$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft File: 4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json) Hash identifier: rbCb6dgSs80WYj3iAEAfPz0O3/EboPJG1ry/wGeDkvM= Subject key identifier: 65:D4:7D:06:36:67:0D:FA:F4:31:C4:16:54:08:29:32:88:83:EC:8F Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 Certificate issuer: /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Certificate serial: 08D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft Manifest number: 08C8 Signing time: Thu 12 Jun 2025 20:14:08 +0000 Manifest this update: Thu 12 Jun 2025 20:14:07 +0000 Manifest next update: Thu 19 Jun 2025 20:14:07 +0000 Files and hashes: 1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: LQ7SPMYExGeAC5vI9uEOaWE/at6qKBFL152uUAAE/ZY=) 2: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: LQpBHD/6AS6W0OQnBLuqSE1x8/uA+xxXkzDajQvXSSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2262 (0x8d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Validity Not Before: Jun 12 20:14:07 2025 GMT Not After : Jun 19 20:14:07 2025 GMT Subject: CN=684b350f-2a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:60:cf:c0:89:32:27:a7:66:df:ce:fa:db:25: 7e:48:05:94:a1:4f:d5:bb:ca:54:ba:7c:2b:65:45: 5e:77:53:4b:7e:e6:68:11:37:71:5b:df:c1:90:33: 06:a2:dc:99:c5:e3:d5:55:ce:68:ae:5b:26:0b:90: 6c:c4:af:70:84:51:c4:eb:96:04:a1:b9:c8:b7:c8: 7b:5d:da:0f:f5:32:08:b9:bd:cd:4d:df:01:cf:e0: 93:8a:6d:2b:12:98:0d:a2:48:56:ca:f0:f3:3f:e0: fc:88:99:eb:4b:1b:47:01:84:5a:86:a3:6c:fe:52: aa:19:3d:71:43:95:55:39:bd:db:1e:da:cb:cf:07: 1e:f8:20:cf:b2:64:4b:a7:65:4f:38:ec:32:73:a9: c1:08:18:fe:fb:3e:03:70:fd:a5:b8:d3:5e:7d:ce: 87:ff:14:0c:92:6b:ba:b2:43:19:60:c5:09:ee:a7: 6e:61:e5:ea:5f:2d:e0:5d:f1:fe:d8:69:03:86:37: 2c:a5:f4:74:6e:ee:8f:a3:f5:6e:c9:ef:aa:dc:ff: a5:eb:5b:8b:cb:e4:83:73:77:fc:31:41:f2:c5:07: 2f:3c:bf:b6:ec:ce:3f:ad:37:26:d6:49:e3:f8:33: 45:a7:3b:d9:37:a9:fe:ab:16:a5:27:06:2c:49:52: 8c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D4:7D:06:36:67:0D:FA:F4:31:C4:16:54:08:29:32:88:83:EC:8F X509v3 Authority Key Identifier: keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:50:c5:08:1a:c0:f9:90:f1:84:f2:33:27:71:5f:87:5f:ef: 88:93:5e:25:9f:ad:ab:f8:db:4f:10:b0:58:10:b7:21:2f:25: ba:fc:58:28:43:a7:22:4b:6c:9e:b0:20:52:04:d3:70:d4:d7: 71:fd:43:82:57:b6:3b:6b:ad:73:a9:f4:76:73:c7:6c:64:1d: a2:82:e7:a5:b0:11:8c:b3:1f:5c:3a:0d:a1:78:8f:9a:5c:d1: 26:ea:1a:1f:5c:28:a1:9c:6e:b2:c2:cd:71:16:74:1a:b0:82: ff:fd:8e:72:28:13:fa:b7:28:bb:9f:37:34:1b:1d:8f:3a:5f: f6:ff:44:67:87:e4:bb:75:51:ab:01:56:6c:f8:bf:26:9f:ef: 23:62:f4:9a:3d:9d:ab:a9:0d:eb:4b:49:ea:fe:01:fa:ca:c3: 5b:19:26:c7:9b:b1:ff:a2:f8:91:ba:05:b0:6c:ff:60:b7:a5: d3:7e:eb:50:86:b3:db:76:8a:9a:8d:ac:a1:85:52:28:42:74: 4a:03:84:c7:d5:f4:cf:93:c6:65:b2:fb:3d:8b:52:71:aa:82: 99:62:c8:18:74:12:cd:2a:1d:d4:0f:4b:83:95:98:3c:7c:bc: c8:df:3a:57:cc:c5:05:03:19:ab:cc:37:fe:db:2b:41:26:fa: 5f:17:f4:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRDNkIxMTAvBgNVBAUTKEUyNjg3M0I0NUY4OEQxRjVEODgzQzE3RTRDQ0Y3MEEy NDUxNjIxNDIwHhcNMjUwNjEyMjAxNDA3WhcNMjUwNjE5MjAxNDA3WjAYMRYwFAYD VQQDEw02ODRiMzUwZi0yYTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2DPwIkyJ6dm38762yV+SAWUoU/Vu8pUunwrZUVed1NLfuZoETdxW9/BkDMG otyZxePVVc5orlsmC5BsxK9whFHE65YEobnIt8h7XdoP9TIIub3NTd8Bz+CTim0r EpgNokhWyvDzP+D8iJnrSxtHAYRahqNs/lKqGT1xQ5VVOb3bHtrLzwce+CDPsmRL p2VPOOwyc6nBCBj++z4DcP2luNNefc6H/xQMkmu6skMZYMUJ7qduYeXqXy3gXfH+ 2GkDhjcspfR0bu6Po/Vuye+q3P+l61uLy+SDc3f8MUHyxQcvPL+27M4/rTcm1knj +DNFpzvZN6n+qxalJwYsSVKMQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXUfQY2 Zw369DHEFlQIKTKIg+yPMB8GA1UdIwQYMBaAFOJoc7RfiNH12IPBfkzPcKJFFiFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEM2Qi8yNzhBQTNFNEI1 MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBmWFlnOEYtVE05d29rVVdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRtaHp0Ri1JMGZYWWc4Ri1UTTl3b2tVV0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEM2Qi8yNzhBQTNFNEI1MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBm WFlnOEYtVE05d29rVVdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaUMUIGsD5kPGE8jMncV+HX++Ik14ln62r+NtPELBYELchLyW6/Fgo Q6ciS2yesCBSBNNw1Ndx/UOCV7Y7a61zqfR2c8dsZB2iguelsBGMsx9cOg2heI+a XNEm6hofXCihnG6yws1xFnQasIL//Y5yKBP6tyi7nzc0Gx2POl/2/0Rnh+S7dVGr AVZs+L8mn+8jYvSaPZ2rqQ3rS0nq/gH6ysNbGSbHm7H/oviRugWwbP9gt6XTfutQ hrPbdoqajayhhVIoQnRKA4TH1fTPk8Zlsvs9i1JxqoKZYsgYdBLNKh3UD0uDlZg8 fLzI3zpXzMUFAxmrzDf+2ytBJvpfF/S4 -----END CERTIFICATE-----Generated at Sat Jun 14 17:18:59 2025 by rpki-client