$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json) Hash identifier: Buq+Popglx1wd/2PX+IWSzeW3L/37mBqTDCYYQ8/KyQ= Subject key identifier: 87:56:52:7D:D7:62:73:FA:44:E9:1B:8B:59:2A:92:2C:2D:04:CC:BA Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Certificate serial: 09D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft Manifest number: 09CB Signing time: Sat 14 Jun 2025 19:46:24 +0000 Manifest this update: Sat 14 Jun 2025 19:46:24 +0000 Manifest next update: Sat 21 Jun 2025 19:46:24 +0000 Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: 4LFhvhlRdSHJL+2nNUtLoA0pON65f87gruijyi84eiQ=) 2: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: PugK/HlSlwCNhEasOZjO6B/uomD7VotHJLA2wV6jZrM=) 3: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: hvomTHOFg3fOu5UVv4a+8zSBR7jdgf3xO/+H6ZJICO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2520 (0x9d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Validity Not Before: Jun 14 19:46:24 2025 GMT Not After : Jun 21 19:46:24 2025 GMT Subject: CN=684dd190-5b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:05:5d:74:2e:b9:3c:b7:21:df:01:f9:54:b8: 5b:7d:9f:12:8f:24:d1:66:e9:79:01:9b:8c:4f:16: 59:d7:4a:65:b1:da:77:7c:2a:bf:28:b8:19:e8:21: 09:f9:c6:61:90:6d:5f:04:06:a4:fa:69:12:d5:be: 5b:21:44:c6:0b:d8:c4:8c:3a:3a:9d:e8:11:11:b1: 60:78:7a:47:88:0f:4b:98:91:18:30:a7:0e:a5:28: 16:a9:41:9e:94:b4:c9:d5:96:b1:f7:fc:90:08:73: 0c:57:a0:9c:51:ec:9f:c9:d8:6e:5a:52:20:de:0a: ed:2b:45:e8:a5:eb:70:b9:a8:73:c9:88:d7:86:49: 23:38:02:ae:0e:4b:29:94:62:3c:c4:ba:a7:1f:69: a4:6b:3b:f3:9e:82:74:77:56:b8:e7:31:19:f7:ad: f1:7b:6b:7f:86:e4:19:5a:ee:12:0c:23:ec:ea:5a: fc:cb:85:d9:11:22:fa:f7:da:fe:53:79:e5:53:cc: 9f:ee:8d:cf:c8:fe:3c:06:d5:d6:ce:98:50:36:58: db:13:44:64:a7:93:c2:cf:4b:5d:b4:14:f1:14:8d: 41:c7:c2:54:42:a8:e6:d3:1b:ad:47:d5:00:af:07: 9e:e1:3e:93:07:a9:86:50:de:50:c1:e6:9c:e8:b4: f1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:56:52:7D:D7:62:73:FA:44:E9:1B:8B:59:2A:92:2C:2D:04:CC:BA X509v3 Authority Key Identifier: keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a3:9b:fd:89:2b:9b:7f:26:03:eb:65:5f:70:f3:6e:b3:27: 40:0c:62:47:d3:5f:7a:64:f4:37:76:51:cd:b0:9b:00:09:8a: 1b:6e:50:24:1b:9c:83:f3:23:17:70:ab:c2:b2:b3:54:ed:4c: 76:ad:d3:af:f7:f7:b4:a1:6d:18:29:82:33:93:75:03:29:b4: a3:eb:31:15:40:86:2f:4c:bb:db:f5:c1:68:ed:7e:af:4a:6c: 66:63:53:1f:98:47:06:eb:1a:c1:be:fe:39:d5:b9:cc:d9:a8: b5:41:86:b3:78:b8:c1:72:e6:96:7b:cd:66:06:df:ae:41:a4: 3e:c7:a8:d5:de:f7:90:4f:5f:46:b6:6d:41:37:ce:8b:09:ee: a9:41:33:47:61:e5:9a:24:0c:70:e5:99:4b:cb:d1:72:b8:0b: 4e:8e:57:1c:1d:17:3b:ea:dc:a5:1a:50:dc:50:e2:9e:4d:b0: c1:b3:20:09:0f:90:fc:42:db:7d:e6:47:54:42:cb:80:74:65: b1:bf:59:7d:ce:cc:82:67:a6:a4:3c:e1:64:61:39:96:2c:9f: ab:c3:f8:44:bc:42:d9:48:8a:ad:b7:29:4a:18:a2:c7:cf:ae: aa:8d:58:42:b4:ea:0e:28:d6:e0:bf:e4:e6:aa:da:81:e5:bc: 9a:26:92:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBBNkMxMTAvBgNVBAUTKEE3ODdBNjNFNDlFRThFQzZGOTc1MTE2MDdGMUI3QzVC MERGMTE2NEUwHhcNMjUwNjE0MTk0NjI0WhcNMjUwNjIxMTk0NjI0WjAYMRYwFAYD VQQDEw02ODRkZDE5MC01YjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wVddC65PLch3wH5VLhbfZ8SjyTRZul5AZuMTxZZ10plsdp3fCq/KLgZ6CEJ +cZhkG1fBAak+mkS1b5bIUTGC9jEjDo6negREbFgeHpHiA9LmJEYMKcOpSgWqUGe lLTJ1Zax9/yQCHMMV6CcUeyfydhuWlIg3grtK0XopetwuahzyYjXhkkjOAKuDksp lGI8xLqnH2mkazvznoJ0d1a45zEZ963xe2t/huQZWu4SDCPs6lr8y4XZESL699r+ U3nlU8yf7o3PyP48BtXWzphQNljbE0Rkp5PCz0tdtBTxFI1Bx8JUQqjm0xutR9UA rwee4T6TB6mGUN5Qweac6LTx3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdWUn3X YnP6ROkbi1kqkiwtBMy6MB8GA1UdIwQYMBaAFKeHpj5J7o7G+XURYH8bfFsN8RZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEE2Qy9COTE2RjM4ODgy QzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpzYjVkUkZnZnh0OFd3M3hG azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0ZW1Qa251anNiNWRSRmdmeHQ4V3czeEZrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEE2Qy9COTE2RjM4ODgyQzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpz YjVkUkZnZnh0OFd3M3hGazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASo5v9iSubfyYD62VfcPNusydADGJH0196ZPQ3dlHNsJsACYobblAk G5yD8yMXcKvCsrNU7Ux2rdOv9/e0oW0YKYIzk3UDKbSj6zEVQIYvTLvb9cFo7X6v SmxmY1MfmEcG6xrBvv451bnM2ai1QYazeLjBcuaWe81mBt+uQaQ+x6jV3veQT19G tm1BN86LCe6pQTNHYeWaJAxw5ZlLy9FyuAtOjlccHRc76tylGlDcUOKeTbDBsyAJ D5D8Qtt95kdUQsuAdGWxv1l9zsyCZ6akPOFkYTmWLJ+rw/hEvELZSIqttylKGKLH z66qjVhCtOoOKNbgv+TmqtqB5byaJpLh -----END CERTIFICATE-----Generated at Sun Jun 15 09:39:06 2025 by rpki-client