$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json) Hash identifier: cWo3fkt6xTgrdNtFEQUQrRTj9T2rJ0/avcfbv6lfinM= Subject key identifier: 62:25:3A:A7:5A:F4:C1:21:6F:FA:0A:F9:E5:CB:C1:0A:AE:E7:39:1A Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Certificate serial: 0E5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft Manifest number: 0E55 Signing time: Sat 14 Jun 2025 17:39:42 +0000 Manifest this update: Sat 14 Jun 2025 17:39:42 +0000 Manifest next update: Sat 21 Jun 2025 17:39:42 +0000 Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: +u0dc9qJ5fDduXG0WmqF94/oYgYLGfsE9OVl3ex2RkQ=) 2: 350711FA881211EE9710F928C4F9AE02.roa (hash: /AJd6poS8Ng5rehLy7t+jOBIXVOshJArXBaFYmXY69Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3674 (0xe5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Validity Not Before: Jun 14 17:39:42 2025 GMT Not After : Jun 21 17:39:42 2025 GMT Subject: CN=684db3de-02d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:53:48:ad:24:7d:40:56:e7:ff:8f:0b:4a: d6:f6:ca:b2:c1:42:52:14:08:8d:44:6d:60:3c:ac: 12:0e:f1:5a:45:44:50:8d:62:69:77:d7:e9:38:84: 84:52:56:d9:c3:26:ca:32:d7:51:82:0d:7a:ef:8b: 95:95:9e:04:39:d3:57:38:31:e0:31:05:4b:11:95: ab:fe:57:82:28:d6:9f:af:e1:c3:70:30:15:be:01: ec:bb:ab:ff:eb:9c:06:03:14:66:ac:d4:80:f5:10: e8:1c:4b:5d:e2:9e:87:d9:fb:a6:47:5b:8f:24:34: a3:03:17:a5:fd:6f:4e:81:4f:54:d9:de:71:54:d1: e5:f6:33:24:d1:4e:55:e9:02:12:5a:b5:1a:82:07: 80:a2:bf:92:b0:73:97:33:c5:1f:71:85:98:c0:bf: 2f:d2:ce:f7:ff:da:a0:d4:29:65:26:d7:07:9a:79: ac:21:92:64:b4:2f:1b:8c:71:31:c0:e0:f4:d0:87: 51:4d:d2:f4:85:8f:12:d4:9c:75:16:cd:38:f5:be: fe:bb:65:06:c9:4d:a8:a7:d8:92:52:22:71:ea:de: d5:6c:bd:0e:78:e8:60:82:75:45:c8:4a:b9:b4:76: 7f:bd:10:fb:f6:6d:b1:65:7b:4a:7b:d2:46:cd:b0: f1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:25:3A:A7:5A:F4:C1:21:6F:FA:0A:F9:E5:CB:C1:0A:AE:E7:39:1A X509v3 Authority Key Identifier: keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:6e:23:ab:ec:e4:56:f8:9a:fd:ad:d5:fb:fd:16:24:89:b7: 84:97:4c:a9:d0:27:fc:8c:e7:d7:80:cb:0c:af:f8:99:86:04: d0:02:65:bf:ac:55:33:3b:24:ea:3a:24:68:a2:f6:4a:1a:35: 58:2c:ab:9f:2b:05:1d:3b:c8:78:b3:9f:8a:39:e1:83:ce:1e: 49:fe:c8:5b:52:38:b1:71:6b:6c:5f:d0:0f:53:34:58:39:a6: c0:df:8c:75:7a:6c:06:ba:79:5c:28:e4:f3:3c:e8:ed:ba:e8: 97:3c:94:fe:ac:8c:c8:82:1b:ec:4f:91:74:b4:e9:f6:7e:4f: 21:61:50:89:52:d6:e9:3e:54:ae:67:61:61:89:59:33:6c:d5: 2c:00:cf:88:b3:8c:d7:ce:98:ca:36:0f:79:b0:21:36:86:09: d6:9e:88:d6:0b:d1:21:31:d6:8b:fb:05:ae:ca:df:56:2e:fd: 30:74:57:a8:bc:b9:38:ca:02:bf:82:6e:50:2d:e9:07:67:00: 62:e4:24:aa:ca:ac:c8:47:dd:7a:78:89:ec:a7:ac:2e:3d:fc: 6f:78:00:53:06:36:15:78:e6:1d:6c:8d:5a:88:0e:dd:00:d5: af:24:ff:17:d9:cd:51:96:79:a0:6d:a7:16:3c:86:64:8e:4f: d9:23:e3:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDUzODI2NDJFQkQ3OTlBMEY4Mjg2RDA2NTQ4MjlFRDc2 ODQzMEY5RTQwHhcNMjUwNjE0MTczOTQyWhcNMjUwNjIxMTczOTQyWjAYMRYwFAYD VQQDEw02ODRkYjNkZS0wMmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomVTSK0kfUBW5/+PC0rW9sqywUJSFAiNRG1gPKwSDvFaRURQjWJpd9fpOISE UlbZwybKMtdRgg1674uVlZ4EOdNXODHgMQVLEZWr/leCKNafr+HDcDAVvgHsu6v/ 65wGAxRmrNSA9RDoHEtd4p6H2fumR1uPJDSjAxel/W9OgU9U2d5xVNHl9jMk0U5V 6QISWrUaggeAor+SsHOXM8UfcYWYwL8v0s73/9qg1CllJtcHmnmsIZJktC8bjHEx wOD00IdRTdL0hY8S1Jx1Fs049b7+u2UGyU2op9iSUiJx6t7VbL0OeOhggnVFyEq5 tHZ/vRD79m2xZXtKe9JGzbDxywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIlOqda 9MEhb/oK+eXLwQqu5zkaMB8GA1UdIwQYMBaAFFOCZC69eZoPgobQZUgp7XaEMPnk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yQ0Q0NUZCQTlF MjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1nLUNodEJsU0NudGRvUXct ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0SmtMcjE1bWctQ2h0QmxTQ250ZG9Rdy1lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yQ0Q0NUZCQTlFMjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1n LUNodEJsU0NudGRvUXctZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCbiOr7ORW+Jr9rdX7/RYkibeEl0yp0Cf8jOfXgMsMr/iZhgTQAmW/ rFUzOyTqOiRoovZKGjVYLKufKwUdO8h4s5+KOeGDzh5J/shbUjixcWtsX9APUzRY OabA34x1emwGunlcKOTzPOjtuuiXPJT+rIzIghvsT5F0tOn2fk8hYVCJUtbpPlSu Z2FhiVkzbNUsAM+Is4zXzpjKNg95sCE2hgnWnojWC9EhMdaL+wWuyt9WLv0wdFeo vLk4ygK/gm5QLekHZwBi5CSqyqzIR916eInsp6wuPfxveABTBjYVeOYdbI1aiA7d ANWvJP8X2c1RlnmgbacWPIZkjk/ZI+MW -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:04 2025 by rpki-client