$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft File: 4_fO9uelaeRrLZA5MitpdVMcJWY.mft (raw, json) Hash identifier: DnmXh7tkOXbg+6HEErqxpXqmrwi38oSUC42ktHAGCCI= Subject key identifier: CD:93:D6:38:39:29:2F:87:7A:6D:D4:73:BC:6B:BB:BB:6C:03:1A:EC Authority key identifier: E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 Certificate issuer: /CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft Manifest number: 01CD Signing time: Fri 13 Jun 2025 01:56:27 +0000 Manifest this update: Fri 13 Jun 2025 01:56:26 +0000 Manifest next update: Fri 20 Jun 2025 01:56:26 +0000 Files and hashes: 1: 4_fO9uelaeRrLZA5MitpdVMcJWY.crl (hash: 3mrpAS5VkBAVYejpmW/esBrErCzOpNh1JPp6luro2S0=) 2: 24F87CC2810611EDA756F886C4F9AE02.roa (hash: 8hmKlSyIYm+hEMbljQN7ZPJxD7JA/JzX6lz/de7dJIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0077, serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Validity Not Before: Jun 13 01:56:26 2025 GMT Not After : Jun 20 01:56:26 2025 GMT Subject: CN=684b854a-8cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:48:30:a0:63:56:00:49:5a:ef:71:7c:67: d3:aa:20:a2:b4:37:1d:1d:07:a3:22:94:68:7d:29: 2a:b9:b8:7a:48:da:da:26:f2:c3:06:86:d2:ff:ff: a0:54:4d:eb:4c:19:34:82:08:93:c6:30:8e:86:68: 4f:8f:2f:f9:1e:1b:47:62:8f:15:5d:74:a1:e0:43: ba:6c:88:4a:b0:76:b1:a3:64:c2:a7:90:8f:08:a9: 84:15:e6:91:46:bd:b0:a1:0c:50:41:6a:a7:92:00: 06:21:e9:75:b1:7d:05:89:dc:93:c8:35:1e:1b:73: 8f:d6:2d:a5:ca:b1:25:7e:9c:83:0f:1b:04:51:5b: 1d:45:16:3e:db:c8:88:2e:97:68:5d:76:d7:33:a8: 87:c6:e2:51:31:b3:37:10:d6:de:d9:b9:8b:ce:6e: f8:5a:7e:57:39:dc:2e:01:c6:be:2e:64:3e:f2:be: de:09:c6:81:c3:59:3d:e5:67:bc:97:5f:d6:b4:bb: a7:b8:70:1b:2e:91:86:ad:21:91:d8:ac:d9:f3:04: 3c:ae:8d:c7:de:0a:82:c5:6e:5a:eb:9c:8b:e0:21: 5e:62:31:8f:c9:4e:3f:45:8c:06:06:84:a9:03:ec: 47:b5:ff:18:dd:f8:a2:a5:5d:e7:27:79:52:c1:1b: b0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:93:D6:38:39:29:2F:87:7A:6D:D4:73:BC:6B:BB:BB:6C:03:1A:EC X509v3 Authority Key Identifier: keyid:E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:95:13:e7:fb:e5:ea:64:03:ad:6f:9f:be:84:06:7f:e9:49: 9d:bb:50:5e:90:0a:d1:8a:b9:7f:d0:71:31:ee:1b:df:47:ef: 8c:b1:e9:13:c7:dd:3b:1f:12:b8:19:04:38:dc:37:97:60:84: ce:87:ed:a0:7d:64:db:3b:cf:3d:bb:72:14:48:0f:c0:1e:12: 74:b2:76:89:af:28:75:37:50:a8:4b:67:08:fe:68:11:d2:6a: e3:e9:30:95:c4:cf:86:eb:55:ac:93:83:f8:34:be:6e:7d:69: 6c:78:57:0a:f4:6f:ac:a4:c1:b3:c3:02:d5:51:f2:4d:75:21: c3:fd:3b:21:a3:f6:9e:dd:e3:a1:21:c2:09:07:28:82:c3:ef: 68:45:23:54:22:53:67:7a:5b:cc:46:e8:e6:17:bf:4d:9e:ac: da:88:6f:cb:20:6b:e0:46:1e:0e:7f:71:9a:0e:40:8e:96:71: 5a:5f:3b:c0:72:52:3f:02:a2:35:4f:1b:3d:96:34:89:24:9c: 4a:46:4f:7f:36:e7:4c:32:d4:c0:1f:d8:45:ed:ea:8e:06:b6: 53:bd:9b:39:a2:e5:67:4d:fb:70:0f:ee:01:d9:22:64:24:52: 24:53:1a:98:e1:a2:bc:4c:95:e2:ff:a5:11:7b:f6:55:0f:75: 76:be:0e:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAwNzcxMTAvBgNVBAUTKEUzRjdDRUY2RTdBNTY5RTQ2QjJEOTAzOTMyMkI2OTc1 NTMxQzI1NjYwHhcNMjUwNjEzMDE1NjI2WhcNMjUwNjIwMDE1NjI2WjAYMRYwFAYD VQQDEw02ODRiODU0YS04Y2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdRIMKBjVgBJWu9xfGfTqiCitDcdHQejIpRofSkqubh6SNraJvLDBobS//+g VE3rTBk0ggiTxjCOhmhPjy/5HhtHYo8VXXSh4EO6bIhKsHaxo2TCp5CPCKmEFeaR Rr2woQxQQWqnkgAGIel1sX0FidyTyDUeG3OP1i2lyrElfpyDDxsEUVsdRRY+28iI LpdoXXbXM6iHxuJRMbM3ENbe2bmLzm74Wn5XOdwuAca+LmQ+8r7eCcaBw1k95We8 l1/WtLunuHAbLpGGrSGR2KzZ8wQ8ro3H3gqCxW5a65yL4CFeYjGPyU4/RYwGBoSp A+xHtf8Y3fiipV3nJ3lSwRuwLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2T1jg5 KS+Hem3Uc7xru7tsAxrsMB8GA1UdIwQYMBaAFOP3zvbnpWnkay2QOTIraXVTHCVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDA3Ny81MDZBRTIzMDgx MDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFlUnJMWkE1TWl0cGRWTWNK V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfZk85dWVsYWVSckxaQTVNaXRwZFZNY0pXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDA3Ny81MDZBRTIzMDgxMDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFl UnJMWkE1TWl0cGRWTWNKV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLlRPn++XqZAOtb5++hAZ/6Umdu1BekArRirl/0HEx7hvfR++MsekT x907HxK4GQQ43DeXYITOh+2gfWTbO889u3IUSA/AHhJ0snaJryh1N1CoS2cI/mgR 0mrj6TCVxM+G61Wsk4P4NL5ufWlseFcK9G+spMGzwwLVUfJNdSHD/Tsho/ae3eOh IcIJByiCw+9oRSNUIlNnelvMRujmF79NnqzaiG/LIGvgRh4Of3GaDkCOlnFaXzvA clI/AqI1Txs9ljSJJJxKRk9/NudMMtTAH9hF7eqOBrZTvZs5ouVnTftwD+4B2SJk JFIkUxqY4aK8TJXi/6URe/ZVD3V2vg6J -----END CERTIFICATE-----Generated at Sat Jun 14 19:15:53 2025 by rpki-client