$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft File: 4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json) Hash identifier: yEBfc3oZbBUxbUMR3InnatYkJuClcRLX3xrpqpX6lX4= Subject key identifier: E6:27:D0:62:F9:42:44:BF:DA:FC:AB:70:77:CF:14:8B:41:23:D6:1B Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Certificate serial: 0288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft Manifest number: 0284 Signing time: Thu 19 Jun 2025 01:29:27 +0000 Manifest this update: Thu 19 Jun 2025 01:29:27 +0000 Manifest next update: Thu 26 Jun 2025 01:29:27 +0000 Files and hashes: 1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: zDa6jS2cmjpDWSPHESkQSeNzOjsuqCUEDg9vSPq2Bew=) 2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: h+ue+R5DGdF0uaqUXBTnmoh/DYvzHxp90t2bN+4sANk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Validity Not Before: Jun 19 01:29:27 2025 GMT Not After : Jun 26 01:29:27 2025 GMT Subject: CN=685367f7-2176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b2:9b:74:24:b5:a3:d1:9d:9c:0c:78:d9:14: 7f:46:b6:4e:9c:2f:63:f3:e4:66:82:bf:29:fb:62: 6a:79:3d:74:2f:6e:7e:6f:fe:d5:c8:0d:b0:80:0b: 3c:f8:f0:36:95:cb:6b:d4:da:cd:90:ba:c3:89:c2: 6b:4f:14:f1:4d:a0:f5:67:df:cc:84:af:e4:45:fa: 21:99:cd:5d:f7:ef:c1:d8:7a:fa:8a:f9:31:4c:f4: b8:be:a8:e1:1c:80:17:54:1a:63:27:15:9a:25:07: a4:5a:cd:f3:ff:13:f5:bf:48:0d:a9:6b:d8:e7:9f: 56:c8:28:f9:0e:be:aa:3e:cf:3b:57:05:8c:5a:57: 3a:10:8c:d9:74:35:b7:95:7b:e7:69:b3:d3:bc:dd: 2c:51:21:c7:62:6c:24:55:f6:ee:23:b2:bf:d7:96: b9:cd:38:7a:44:b2:d7:89:9f:07:bf:68:0c:e7:46: 85:ca:57:1c:d8:99:74:a4:3c:fb:02:43:c9:9c:17: 93:1b:a0:01:33:c0:99:2d:05:2e:4e:a4:d4:6a:09: 9b:20:9b:33:a8:af:aa:23:c2:97:e7:2c:52:4d:17: 55:5c:38:3b:02:a2:0d:86:24:7b:d6:4e:0a:d4:91: 4d:e8:f9:0d:91:cf:32:58:92:99:48:db:8a:58:b7: 35:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:27:D0:62:F9:42:44:BF:DA:FC:AB:70:77:CF:14:8B:41:23:D6:1B X509v3 Authority Key Identifier: keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:5e:5b:51:eb:7a:65:d4:68:47:80:e6:cc:67:7c:64:94:1e: 55:5c:9b:25:f7:72:3e:dc:1b:25:69:16:b8:6d:b3:fe:ec:01: 33:c3:76:86:c7:89:41:8b:1a:f8:1c:e7:09:e2:32:aa:c0:39: 8f:79:6d:35:fd:d9:36:31:d0:9d:ff:1d:77:4e:d4:2c:47:42: 52:95:fe:b6:7d:e7:bf:d7:1f:92:13:cd:be:fe:8b:37:db:a0: 00:4c:eb:b4:12:e9:5e:a0:cf:c0:61:83:ac:56:af:20:72:23: e0:d6:cf:91:0e:83:e8:54:94:6a:a9:94:c4:33:51:48:74:ce: fa:5a:b5:0f:90:12:bc:a8:ac:a3:9f:4b:64:48:39:4c:c2:79: 93:bc:9a:40:2e:6d:05:8a:da:f6:19:97:53:2d:ce:05:d9:54: 7d:58:39:fd:b5:c0:21:58:62:51:8e:19:2e:45:ed:73:e4:5e: 0a:93:e5:08:62:ea:73:3f:3f:2a:c0:b3:de:9c:d4:cc:43:0c: 27:8b:28:8b:09:96:73:38:13:55:fc:85:fe:7d:e2:a6:62:e3: 72:a9:87:02:a8:6b:e9:3f:50:76:56:20:cd:76:ff:2b:84:33: 1a:8d:b4:29:fc:3c:fd:56:e7:a2:7d:bc:db:e7:a1:76:e0:10: 65:35:84:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1RDkxMTAvBgNVBAUTKEUzMUU2N0NBMEU1QkVEQjI0OEY5N0E2NTdERUZGNjJF Qzg2RjUyNEIwHhcNMjUwNjE5MDEyOTI3WhcNMjUwNjI2MDEyOTI3WjAYMRYwFAYD VQQDEw02ODUzNjdmNy0yMTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrKbdCS1o9GdnAx42RR/RrZOnC9j8+Rmgr8p+2JqeT10L25+b/7VyA2wgAs8 +PA2lctr1NrNkLrDicJrTxTxTaD1Z9/MhK/kRfohmc1d9+/B2Hr6ivkxTPS4vqjh HIAXVBpjJxWaJQekWs3z/xP1v0gNqWvY559WyCj5Dr6qPs87VwWMWlc6EIzZdDW3 lXvnabPTvN0sUSHHYmwkVfbuI7K/15a5zTh6RLLXiZ8Hv2gM50aFylcc2Jl0pDz7 AkPJnBeTG6ABM8CZLQUuTqTUagmbIJszqK+qI8KX5yxSTRdVXDg7AqINhiR71k4K 1JFN6PkNkc8yWJKZSNuKWLc1wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYn0GL5 QkS/2vyrcHfPFItBI9YbMB8GA1UdIwQYMBaAFOMeZ8oOW+2ySPl6ZX3v9i7Ib1JL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDVEOS84OUU4N0ZFMDBD QzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1YjdiSkktWHBsZmVfMkxzaHZV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4NW55ZzViN2JKSS1YcGxmZV8yTHNodlVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDVEOS84OUU4N0ZFMDBDQzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1Yjdi SkktWHBsZmVfMkxzaHZVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0XltR63pl1GhHgObMZ3xklB5VXJsl93I+3BslaRa4bbP+7AEzw3aG x4lBixr4HOcJ4jKqwDmPeW01/dk2MdCd/x13TtQsR0JSlf62fee/1x+SE82+/os3 26AATOu0EuleoM/AYYOsVq8gciPg1s+RDoPoVJRqqZTEM1FIdM76WrUPkBK8qKyj n0tkSDlMwnmTvJpALm0Fitr2GZdTLc4F2VR9WDn9tcAhWGJRjhkuRe1z5F4Kk+UI YupzPz8qwLPenNTMQwwniyiLCZZzOBNV/IX+feKmYuNyqYcCqGvpP1B2ViDNdv8r hDMajbQp/Dz9Vueifbzb56F24BBlNYQR -----END CERTIFICATE-----Generated at Thu Jun 19 18:19:37 2025 by rpki-client