$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft File: 4deDfrzHqaTRdRZXhgR2OivQQnI.mft (raw, json) Hash identifier: dTxHoY+Bd90xsaJ5TiUUqKEuNW5dXEqeqDIHOWv3MUQ= Subject key identifier: 57:25:5E:59:93:72:2D:C7:C7:B3:0E:B9:7E:62:54:7C:7B:78:34:4C Authority key identifier: E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 Certificate issuer: /CN=A91EE92F/serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft Manifest number: 8D Signing time: Fri 13 Jun 2025 05:25:40 +0000 Manifest this update: Fri 13 Jun 2025 05:25:39 +0000 Manifest next update: Fri 20 Jun 2025 05:25:39 +0000 Files and hashes: 1: 4deDfrzHqaTRdRZXhgR2OivQQnI.crl (hash: aMXn5W5iI4B7BKFMn69NGSmXkg9cbvLFpzlIF+oxYjg=) 2: 2EC0897A740C11EFB881CE37C4F9AE02.roa (hash: jK7WeiMtYEjncK+3WbHQbUVCOX5jz02RAdo98TCxxKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F, serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Validity Not Before: Jun 13 05:25:39 2025 GMT Not After : Jun 20 05:25:39 2025 GMT Subject: CN=684bb654-d2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:3c:15:89:54:4f:e7:cc:4e:74:51:4e:4d:70: fa:c2:5a:90:74:29:90:b3:dc:4b:d5:6f:c4:6c:04: f8:a0:f7:71:86:e0:ca:e7:bb:28:32:40:88:22:4b: e8:bc:d2:e7:d1:0e:96:de:09:0b:0f:3b:c8:e9:80: 5e:1f:aa:b7:6e:5f:b9:f5:8f:4f:24:4b:63:a6:7e: ef:89:cc:04:c3:2c:c3:00:1a:a6:34:79:26:54:70: 46:8b:92:79:1e:60:7a:ce:66:fd:01:d6:d6:14:a0: 8a:a5:d6:62:e1:45:57:20:5c:d1:b2:94:ac:b2:4a: cc:d5:6f:bc:1d:2c:8e:38:d0:9b:25:47:f7:c1:58: e7:78:d5:cb:b6:86:38:f2:3e:e7:8a:fb:d3:68:76: 37:d7:69:62:c3:58:92:2e:de:4a:8b:98:50:2c:17: 99:8b:4f:99:62:06:1e:ab:43:4a:c6:08:7b:85:c0: df:5a:cc:39:b2:ce:f7:23:e9:6a:85:89:c4:63:30: ce:0b:bc:d2:49:51:2e:cf:7e:80:ca:2f:91:1d:c7: 1c:67:b3:5b:fe:59:dc:a0:8d:69:13:eb:d5:af:4e: fe:fc:53:2d:42:5a:60:30:92:0c:89:93:78:b8:f6: 20:6f:71:30:bb:3a:75:d7:c9:0c:4d:64:3e:f4:da: 6e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:25:5E:59:93:72:2D:C7:C7:B3:0E:B9:7E:62:54:7C:7B:78:34:4C X509v3 Authority Key Identifier: keyid:E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:de:52:00:11:74:7a:30:d3:93:25:aa:77:be:93:78:b8:09: 7e:3d:a1:74:55:b6:f9:01:84:9e:2f:1d:2b:04:16:c0:6e:74: bc:f0:8d:4f:1c:74:8e:4c:22:b5:bc:7e:0e:1b:89:0b:23:42: a8:a3:dc:54:c1:07:bd:91:e1:c9:10:82:e9:a6:4b:b5:b6:f9: d4:a0:46:c5:ad:b2:35:d5:05:3c:66:09:9b:3c:db:3e:63:48: fb:e6:2a:a8:0c:51:27:64:b1:f6:6e:0c:a3:48:d5:9c:82:ad: 2f:db:62:1e:d6:1c:cf:14:63:61:aa:de:03:69:62:eb:d0:6e: 8d:fd:97:62:ee:e5:1a:c4:ac:a6:e2:f2:5d:62:9e:0e:1d:69: 1a:00:9c:b6:f7:eb:f3:9b:e7:9c:4f:9a:8f:41:ac:72:50:d4: d6:f4:17:6b:c2:12:c7:8d:91:c9:18:79:e2:fb:22:cc:19:c0: 36:2d:5f:51:d8:54:15:64:9e:58:f0:4d:8d:b3:7c:82:07:25: ba:64:d6:2f:04:10:24:ce:39:4b:66:30:f0:d7:d3:00:29:ea: e4:b7:9e:be:13:b0:e7:2c:4f:f0:71:9f:90:8e:fd:5d:5d:07: 81:3a:32:9e:b7:8c:ff:e5:2e:19:ba:0b:ea:ca:33:03:24:54: 66:6d:0e:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5MkYxMTAvBgNVBAUTKEUxRDc4MzdFQkNDN0E5QTREMTc1MTY1Nzg2MDQ3NjNB MkJEMDQyNzIwHhcNMjUwNjEzMDUyNTM5WhcNMjUwNjIwMDUyNTM5WjAYMRYwFAYD VQQDEw02ODRiYjY1NC1kMmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/TwViVRP58xOdFFOTXD6wlqQdCmQs9xL1W/EbAT4oPdxhuDK57soMkCIIkvo vNLn0Q6W3gkLDzvI6YBeH6q3bl+59Y9PJEtjpn7vicwEwyzDABqmNHkmVHBGi5J5 HmB6zmb9AdbWFKCKpdZi4UVXIFzRspSsskrM1W+8HSyOONCbJUf3wVjneNXLtoY4 8j7nivvTaHY312liw1iSLt5Ki5hQLBeZi0+ZYgYeq0NKxgh7hcDfWsw5ss73I+lq hYnEYzDOC7zSSVEuz36Ayi+RHcccZ7Nb/lncoI1pE+vVr07+/FMtQlpgMJIMiZN4 uPYgb3Ewuzp118kMTWQ+9NpuAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFclXlmT ci3Hx7MOuX5iVHx7eDRMMB8GA1UdIwQYMBaAFOHXg368x6mk0XUWV4YEdjor0EJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTkyRi8xQjI5MEI1RTc0 MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi80ZGVEZnJ6SHFhVFJkUlpYaGdSMk9pdlFR bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkZURmcnpIcWFUUmRSWlhoZ1IyT2l2UVFuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTkyRi8xQjI5MEI1RTc0MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi80ZGVEZnJ6SHFh VFJkUlpYaGdSMk9pdlFRbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv3lIAEXR6MNOTJap3vpN4uAl+PaF0Vbb5AYSeLx0rBBbAbnS88I1P HHSOTCK1vH4OG4kLI0Koo9xUwQe9keHJEILppku1tvnUoEbFrbI11QU8ZgmbPNs+ Y0j75iqoDFEnZLH2bgyjSNWcgq0v22Ie1hzPFGNhqt4DaWLr0G6N/Zdi7uUaxKym 4vJdYp4OHWkaAJy29+vzm+ecT5qPQaxyUNTW9BdrwhLHjZHJGHni+yLMGcA2LV9R 2FQVZJ5Y8E2Ns3yCByW6ZNYvBBAkzjlLZjDw19MAKerkt56+E7DnLE/wcZ+Qjv1d XQeBOjKet4z/5S4ZugvqyjMDJFRmbQ4k -----END CERTIFICATE-----Generated at Sun Jun 15 04:50:21 2025 by rpki-client