$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json) Hash identifier: +t3wCVVV8Ru95xUrQfkhSSEUiX99szNIfEUtRWiiVV0= Subject key identifier: D3:B9:C6:04:B2:5F:5B:77:B3:EF:2B:F1:C6:22:CB:87:82:D9:E8:3C Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Certificate serial: 05E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft Manifest number: 05E3 Signing time: Thu 12 Jun 2025 22:35:33 +0000 Manifest this update: Thu 12 Jun 2025 22:35:32 +0000 Manifest next update: Thu 19 Jun 2025 22:35:32 +0000 Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: FS1vcPrruI9qInxKlPrYxW8VwcI3SyMl2vSTYj50JDw=) 2: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: UVYU38/2P4ZcsBnZKHRUezkcR8i0kOVNyl3hZT7lyzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5ECA, serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Validity Not Before: Jun 12 22:35:32 2025 GMT Not After : Jun 19 22:35:32 2025 GMT Subject: CN=684b5634-2cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:57:1a:c2:7f:86:ed:7f:b9:35:df:c6:3a:fa: 4d:69:69:76:26:fc:ff:67:47:77:5b:02:fe:bc:c9: 7c:3d:b2:86:51:8a:39:32:02:b2:fa:66:6d:8f:21: 34:a4:c8:7e:55:37:3a:68:d7:1d:ad:b0:ee:c8:e7: 05:1e:73:34:62:7a:df:5f:13:4d:ef:34:ab:45:c5: 28:cf:0f:47:74:86:ed:9a:6a:30:32:a6:b8:60:8b: 5e:9b:04:9f:ad:fe:bd:fe:71:50:7b:af:d5:c9:f2: 7e:6e:13:0f:3d:73:5d:f4:89:91:b3:be:fa:6a:9c: 87:78:9c:60:86:97:27:ae:25:05:fd:1b:f3:08:19: 13:9c:8e:f8:e9:1a:56:b1:ad:c5:7c:c2:65:6f:29: f2:c7:b4:c4:bd:a8:a9:da:56:f7:f4:ce:f3:2c:51: fa:a7:4d:51:e6:8c:f9:a4:db:ee:2f:14:3c:15:c7: fb:71:db:75:57:19:64:45:42:c1:ab:98:27:d7:d2: 69:8a:e6:ac:ae:a5:ef:22:38:ed:41:be:db:cb:b7: 6a:bf:24:c9:24:d8:7a:70:c9:54:5b:52:d8:f3:55: 5f:70:66:c0:5c:8e:49:b4:91:d8:b4:95:d3:15:17: 9d:2a:4a:1e:33:d3:29:88:d9:a2:88:93:a7:23:15: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B9:C6:04:B2:5F:5B:77:B3:EF:2B:F1:C6:22:CB:87:82:D9:E8:3C X509v3 Authority Key Identifier: keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:3a:4b:0b:49:8e:5f:f5:3b:0c:29:51:dd:c8:aa:7e:39:11: 8d:9c:c8:eb:9d:ae:79:af:f3:8c:d9:c3:44:c5:be:73:64:b8: a0:2e:36:01:96:49:27:15:48:70:8c:b1:9f:21:4f:3e:81:26: 84:45:33:65:f6:6a:ec:b7:5b:34:61:5a:31:77:aa:b1:a0:16: e7:cc:84:62:f4:93:7d:64:12:ff:03:da:5f:7c:d7:6e:67:cf: 50:fd:aa:bc:81:da:97:86:00:23:32:53:d4:da:5b:2d:3d:a5: 5d:ab:e3:ce:f9:eb:24:d6:eb:22:b8:22:e4:2f:bb:0a:de:18: 93:d2:e6:78:58:f0:25:46:f1:b6:d5:3d:55:2a:75:50:e4:7a: 4f:81:9c:c0:16:a9:87:7b:05:fa:82:e5:23:de:ea:a1:60:80: 1b:19:7f:8c:18:d8:eb:28:f7:2a:12:a8:d8:05:99:08:e6:6f: 58:7d:dc:2d:11:27:50:10:8c:82:3e:b1:1d:24:ba:ff:1f:21: 10:0d:05:4e:04:c9:15:53:14:5f:0c:08:8b:79:96:96:74:cf: 34:05:1e:a5:17:00:86:8f:92:99:55:c9:de:57:08:c3:f0:c8: 13:ee:37:06:a9:8e:d5:49:c2:e2:d6:5b:d9:e8:08:2b:a9:c1: be:50:9e:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFQ0ExMTAvBgNVBAUTKEZCODA1RDUzNzlDQjA3RDUyQTQxMUVGRkZEMDQ5MUNB MzlCN0JGMjcwHhcNMjUwNjEyMjIzNTMyWhcNMjUwNjE5MjIzNTMyWjAYMRYwFAYD VQQDEw02ODRiNTYzNC0yY2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFcawn+G7X+5Nd/GOvpNaWl2Jvz/Z0d3WwL+vMl8PbKGUYo5MgKy+mZtjyE0 pMh+VTc6aNcdrbDuyOcFHnM0YnrfXxNN7zSrRcUozw9HdIbtmmowMqa4YItemwSf rf69/nFQe6/VyfJ+bhMPPXNd9ImRs776apyHeJxghpcnriUF/RvzCBkTnI746RpW sa3FfMJlbynyx7TEvaip2lb39M7zLFH6p01R5oz5pNvuLxQ8Fcf7cdt1VxlkRULB q5gn19JpiuasrqXvIjjtQb7by7dqvyTJJNh6cMlUW1LY81VfcGbAXI5JtJHYtJXT FRedKkoeM9MpiNmiiJOnIxUCOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNO5xgSy X1t3s+8r8cYiy4eC2eg8MB8GA1UdIwQYMBaAFPuAXVN5ywfVKkEe//0Ekco5t78n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUVDQS9CRkQyMzIwNkI5 MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5VXFRUjdfX1FTUnlqbTN2 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy00QmRVM25MQjlVcVFSN19fUVNSeWptM3Z5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUVDQS9CRkQyMzIwNkI5MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5 VXFRUjdfX1FTUnlqbTN2eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5OksLSY5f9TsMKVHdyKp+ORGNnMjrna55r/OM2cNExb5zZLigLjYB lkknFUhwjLGfIU8+gSaERTNl9mrst1s0YVoxd6qxoBbnzIRi9JN9ZBL/A9pffNdu Z89Q/aq8gdqXhgAjMlPU2lstPaVdq+PO+esk1usiuCLkL7sK3hiT0uZ4WPAlRvG2 1T1VKnVQ5HpPgZzAFqmHewX6guUj3uqhYIAbGX+MGNjrKPcqEqjYBZkI5m9Yfdwt ESdQEIyCPrEdJLr/HyEQDQVOBMkVUxRfDAiLeZaWdM80BR6lFwCGj5KZVcneVwjD 8MgT7jcGqY7VScLi1lvZ6AgrqcG+UJ6j -----END CERTIFICATE-----Generated at Sat Jun 14 19:03:50 2025 by rpki-client