$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json) Hash identifier: FqLBDCMCJI5w5qCOVh/PfMcrqlcFakL4tIHimjYUp6g= Subject key identifier: 20:E7:92:22:8E:41:02:12:C4:9E:40:5F:1C:80:92:F5:23:D3:FA:24 Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Certificate serial: 0D94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft Manifest number: 0D7B Signing time: Sat 14 Jun 2025 17:52:45 +0000 Manifest this update: Sat 14 Jun 2025 17:52:45 +0000 Manifest next update: Sat 21 Jun 2025 17:52:45 +0000 Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: cN888meRQavAEQcVlDauVKaG7bGgKDNZoJKDXeXOhUU=) 2: 4E98421A162311EB90D1657AC4F9AE02.roa (hash: 1jUxwWAX6KnigOFs20Vg85yLzTjyxdO59rmGUv5qs2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3476 (0xd94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Validity Not Before: Jun 14 17:52:45 2025 GMT Not After : Jun 21 17:52:45 2025 GMT Subject: CN=684db6ed-72c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:13:95:cf:b0:52:24:9f:08:ae:b9:bd:38: 9d:db:52:7a:63:71:74:70:b0:bf:ee:e3:be:f4:e8: 95:3a:38:b3:35:1f:07:54:e2:3e:d9:41:26:d0:ac: f0:3e:fb:06:4a:5a:84:30:80:ff:6e:f5:89:59:06: 09:f8:a8:fe:d2:82:be:92:fe:f4:10:32:64:8f:5a: 41:94:c2:f2:a6:cb:5c:27:2e:c7:b5:67:2f:74:25: 8e:c6:4b:f6:c6:71:fd:80:3c:c6:a9:9e:5b:08:bc: aa:a0:1f:55:60:0e:7d:98:67:9f:67:19:09:1b:8a: aa:7d:bc:b4:08:67:e6:68:9f:92:79:31:00:55:0b: 6c:3a:c5:78:d9:b5:95:8a:7b:5f:3f:00:a0:dd:94: 43:d8:81:82:c4:23:a1:dd:5e:dc:aa:59:c3:a7:c7: e8:6c:de:ee:cb:ab:2c:0b:02:24:08:09:46:69:35: 07:fb:59:b0:b9:cd:f8:c8:47:c1:7e:f8:1c:5a:d4: 9a:73:e2:07:ac:03:2c:af:da:88:63:1a:0b:5b:a1: 9d:5b:9c:ee:c6:43:b2:31:d7:0f:7f:9f:06:4a:59: 69:bb:d5:91:87:b9:df:bc:b9:ba:ae:73:b5:c0:1a: a9:b7:a7:b4:c3:ef:17:82:87:11:3b:8f:70:6c:06: e0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E7:92:22:8E:41:02:12:C4:9E:40:5F:1C:80:92:F5:23:D3:FA:24 X509v3 Authority Key Identifier: keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d8:67:53:5a:04:5a:a2:5a:48:3d:c6:29:50:1a:77:72:fb: c7:0a:c5:e4:0f:4a:89:90:cf:53:fd:01:3f:48:b0:44:41:6f: d5:82:2a:4f:76:21:12:df:f9:f7:8f:47:e5:dc:f8:4f:43:0e: b5:57:ea:c6:aa:59:e5:6a:25:53:60:5c:82:6f:f2:6f:54:49: b3:bf:f9:70:8f:bb:41:65:73:9f:32:2b:8f:63:0b:71:a8:db: d3:7a:17:58:a8:cb:1e:44:3d:ca:5b:97:74:47:a8:b4:d9:75: 71:7e:6d:90:65:be:8c:01:ee:2e:6a:50:df:1b:30:fd:65:4c: b7:48:3f:53:15:82:93:88:b8:6b:c7:ad:75:0d:52:71:57:78: 4a:54:78:99:69:fc:8b:6d:8c:ec:b5:0a:b2:18:46:a3:3c:bf: a7:01:43:7e:cc:3f:8a:8f:b1:cc:ec:6c:15:7d:8f:d7:6a:b2: 7f:d4:94:bb:ca:3b:cc:ba:f0:d7:4a:51:74:34:16:7f:a6:44: 5f:67:ce:60:65:c6:b1:51:f2:3b:57:9d:8b:7e:b1:26:04:2b: 45:6b:b2:b1:ae:dd:a1:63:5c:f3:c1:f9:b3:69:21:ed:6b:5c: 9b:dd:fc:88:08:7e:4c:b9:33:dc:c4:06:7b:46:c2:8c:5b:37: d5:21:04:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdGNDcxMTAvBgNVBAUTKEUzMEE0Q0RERjZDMjY5QUNCQTM5Q0E1OEFBOTU5MkQ4 OTg2NDAxRjQwHhcNMjUwNjE0MTc1MjQ1WhcNMjUwNjIxMTc1MjQ1WjAYMRYwFAYD VQQDEw02ODRkYjZlZC03MmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5ETlc+wUiSfCK65vTid21J6Y3F0cLC/7uO+9OiVOjizNR8HVOI+2UEm0Kzw PvsGSlqEMID/bvWJWQYJ+Kj+0oK+kv70EDJkj1pBlMLypstcJy7HtWcvdCWOxkv2 xnH9gDzGqZ5bCLyqoB9VYA59mGefZxkJG4qqfby0CGfmaJ+SeTEAVQtsOsV42bWV intfPwCg3ZRD2IGCxCOh3V7cqlnDp8fobN7uy6ssCwIkCAlGaTUH+1mwuc34yEfB fvgcWtSac+IHrAMsr9qIYxoLW6GdW5zuxkOyMdcPf58GSllpu9WRh7nfvLm6rnO1 wBqpt6e0w+8XgocRO49wbAbgaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDnkiKO QQISxJ5AXxyAkvUj0/okMB8GA1UdIwQYMBaAFOMKTN32wmmsujnKWKqVktiYZAH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0Y0Ny8zMzBBMDA4Q0NF NTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2FheTZPY3BZcXBXUzJKaGtB ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR3cE0zZmJDYWF5Nk9jcFlxcFdTMkpoa0FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0Y0Ny8zMzBBMDA4Q0NFNTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2Fh eTZPY3BZcXBXUzJKaGtBZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ2GdTWgRaolpIPcYpUBp3cvvHCsXkD0qJkM9T/QE/SLBEQW/VgipP diES3/n3j0fl3PhPQw61V+rGqlnlaiVTYFyCb/JvVEmzv/lwj7tBZXOfMiuPYwtx qNvTehdYqMseRD3KW5d0R6i02XVxfm2QZb6MAe4ualDfGzD9ZUy3SD9TFYKTiLhr x611DVJxV3hKVHiZafyLbYzstQqyGEajPL+nAUN+zD+Kj7HM7GwVfY/XarJ/1JS7 yjvMuvDXSlF0NBZ/pkRfZ85gZcaxUfI7V52LfrEmBCtFa7Kxrt2hY1zzwfmzaSHt a1yb3fyICH5MuTPcxAZ7RsKMWzfVIQRk -----END CERTIFICATE-----Generated at Sun Jun 15 08:32:13 2025 by rpki-client