$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft File: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json) Hash identifier: 8t3gIboaDefMz3YbefsbrmhyJIrVD/UYeS78EAXd2zw= Subject key identifier: C1:CD:47:3A:54:4E:50:F9:52:FA:40:49:D8:02:9F:31:D8:59:E8:DC Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft Manifest number: 0B Signing time: Sun 15 Jun 2025 07:11:36 +0000 Manifest this update: Sun 15 Jun 2025 07:11:35 +0000 Manifest next update: Sun 22 Jun 2025 07:11:35 +0000 Files and hashes: 1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: 866CENQBEeoXT9kiK3Dgr0tSZZBq0ene2eJQz9hlHuk=) 2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: EdyHrGdK241FduLFJE474YipzEeOWQ4qQLPgbqAJOd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Validity Not Before: Jun 15 07:11:35 2025 GMT Not After : Jun 22 07:11:35 2025 GMT Subject: CN=684e7228-22d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:00:d8:46:f7:b9:88:cc:60:3c:45:52:1b: 22:a9:9d:53:a9:ac:38:6c:e0:37:b0:ea:9d:be:8e: 8a:5d:3c:e5:4b:19:bd:31:b5:b3:b5:e1:0c:69:7a: 83:21:20:80:e6:79:c8:89:92:77:02:4c:05:60:09: 35:ce:0f:30:b3:37:7d:09:8a:48:e1:37:8b:58:94: a3:e4:14:f7:76:9f:18:fe:a1:ac:5c:23:91:d2:c3: 84:43:25:13:57:0d:db:24:55:6b:30:fa:db:63:d7: 5e:9f:bf:ce:fb:93:48:0d:94:55:0e:cd:52:5f:ca: 49:df:f3:75:62:f8:21:44:bb:26:64:91:d2:e2:ab: 39:f9:00:fc:fe:98:aa:54:94:15:90:20:58:cf:d0: c6:b9:53:6b:55:36:84:5c:24:9c:70:43:cb:ad:d1: db:17:30:a3:0d:6d:9d:15:1c:c1:10:7f:57:07:b3: f9:22:64:17:1f:66:14:7a:3a:2d:b8:ff:f7:a9:58: 37:34:c7:2c:79:60:77:62:96:96:f4:c6:fb:8e:0e: 53:ef:1e:4a:24:43:8a:7a:9d:93:29:41:7d:b5:4e: 0a:f3:bb:bf:72:23:23:8f:96:16:87:0c:fb:5f:7a: 58:ee:8b:4a:07:2e:9e:66:7f:a8:0c:98:32:ba:c0: 84:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CD:47:3A:54:4E:50:F9:52:FA:40:49:D8:02:9F:31:D8:59:E8:DC X509v3 Authority Key Identifier: keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:79:e9:17:da:cb:58:50:e3:1b:f0:f4:ec:ed:c5:2c:36:f8: 55:cf:3e:8d:51:a7:a3:91:19:74:a4:99:6c:cc:1c:1e:a0:6f: 2e:a0:15:97:33:29:c0:17:83:44:e1:e5:eb:e2:4d:f2:25:d3: 89:61:8b:81:1e:6f:e1:3a:6c:2a:93:d8:d9:2d:01:6f:c7:91: f3:55:a7:8f:39:59:fa:b7:c3:c3:49:1f:4d:45:a1:6c:32:5b: 5c:ae:3f:f5:76:8d:bb:db:14:24:79:0c:06:1a:1b:0a:5c:a2: 11:7a:a3:11:c2:ee:f2:a5:94:b0:e8:70:be:b2:13:92:13:3a: 70:2d:65:47:90:e5:f1:b8:6d:d1:df:56:49:f5:92:8a:12:72: c2:32:41:32:a6:b9:e4:ef:71:0b:40:8a:82:c3:0d:a1:e7:d3: 35:f5:24:70:cd:0a:c6:26:a2:85:b2:26:47:f9:da:64:7d:c7: 18:c8:60:c5:0d:32:86:6c:bf:b8:78:e3:20:0e:cc:67:fe:cd: af:f2:30:c4:01:b2:25:1f:b1:fe:ff:30:47:9c:72:db:ee:b6: 29:a6:31:d2:91:2a:bc:03:76:99:7f:cc:38:d6:97:fc:d1:f6: 51:86:9a:88:90:50:a0:fc:40:d2:fe:81:43:a3:d3:7d:eb:7a: 98:cc:d6:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkE0RjExMC8GA1UEBRMoRTAzOThENTRBQ0Q5REIzM0VENEZDQUE4RDIyODA1RDQ1 RTgwQ0JCNjAeFw0yNTA2MTUwNzExMzVaFw0yNTA2MjIwNzExMzVaMBgxFjAUBgNV BAMTDTY4NGU3MjI4LTIyZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzoADYRve5iMxgPEVSGyKpnVOprDhs4Dew6p2+jopdPOVLGb0xtbO14QxpeoMh IIDmeciJkncCTAVgCTXODzCzN30JikjhN4tYlKPkFPd2nxj+oaxcI5HSw4RDJRNX DdskVWsw+ttj116fv877k0gNlFUOzVJfyknf83Vi+CFEuyZkkdLiqzn5APz+mKpU lBWQIFjP0Ma5U2tVNoRcJJxwQ8ut0dsXMKMNbZ0VHMEQf1cHs/kiZBcfZhR6Oi24 //epWDc0xyx5YHdilpb0xvuODlPvHkokQ4p6nZMpQX21Tgrzu79yIyOPlhaHDPtf eljui0oHLp5mf6gMmDK6wISbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwc1HOlRO UPlS+kBJ2AKfMdhZ6NwwHwYDVR0jBBgwFoAU4DmNVKzZ2zPtT8qo0igF1F6Ay7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTRGLzU4N0YzNURBM0I3 NzExRjA5N0E4QkIyNEM0RjlBRTAyLzREbU5WS3paMnpQdFQ4cW8waWdGMUY2QXk3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNERtTlZLeloyelB0VDhxbzBpZ0YxRjZBeTdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTRGLzU4N0YzNURBM0I3NzExRjA5N0E4QkIyNEM0RjlBRTAyLzREbU5WS3paMnpQ dFQ4cW8waWdGMUY2QXk3WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIt56Rfay1hQ4xvw9OztxSw2+FXPPo1Rp6ORGXSkmWzMHB6gby6gFZcz KcAXg0Th5eviTfIl04lhi4Eeb+E6bCqT2NktAW/HkfNVp485Wfq3w8NJH01FoWwy W1yuP/V2jbvbFCR5DAYaGwpcohF6oxHC7vKllLDocL6yE5ITOnAtZUeQ5fG4bdHf Vkn1kooScsIyQTKmueTvcQtAioLDDaHn0zX1JHDNCsYmooWyJkf52mR9xxjIYMUN MoZsv7h44yAOzGf+za/yMMQBsiUfsf7/MEecctvutimmMdKRKrwDdpl/zDjWl/zR 9lGGmoiQUKD8QNL+gUOj033repjM1uQ= -----END CERTIFICATE-----Generated at Sun Jun 15 09:39:01 2025 by rpki-client