$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft File: 4ggepNPNtZniYIYCcE_bNYbUj1c.mft (raw, json) Hash identifier: Ljm96XsEN6QQtkOd1SiS9LUHsa+SiVqie48AJoG8lEc= Subject key identifier: 58:30:D6:30:BF:E5:09:F6:89:37:6E:14:D5:21:80:57:59:C6:17:5A Authority key identifier: E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 Certificate issuer: /CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Certificate serial: 0BA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft Manifest number: 0B9F Signing time: Thu 12 Jun 2025 18:48:15 +0000 Manifest this update: Thu 12 Jun 2025 18:48:15 +0000 Manifest next update: Thu 19 Jun 2025 18:48:15 +0000 Files and hashes: 1: 4ggepNPNtZniYIYCcE_bNYbUj1c.crl (hash: IPblerRzeXOFtVtbeSa5bq6wohYOjqnVXAXYD8PeDQE=) 2: 277BE15035CD11EAA2366620C4F9AE02.roa (hash: hJTBnRNb+rBuco3pui7GARCwhnSPV6pCkk0fRFtrHKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2981 (0xba5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF1C, serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Validity Not Before: Jun 12 18:48:15 2025 GMT Not After : Jun 19 18:48:15 2025 GMT Subject: CN=684b20ef-0549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:b6:da:86:26:11:5b:99:75:49:57:e9:4c: 2c:71:66:72:90:98:dc:1b:80:de:0c:95:58:0c:1d: 5a:7f:b0:b0:1e:01:8d:1f:78:59:fa:52:24:37:f0: 52:23:e7:b9:ea:de:de:ba:56:77:7d:88:72:dd:67: 28:92:ed:97:46:fa:40:26:d1:3f:16:bc:f4:00:ab: dc:ad:19:1d:e6:b2:c1:c7:51:c8:41:eb:b2:a5:30: b9:fd:dc:8d:c6:e7:91:fc:0f:50:17:bf:e8:aa:08: 19:91:b6:6b:eb:33:ad:ee:3d:c3:8f:b7:76:56:70: 66:86:02:b8:5d:b6:c5:fe:70:27:22:fc:3c:d9:76: 4a:40:97:b6:5e:21:f3:82:d7:da:5d:f9:af:4e:51: 3c:e0:5d:a4:e4:c6:3e:ff:3e:16:7a:d7:1f:5f:a1: 46:8e:ff:50:8d:c3:d7:3c:5c:22:5a:0d:61:54:14: fc:2f:f0:ba:7f:18:77:d2:e4:e0:bd:53:37:fe:06: d3:32:22:dd:2d:65:43:fb:d4:d9:80:dc:c2:4b:bb: b4:f5:10:0a:e2:be:34:9a:00:6c:50:ba:c0:70:27: 58:4a:25:be:06:78:21:7d:d6:65:b6:6a:c3:97:a7: 26:5b:35:a9:68:f5:96:74:0b:54:12:7a:b5:bb:cc: 57:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:30:D6:30:BF:E5:09:F6:89:37:6E:14:D5:21:80:57:59:C6:17:5A X509v3 Authority Key Identifier: keyid:E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:97:a5:4e:29:fe:cc:36:ff:d5:1e:99:b5:e3:7b:bf:9c:10: f8:bf:f2:0e:e0:6f:27:bf:29:e6:4b:79:71:19:90:59:f9:55: 1f:59:5c:ef:cd:43:4b:8e:98:a8:a3:ed:7f:2f:4e:9f:56:bb: 66:0c:e6:8a:28:37:d5:24:13:f3:b2:fb:69:52:a4:d4:75:04: 60:7d:87:22:c7:52:9b:43:ba:08:3c:aa:40:eb:4f:59:77:39: 28:d1:5c:e4:89:05:c4:1b:8f:a6:a8:8a:ed:4c:ee:c3:96:a3: 38:d9:6d:14:80:bd:e1:e3:60:b4:89:b2:fd:87:a7:99:9a:87: 27:ed:50:fe:d8:28:44:e7:38:4d:54:39:09:90:02:c9:bb:a4: 68:3c:56:73:46:ac:1f:05:46:4f:65:e3:99:98:77:94:f5:36: f4:ef:37:ee:20:37:64:e9:9a:70:14:2e:1a:22:3c:9e:ff:81: 95:92:a9:90:a1:27:2c:62:f0:dc:51:77:3c:99:29:88:09:db: 0a:92:f0:93:d6:77:8a:82:f6:d8:a8:4c:9e:f4:37:f2:d2:9d: ce:8f:09:6a:b5:9b:d6:a5:52:3b:20:af:05:fb:68:f2:7f:3e: 65:44:3f:af:e0:55:90:16:af:35:51:ea:66:b5:dc:17:28:29: f2:2c:87:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGMUMxMTAvBgNVBAUTKEUyMDgxRUE0RDNDREI1OTlFMjYwODYwMjcwNEZEQjM1 ODZENDhGNTcwHhcNMjUwNjEyMTg0ODE1WhcNMjUwNjE5MTg0ODE1WjAYMRYwFAYD VQQDEw02ODRiMjBlZi0wNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1a22oYmEVuZdUlX6UwscWZykJjcG4DeDJVYDB1af7CwHgGNH3hZ+lIkN/BS I+e56t7eulZ3fYhy3Wcoku2XRvpAJtE/Frz0AKvcrRkd5rLBx1HIQeuypTC5/dyN xueR/A9QF7/oqggZkbZr6zOt7j3Dj7d2VnBmhgK4XbbF/nAnIvw82XZKQJe2XiHz gtfaXfmvTlE84F2k5MY+/z4WetcfX6FGjv9QjcPXPFwiWg1hVBT8L/C6fxh30uTg vVM3/gbTMiLdLWVD+9TZgNzCS7u09RAK4r40mgBsULrAcCdYSiW+BnghfdZltmrD l6cmWzWpaPWWdAtUEnq1u8xXgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgw1jC/ 5Qn2iTduFNUhgFdZxhdaMB8GA1UdIwQYMBaAFOIIHqTTzbWZ4mCGAnBP2zWG1I9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREYxQy8zNkM5NjIyMDI2 M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRabmlZSVlDY0VfYk5ZYlVq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRnZ2VwTlBOdFpuaVlJWUNjRV9iTlliVWoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REYxQy8zNkM5NjIyMDI2M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRa bmlZSVlDY0VfYk5ZYlVqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANl6VOKf7MNv/VHpm143u/nBD4v/IO4G8nvynmS3lxGZBZ+VUfWVzv zUNLjpioo+1/L06fVrtmDOaKKDfVJBPzsvtpUqTUdQRgfYcix1KbQ7oIPKpA609Z dzko0VzkiQXEG4+mqIrtTO7DlqM42W0UgL3h42C0ibL9h6eZmocn7VD+2ChE5zhN VDkJkALJu6RoPFZzRqwfBUZPZeOZmHeU9Tb07zfuIDdk6ZpwFC4aIjye/4GVkqmQ oScsYvDcUXc8mSmICdsKkvCT1neKgvbYqEye9Dfy0p3OjwlqtZvWpVI7IK8F+2jy fz5lRD+v4FWQFq81UepmtdwXKCnyLIeM -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:17 2025 by rpki-client