$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json) Hash identifier: Tt52hp+dBkXpq3u074jeMOXzDklfHFALw8qov85a+cY= Subject key identifier: 7A:0E:90:1C:D8:29:54:44:18:FF:C2:8C:16:29:CF:8A:6D:81:F7:56 Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Certificate serial: 242C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft Manifest number: 468F Signing time: Sat 14 Jun 2025 15:46:24 +0000 Manifest this update: Sat 14 Jun 2025 15:46:23 +0000 Manifest next update: Sat 21 Jun 2025 15:46:23 +0000 Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: T+9CmB1H5aI4zFcEOWLniX251aFlhRzXuMy5ulAwI9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9260 (0x242c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Validity Not Before: Jun 14 15:46:23 2025 GMT Not After : Jun 21 15:46:23 2025 GMT Subject: CN=684d9950-4d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e8:9a:1b:1d:d1:85:98:f9:84:6c:57:80:fe: e2:24:3b:e9:c6:d3:1f:7b:95:72:98:4c:0c:bc:08: 48:ad:8f:a7:f2:a3:91:26:79:7c:e6:3d:6f:4c:c1: 89:bc:c9:1a:27:02:7d:c6:55:9e:7a:fa:73:aa:ec: 75:8b:be:2d:5c:fc:95:30:ac:ca:03:fe:e9:e0:bc: 76:92:07:c4:ee:42:0b:9b:c3:66:9b:4f:9f:0e:cf: d0:f1:99:c1:ae:03:6b:68:55:36:60:9c:09:63:c1: 8d:70:eb:06:d6:96:e6:f9:4d:35:5c:52:89:7f:85: 3e:bd:ed:fa:7b:8c:65:75:d4:46:01:18:85:6f:b0: ae:c7:f8:10:e5:7a:eb:84:c9:29:b1:b6:3b:26:74: c4:47:0d:b1:06:64:ed:26:fc:82:23:35:ea:e5:89: 3f:74:c0:aa:65:9c:50:8c:43:c1:eb:a5:fa:7d:8e: bb:2f:b8:aa:c2:45:11:4b:98:16:b3:83:49:64:33: c6:98:bd:d3:96:c5:4a:d3:f6:fc:6c:bc:66:0c:83: ee:fa:e0:cb:c4:e3:04:17:49:c8:7e:8c:b2:37:7b: 1c:ab:a0:98:0b:bf:6f:dd:38:92:58:9c:89:31:e5: ea:6c:62:f3:e0:ee:6b:b5:5c:3f:1c:62:d8:8f:21: 71:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0E:90:1C:D8:29:54:44:18:FF:C2:8C:16:29:CF:8A:6D:81:F7:56 X509v3 Authority Key Identifier: keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:77:d4:3c:0a:13:11:2b:83:3c:7c:bf:e1:15:3d:bf:aa:e9: 62:e6:03:05:43:83:d1:66:2b:30:ee:fc:0b:5c:ef:a1:6c:74: 8f:b1:25:80:ac:19:6c:90:6f:c9:05:2b:e6:eb:17:7d:ab:e3: 7f:0d:96:44:f3:0f:59:73:f3:1e:35:27:d6:85:87:2b:1c:05: 02:fc:11:e9:11:f2:d6:8e:9c:92:be:b4:3e:47:43:4f:8e:01: 2e:00:5f:49:0c:da:4a:7e:b5:4c:57:b0:d3:bf:3b:fd:33:2e: 22:b7:0c:4d:b5:aa:29:a8:e7:d1:9c:87:59:64:7d:fb:ac:e9: e7:d4:cf:f4:dd:03:c1:bb:3a:26:5b:63:31:f7:00:e2:dc:4b: 4c:ed:75:2f:d6:f5:20:b5:38:bc:b5:b3:b7:e9:39:87:e0:ab: df:e4:d7:2f:28:59:b1:02:25:d6:27:b7:b8:1d:07:38:fd:d4: 0d:03:ce:58:7e:0e:2c:db:ad:f7:d5:b6:5d:79:2d:87:25:90: f4:91:65:f9:01:9f:e5:79:a2:c9:af:11:bb:ce:b2:d9:23:35: af:ee:a1:1d:f5:e2:cc:c9:dc:c1:9e:57:9f:64:b1:ed:2f:0e: bf:ad:9e:c0:d5:53:da:e2:e9:b0:6b:6d:aa:95:23:f4:4b:73: 1e:ec:36:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDczOEMyM0FBNENFNzU1NUVFQTJGQzhDMkJFRDhGNDZB NDg4REM5M0QwHhcNMjUwNjE0MTU0NjIzWhcNMjUwNjIxMTU0NjIzWjAYMRYwFAYD VQQDEw02ODRkOTk1MC00ZDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreiaGx3RhZj5hGxXgP7iJDvpxtMfe5VymEwMvAhIrY+n8qORJnl85j1vTMGJ vMkaJwJ9xlWeevpzqux1i74tXPyVMKzKA/7p4Lx2kgfE7kILm8Nmm0+fDs/Q8ZnB rgNraFU2YJwJY8GNcOsG1pbm+U01XFKJf4U+ve36e4xlddRGARiFb7Cux/gQ5Xrr hMkpsbY7JnTERw2xBmTtJvyCIzXq5Yk/dMCqZZxQjEPB66X6fY67L7iqwkURS5gW s4NJZDPGmL3TlsVK0/b8bLxmDIPu+uDLxOMEF0nIfoyyN3scq6CYC79v3TiSWJyJ MeXqbGLz4O5rtVw/HGLYjyFxFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoOkBzY KVREGP/CjBYpz4ptgfdWMB8GA1UdIwQYMBaAFHOMI6pM51Ve6i/Iwr7Y9GpIjck9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZWN3FMOGpDdnRqMGFraU55 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0d2pxa3puVlY3cUw4akN2dGowYWtpTnlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZW N3FMOGpDdnRqMGFraU55VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKd9Q8ChMRK4M8fL/hFT2/quli5gMFQ4PRZisw7vwLXO+hbHSPsSWA rBlskG/JBSvm6xd9q+N/DZZE8w9Zc/MeNSfWhYcrHAUC/BHpEfLWjpySvrQ+R0NP jgEuAF9JDNpKfrVMV7DTvzv9My4itwxNtaopqOfRnIdZZH37rOnn1M/03QPBuzom W2Mx9wDi3EtM7XUv1vUgtTi8tbO36TmH4Kvf5NcvKFmxAiXWJ7e4HQc4/dQNA85Y fg4s26331bZdeS2HJZD0kWX5AZ/leaLJrxG7zrLZIzWv7qEd9eLMydzBnlefZLHt Lw6/rZ7A1VPa4umwa22qlSP0S3Me7Dam -----END CERTIFICATE-----Generated at Sat Jun 14 18:45:46 2025 by rpki-client