$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft File: 4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft (raw, json) Hash identifier: duVdPqaDV1R+e8U2oAwKlsmUyRYsL+WoWOZE2tBjsBs= Subject key identifier: BD:80:88:5B:3E:F6:F5:1A:C8:06:22:95:B7:54:A1:BA:76:61:B9:66 Authority key identifier: E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B Certificate issuer: /CN=A91E1887/serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B Certificate serial: 0733 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft Manifest number: 072D Signing time: Sat 14 Jun 2025 21:32:54 +0000 Manifest this update: Sat 14 Jun 2025 21:32:53 +0000 Manifest next update: Sat 21 Jun 2025 21:32:53 +0000 Files and hashes: 1: 4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl (hash: U9pEihQCwDTw67Ch9bfFdlcXsqKWX8LlTLJd/OBhuuM=) 2: 9F46C468355711EBA5B81020C4F9AE02.roa (hash: +mNdwjus2Kgr8/pfP9kkqV55Ej1FzQoLbQf0Qcf2IT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1843 (0x733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1887, serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B Validity Not Before: Jun 14 21:32:53 2025 GMT Not After : Jun 21 21:32:53 2025 GMT Subject: CN=684dea86-df03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:24:4b:20:c3:46:3c:e0:8a:60:3a:9b:f1:49: d1:1f:43:14:ff:73:51:35:24:d1:d2:dd:7e:68:ec: 29:10:9b:6a:48:18:b7:b5:87:a5:0e:22:e1:b7:b9: 34:b0:66:6c:41:2a:0b:8a:c6:d0:f9:64:c6:54:3e: 94:52:c1:b0:27:d0:0d:62:11:e4:3b:e2:16:0c:1e: 17:71:c7:ff:9e:4c:b0:83:c6:20:79:b8:ce:9a:49: 53:c6:31:62:9d:32:a6:cf:b1:dd:39:70:c1:ef:64: be:f6:9b:33:99:a0:cd:ac:da:72:1a:e1:f4:78:54: 09:26:a4:83:4f:b2:e0:78:2a:b1:2a:2e:e6:e3:d5: ac:11:23:c4:81:15:21:18:5b:4e:e1:6a:d9:92:71: 11:92:d2:ab:4d:2d:fe:d3:ba:f2:9c:32:42:17:16: 5e:58:27:c2:1e:7d:ae:e7:df:54:a3:8d:e1:e9:85: d8:81:26:57:9e:69:41:a1:c0:b4:ca:1d:03:18:6a: 3d:c6:a1:07:97:6a:d2:f5:97:16:e8:73:36:f7:ba: 25:5f:fc:90:21:c3:9c:49:bc:43:d5:19:5a:f5:eb: ef:9a:8d:a7:10:1e:bc:f4:4d:11:07:31:02:95:b0: 97:20:71:09:f2:7f:b5:69:dd:44:ba:8f:82:49:0f: c1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:80:88:5B:3E:F6:F5:1A:C8:06:22:95:B7:54:A1:BA:76:61:B9:66 X509v3 Authority Key Identifier: keyid:E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:46:f7:b0:e7:09:71:f7:8b:90:7a:63:4f:35:fc:b8:98:4a: fc:ac:b7:d5:27:f7:db:86:18:e6:c5:a4:16:40:4a:11:34:d5: d7:2f:1c:bc:fe:4e:05:39:60:56:af:bb:99:27:9a:84:5d:e5: d0:44:6b:aa:58:6a:50:15:fd:23:db:bf:ce:b9:85:78:e7:35: 3e:9e:cb:ef:1f:61:67:1e:88:51:5a:67:cd:52:8c:af:77:e8: c5:76:de:6a:2b:02:3b:21:15:35:8f:5c:23:ee:4d:60:92:36: 9d:b0:f7:75:29:ed:c2:52:d3:26:f6:35:11:57:19:dd:af:97: df:18:40:11:8b:27:4f:db:36:46:64:bc:d0:e9:91:13:d0:cf: 28:37:cb:fe:c1:0d:be:02:31:09:44:9d:fe:b6:7f:26:88:0c: bc:54:71:ab:f5:5d:fe:8b:90:ab:d2:d1:00:7a:ab:30:03:9b: bc:b3:dd:d5:fc:d3:c6:42:c2:e1:0b:1f:56:72:9b:99:4c:ac: 43:11:fe:6a:8a:2a:d0:aa:9a:e0:28:49:a5:1c:01:45:45:26: 29:9b:3b:3b:93:e3:7f:94:f8:f0:4b:2c:c8:16:39:6d:2a:41: ef:8a:02:86:e4:8b:f7:74:62:a8:33:30:9c:00:db:b9:14:9b: 3c:03:35:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE4ODcxMTAvBgNVBAUTKEUwRTlCOTM5OUI4QTRBNUZEQ0RFMjA5RkM1QkVDMDc4 QUY5NUNGN0IwHhcNMjUwNjE0MjEzMjUzWhcNMjUwNjIxMjEzMjUzWjAYMRYwFAYD VQQDEw02ODRkZWE4Ni1kZjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CRLIMNGPOCKYDqb8UnRH0MU/3NRNSTR0t1+aOwpEJtqSBi3tYelDiLht7k0 sGZsQSoLisbQ+WTGVD6UUsGwJ9ANYhHkO+IWDB4Xccf/nkywg8YgebjOmklTxjFi nTKmz7HdOXDB72S+9pszmaDNrNpyGuH0eFQJJqSDT7LgeCqxKi7m49WsESPEgRUh GFtO4WrZknERktKrTS3+07rynDJCFxZeWCfCHn2u599Uo43h6YXYgSZXnmlBocC0 yh0DGGo9xqEHl2rS9ZcW6HM297olX/yQIcOcSbxD1Rla9evvmo2nEB689E0RBzEC lbCXIHEJ8n+1ad1Euo+CSQ/BTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2AiFs+ 9vUayAYilbdUobp2YblmMB8GA1UdIwQYMBaAFODpuTmbikpf3N4gn8W+wHivlc97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTg4Ny84NEVFOEI2MDM1 NTExMUVCOUY0MTk1MEVDNEY5QUUwMi80T201T1p1S1NsX2MzaUNmeGI3QWVLLVZ6 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRPbTVPWnVLU2xfYzNpQ2Z4YjdBZUstVnozcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTg4Ny84NEVFOEI2MDM1NTExMUVCOUY0MTk1MEVDNEY5QUUwMi80T201T1p1S1Ns X2MzaUNmeGI3QWVLLVZ6M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuRvew5wlx94uQemNPNfy4mEr8rLfVJ/fbhhjmxaQWQEoRNNXXLxy8 /k4FOWBWr7uZJ5qEXeXQRGuqWGpQFf0j27/OuYV45zU+nsvvH2FnHohRWmfNUoyv d+jFdt5qKwI7IRU1j1wj7k1gkjadsPd1Ke3CUtMm9jURVxndr5ffGEARiydP2zZG ZLzQ6ZET0M8oN8v+wQ2+AjEJRJ3+tn8miAy8VHGr9V3+i5Cr0tEAeqswA5u8s93V /NPGQsLhCx9WcpuZTKxDEf5qiirQqprgKEmlHAFFRSYpmzs7k+N/lPjwSyzIFjlt KkHvigKG5Iv3dGKoMzCcANu5FJs8AzVH -----END CERTIFICATE-----Generated at Sun Jun 15 22:08:03 2025 by rpki-client