$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft File: 4H5XaJwnqZNhHLq6l7GU0xeWz28.mft (raw, json) Hash identifier: 2JHqFM4+d2Ai7rA8SrkgLxYT4stNmc2gkg+ZOsiwrpQ= Subject key identifier: DF:01:A0:78:37:5E:E2:9F:BE:63:98:77:ED:07:88:38:53:E9:AB:5F Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F Certificate issuer: /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft Manifest number: 0C Signing time: Tue 17 Jun 2025 06:58:31 +0000 Manifest this update: Tue 17 Jun 2025 06:58:31 +0000 Manifest next update: Tue 24 Jun 2025 06:58:31 +0000 Files and hashes: 1: 4H5XaJwnqZNhHLq6l7GU0xeWz28.crl (hash: L6wqPzz3GSnRIWitBVmRG5KbbkGU52Ib1DTmqc5WceE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Validity Not Before: Jun 17 06:58:31 2025 GMT Not After : Jun 24 06:58:31 2025 GMT Subject: CN=68511217-014f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:81:4f:73:27:18:4e:29:4f:8e:e9:d8:58:cb: fa:c5:39:f3:41:b6:de:cd:9b:c1:1a:af:90:b5:a3: 78:31:22:16:08:7a:11:aa:7c:67:08:86:d0:6c:c6: 2e:d2:ea:30:ea:c1:50:e5:67:ee:34:dd:e0:0f:32: 78:87:6f:54:e1:d2:b1:c1:f9:d7:c1:b0:cd:fb:f8: 3e:42:6d:e4:01:fb:38:77:31:22:15:d8:f9:e9:63: 71:f4:89:e9:52:75:b0:bf:43:a9:32:1c:de:cd:cb: 3c:08:ab:6c:00:08:b8:5d:44:9f:03:00:b1:57:e4: 7e:04:17:50:24:7b:d1:19:2d:dc:39:e6:55:8d:e2: e7:77:83:97:21:ea:53:69:58:a7:e8:8f:4a:b7:4d: 6c:48:41:2b:40:27:53:3b:c9:5d:ec:0a:de:32:1b: a0:63:8a:52:4c:e3:0f:a1:04:e7:08:d2:ed:0a:0d: 9e:37:cd:db:9a:d9:fc:31:cd:30:97:13:59:58:35: 28:6f:48:4d:e9:e7:66:c2:f3:94:75:a4:eb:27:d6: 02:48:87:64:8e:da:c5:ba:73:07:2c:18:e4:1d:90: 4c:8b:63:02:60:c5:d0:fc:8b:00:fd:31:35:d9:3b: 5d:5a:78:ab:d3:7e:c6:86:a7:dd:98:ae:c6:a1:c6: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:01:A0:78:37:5E:E2:9F:BE:63:98:77:ED:07:88:38:53:E9:AB:5F X509v3 Authority Key Identifier: keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:81:29:cc:85:89:67:1e:7b:7e:fa:59:cb:55:93:b0:ea:30: fb:c3:da:5d:63:8f:a0:51:7f:47:b4:fb:df:62:b5:d0:36:ac: 33:a1:bf:fc:a1:82:01:27:31:27:94:bb:c9:3a:e8:26:dc:2a: 66:59:e8:53:5f:9d:a8:68:14:db:35:29:6e:c7:dc:62:40:e0: 7d:70:17:5c:23:df:bf:e6:3e:c0:29:c6:eb:61:d1:56:c8:7a: 25:90:90:53:cf:7a:ae:90:56:9e:1c:d3:3a:7c:f4:b8:c6:bd: d7:12:42:ff:dc:4d:75:ab:78:56:f4:9b:af:9e:9c:f2:c5:fe: 81:7a:4c:c7:89:d7:98:bb:a8:0b:af:63:29:61:51:5f:dd:70: 53:9f:39:72:1a:17:d3:a6:aa:0b:27:75:88:f5:87:42:b1:b0: cc:e3:3c:17:7b:c4:94:1b:8b:e5:60:1b:c1:6f:13:55:5d:7f: 21:67:ac:8f:b5:55:75:08:cf:22:2b:e5:f6:fe:6e:5c:75:37: ca:d7:06:c4:be:eb:4e:3d:72:bd:90:e4:aa:22:69:8e:92:92: a1:94:c1:62:37:54:78:2d:d7:89:13:4b:02:95:dd:3f:bf:91: cd:d7:b0:1a:5d:70:fc:72:cc:6e:3d:ba:ef:12:ff:ce:e8:fb: 85:5c:ae:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0U1QjExMC8GA1UEBRMoRTA3RTU3Njg5QzI3QTk5MzYxMUNCQUJBOTdCMTk0RDMx Nzk2Q0Y2RjAeFw0yNTA2MTcwNjU4MzFaFw0yNTA2MjQwNjU4MzFaMBgxFjAUBgNV BAMTDTY4NTExMjE3LTAxNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmgU9zJxhOKU+O6dhYy/rFOfNBtt7Nm8Ear5C1o3gxIhYIehGqfGcIhtBsxi7S 6jDqwVDlZ+403eAPMniHb1Th0rHB+dfBsM37+D5CbeQB+zh3MSIV2PnpY3H0ielS dbC/Q6kyHN7NyzwIq2wACLhdRJ8DALFX5H4EF1Ake9EZLdw55lWN4ud3g5ch6lNp WKfoj0q3TWxIQStAJ1M7yV3sCt4yG6BjilJM4w+hBOcI0u0KDZ43zdua2fwxzTCX E1lYNShvSE3p52bC85R1pOsn1gJIh2SO2sW6cwcsGOQdkEyLYwJgxdD8iwD9MTXZ O11aeKvTfsaGp92Yrsahxqt1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3wGgeDde 4p++Y5h37QeIOFPpq18wHwYDVR0jBBgwFoAU4H5XaJwnqZNhHLq6l7GU0xeWz28w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RTVCL0UxNEY3MjI0M0M2 RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpOaEhMcTZsN0dVMHhlV3oy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEg1WGFKd25xWk5oSExxNmw3R1UweGVXejI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RTVCL0UxNEY3MjI0M0M2RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpO aEhMcTZsN0dVMHhlV3oyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJiBKcyFiWcee376WctVk7DqMPvD2l1jj6BRf0e0+99itdA2rDOhv/yh ggEnMSeUu8k66CbcKmZZ6FNfnahoFNs1KW7H3GJA4H1wF1wj37/mPsApxuth0VbI eiWQkFPPeq6QVp4c0zp89LjGvdcSQv/cTXWreFb0m6+enPLF/oF6TMeJ15i7qAuv YylhUV/dcFOfOXIaF9OmqgsndYj1h0KxsMzjPBd7xJQbi+VgG8FvE1VdfyFnrI+1 VXUIzyIr5fb+blx1N8rXBsS+6049cr2Q5KoiaY6SkqGUwWI3VHgt14kTSwKV3T+/ kc3XsBpdcPxyzG49uu8S/87o+4Vcrps= -----END CERTIFICATE-----Generated at Tue Jun 17 23:00:14 2025 by rpki-client