$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: wPqvN0Y1JLO+Bpqbdh6A3AwHTLjWS30NMjYeX1ufFPA= Subject key identifier: 5A:9B:37:9B:3B:87:28:6E:D0:76:37:0C:1D:3C:5E:C2:BA:37:E0:CE Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 01E0 Signing time: Fri 13 Jun 2025 01:43:55 +0000 Manifest this update: Fri 13 Jun 2025 01:43:55 +0000 Manifest next update: Fri 20 Jun 2025 01:43:55 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: SolfWQD3fiP5vt3FF2kI5oYZcEDIJC3/O7xxiTs6+vY=) 2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: Ple4OYydaAojanyJwx7ZWPyKox9DD4lFfc6gQi2CwTI=) 3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: iBZ0Vc5oqFw84Bi0mykH6jGLVo3+N0cmUjqo5T+vIIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: Jun 13 01:43:55 2025 GMT Not After : Jun 20 01:43:55 2025 GMT Subject: CN=684b825b-46d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:78:81:5d:23:57:18:d9:7c:03:92:9c:fe:83: 4c:f9:a1:78:ec:09:ce:2a:1b:ae:1f:cb:ee:83:f7: 5e:5d:eb:b4:f5:ea:f9:bf:e2:df:31:bc:ee:eb:39: dd:0f:3f:bf:8d:e2:e2:ac:79:6d:b5:c4:a5:00:00: 42:38:31:02:e1:b3:5e:52:b6:31:34:75:44:c6:4f: 35:d8:3c:72:43:d4:a0:b8:c3:f2:84:7f:03:24:56: 44:8e:b1:58:33:39:66:5a:5f:e3:44:28:ea:c2:85: e4:9c:4d:de:57:8c:c1:38:0a:44:dd:33:8d:16:65: 2c:99:20:48:84:c5:6c:a6:40:a2:84:70:d6:c3:dc: 8b:2c:67:f7:13:70:66:b9:7a:b4:b5:c3:4f:6b:26: 9e:b5:ac:28:39:6a:9e:59:25:c2:e5:9c:40:48:de: 60:96:a0:90:5a:8c:6e:b1:de:87:9f:e0:46:03:db: 01:9e:b8:7f:1e:f8:ab:39:02:e2:bb:98:43:bd:9f: ff:e3:7e:ba:99:8e:ea:e7:29:59:35:79:cc:8c:bd: 8e:7b:19:28:83:95:0f:b9:41:23:79:91:d3:89:71: 86:72:db:22:f1:57:82:e5:b6:09:30:e5:56:92:44: d3:ef:c5:c8:0e:10:bc:85:a3:4f:e2:08:01:08:c7: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9B:37:9B:3B:87:28:6E:D0:76:37:0C:1D:3C:5E:C2:BA:37:E0:CE X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:39:27:ea:13:58:49:3d:91:d4:75:bd:39:7f:41:2f:66:ee: 55:6b:2e:61:7a:06:b1:89:57:1a:c0:b4:79:f3:39:3b:7d:c8: a9:47:a6:7f:95:64:c2:43:10:b9:a7:5a:48:a7:5f:67:b6:cd: 8b:f0:7c:c0:3a:79:7d:d0:f1:9f:0d:dd:e4:18:fa:70:02:74: e8:f6:dd:7a:a6:1f:23:fd:fe:b0:0d:c3:26:23:52:97:8d:93: bf:e0:32:08:11:5a:b4:9c:f0:b5:35:96:97:23:56:4d:56:8c: 41:72:17:d3:29:07:75:b2:49:fe:a4:a4:60:f5:58:a0:b4:21: 0d:44:2f:18:9f:cc:f5:e4:8e:e8:d7:5f:75:b7:24:2a:ad:86: 9d:b6:54:c7:4b:cf:7f:05:6b:3a:66:69:4f:53:81:f9:ea:85: 81:cb:9a:44:8b:f0:47:5b:02:77:2b:92:1d:d8:f6:f8:fe:4c: ad:e0:76:22:88:60:90:a7:0a:b9:13:82:9e:95:b7:0b:41:4e: 00:1a:44:07:0f:69:9a:ad:85:be:70:e4:4b:84:c7:e9:d4:e7: ea:7a:56:19:db:65:d2:05:6b:16:95:8c:19:bd:db:fe:ac:52: bf:82:89:ca:33:a2:55:32:6e:27:31:ad:70:52:b7:75:60:55: 78:36:95:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjUwNjEzMDE0MzU1WhcNMjUwNjIwMDE0MzU1WjAYMRYwFAYD VQQDEw02ODRiODI1Yi00NmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHiBXSNXGNl8A5Kc/oNM+aF47AnOKhuuH8vug/deXeu09er5v+LfMbzu6znd Dz+/jeLirHlttcSlAABCODEC4bNeUrYxNHVExk812DxyQ9SguMPyhH8DJFZEjrFY MzlmWl/jRCjqwoXknE3eV4zBOApE3TONFmUsmSBIhMVspkCihHDWw9yLLGf3E3Bm uXq0tcNPayaetawoOWqeWSXC5ZxASN5glqCQWoxusd6Hn+BGA9sBnrh/HvirOQLi u5hDvZ//4366mY7q5ylZNXnMjL2Oexkog5UPuUEjeZHTiXGGctsi8VeC5bYJMOVW kkTT78XIDhC8haNP4ggBCMdaDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqbN5s7 hyhu0HY3DB08XsK6N+DOMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJOSfqE1hJPZHUdb05f0EvZu5Vay5hegaxiVcawLR58zk7fcipR6Z/ lWTCQxC5p1pIp19nts2L8HzAOnl90PGfDd3kGPpwAnTo9t16ph8j/f6wDcMmI1KX jZO/4DIIEVq0nPC1NZaXI1ZNVoxBchfTKQd1skn+pKRg9VigtCENRC8Yn8z15I7o 1191tyQqrYadtlTHS89/BWs6ZmlPU4H56oWBy5pEi/BHWwJ3K5Id2Pb4/kyt4HYi iGCQpwq5E4KelbcLQU4AGkQHD2marYW+cORLhMfp1OfqelYZ22XSBWsWlYwZvdv+ rFK/gonKM6JVMm4nMa1wUrd1YFV4NpWi -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:58 2025 by rpki-client