$ rpki-client -vvf rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft File: 4WPw_lTxea9MbAlwmP774tQ4Wxk.mft (raw, json) Hash identifier: b/QQ7T3cjP2qZHCMBk7BBGkjIBXEo6NE9syafHUYeoQ= Subject key identifier: 8A:94:EC:DC:0D:AF:FA:F5:55:E2:30:C8:1B:8A:89:92:AB:3A:86:FA Authority key identifier: E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 Certificate issuer: /CN=A91F54CD/serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft Manifest number: 34 Signing time: Fri 13 Jun 2025 06:34:01 +0000 Manifest this update: Fri 13 Jun 2025 06:34:01 +0000 Manifest next update: Fri 20 Jun 2025 06:34:00 +0000 Files and hashes: 1: 4WPw_lTxea9MbAlwmP774tQ4Wxk.crl (hash: xc1sMImEwZAfrur0aYN0Xw+Qd3yKDAlwaqmiWBvfzHU=) 2: 2CA96408FD8811EF9404CD48C4F9AE02.roa (hash: ijzYb1r/oyAKx1Hjreuyv8IcJPnhFB/m1NQeL+FUTHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F54CD, serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Validity Not Before: Jun 13 06:34:01 2025 GMT Not After : Jun 20 06:34:00 2025 GMT Subject: CN=684bc659-679a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:95:3f:da:74:99:5a:75:10:e8:e7:ec:2f:64: 27:cd:82:cf:22:e6:46:0e:5f:26:06:4f:4f:73:a6: 88:d7:f5:e3:f1:73:71:e2:b7:e8:6b:d4:a1:c5:2e: 93:f6:f9:27:40:6d:1d:c4:14:f3:6f:7c:89:71:0f: 85:e7:63:eb:a7:e8:7d:20:37:8b:f1:a9:9a:ca:65: f4:ab:ff:63:f6:86:14:09:9f:4b:ed:01:c9:7b:ea: ad:92:e4:3b:e3:7c:78:d7:97:3c:88:b9:5b:fe:31: d3:0b:c6:8b:6b:40:3a:0e:7f:3a:8d:0e:fc:74:ec: 3b:26:70:bd:12:86:6d:51:6e:7c:92:a0:f7:94:5d: 1a:c1:c6:f1:88:dc:68:f9:82:95:2e:f9:cc:ce:fd: f0:3b:d2:ce:14:62:a2:3b:a4:1c:af:94:a7:1f:62: ab:a7:e9:a0:c7:13:e6:5d:fe:7f:ae:d3:0f:5c:3b: 13:c9:d4:97:8b:a2:8d:fe:cd:8b:e5:ae:aa:fa:2d: ee:83:bc:ab:9d:ec:66:e7:ce:2d:a9:4f:d7:ff:12: 9e:81:e7:71:03:c9:b4:c8:56:df:34:9a:ea:10:4c: 84:cf:bb:9b:02:de:cd:9d:ea:1e:38:b7:19:4e:19: 53:44:6c:e2:fb:a3:9d:5c:10:2d:5f:58:6d:34:43: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:94:EC:DC:0D:AF:FA:F5:55:E2:30:C8:1B:8A:89:92:AB:3A:86:FA X509v3 Authority Key Identifier: keyid:E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:e2:7d:eb:7c:5f:32:aa:b0:2f:e0:77:38:48:f5:af:ab:c8: dd:cf:ff:be:8c:29:1f:cd:6d:31:37:4d:80:d0:6b:87:80:2c: 2b:8a:15:46:f2:10:1f:ef:07:41:22:5c:55:63:ba:50:57:76: 