$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft File: 664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json) Hash identifier: bak3WCdNlS8/QHUC2ApuukIimI6BMPsIENnwgpFsLLI= Subject key identifier: 2B:8B:A6:46:41:5F:C6:DB:01:99:2A:8C:D7:BD:B4:03:55:EF:94:B3 Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 Certificate issuer: /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Certificate serial: 04C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft Manifest number: 04C0 Signing time: Wed 18 Jun 2025 23:45:21 +0000 Manifest this update: Wed 18 Jun 2025 23:45:21 +0000 Manifest next update: Wed 25 Jun 2025 23:45:21 +0000 Files and hashes: 1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: ilcXjt0qwrwM64eJA41ARUqFu3ioA9eQMdmJ2N98O1A=) 2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: fImPoQjcCGEMtVaG0vXMRn+nIx0n4x6cFQDmdGHL2YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1225 (0x4c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923E1, serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Validity Not Before: Jun 18 23:45:21 2025 GMT Not After : Jun 25 23:45:21 2025 GMT Subject: CN=68534f91-fe92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:df:89:ba:c3:86:dd:d8:09:db:80:8e:a4: 6a:50:d4:e3:13:ba:a7:5b:7c:39:be:8e:ed:be:70: b9:7a:52:a2:87:ab:66:e3:6a:7a:98:29:c7:b4:29: 58:b5:63:43:27:90:75:9c:f0:b6:00:a8:ac:ac:fb: f3:98:e0:1a:e5:eb:79:4d:f8:c5:9e:c1:d2:e0:50: d7:1c:96:bc:62:9d:09:1b:10:b8:fe:be:cc:93:65: 2d:b7:fc:98:8f:8d:50:9e:83:a4:5b:fc:89:ac:2d: 81:52:e8:94:49:55:67:08:30:60:bc:62:a0:2b:a2: 37:a2:9a:41:a8:8b:01:46:73:cc:1c:c2:46:aa:f7: ae:92:f5:31:cc:02:5d:ab:10:03:f9:8c:0d:ff:24: af:20:c5:5d:f3:8c:5e:cd:44:6e:d7:42:77:ae:90: 33:55:49:35:c5:9c:e8:f9:37:1c:d1:ca:69:94:12: 34:da:2a:22:96:41:63:e1:e2:ae:12:80:67:5d:8a: dc:5c:15:bb:be:8d:76:8d:e7:c6:88:17:35:c0:b1: 16:a9:c8:dd:91:00:fc:48:a5:97:bb:d8:1c:d8:92: 1c:bc:69:2c:e8:bc:da:7b:92:5c:94:0d:81:df:54: ff:23:5f:c3:e1:d6:92:9b:23:c6:ee:02:a8:de:92: 0b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8B:A6:46:41:5F:C6:DB:01:99:2A:8C:D7:BD:B4:03:55:EF:94:B3 X509v3 Authority Key Identifier: keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:31:79:1c:ab:5c:a4:67:25:a4:36:1b:19:2c:a3:f4:9a:46: 82:a6:8c:a6:37:f4:c8:54:fb:68:47:56:27:86:65:97:92:d1: d7:f4:79:77:6a:72:bc:f7:66:0a:37:5e:14:ed:0d:0f:78:67: 18:4c:d0:b9:22:60:2a:5b:bd:b2:1d:86:70:5f:5b:55:23:0d: ea:57:db:8c:c6:cb:b7:f7:d4:bd:4f:f1:9c:3d:cc:a3:dc:22: a6:c9:a9:73:88:e8:aa:2a:9f:bb:0e:5b:fe:56:f1:c2:6e:ef: a8:08:16:62:38:67:91:8a:59:7c:1d:db:50:a8:01:48:7a:c0: 8f:ee:d1:8a:26:e0:98:7e:05:7c:9e:a8:76:2c:31:ba:ad:26: 97:5d:c7:9f:d3:22:b5:d2:4c:85:38:bb:11:85:4b:65:20:02: e8:ea:d1:62:3e:95:74:df:4b:63:a6:78:d3:bc:66:87:3a:ad: 6f:16:b0:f7:5e:9b:12:86:35:7e:13:5e:0b:4f:70:bc:2f:c7: d7:be:19:23:66:98:17:15:a1:98:32:cf:34:77:bc:8b:b4:e3: 0c:18:a3:77:c8:65:9a:84:77:a7:45:be:3d:38:44:a2:9f:d0: 14:a6:9b:ba:d2:62:a7:03:7b:42:e0:14:59:17:24:07:0f:80: 0c:d6:1b:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzRTExMTAvBgNVBAUTKEVCQUUxRjlBQjQ5NTZGMTgzNEI3MzUyOTM1N0M5RjNG MUUxMjA1RjAwHhcNMjUwNjE4MjM0NTIxWhcNMjUwNjI1MjM0NTIxWjAYMRYwFAYD VQQDEw02ODUzNGY5MS1mZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7vfibrDht3YCduAjqRqUNTjE7qnW3w5vo7tvnC5elKih6tm42p6mCnHtClY tWNDJ5B1nPC2AKisrPvzmOAa5et5TfjFnsHS4FDXHJa8Yp0JGxC4/r7Mk2Utt/yY j41QnoOkW/yJrC2BUuiUSVVnCDBgvGKgK6I3oppBqIsBRnPMHMJGqveukvUxzAJd qxAD+YwN/ySvIMVd84xezURu10J3rpAzVUk1xZzo+Tcc0cpplBI02ioilkFj4eKu EoBnXYrcXBW7vo12jefGiBc1wLEWqcjdkQD8SKWXu9gc2JIcvGks6Lzae5JclA2B 31T/I1/D4daSmyPG7gKo3pILCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuLpkZB X8bbAZkqjNe9tANV75SzMB8GA1UdIwQYMBaAFOuuH5q0lW8YNLc1KTV8nz8eEgXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNFMS8yQUY0QjM3NDMy MjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4ZzB0elVwTlh5ZlB4NFNC ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY2NGZtclNWYnhnMHR6VXBOWHlmUHg0U0JmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjNFMS8yQUY0QjM3NDMyMjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4 ZzB0elVwTlh5ZlB4NFNCZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIMXkcq1ykZyWkNhsZLKP0mkaCpoymN/TIVPtoR1YnhmWXktHX9Hl3 anK892YKN14U7Q0PeGcYTNC5ImAqW72yHYZwX1tVIw3qV9uMxsu399S9T/GcPcyj 3CKmyalziOiqKp+7Dlv+VvHCbu+oCBZiOGeRill8HdtQqAFIesCP7tGKJuCYfgV8 nqh2LDG6rSaXXcef0yK10kyFOLsRhUtlIALo6tFiPpV030tjpnjTvGaHOq1vFrD3 XpsShjV+E14LT3C8L8fXvhkjZpgXFaGYMs80d7yLtOMMGKN3yGWahHenRb49OESi n9AUppu60mKnA3tC4BRZFyQHD4AM1hv3 -----END CERTIFICATE-----Generated at Fri Jun 20 20:55:50 2025 by rpki-client