$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft File: 4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json) Hash identifier: nadwwEhxKdu8P+STWIKoAmVi4OaZN7MaTZ/A1dkQKa4= Subject key identifier: F8:F3:44:CA:D6:EC:C4:04:20:67:7A:5D:B6:52:67:9E:75:8B:14:BE Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Certificate serial: 0B1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft Manifest number: 0B13 Signing time: Mon 16 Jun 2025 19:08:45 +0000 Manifest this update: Mon 16 Jun 2025 19:08:44 +0000 Manifest next update: Mon 23 Jun 2025 19:08:44 +0000 Files and hashes: 1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: V1aOCnHg2aa3CvzmBAmpTzcKHTiILmjXviv2dJr1FB4=) 2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: NcQf930jPATr+5XDKM18U6rSGEkKZ2yaCI8MgpUcALY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2843 (0xb1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Validity Not Before: Jun 16 19:08:44 2025 GMT Not After : Jun 23 19:08:44 2025 GMT Subject: CN=68506bbd-4ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:90:6c:39:86:09:1f:64:ef:97:76:e6:e2:b6: 92:c4:42:09:a5:12:db:de:2b:78:49:3d:b3:8e:a8: 87:e7:22:22:45:dd:6b:95:f7:20:5d:a2:05:05:c5: e6:a7:6a:c3:9d:13:2b:86:96:8c:28:29:ef:9f:ac: 4e:d0:aa:90:7f:a6:ca:b6:ac:19:5d:1d:32:79:57: 03:0e:90:f4:7c:01:ec:c5:11:11:1b:e0:81:24:2e: 3b:73:a3:1f:55:9b:26:33:cf:a1:54:e2:67:bc:3f: 31:d0:14:2d:08:6c:a0:7f:f9:e1:7f:d5:9e:b9:ad: c7:ff:2e:7c:82:c9:b9:b7:96:d1:1c:54:54:f9:7c: b8:6f:40:3d:bf:0c:e0:96:69:6f:86:39:69:28:f8: 77:b8:07:a3:8e:9a:7e:8a:91:cc:93:a7:e1:b5:d9: 63:c8:e3:bb:60:bf:76:32:08:c6:55:57:8a:3d:9a: f6:00:42:3a:96:dc:2d:7f:2e:dd:07:62:10:cf:e5: 00:0d:6a:dc:55:69:23:20:2a:a8:bc:b5:3e:d3:30: 05:1c:dc:cc:2e:b8:af:db:2c:91:dc:9e:d6:d3:30: a3:01:cd:80:9b:f7:03:5b:89:d7:c2:70:4d:be:c7: e8:9c:40:55:91:90:4d:1f:59:2d:73:0f:e8:31:52: af:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F3:44:CA:D6:EC:C4:04:20:67:7A:5D:B6:52:67:9E:75:8B:14:BE X509v3 Authority Key Identifier: keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:af:22:9f:1e:7a:72:fc:33:7d:4f:63:15:ec:24:b7:aa:96: 6b:02:52:7b:78:cb:67:0f:4c:c9:b2:49:15:28:8c:2a:2d:49: 93:d9:d5:14:e2:fd:1c:fa:8d:89:0f:c7:98:b2:e0:6b:e7:10: 32:d4:12:f3:c5:18:53:a2:17:71:03:90:35:3d:c6:5e:24:55: 18:19:f2:50:f7:20:56:86:4a:17:ce:18:78:2f:56:95:45:1a: 3f:f3:59:fa:b9:91:25:02:47:b6:a8:82:34:81:66:69:2e:1a: e8:4f:ad:a3:02:7f:c7:8d:97:e7:9a:a7:ad:34:94:b1:dc:6d: 04:af:53:17:4b:c7:33:dc:44:7c:c5:83:dd:2d:a2:b6:49:03: 04:09:bc:a2:fe:f6:91:c1:7c:05:a4:de:30:5b:d8:18:14:5a: 58:fa:2a:9b:b9:1a:42:3c:b2:26:a5:55:18:15:88:4c:ee:f0: 50:84:73:c2:d5:86:5e:da:fa:42:9b:d0:b4:2b:a3:73:78:f3: 85:25:36:13:d9:ab:d4:33:87:fc:46:8c:ca:da:13:1c:d7:cd: 8d:cf:f0:24:a9:55:39:65:30:dd:66:ab:d6:5e:e2:e5:b5:b2: 1b:9f:bb:2f:c7:a8:c2:8b:36:32:83:bc:26:1b:99:5e:80:69: 99:10:6a:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFNDkxMTAvBgNVBAUTKEUwOTIzQjBBNUY3RDVDNjhCQUVBQ0U0MTQxNUY0MkE1 MjBENzRCMkEwHhcNMjUwNjE2MTkwODQ0WhcNMjUwNjIzMTkwODQ0WjAYMRYwFAYD VQQDEw02ODUwNmJiZC00YWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk5BsOYYJH2Tvl3bm4raSxEIJpRLb3it4ST2zjqiH5yIiRd1rlfcgXaIFBcXm p2rDnRMrhpaMKCnvn6xO0KqQf6bKtqwZXR0yeVcDDpD0fAHsxRERG+CBJC47c6Mf VZsmM8+hVOJnvD8x0BQtCGygf/nhf9Weua3H/y58gsm5t5bRHFRU+Xy4b0A9vwzg lmlvhjlpKPh3uAejjpp+ipHMk6fhtdljyOO7YL92MgjGVVeKPZr2AEI6ltwtfy7d B2IQz+UADWrcVWkjICqovLU+0zAFHNzMLriv2yyR3J7W0zCjAc2Am/cDW4nXwnBN vsfonEBVkZBNH1ktcw/oMVKvvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjzRMrW 7MQEIGd6XbZSZ551ixS+MB8GA1UdIwQYMBaAFOCSOwpffVxouurOQUFfQqUg10sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUU0OS8wNDA0OUQwODQx QTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhHaTY2czVCUVY5Q3BTRFhT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKSTdDbDk5WEdpNjZzNUJRVjlDcFNEWFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUU0OS8wNDA0OUQwODQxQTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhH aTY2czVCUVY5Q3BTRFhTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPryKfHnpy/DN9T2MV7CS3qpZrAlJ7eMtnD0zJskkVKIwqLUmT2dUU 4v0c+o2JD8eYsuBr5xAy1BLzxRhTohdxA5A1PcZeJFUYGfJQ9yBWhkoXzhh4L1aV RRo/81n6uZElAke2qII0gWZpLhroT62jAn/HjZfnmqetNJSx3G0Er1MXS8cz3ER8 xYPdLaK2SQMECbyi/vaRwXwFpN4wW9gYFFpY+iqbuRpCPLImpVUYFYhM7vBQhHPC 1YZe2vpCm9C0K6NzePOFJTYT2avUM4f8RozK2hMc182Nz/AkqVU5ZTDdZqvWXuLl tbIbn7svx6jCizYyg7wmG5legGmZEGo6 -----END CERTIFICATE-----Generated at Tue Jun 17 07:57:33 2025 by rpki-client