$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json) Hash identifier: wV86IWbTi6ax6b79ioibAHiGg06ds4ZgwCG3qYYPQoo= Subject key identifier: 0F:24:E8:B7:D6:63:52:40:9F:82:6D:30:F9:17:7F:48:EB:AB:41:51 Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 0744 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft Manifest number: 06C6 Signing time: Mon 16 Jun 2025 22:12:00 +0000 Manifest this update: Mon 16 Jun 2025 22:11:59 +0000 Manifest next update: Mon 23 Jun 2025 22:11:59 +0000 Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: G9iRl070YVSaEz1BjkXrUVOu+sIgwnD07nMzUz2AL8k=) 2: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: gLMJhNvQtjkqWgYHOYJrflnpuLe5m/iNQsn8pAjqC+o=) 3: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: VF1EKdtqMB8DRuSBnFKjSSnE5AI9LEnGrDvhJPYGcJw=) 4: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: iacyWEeXTvXTILxRcADZ+9lCVjiDHQnMplIMRt/73Xk=) 5: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: Z/eyVAkA9R8S1+9PHNU8ppbtyyeeA+WhA6oeOKeAzo8=) 6: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: bcPbqQLGQnoAzNP2Fmg0TCnc4h72RS0Eli/gU7/zCsQ=) 7: 317095E0A28911ECBC355360C4F9AE02.roa (hash: IjGCmqfeR6dWCwkTJerprQJ5jh4UJlY6ZGEM3z029yo=) 8: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: q95wxrZ9LN/HMmU4q1987KOKTt7X/HBomrSB/BVWhIg=) 9: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: sck8zsR6Ll2dvtRynSaP+rCckHjFsxrRwW21LjTLuZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1860 (0x744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: Jun 16 22:11:59 2025 GMT Not After : Jun 23 22:11:59 2025 GMT Subject: CN=685096b0-6312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:50:dd:03:2c:fe:b1:90:8f:ef:08:e9:34: 37:20:31:cb:a7:12:0f:f2:53:7e:b1:26:b1:78:bf: 34:25:8a:17:1a:e8:08:ba:e4:9b:06:04:34:e8:6c: 96:4a:8b:15:4c:25:0c:d6:55:73:f2:83:f8:d6:f0: 90:ab:bb:d4:6a:a1:27:14:06:f7:a0:0d:e5:91:ce: c5:7b:68:e9:21:1d:60:93:26:ee:96:db:69:a2:91: 9e:ea:33:96:77:47:ff:40:04:38:49:f9:1d:47:df: f7:ed:b3:55:a2:44:e5:fe:b5:85:09:52:4b:d1:85: 49:6e:17:1c:b3:d5:e9:26:5d:f8:30:57:50:df:98: a8:29:d8:0d:6d:57:95:de:73:07:92:52:fb:1f:5c: dc:ce:9c:09:01:9f:0a:fc:96:ae:a9:75:38:ab:19: 43:84:4f:bb:b4:62:4d:25:7a:4d:98:92:ef:b1:e6: 95:bc:57:47:97:6a:b5:a6:ac:a1:fe:05:17:aa:c4: 38:dd:67:0c:10:34:9d:a8:e5:ed:b8:44:09:d6:a1: fa:79:50:2f:5c:59:e4:d9:9c:48:b4:55:38:47:c9: d6:af:ab:75:56:07:89:e1:33:00:7e:ba:a2:aa:88: 55:42:ca:58:c7:e3:d7:3f:48:d0:8a:24:e1:af:0e: 46:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:24:E8:B7:D6:63:52:40:9F:82:6D:30:F9:17:7F:48:EB:AB:41:51 X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:8b:7f:be:f0:91:73:21:fe:2b:16:3a:95:1e:9a:4f:9a:f0: c8:71:54:0b:35:ba:26:a6:e4:50:77:fe:78:39:d1:f0:49:47: 96:cc:d6:93:62:56:ae:ea:fa:56:67:92:9c:39:9f:4d:28:6b: 00:9a:5a:26:ef:7d:3d:49:b4:49:1a:19:52:97:a9:96:22:fe: 54:0d:dd:30:d3:8b:dd:35:22:8d:57:2c:28:f3:7c:6a:0f:11: e2:a3:4e:cb:f6:de:a0:09:e2:19:f3:67:c5:6a:9a:87:8b:1c: 2c:99:9b:30:90:14:27:90:3e:08:5f:5c:38:d3:47:e1:eb:87: 48:53:0e:cc:97:4d:90:c7:4f:d3:9d:e3:6e:54:3a:23:d9:a9: c4:c6:a8:b8:ff:61:af:5e:de:8b:cc:45:bf:0a:1c:f8:2d:5a: 3e:5c:ba:56:cd:0f:89:8a:13:30:ec:86:61:d5:52:2a:4e:4a: 0d:b3:4a:b3:5c:33:86:63:00:a5:b1:ca:f9:dd:2b:b5:62:22: 22:31:b8:db:26:0e:01:be:b2:22:8b:73:bb:ae:a0:3b:b8:8e: b1:bc:0f:01:ed:bc:25:cb:01:22:91:8c:00:c5:fa:63:26:7a: 89:cd:10:e0:12:5e:b7:70:a6:09:b8:04:ee:84:81:d7:89:d7: 42:23:20:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjUwNjE2MjIxMTU5WhcNMjUwNjIzMjIxMTU5WjAYMRYwFAYD VQQDEw02ODUwOTZiMC02MzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVZQ3QMs/rGQj+8I6TQ3IDHLpxIP8lN+sSaxeL80JYoXGugIuuSbBgQ06GyW SosVTCUM1lVz8oP41vCQq7vUaqEnFAb3oA3lkc7Fe2jpIR1gkybulttpopGe6jOW d0f/QAQ4SfkdR9/37bNVokTl/rWFCVJL0YVJbhccs9XpJl34MFdQ35ioKdgNbVeV 3nMHklL7H1zczpwJAZ8K/JauqXU4qxlDhE+7tGJNJXpNmJLvseaVvFdHl2q1pqyh /gUXqsQ43WcMEDSdqOXtuEQJ1qH6eVAvXFnk2ZxItFU4R8nWr6t1VgeJ4TMAfrqi qohVQspYx+PXP0jQiiThrw5GiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8k6LfW Y1JAn4JtMPkXf0jrq0FRMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0 ejBhTFgwbHFrYXV3NUl6NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZi3++8JFzIf4rFjqVHppPmvDIcVQLNbompuRQd/54OdHwSUeWzNaT Ylau6vpWZ5KcOZ9NKGsAmlom7309SbRJGhlSl6mWIv5UDd0w04vdNSKNVywo83xq DxHio07L9t6gCeIZ82fFapqHixwsmZswkBQnkD4IX1w400fh64dIUw7Ml02Qx0/T neNuVDoj2anExqi4/2GvXt6LzEW/Chz4LVo+XLpWzQ+JihMw7IZh1VIqTkoNs0qz XDOGYwClscr53Su1YiIiMbjbJg4BvrIii3O7rqA7uI6xvA8B7bwlywEikYwAxfpj JnqJzRDgEl63cKYJuATuhIHXiddCIyCR -----END CERTIFICATE-----Generated at Tue Jun 17 18:02:05 2025 by rpki-client