHzT0+y2Dnhi8XU2UPsKoVXwuM1y6JbmnkeRha9DFVOPPCoDI1Gv4 lncRUMESaTq4spQ8I9O3oKyb2K1JtzHecwANeK3gdOsdPvJWOQpeOSyS/wMCUKSm BtbbmDBLQ99vGAwG/MzPNKMImwlJcR8pVkjuZo+uRKJJjWGPCV/OSCNjt9pqWByx n8nnQhLNGGaOt6FhVnObZhwE7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNKH5AA uvjoCvKPDyWBzkQDavGsMB8GA1UdIwQYMBaAFOJD876CVWm7FqyzdLyY2r5pCxfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CODk3QzU4MkEx OUMxMUVCOTJBMkRGMjlDNEY5QUUwMi80a1B6dm9KVmFic1dyTE4wdkpqYXZta0xG OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzRrUHp2b0pWYWJzV3JMTjB2Smphdm1rTEY4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CODk3QzU4MkExOUMxMUVCOTJBMkRGMjlDNEY5QUUwMi80a1B6dm9KVmFi c1dyTE4wdkpqYXZta0xGOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApdttUprbL4OQEXdvBg2gDYpwo1W0AQUYZ0CqRDGBIMPWu0Wme1Hms 1jpDazy/FaakGJ3SU0sGFe/usyAN0ly78sIPYRLAP7uVP4mONGFlBRLfP3XUxgef TorAyYW/ZxRR3fA+dB33PqaL1oyCQoMQus3cdDnyJ3v4aDLsluE3U5RpdX+TAMCv jn2GD116hCK14lWC8XZ0hh+LHFEQfM+1wVKVjXkXhydpOnUiZxJlx23nb35ZQS5v iju7ZGIYxt7Kwv1/vUi8yPh07V69fWGA2FOaZIJayA9TX6L5AZzs2/h96v/GCXPT z/Ozqun1t3cjX+/deA2cmBzLzWCA+vxj -----END CERTIFICATE-----Generated at Thu Jun 19 21:29:29 2025 by rpki-client