$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json) Hash identifier: Vr8jHAd2WWu5vUXpUvx8TWKy/BoWTU2skwT+AjRuvWY= Subject key identifier: 0C:E8:2D:2A:12:78:64:E0:3D:5F:6E:5E:1B:99:9B:36:0B:31:C6:98 Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Certificate serial: 04C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft Manifest number: 04B8 Signing time: Fri 20 Jun 2025 23:38:14 +0000 Manifest this update: Fri 20 Jun 2025 23:38:14 +0000 Manifest next update: Fri 27 Jun 2025 23:38:14 +0000 Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: P/XNiqhPKOSNPJ/wd170XPZkpTW7mRmGkzSXvjJb+/8=) 2: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: 4ooeZLcPwkHZ/ZShvap31EsyiH4g04EjDdlB/3H2WWc=) 3: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: IONLpqLbIWNcEINYfdYWnA0lQhPUSCbB7gozoJAI8ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 23:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Validity Not Before: Jun 20 23:38:14 2025 GMT Not After : Jun 27 23:38:14 2025 GMT Subject: CN=6855f0e6-bdfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:2c:3e:87:02:b3:19:24:53:4c:c3:7c:11: a9:67:34:86:5e:df:18:4c:7b:a7:91:d3:53:49:85: 70:9e:bc:3b:10:2b:ad:a9:06:f9:01:ab:10:ce:38: 25:88:f2:a1:9e:7d:14:1d:27:fc:ee:f1:42:65:e2: e8:8d:bd:c9:40:bc:d9:d9:53:5f:aa:56:0f:94:cd: eb:fb:63:e9:4b:f4:e6:7f:7c:4d:f9:16:5f:d3:e3: 53:62:d5:75:8a:00:39:9d:61:4e:c6:5f:23:75:33: 65:09:e2:fb:4a:52:87:39:a4:e1:f9:00:c1:25:fe: b0:7b:c1:3b:60:ef:c5:29:8b:e2:26:d7:6f:39:91: 72:b6:b4:65:a6:a6:3b:fd:7d:14:f8:44:ca:6a:be: 33:37:4d:71:7f:97:c1:ab:2d:db:70:8a:72:1e:28: f9:cd:f6:ba:87:0c:c7:95:82:48:4c:2b:0f:95:74: 37:19:91:92:35:b6:53:56:1c:c9:0f:d0:7c:70:b2: d3:6a:f1:a7:e5:0e:46:2c:a5:a5:47:24:6c:c7:96: 57:5e:1a:dc:50:5a:04:fd:e0:42:4a:0d:2b:70:22: d6:87:ef:e9:77:97:06:2f:62:f3:3e:11:75:de:26: 2b:1e:eb:2a:62:0f:3c:c6:e9:48:f3:f1:a4:e6:d5: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E8:2D:2A:12:78:64:E0:3D:5F:6E:5E:1B:99:9B:36:0B:31:C6:98 X509v3 Authority Key Identifier: keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8c:44:e5:99:74:dd:5a:46:b1:27:14:26:49:d0:82:44:b0: de:20:2c:6a:ac:17:52:06:c2:f7:2f:f4:d9:ab:26:2c:4b:5f: 59:af:ae:18:42:03:bd:05:e5:85:63:ed:58:aa:34:a8:45:ff: 60:cf:67:77:11:5c:03:78:3b:47:01:4e:95:25:84:54:62:b9: df:f6:7e:fb:e5:e7:9a:1d:79:b2:13:b7:e3:c4:27:5c:fc:92: 0f:5f:8a:c0:12:bb:b1:ce:e7:c3:63:dc:73:03:8e:01:99:bc: 93:54:94:6b:db:96:0d:a3:5c:e9:6f:b9:f5:7d:b2:ac:95:b6: 24:4e:f9:1a:df:77:e3:c5:80:ed:a0:a1:df:c9:7a:0c:37:df: a5:dd:20:46:fa:a1:b5:a6:68:ba:f3:79:f9:0b:8e:2b:d6:99: 1f:98:85:34:91:ff:b1:31:2d:02:af:ae:4c:74:5b:38:3c:82: 98:4c:f1:27:6b:fb:b0:18:04:13:11:7a:66:10:05:50:f0:39: 63:9f:e2:de:be:fb:29:64:cd:ed:5d:b0:c8:87:3f:d6:65:dd: 3d:58:40:29:cb:d6:03:ea:e7:d8:1b:e1:d4:78:08:73:dc:15: 9a:0e:e9:7b:60:b0:bb:57:1f:2f:e2:5c:f5:de:e8:bf:95:5c: 10:ed:24:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFEQ0YxMTAvBgNVBAUTKDcwNEJGRjRFQ0FBOURDOEE4QjcyMDkyNjRDNjA3REI1 RjIyRjI0ODIwHhcNMjUwNjIwMjMzODE0WhcNMjUwNjI3MjMzODE0WjAYMRYwFAYD VQQDEw02ODU1ZjBlNi1iZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1c0sPocCsxkkU0zDfBGpZzSGXt8YTHunkdNTSYVwnrw7ECutqQb5AasQzjgl iPKhnn0UHSf87vFCZeLojb3JQLzZ2VNfqlYPlM3r+2PpS/Tmf3xN+RZf0+NTYtV1 igA5nWFOxl8jdTNlCeL7SlKHOaTh+QDBJf6we8E7YO/FKYviJtdvOZFytrRlpqY7 /X0U+ETKar4zN01xf5fBqy3bcIpyHij5zfa6hwzHlYJITCsPlXQ3GZGSNbZTVhzJ D9B8cLLTavGn5Q5GLKWlRyRsx5ZXXhrcUFoE/eBCSg0rcCLWh+/pd5cGL2LzPhF1 3iYrHusqYg88xulI8/Gk5tW1EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzoLSoS eGTgPV9uXhuZmzYLMcaYMB8GA1UdIwQYMBaAFHBL/07KqdyKi3IJJkxgfbXyLySC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMURDRi8zNjk3OEE3QzMw QkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJcUxjZ2ttVEdCOXRmSXZK SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFdl9Uc3FwM0lxTGNna21UR0I5dGZJdkpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MURDRi8zNjk3OEE3QzMwQkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJ cUxjZ2ttVEdCOXRmSXZKSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/jETlmXTdWkaxJxQmSdCCRLDeICxqrBdSBsL3L/TZqyYsS19Zr64Y QgO9BeWFY+1YqjSoRf9gz2d3EVwDeDtHAU6VJYRUYrnf9n775eeaHXmyE7fjxCdc /JIPX4rAEruxzufDY9xzA44BmbyTVJRr25YNo1zpb7n1fbKslbYkTvka33fjxYDt oKHfyXoMN9+l3SBG+qG1pmi683n5C44r1pkfmIU0kf+xMS0Cr65MdFs4PIKYTPEn a/uwGAQTEXpmEAVQ8Dljn+LevvspZM3tXbDIhz/WZd09WEApy9YD6ufYG+HUeAhz 3BWaDul7YLC7Vx8v4lz13ui/lVwQ7SR7 -----END CERTIFICATE-----Generated at Sat Jun 21 05:26:29 2025 by rpki-client