$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft File: 4V0TCwuymA4b8RwBvMt1O0loSoA.mft (raw, json) Hash identifier: fwo+E/eE3wfTDLvGg2TUtD/Vsrb876IrTFzuGv29004= Subject key identifier: 53:00:DA:B4:BF:4F:6E:42:21:2E:20:72:71:F7:34:51:3C:D3:C6:3A Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 Certificate issuer: /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Certificate serial: 0617 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft Manifest number: 0612 Signing time: Thu 12 Jun 2025 22:28:08 +0000 Manifest this update: Thu 12 Jun 2025 22:28:07 +0000 Manifest next update: Thu 19 Jun 2025 22:28:07 +0000 Files and hashes: 1: 4V0TCwuymA4b8RwBvMt1O0loSoA.crl (hash: VBBsjpDCfMinHgY4b3qtgNfmHoeGnrOxPudGrL84i6g=) 2: 6AE1616AA3F711EBBA757063C4F9AE02.roa (hash: Om3xOjvt7/SStBWrpIGKKE+8s1rKbJeum5OSIuQByU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1559 (0x617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7BD, serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Validity Not Before: Jun 12 22:28:07 2025 GMT Not After : Jun 19 22:28:07 2025 GMT Subject: CN=684b5477-0a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9a:77:d3:5a:26:31:8c:86:e5:88:2a:b4:c1: 11:b0:0a:8c:63:69:82:65:df:da:b0:cf:97:1e:b7: 71:ca:35:b5:41:07:27:69:38:b9:04:bc:3a:7e:38: 93:cd:85:cb:01:a3:3a:cd:80:3f:bf:27:df:0b:4b: ce:61:5a:2a:1a:3f:68:1a:4b:7b:8a:4a:e0:68:5c: 38:2c:46:db:8b:59:49:a6:54:de:d2:e3:c9:0d:34: 3d:b9:7a:62:e2:d2:93:8a:e1:c2:43:5f:f3:eb:3c: 4d:5b:c3:6a:c0:a2:44:10:7e:3f:94:59:81:f1:4f: 89:6f:ba:26:7d:ca:4b:11:a5:68:01:d6:f3:37:2d: 09:c0:8b:7f:c5:bc:50:86:41:f7:88:7d:be:4b:a1: 29:a4:25:06:6c:90:e4:8c:11:25:b0:c5:87:97:f5: cf:f0:d4:53:39:84:6f:ee:74:40:2f:e1:0a:f0:4b: 8e:ee:05:15:ac:40:fd:47:49:00:34:a8:82:a4:00: 0f:8c:a8:fd:14:5a:6e:d4:0c:6c:f5:52:b6:29:2a: df:7f:34:c6:d7:09:ba:32:b0:5a:ed:44:e1:e9:6c: 0e:88:59:1c:6f:46:ca:81:9e:96:a7:fe:d2:69:b4: 90:c4:f7:33:bd:96:d0:bf:ee:9b:ae:0e:10:cf:8b: df:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:00:DA:B4:BF:4F:6E:42:21:2E:20:72:71:F7:34:51:3C:D3:C6:3A X509v3 Authority Key Identifier: keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f6:db:e5:c6:71:e5:df:75:69:3d:d0:0a:c2:44:49:94:e9: 24:47:cc:56:5c:ed:3f:31:e8:a1:db:38:ff:dd:88:44:60:eb: 9f:79:a7:23:a0:ef:83:31:39:af:c5:93:ae:99:ed:ec:ba:64: f2:5a:2a:3a:ef:30:47:b4:4b:67:d5:4e:df:8b:e8:f1:cb:bc: fa:13:4c:e9:24:f4:af:e7:dd:de:09:0e:c4:29:06:25:9d:56: 1f:46:28:44:33:47:0e:46:33:97:0a:9e:25:02:ef:4f:6c:99: ff:17:78:ad:c3:80:9f:36:75:70:10:d7:43:64:92:04:17:0d: 1f:0a:44:16:91:74:49:d5:35:2f:19:85:0e:b1:c2:78:20:b0: c9:25:e4:0a:1d:97:78:52:03:df:d5:93:3a:37:44:fd:3d:6c: 5b:05:b8:57:44:fb:d7:e5:0b:fd:71:f8:e2:23:42:6e:91:de: fe:9a:67:ef:39:d6:29:38:ce:10:2f:60:48:ee:be:67:0c:f2: 88:65:87:96:16:a8:b9:f8:86:48:a9:54:5a:6e:6c:a9:42:03: ae:4b:7f:87:53:49:1f:90:7e:f0:d0:19:51:e0:5f:fb:91:0a: 63:cb:45:ca:3d:11:7a:7e:44:23:58:7c:76:a5:7b:37:c3:51: 9d:d8:01:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QkQxMTAvBgNVBAUTKEUxNUQxMzBCMEJCMjk4MEUxQkYxMUMwMUJDQ0I3NTNC NDk2ODRBODAwHhcNMjUwNjEyMjIyODA3WhcNMjUwNjE5MjIyODA3WjAYMRYwFAYD VQQDEw02ODRiNTQ3Ny0wYTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5p301omMYyG5YgqtMERsAqMY2mCZd/asM+XHrdxyjW1QQcnaTi5BLw6fjiT zYXLAaM6zYA/vyffC0vOYVoqGj9oGkt7ikrgaFw4LEbbi1lJplTe0uPJDTQ9uXpi 4tKTiuHCQ1/z6zxNW8NqwKJEEH4/lFmB8U+Jb7omfcpLEaVoAdbzNy0JwIt/xbxQ hkH3iH2+S6EppCUGbJDkjBElsMWHl/XP8NRTOYRv7nRAL+EK8EuO7gUVrED9R0kA NKiCpAAPjKj9FFpu1Axs9VK2KSrffzTG1wm6MrBa7UTh6WwOiFkcb0bKgZ6Wp/7S abSQxPczvZbQv+6brg4Qz4vflQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMA2rS/ T25CIS4gcnH3NFE808Y6MB8GA1UdIwQYMBaAFOFdEwsLspgOG/EcAbzLdTtJaEqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdCRC9EMzAyNjAzNEEz RjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1BNGI4UndCdk10MU8wbG9T b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWMFRDd3V5bUE0YjhSd0J2TXQxTzBsb1NvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdCRC9EMzAyNjAzNEEzRjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1B NGI4UndCdk10MU8wbG9Tb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA9tvlxnHl33VpPdAKwkRJlOkkR8xWXO0/Meih2zj/3YhEYOufeacj oO+DMTmvxZOume3sumTyWio67zBHtEtn1U7fi+jxy7z6E0zpJPSv593eCQ7EKQYl nVYfRihEM0cORjOXCp4lAu9PbJn/F3itw4CfNnVwENdDZJIEFw0fCkQWkXRJ1TUv GYUOscJ4ILDJJeQKHZd4UgPf1ZM6N0T9PWxbBbhXRPvX5Qv9cfjiI0Jukd7+mmfv OdYpOM4QL2BI7r5nDPKIZYeWFqi5+IZIqVRabmypQgOuS3+HU0kfkH7w0BlR4F/7 kQpjy0XKPRF6fkQjWHx2pXs3w1Gd2AES -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:24 2025 by rpki-client