93:c8:00:83:24:54:11:c2:f0:8b:14:dc:76:91:b4:58:55:d4: 20:72:54:4d:e5:d0:71:4a:d1:ce:b4:be:66:2e:56:52:12:3c: 51:6b:28:7c:80:55:c9:5c:9b:90:d6:60:62:6f:7a:47:f7:46: 49:1a:3e:e7:da:b7:c9:ba:79:02:fe:c4:76:e3:3e:1d:10:87: 4c:81:51:1d:56:5c:6f:3e:fb:1f:89:c2:de:30:0c:f4:46:71: 22:3b:52:64:19:01:7b:95:eb:43:bf:55:07:ca:84:f0:af:f8: 2f:2d:b4:8e:72:a4:ae:40:49:1c:e5:bc:b9:59:45:03:c5:a3: 31:7b:40:df:98:65:28:8d:de:33:6c:8b:d4:e3:a5:ac:f1:bb: 9c:fb:50:5f:16:57:ad:52:94:e4:75:4b:85:6f:6a:0d:e4:61: 76:f3:50:9a:aa:3c:25:5c:6b:b7:5e:6f:c9:1b:da:9c:39:8f: a5:47:92:7e:2d:96:3a:0b:1a:b0:66:50:0b:56:1d:fd:2d:c9: aa:99:39:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTRDRDExMC8GA1UEBRMoRTE2M0YwRkU1NEYxNzlBRjRDNkMwOTcwOThGRUZCRTJE NDM4NUIxOTAeFw0yNTA2MTMwNjM0MDFaFw0yNTA2MjAwNjM0MDBaMBgxFjAUBgNV BAMTDTY4NGJjNjU5LTY3OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIlT/adJladRDo5+wvZCfNgs8i5kYOXyYGT09zpojX9ePxc3Hit+hr1KHFLpP2 +SdAbR3EFPNvfIlxD4XnY+un6H0gN4vxqZrKZfSr/2P2hhQJn0vtAcl76q2S5Dvj fHjXlzyIuVv+MdMLxotrQDoOfzqNDvx07DsmcL0Shm1RbnySoPeUXRrBxvGI3Gj5 gpUu+czO/fA70s4UYqI7pByvlKcfYqun6aDHE+Zd/n+u0w9cOxPJ1JeLoo3+zYvl rqr6Le6DvKud7Gbnzi2pT9f/Ep6B53EDybTIVt80muoQTITPu5sC3s2d6h44txlO GVNEbOL7o51cEC1fWG00Qw3pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUipTs3A2v +vVV4jDIG4qJkqs6hvowHwYDVR0jBBgwFoAU4WPw/lTxea9MbAlwmP774tQ4Wxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NENEL0QyRTJDQTdDRkQ4 NzExRUZCNjYyNEEyOEM0RjlBRTAyLzRXUHdfbFR4ZWE5TWJBbHdtUDc3NHRRNFd4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFdQd19sVHhlYTlNYkFsd21QNzc0dFE0V3hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NENEL0QyRTJDQTdDRkQ4NzExRUZCNjYyNEEyOEM0RjlBRTAyLzRXUHdfbFR4ZWE5 TWJBbHdtUDc3NHRRNFd4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKXifet8XzKqsC/gdzhI9a+ryN3P/76MKR/NbTE3TYDQa4eALCuKFUby EB/vB0EiXFVjulBXdpPIAIMkVBHC8IsU3HaRtFhV1CByVE3l0HFK0c60vmYuVlIS PFFrKHyAVclcm5DWYGJvekf3RkkaPufat8m6eQL+xHbjPh0Qh0yBUR1WXG8++x+J wt4wDPRGcSI7UmQZAXuV60O/VQfKhPCv+C8ttI5ypK5ASRzlvLlZRQPFozF7QN+Y ZSiN3jNsi9Tjpazxu5z7UF8WV61SlOR1S4Vvag3kYXbzUJqqPCVca7deb8kb2pw5 j6VHkn4tljoLGrBmUAtWHf0tyaqZOeE= -----END CERTIFICATE-----Generated at Sat Jun 14 19:07:49 2025 by rpki-client