$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json) Hash identifier: MfbPw8fYyhW0SjVU+6Rn66v2WUn+i8xZjhEOoabguTI= Subject key identifier: 4F:0D:33:E4:81:12:A6:58:D8:A7:38:70:B6:8A:F9:EF:43:6D:FA:EF Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft Manifest number: 0135 Signing time: Fri 13 Jun 2025 03:26:42 +0000 Manifest this update: Fri 13 Jun 2025 03:26:42 +0000 Manifest next update: Fri 20 Jun 2025 03:26:42 +0000 Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: Z7KlT9Z6HM8CUa3sY50papqidtdeDVQqqeKiSPZbG2o=) 2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: 1MgG7WTwswH0kCn616eOpfwXJOyuod5SbIGbahzjBCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Validity Not Before: Jun 13 03:26:42 2025 GMT Not After : Jun 20 03:26:42 2025 GMT Subject: CN=684b9a72-dae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:61:8e:4c:6e:ee:72:65:a7:72:12:43:1d: 45:72:39:87:7d:34:31:b2:b0:af:78:47:f8:6f:08: f2:90:26:aa:08:b0:c7:d2:ee:e8:28:3d:2f:ce:ec: 34:a3:68:aa:c5:c6:e1:0f:4a:78:22:5b:31:de:4e: 01:8c:5c:5f:0f:e1:5d:ff:bc:1d:96:26:c1:70:5a: 3d:00:a8:da:b9:de:57:51:9a:2d:d3:a6:5b:1e:31: a3:1f:fd:7d:19:df:49:5a:3f:33:a4:16:49:a1:a0: ef:bf:89:9e:78:c2:d3:a3:04:55:4a:8b:e5:b3:05: 2d:53:3a:65:bf:ad:1b:3a:66:1e:d4:6d:a0:9a:a1: e1:dd:75:d7:12:b3:ad:02:61:3b:04:bf:50:76:c9: 87:3d:6d:43:8e:35:fe:f9:de:b0:44:b3:48:b5:76: 59:3c:2c:46:aa:86:8a:52:72:8e:08:01:88:80:09: 5a:54:45:8d:a5:aa:ef:d3:93:64:84:40:de:bf:fe: ff:03:88:20:36:08:a5:5a:53:15:d9:f6:8c:da:73: b1:01:4d:da:e4:c5:31:ed:85:24:ee:5c:6c:22:bb: 44:fd:26:ba:9d:c1:9f:86:da:24:2b:e4:a2:86:c7: 60:b1:71:71:b6:f8:6e:1c:c2:ca:18:05:78:35:77: 46:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0D:33:E4:81:12:A6:58:D8:A7:38:70:B6:8A:F9:EF:43:6D:FA:EF X509v3 Authority Key Identifier: keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:00:2c:d7:6f:df:44:17:54:dc:70:94:a1:01:3d:e7:a6:d9: 8a:d3:94:e9:5a:c3:43:86:6e:3e:3b:ae:68:8a:8c:89:74:4a: 92:85:2d:92:16:e4:7c:f6:64:d0:80:b9:91:81:bb:93:af:cf: a4:66:2e:6b:f8:01:ad:f2:61:cb:39:73:b5:98:6e:d6:39:5f: 16:8f:81:b1:05:6a:f2:92:f0:28:44:32:6d:57:0a:79:1a:42: e9:a7:8a:49:1d:31:c4:15:75:aa:4b:a9:af:d4:63:54:60:2c: 3c:49:50:bb:19:47:1c:a3:12:db:aa:26:ae:92:39:0e:28:7d: 29:da:91:b1:64:5d:d6:6a:c3:0a:ce:95:37:6d:0c:ea:45:a2: b4:d4:c5:5e:91:17:8e:bc:1c:81:b0:be:58:86:08:e7:61:c3: 15:93:46:91:c2:75:38:ad:0b:5e:a3:f7:e0:59:aa:93:14:eb: 7f:89:cf:4e:38:52:91:3c:82:0a:d8:4b:04:1b:56:8a:2e:4e: 3f:2b:42:a7:ec:8b:89:1d:ae:e4:bc:6d:dc:63:b6:0c:c8:28: 5b:6f:5b:75:21:ec:79:f0:11:2e:47:74:a9:5f:34:19:92:cd: ab:10:36:bf:2a:6c:e0:1c:f4:5d:2a:a1:6d:31:60:9d:3a:ab: c5:c6:6c:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMDcxMTAvBgNVBAUTKDczODREQzY2N0I0RDQ5QTVBQ0Q1MEE1OEI0ODkxNkEx NUFDMjYxNkIwHhcNMjUwNjEzMDMyNjQyWhcNMjUwNjIwMDMyNjQyWjAYMRYwFAYD VQQDEw02ODRiOWE3Mi1kYWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTNhjkxu7nJlp3ISQx1FcjmHfTQxsrCveEf4bwjykCaqCLDH0u7oKD0vzuw0 o2iqxcbhD0p4Ilsx3k4BjFxfD+Fd/7wdlibBcFo9AKjaud5XUZot06ZbHjGjH/19 Gd9JWj8zpBZJoaDvv4meeMLTowRVSovlswUtUzplv60bOmYe1G2gmqHh3XXXErOt AmE7BL9QdsmHPW1DjjX++d6wRLNItXZZPCxGqoaKUnKOCAGIgAlaVEWNparv05Nk hEDev/7/A4ggNgilWlMV2faM2nOxAU3a5MUx7YUk7lxsIrtE/Sa6ncGfhtokK+Si hsdgsXFxtvhuHMLKGAV4NXdGVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8NM+SB EqZY2Kc4cLaK+e9DbfrvMB8GA1UdIwQYMBaAFHOE3GZ7TUmlrNUKWLSJFqFawmFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQwNy81MDU1NjBCNjZF N0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNhV3MxUXBZdElrV29WckNZ V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQwNy81MDU1NjBCNjZFN0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNh V3MxUXBZdElrV29WckNZV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPACzXb99EF1TccJShAT3nptmK05TpWsNDhm4+O65oioyJdEqShS2S FuR89mTQgLmRgbuTr8+kZi5r+AGt8mHLOXO1mG7WOV8Wj4GxBWrykvAoRDJtVwp5 GkLpp4pJHTHEFXWqS6mv1GNUYCw8SVC7GUccoxLbqiaukjkOKH0p2pGxZF3WasMK zpU3bQzqRaK01MVekReOvByBsL5YhgjnYcMVk0aRwnU4rQteo/fgWaqTFOt/ic9O OFKRPIIK2EsEG1aKLk4/K0Kn7IuJHa7kvG3cY7YMyChbb1t1Iex58BEuR3SpXzQZ ks2rEDa/KmzgHPRdKqFtMWCdOqvFxmwI -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:37 2025 by rpki-client