$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft File: 4UieBUVuksrXFYRyAOSnXWw-Q84.mft (raw, json) Hash identifier: /PahftPyQ0+eIfDvEC72Hd1gY6uCoFGy1yerrFWkVKE= Subject key identifier: 9B:2A:FA:E0:90:62:EB:96:FB:9E:67:4C:33:74:1D:5D:E0:CC:7A:00 Authority key identifier: E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE Certificate issuer: /CN=A91F6AE0/serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Certificate serial: 02CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft Manifest number: 02C9 Signing time: Sun 15 Jun 2025 01:07:01 +0000 Manifest this update: Sun 15 Jun 2025 01:07:00 +0000 Manifest next update: Sun 22 Jun 2025 01:07:00 +0000 Files and hashes: 1: 4UieBUVuksrXFYRyAOSnXWw-Q84.crl (hash: gFW1S8zGNz0BHHxbeuREVju0tE2axeSB4IagME/r47I=) 2: E2DF828CF20211ECBCC9B986C4F9AE02.roa (hash: tfUuxZjAK76Q4T6Ge0ulThHXULE82KNLMMQeccievfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 718 (0x2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6AE0, serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Validity Not Before: Jun 15 01:07:00 2025 GMT Not After : Jun 22 01:07:00 2025 GMT Subject: CN=684e1cb4-f62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:ff:50:4c:bf:19:c2:d1:46:64:b3:1a:ca: 1d:df:b8:8a:03:78:95:f4:3f:ff:ba:d4:ed:a1:57: 6e:85:71:d7:d6:40:0a:01:9a:af:eb:8b:05:47:12: 43:92:96:cb:98:38:56:d8:8d:17:81:8d:2d:08:d7: c5:6d:f8:23:47:69:e7:05:dc:ba:94:8d:55:1d:81: 6e:73:70:fa:28:64:e3:9e:1c:ec:cc:26:b0:9a:d3: 92:32:2c:d5:4f:b8:be:6b:e9:b7:2d:10:11:bd:91: 5b:de:e9:d2:e7:54:9f:5d:87:63:ff:6b:79:70:d0: f2:50:5c:46:15:c7:7b:17:cd:22:8a:97:86:4f:92: dd:0c:04:75:df:4e:b7:94:fb:a7:af:c3:05:49:5f: 61:8f:d3:26:8a:03:2b:d0:77:1a:18:b2:ee:56:9a: 33:fe:8f:c8:72:52:6e:6a:a8:27:d2:f0:8b:3f:84: 12:d8:ed:7c:87:36:3a:0d:63:db:31:d4:b8:38:29: 54:f8:c6:79:da:cc:08:64:8c:6a:40:5b:3a:4f:38: 39:6e:87:ed:0a:43:42:f7:e5:42:ac:f1:d0:a2:4a: a8:12:d5:bc:a9:bf:7c:e5:6d:da:31:00:bd:9d:e2: 1d:89:55:c0:35:5e:d7:6e:9e:30:ab:9d:b4:77:a8: 94:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2A:FA:E0:90:62:EB:96:FB:9E:67:4C:33:74:1D:5D:E0:CC:7A:00 X509v3 Authority Key Identifier: keyid:E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ae:de:6c:cc:cd:2e:6c:58:a6:8b:91:d2:93:81:a4:e4:76: 18:48:e2:ed:cc:f1:92:59:46:b7:3f:07:60:59:24:77:2f:d7: 8f:69:80:ca:b7:96:03:cd:aa:d4:c1:bf:ef:84:0e:47:a4:b2: 43:bf:e7:c2:8e:be:c4:9a:48:a6:47:27:9e:4f:ed:89:f2:94: 97:4f:9a:73:f9:cd:82:5a:71:e2:35:84:95:e8:cc:a1:6a:e2: 12:b5:ed:86:34:88:41:f2:5d:4d:f6:58:50:0a:f5:15:99:e6: 8d:9f:22:13:46:07:72:f4:2b:6c:e6:ee:6b:38:90:e3:e4:93: ee:00:2f:e7:6a:37:5a:8d:30:a1:ea:51:d7:c2:3d:f3:87:9e: fe:27:25:0d:9a:df:84:70:f6:37:f2:e0:bd:1f:6e:82:96:d8: 0b:93:2a:a2:9d:27:51:19:fd:22:d4:99:d7:1b:10:cd:ca:0b: 2e:8f:1a:4b:bc:e9:ec:ac:b3:dc:e4:d5:af:cf:0d:3b:c5:2f: 64:62:1c:d2:79:21:63:f6:53:cd:51:4c:41:17:17:94:dc:11: e6:e0:79:b9:8c:72:d9:e3:ea:07:01:1c:1e:62:8f:02:be:2a: 81:f6:e7:34:c7:37:b5:d6:69:79:ca:37:af:ce:d8:27:a3:a1: 2a:0f:1f:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZBRTAxMTAvBgNVBAUTKEUxNDg5RTA1NDU2RTkyQ0FENzE1ODQ3MjAwRTRBNzVE NkMzRTQzQ0UwHhcNMjUwNjE1MDEwNzAwWhcNMjUwNjIyMDEwNzAwWjAYMRYwFAYD VQQDEw02ODRlMWNiNC1mNjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvb//UEy/GcLRRmSzGsod37iKA3iV9D//utTtoVduhXHX1kAKAZqv64sFRxJD kpbLmDhW2I0XgY0tCNfFbfgjR2nnBdy6lI1VHYFuc3D6KGTjnhzszCawmtOSMizV T7i+a+m3LRARvZFb3unS51SfXYdj/2t5cNDyUFxGFcd7F80iipeGT5LdDAR13063 lPunr8MFSV9hj9MmigMr0HcaGLLuVpoz/o/IclJuaqgn0vCLP4QS2O18hzY6DWPb MdS4OClU+MZ52swIZIxqQFs6Tzg5boftCkNC9+VCrPHQokqoEtW8qb985W3aMQC9 neIdiVXANV7Xbp4wq520d6iUeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsq+uCQ YuuW+55nTDN0HV3gzHoAMB8GA1UdIwQYMBaAFOFIngVFbpLK1xWEcgDkp11sPkPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkFFMC9GQTA0N0Y1NEYx RkMxMUVDOTlCMkNCNkJDNEY5QUUwMi80VWllQlVWdWtzclhGWVJ5QU9TblhXdy1R ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVaWVCVVZ1a3NyWEZZUnlBT1NuWFd3LVE4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkFFMC9GQTA0N0Y1NEYxRkMxMUVDOTlCMkNCNkJDNEY5QUUwMi80VWllQlVWdWtz clhGWVJ5QU9TblhXdy1RODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBurt5szM0ubFimi5HSk4Gk5HYYSOLtzPGSWUa3PwdgWSR3L9ePaYDK t5YDzarUwb/vhA5HpLJDv+fCjr7EmkimRyeeT+2J8pSXT5pz+c2CWnHiNYSV6Myh auISte2GNIhB8l1N9lhQCvUVmeaNnyITRgdy9Cts5u5rOJDj5JPuAC/najdajTCh 6lHXwj3zh57+JyUNmt+EcPY38uC9H26CltgLkyqinSdRGf0i1JnXGxDNygsujxpL vOnsrLPc5NWvzw07xS9kYhzSeSFj9lPNUUxBFxeU3BHm4Hm5jHLZ4+oHARweYo8C viqB9uc0xze11ml5yjevztgno6EqDx+L -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:50 2025 by rpki-client