$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft File: 4UpZOzEqmIVz16Xd-uB_kSaTyII.mft (raw, json) Hash identifier: pGj+mVcbrsU4kuRzS+kXEO+FKpeJgbbPzSEodQDNLoo= Subject key identifier: 68:99:5D:04:B3:57:28:7A:2A:03:C9:24:C6:0B:B4:05:33:F0:D5:14 Authority key identifier: E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 Certificate issuer: /CN=A91D4ACD/serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft Manifest number: 8E Signing time: Fri 13 Jun 2025 05:26:43 +0000 Manifest this update: Fri 13 Jun 2025 05:26:43 +0000 Manifest next update: Fri 20 Jun 2025 05:26:43 +0000 Files and hashes: 1: 4UpZOzEqmIVz16Xd-uB_kSaTyII.crl (hash: OSoup2VVjfEYhMuJ+/u/NL2oWfRqg8OpT+I8hRDq5k4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4ACD, serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Validity Not Before: Jun 13 05:26:43 2025 GMT Not After : Jun 20 05:26:43 2025 GMT Subject: CN=684bb693-5f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:ef:c0:d2:ab:39:60:e4:03:8e:7d:72:b7: 29:59:8c:33:4f:76:92:31:98:48:f3:99:36:64:2d: 36:19:f7:2f:95:43:b0:e9:84:cb:5a:17:55:93:8e: 31:01:9c:ce:0b:fa:bd:e3:ee:09:fd:07:eb:ac:da: c7:e6:63:fd:97:a8:30:ba:23:b5:68:9a:35:56:20: ce:cc:5b:6f:29:a6:83:b9:f1:45:2a:79:26:f1:9e: 2d:de:5e:28:5c:f8:59:2b:7c:ff:75:32:22:bd:c0: 05:4e:9f:e8:5b:63:b6:df:4d:cb:a5:3e:0f:7f:62: 3d:fc:d4:8f:63:91:2c:14:d5:8d:3a:e6:21:ff:42: 4c:80:99:65:bb:af:ba:ac:f0:8b:ce:75:b0:41:6c: 69:66:7f:64:7c:2b:2b:74:31:f7:a5:70:9b:40:ce: e1:e8:53:0f:ac:31:a7:90:74:9f:47:10:5e:ae:e4: 5b:4e:5e:06:da:62:56:bf:7a:dd:be:68:7d:fa:d3: b6:71:f3:20:aa:40:73:99:fd:92:67:82:68:c3:1d: 41:77:6b:66:9b:6d:e5:1b:ab:47:95:78:53:0e:23: 5e:bf:48:df:14:f1:a0:2d:36:fb:67:c4:bb:9f:f5: f3:5f:20:8f:cc:87:e7:9e:c1:b9:8b:ed:58:d2:c9: 30:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:99:5D:04:B3:57:28:7A:2A:03:C9:24:C6:0B:B4:05:33:F0:D5:14 X509v3 Authority Key Identifier: keyid:E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:0b:a8:29:a0:c7:c6:9a:0a:fc:fd:58:ff:d1:bd:88:25:05: 25:f5:25:2d:1d:1c:94:e2:5c:d6:2c:af:fc:fc:eb:a0:47:c3: fd:1f:bd:ee:66:1c:29:ba:2b:1a:d2:1b:56:29:9a:94:71:43: 76:4e:7c:d3:83:68:f7:60:cd:fc:82:4a:b8:ad:36:aa:e4:1a: 16:dc:6c:f2:3d:b5:f6:bb:c9:c4:c6:97:19:2b:25:04:c5:62: f7:3e:e7:25:0d:fe:a2:01:cb:a9:01:2e:52:d4:64:ee:66:69: c8:59:18:6f:2c:18:93:dc:a3:89:1d:da:09:d3:2b:91:37:a9: cf:f8:f5:90:e8:0a:3e:fd:91:0e:e7:5f:5a:4c:f8:c6:2e:f1: 8a:94:ac:8b:c2:0e:ff:23:37:c0:35:b9:ba:47:ec:13:67:e3: 9f:25:4c:c3:ff:28:0f:80:c5:65:a9:a9:90:c3:75:7e:ef:2f: 81:23:6e:de:eb:02:4b:11:88:8a:1c:39:2a:22:66:63:f2:40: 01:dd:a3:5e:e2:d6:7d:05:91:7c:80:4e:56:e5:4d:07:d2:85: e9:65:f4:0f:b7:2d:09:53:04:b0:b6:68:15:2a:68:96:90:4d: 28:30:3d:c5:bb:d1:12:72:fa:70:9d:6f:2b:3b:43:a7:fc:a9: 9c:9e:03:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBQ0QxMTAvBgNVBAUTKEUxNEE1OTNCMzEyQTk4ODU3M0Q3QTVEREZBRTA3Rjkx MjY5M0M4ODIwHhcNMjUwNjEzMDUyNjQzWhcNMjUwNjIwMDUyNjQzWjAYMRYwFAYD VQQDEw02ODRiYjY5My01ZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+7vwNKrOWDkA459crcpWYwzT3aSMZhI85k2ZC02GfcvlUOw6YTLWhdVk44x AZzOC/q94+4J/QfrrNrH5mP9l6gwuiO1aJo1ViDOzFtvKaaDufFFKnkm8Z4t3l4o XPhZK3z/dTIivcAFTp/oW2O2303LpT4Pf2I9/NSPY5EsFNWNOuYh/0JMgJllu6+6 rPCLznWwQWxpZn9kfCsrdDH3pXCbQM7h6FMPrDGnkHSfRxBeruRbTl4G2mJWv3rd vmh9+tO2cfMgqkBzmf2SZ4Jowx1Bd2tmm23lG6tHlXhTDiNev0jfFPGgLTb7Z8S7 n/XzXyCPzIfnnsG5i+1Y0skwdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiZXQSz Vyh6KgPJJMYLtAUz8NUUMB8GA1UdIwQYMBaAFOFKWTsxKpiFc9el3frgf5Emk8iC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEFDRC8yOTAzMUEzQTc1 NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi80VXBaT3pFcW1JVnoxNlhkLXVCX2tTYVR5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVcFpPekVxbUlWejE2WGQtdUJfa1NhVHlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEFDRC8yOTAzMUEzQTc1NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi80VXBaT3pFcW1J VnoxNlhkLXVCX2tTYVR5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcC6gpoMfGmgr8/Vj/0b2IJQUl9SUtHRyU4lzWLK/8/OugR8P9H73u Zhwpuisa0htWKZqUcUN2TnzTg2j3YM38gkq4rTaq5BoW3GzyPbX2u8nExpcZKyUE xWL3PuclDf6iAcupAS5S1GTuZmnIWRhvLBiT3KOJHdoJ0yuRN6nP+PWQ6Ao+/ZEO 519aTPjGLvGKlKyLwg7/IzfANbm6R+wTZ+OfJUzD/ygPgMVlqamQw3V+7y+BI27e 6wJLEYiKHDkqImZj8kAB3aNe4tZ9BZF8gE5W5U0H0oXpZfQPty0JUwSwtmgVKmiW kE0oMD3Fu9EScvpwnW8rO0On/KmcngMm -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:22 2025 by rpki-client