$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft File: 4USmzKVqqTEokShNJidwYk784uw.mft (raw, json) Hash identifier: YMTaUmomA1Fo4oe0OipGXCyeFrRTHIbDF+vDdX0PYqE= Subject key identifier: 8D:8F:71:7C:20:2C:22:A9:8D:17:2B:0A:A4:BE:C2:9B:CE:B9:DE:76 Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC Certificate issuer: /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC Certificate serial: 04AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft Manifest number: 04A6 Signing time: Wed 18 Jun 2025 23:46:40 +0000 Manifest this update: Wed 18 Jun 2025 23:46:40 +0000 Manifest next update: Wed 25 Jun 2025 23:46:40 +0000 Files and hashes: 1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: wTs14P4MLYi+VyJixSUhTK2cfS6EaqgEBSYYaMSGYfw=) 2: E7BC076E368A11EC9109BC30C4F9AE02.roa (hash: KvBasDBfRwAoH2EYsCxUrezIZS6Rx7LxrBNPNRo5D98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1194 (0x4aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC Validity Not Before: Jun 18 23:46:40 2025 GMT Not After : Jun 25 23:46:40 2025 GMT Subject: CN=68534fe0-1c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:85:c7:9b:1c:7a:88:20:b1:6d:e1:35:da:3f: 4a:65:e6:79:9e:b6:4f:1c:8d:5b:75:48:d7:d3:db: f3:f5:86:0d:aa:24:c8:ca:2b:85:6c:a0:5c:16:30: 8b:44:08:44:a1:e8:f0:36:0e:47:d8:af:32:03:a7: c0:c3:bc:49:5f:73:ec:ed:2a:e7:ac:f9:3f:67:61: 10:51:21:cb:17:e2:88:cd:4d:f8:97:61:59:f2:ac: 98:3c:ab:e7:33:05:38:93:9d:60:42:2d:c2:65:22: 6d:74:d0:89:3e:9d:4c:6f:60:b1:8d:1c:bb:4f:ac: ee:06:61:c2:e3:7d:fc:eb:03:4d:c4:54:4f:98:ae: 7b:bd:88:52:2c:45:ff:b6:e8:09:60:08:14:c6:84: 16:d9:29:3f:52:ba:9d:d1:47:0b:16:8c:d3:ac:bc: 1f:60:af:91:1c:aa:03:e1:60:d8:4a:c9:f5:10:ff: 36:e9:4d:30:dd:96:40:5a:31:1e:7b:a7:d3:a4:46: d4:c7:4c:44:ee:6f:98:df:c9:6b:7f:ca:e3:e2:1c: 06:8f:0f:1c:dd:11:e8:7d:a4:72:66:94:3b:e6:0f: 0f:31:be:14:4c:43:54:82:5b:68:a8:4c:aa:87:bb: c5:a3:89:2f:49:d2:de:41:56:02:d5:0d:7a:11:ad: 84:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8F:71:7C:20:2C:22:A9:8D:17:2B:0A:A4:BE:C2:9B:CE:B9:DE:76 X509v3 Authority Key Identifier: keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:d1:9e:55:d6:1a:26:9e:a7:77:3e:da:82:6a:26:54:96:4f: b3:01:86:55:b2:b0:77:b2:1f:bf:22:19:b3:22:5c:1d:14:62: c5:c9:18:ef:cb:a8:78:6b:34:68:c5:6b:03:a3:8d:1a:d5:4a: 35:b5:f0:0e:d2:f1:e5:d8:d2:f2:92:40:42:d6:70:ad:db:70: 43:e4:40:70:b1:f5:34:cd:78:0c:e6:10:ef:b0:99:bc:fa:dd: 5e:a6:33:0f:a8:c5:b7:97:33:0c:46:88:e2:b4:be:89:6b:f7: ba:8e:95:62:17:8a:ed:10:20:30:30:7f:ae:73:44:a3:ef:be: b3:26:b7:a2:11:e9:06:a5:f7:da:34:f4:b4:a2:5b:54:8d:9b: 7d:ff:ce:3e:2b:c7:ef:a5:34:ad:67:2a:5f:0f:fa:fb:2a:f3: b5:ae:51:a6:5b:00:8b:3d:44:6a:73:e8:ce:57:d0:f3:d4:60: 64:da:3d:a4:72:a2:81:49:f0:80:36:87:f1:3c:31:3d:9a:47: 9f:2f:05:5b:21:0d:cd:6b:53:e4:20:69:ea:f0:77:fe:2b:9b: ac:67:e4:80:f4:ea:d3:8a:1c:d1:5f:f3:c4:d8:80:64:68:00: a3:e0:f2:d2:2d:ad:29:e6:6d:e4:07:b2:fa:9e:e8:5f:f3:39: 3a:39:46:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKEUxNDRBNkNDQTU2QUE5MzEyODkxMjg0RDI2Mjc3MDYy NEVGQ0UyRUMwHhcNMjUwNjE4MjM0NjQwWhcNMjUwNjI1MjM0NjQwWjAYMRYwFAYD VQQDEw02ODUzNGZlMC0xYzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA54XHmxx6iCCxbeE12j9KZeZ5nrZPHI1bdUjX09vz9YYNqiTIyiuFbKBcFjCL RAhEoejwNg5H2K8yA6fAw7xJX3Ps7SrnrPk/Z2EQUSHLF+KIzU34l2FZ8qyYPKvn MwU4k51gQi3CZSJtdNCJPp1Mb2CxjRy7T6zuBmHC43386wNNxFRPmK57vYhSLEX/ tugJYAgUxoQW2Sk/Urqd0UcLFozTrLwfYK+RHKoD4WDYSsn1EP826U0w3ZZAWjEe e6fTpEbUx0xE7m+Y38lrf8rj4hwGjw8c3RHofaRyZpQ75g8PMb4UTENUgltoqEyq h7vFo4kvSdLeQVYC1Q16Ea2EKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2PcXwg LCKpjRcrCqS+wpvOud52MB8GA1UdIwQYMBaAFOFEpsylaqkxKJEoTSYncGJO/OLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My80OUEyRUU2QzM2 ODUxMUVDODBGNTIwMzVDNEY5QUUwMi80VVNtektWcXFURW9rU2hOSmlkd1lrNzg0 dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVU216S1ZxcVRFb2tTaE5KaWR3WWs3ODR1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My80OUEyRUU2QzM2ODUxMUVDODBGNTIwMzVDNEY5QUUwMi80VVNtektWcXFU RW9rU2hOSmlkd1lrNzg0dXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA20Z5V1homnqd3PtqCaiZUlk+zAYZVsrB3sh+/IhmzIlwdFGLFyRjv y6h4azRoxWsDo40a1Uo1tfAO0vHl2NLykkBC1nCt23BD5EBwsfU0zXgM5hDvsJm8 +t1epjMPqMW3lzMMRojitL6Ja/e6jpViF4rtECAwMH+uc0Sj776zJreiEekGpffa NPS0oltUjZt9/84+K8fvpTStZypfD/r7KvO1rlGmWwCLPURqc+jOV9Dz1GBk2j2k cqKBSfCANofxPDE9mkefLwVbIQ3Na1PkIGnq8Hf+K5usZ+SA9OrTihzRX/PE2IBk aACj4PLSLa0p5m3kB7L6nuhf8zk6OUa8 -----END CERTIFICATE-----Generated at Thu Jun 19 05:57:25 2025 by rpki-client