$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft File: 4G_oQca7SYofv2fuOqjIqcU4fQ8.mft (raw, json) Hash identifier: yTOjg4ACCvShNogDNg5SS98nvZVrjq0bLi3vS64glP4= Subject key identifier: FF:BE:E8:4F:95:FC:25:A7:0E:26:44:3C:72:6C:55:EC:EF:25:0D:06 Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F Certificate issuer: /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft Manifest number: AB Signing time: Sun 15 Jun 2025 05:15:10 +0000 Manifest this update: Sun 15 Jun 2025 05:15:09 +0000 Manifest next update: Sun 22 Jun 2025 05:15:09 +0000 Files and hashes: 1: 4G_oQca7SYofv2fuOqjIqcU4fQ8.crl (hash: xvo9Snw/mcJ4CaSFiYxn94YL4Tn6u9uuHc7WK1JEofs=) 2: 47C532D045B911EF93633071C4F9AE02.roa (hash: wnnmQPYTxqkM9WvnTTi4MEpEuQ7gabJzkmyVQ4uhwWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 05:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Validity Not Before: Jun 15 05:15:09 2025 GMT Not After : Jun 22 05:15:09 2025 GMT Subject: CN=684e56dd-659d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3c:e8:cf:ac:09:ee:4e:18:a7:a6:ea:f2:82: 2e:5e:db:ff:22:cf:ae:d2:07:d9:e5:b8:6c:b1:82: 7d:d5:6c:8f:92:5b:d0:20:0c:cb:6f:da:e7:a9:b8: e3:d4:b0:73:4a:c3:7b:e5:10:d3:c6:95:e6:65:6c: d1:e1:6f:89:84:32:34:b1:e5:d1:fa:d8:18:32:1b: 9f:3b:88:6c:57:2e:dd:ae:6f:82:a8:0d:86:a5:c5: ae:f3:d3:72:78:e3:02:c1:e1:e3:a9:52:b6:74:f0: e4:2d:51:fd:f9:1e:3b:6b:89:be:b6:5d:98:46:95: 34:df:87:ed:a2:4e:aa:06:22:6e:9d:d1:c6:ad:3e: b6:a4:c4:87:9a:a4:37:3e:b2:dd:39:6d:67:77:9f: a2:02:56:b2:9c:21:74:a2:fa:97:f4:0b:5f:90:b0: 70:41:63:1a:3f:c8:b5:ed:41:24:a4:44:a2:15:93: 74:b0:1c:44:b5:df:0a:4a:b2:b9:b6:41:99:e5:34: 0c:92:94:d9:f8:8a:ce:74:04:4e:b2:d4:32:1d:01: a3:be:0e:70:af:60:87:78:ba:83:cc:7b:74:a6:32: 8a:af:78:44:4d:d0:21:74:f7:d1:b3:f0:bb:15:dd: 73:67:c1:63:ba:d8:e0:bb:87:50:be:0b:24:67:28: 63:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BE:E8:4F:95:FC:25:A7:0E:26:44:3C:72:6C:55:EC:EF:25:0D:06 X509v3 Authority Key Identifier: keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:79:75:50:be:cf:ec:36:4f:c6:75:d6:17:96:e2:16:34:da: 7e:b6:b5:16:d8:7b:c0:eb:4e:50:41:ab:f9:8d:29:d3:96:37: 3b:de:8c:2e:08:59:22:02:ad:6e:9f:94:3e:e8:48:3c:d5:4a: c7:f4:86:31:c2:f3:a4:f5:af:6e:69:39:2a:e8:10:4c:fe:69: ce:e2:3e:ee:5b:23:0c:80:7b:f6:12:9c:5f:2b:83:5d:1b:69: 93:53:0a:0d:b8:b3:8b:d5:f9:30:5d:be:3e:bb:3c:54:b7:26: 6e:97:09:a4:01:ba:8f:08:20:ce:99:4a:35:19:b8:2e:d8:d6: 38:80:e0:8c:6d:2f:43:23:99:d1:85:04:15:d5:dc:33:84:09: 9a:9e:e8:10:0f:78:83:55:ae:8a:4e:34:f4:ac:76:bb:82:bb: 89:12:3f:46:ed:d4:69:61:20:e1:81:b3:81:63:97:4d:6f:56: 3d:3a:34:cd:e6:0f:1d:17:f4:40:e6:36:73:af:43:e4:b2:11: 99:7a:8d:1c:fc:1f:32:da:12:71:4d:ec:c7:83:0a:9e:c2:9d: aa:c5:94:64:1d:cf:dc:13:be:d8:cf:dc:e3:cc:de:b8:84:c6: c8:0b:da:8c:fd:75:07:4d:77:ac:de:4e:48:22:0c:c5:88:a7: c9:42:48:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM0RDAxMTAvBgNVBAUTKEUwNkZFODQxQzZCQjQ5OEExRkJGNjdFRTNBQThDOEE5 QzUzODdEMEYwHhcNMjUwNjE1MDUxNTA5WhcNMjUwNjIyMDUxNTA5WjAYMRYwFAYD VQQDEw02ODRlNTZkZC02NTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zzoz6wJ7k4Yp6bq8oIuXtv/Is+u0gfZ5bhssYJ91WyPklvQIAzLb9rnqbjj 1LBzSsN75RDTxpXmZWzR4W+JhDI0seXR+tgYMhufO4hsVy7drm+CqA2GpcWu89Ny eOMCweHjqVK2dPDkLVH9+R47a4m+tl2YRpU034ftok6qBiJundHGrT62pMSHmqQ3 PrLdOW1nd5+iAlaynCF0ovqX9AtfkLBwQWMaP8i17UEkpESiFZN0sBxEtd8KSrK5 tkGZ5TQMkpTZ+IrOdAROstQyHQGjvg5wr2CHeLqDzHt0pjKKr3hETdAhdPfRs/C7 Fd1zZ8Fjutjgu4dQvgskZyhj/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP++6E+V /CWnDiZEPHJsVezvJQ0GMB8GA1UdIwQYMBaAFOBv6EHGu0mKH79n7jqoyKnFOH0P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9FQ0Y4MEY4NjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80R19vUWNhN1NZb2Z2MmZ1T3FqSXFjVTRm UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRHX29RY2E3U1lvZnYyZnVPcWpJcWNVNGZROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9FQ0Y4MEY4NjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80R19vUWNhN1NZ b2Z2MmZ1T3FqSXFjVTRmUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCreXVQvs/sNk/GddYXluIWNNp+trUW2HvA605QQav5jSnTljc73owu CFkiAq1un5Q+6Eg81UrH9IYxwvOk9a9uaTkq6BBM/mnO4j7uWyMMgHv2EpxfK4Nd G2mTUwoNuLOL1fkwXb4+uzxUtyZulwmkAbqPCCDOmUo1Gbgu2NY4gOCMbS9DI5nR hQQV1dwzhAmanugQD3iDVa6KTjT0rHa7gruJEj9G7dRpYSDhgbOBY5dNb1Y9OjTN 5g8dF/RA5jZzr0PkshGZeo0c/B8y2hJxTezHgwqewp2qxZRkHc/cE77Yz9zjzN64 hMbIC9qM/XUHTXes3k5IIgzFiKfJQkg4 -----END CERTIFICATE-----Generated at Mon Jun 16 03:15:29 2025 by rpki-client