$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft File: B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json) Hash identifier: eqsN1V3My/cuVkuHr+7iXR09ZfdKE9Wac341zDYhBI0= Subject key identifier: 33:45:20:59:10:DA:38:B3:EA:3E:A3:53:F9:59:92:42:4F:8D:E8:AF Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Certificate serial: 1E41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft Manifest number: 1E22 Signing time: Sat 14 Jun 2025 16:03:29 +0000 Manifest this update: Sat 14 Jun 2025 16:03:29 +0000 Manifest next update: Sat 21 Jun 2025 16:03:29 +0000 Files and hashes: 1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: pmeOzH0UyKWUfhD/Xbq7XOuDVBGxCwIaHiNlEBeEIhk=) 2: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: 3kkH5EW9k5TTFg+XHHqI2feA7kJawsJC4SpKye1S2b4=) 3: BD314CEA619711EE81211277C4F9AE02.roa (hash: pyylUNX9LlmDbhjQ7Mn/l8NCaA1ACQcAW5FWWwcceq0=) 4: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: 01F6A8KAEiWwfIj9UacQjLscVPBcvyK/XHWq85nJWZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7745 (0x1e41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Validity Not Before: Jun 14 16:03:29 2025 GMT Not After : Jun 21 16:03:29 2025 GMT Subject: CN=684d9d51-f656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:a7:6e:77:8b:13:53:f8:bc:8e:78:2f:62: 89:fd:8b:ef:cc:35:b5:4c:79:d0:1b:61:8f:bf:c4: 52:0d:5d:eb:37:87:b7:78:9a:c0:ec:84:4e:d6:ab: 07:ba:b4:5d:c1:d8:c3:05:98:57:f5:a9:48:1d:a3: 2e:1e:c6:33:93:bf:a5:49:64:42:9e:5f:cf:e2:f0: a8:de:b7:9a:36:b8:af:33:60:e3:25:41:93:a4:fe: 5c:68:13:82:72:64:65:8c:0b:de:ff:6f:83:df:b9: 20:a4:27:4a:ad:5a:1e:ce:70:a8:77:6a:aa:71:6a: 98:f2:fd:9c:9a:db:6b:82:f3:1d:3c:30:3f:86:23: 16:7a:8b:ff:a7:45:54:e6:cd:83:e6:c1:8b:61:b6: 1e:b3:82:8c:7e:98:a7:5e:c5:72:b9:d0:be:6b:4d: 4d:be:36:5e:5a:e0:48:4a:e5:76:bd:3a:52:f3:b1: 86:cb:f2:08:47:d2:dc:5c:bc:54:09:ee:fe:62:34: 9b:6a:b4:ba:2a:93:bd:f9:0e:f7:97:9d:f2:5f:88: bb:e4:56:79:5d:e2:fa:04:f3:00:7d:e5:28:e3:2b: 4e:59:53:59:c4:17:c2:1c:9d:89:7e:57:6c:f4:3f: 18:0e:56:e7:97:d3:6e:e4:24:8d:b1:23:b3:47:25: 17:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:45:20:59:10:DA:38:B3:EA:3E:A3:53:F9:59:92:42:4F:8D:E8:AF X509v3 Authority Key Identifier: keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:82:07:2c:98:a2:02:c9:e2:53:c3:5d:5e:02:d6:c7:8e:96: 4c:db:f5:10:38:7d:ec:61:00:10:e0:c4:21:95:eb:80:16:e0: 0d:ac:db:4a:f3:93:18:b1:b5:7c:11:bb:a6:ef:95:a2:f3:1c: 2c:dc:c7:eb:ea:55:4b:39:4c:84:1a:2f:71:7e:f8:79:11:38: 35:fc:7e:cc:93:65:42:a4:68:ed:94:72:ed:5e:6d:d8:1d:65: 9b:44:09:bb:40:25:40:bd:3e:02:12:81:b2:a9:5e:9f:f6:a0: c7:79:c6:0a:da:13:d6:64:b8:7e:f4:d1:cf:de:db:20:ef:20: 9a:3a:7a:1a:46:ea:0e:bb:9f:0e:eb:bb:d8:4e:12:39:1f:cb: 2d:f7:ef:12:fe:c3:67:87:9f:49:ba:4b:73:f4:45:f2:9d:89: 00:15:ff:e6:69:ec:33:1f:04:8c:f1:4e:75:67:7a:ba:5d:92: 58:ae:0e:3d:1a:2b:3a:18:64:0a:e2:98:5a:63:00:65:fc:13: ba:b5:d6:e7:ab:09:90:21:74:70:53:d9:ea:4f:d3:87:87:3a: bb:85:90:68:b7:8b:75:50:c5:4e:ad:01:b4:53:d2:e7:7d:7d: 33:10:aa:15:8d:4b:f3:46:66:34:78:12:47:a3:b6:1b:b6:7a: c5:fe:cb:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDQjYxMTAvBgNVBAUTKDA3ODE2NzVDQzY0RkFCMkI4NDVEQTdGNTExNTU0OTgw NDJFQ0U0NjcwHhcNMjUwNjE0MTYwMzI5WhcNMjUwNjIxMTYwMzI5WjAYMRYwFAYD VQQDEw02ODRkOWQ1MS1mNjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBunbneLE1P4vI54L2KJ/YvvzDW1THnQG2GPv8RSDV3rN4e3eJrA7IRO1qsH urRdwdjDBZhX9alIHaMuHsYzk7+lSWRCnl/P4vCo3reaNrivM2DjJUGTpP5caBOC cmRljAve/2+D37kgpCdKrVoeznCod2qqcWqY8v2cmttrgvMdPDA/hiMWeov/p0VU 5s2D5sGLYbYes4KMfpinXsVyudC+a01NvjZeWuBISuV2vTpS87GGy/IIR9LcXLxU Ce7+YjSbarS6KpO9+Q73l53yX4i75FZ5XeL6BPMAfeUo4ytOWVNZxBfCHJ2Jflds 9D8YDlbnl9Nu5CSNsSOzRyUXIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNFIFkQ 2jiz6j6jU/lZkkJPjeivMB8GA1UdIwQYMBaAFAeBZ1zGT6srhF2n9RFVSYBC7ORn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRENCNi82N0M2QUE0QThB RjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5dUVYYWYxRVZWSmdFTHM1 R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I0Rm5YTVpQcXl1RVhhZjFFVlZKZ0VMczVHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RENCNi82N0M2QUE0QThBRjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5 dUVYYWYxRVZWSmdFTHM1R2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaggcsmKICyeJTw11eAtbHjpZM2/UQOH3sYQAQ4MQhleuAFuANrNtK 85MYsbV8Ebum75Wi8xws3Mfr6lVLOUyEGi9xfvh5ETg1/H7Mk2VCpGjtlHLtXm3Y HWWbRAm7QCVAvT4CEoGyqV6f9qDHecYK2hPWZLh+9NHP3tsg7yCaOnoaRuoOu58O 67vYThI5H8st9+8S/sNnh59Juktz9EXynYkAFf/maewzHwSM8U51Z3q6XZJYrg49 Gis6GGQK4phaYwBl/BO6tdbnqwmQIXRwU9nqT9OHhzq7hZBot4t1UMVOrQG0U9Ln fX0zEKoVjUvzRmY0eBJHo7YbtnrF/svV -----END CERTIFICATE-----Generated at Sat Jun 14 18:48:08 2025 by rpki-client