$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json) Hash identifier: B9XmIihDyMXyR9c8NtuswncV10tXr6frkE0Fi2409Js= Subject key identifier: FA:83:14:F9:2A:5F:D3:5C:6B:48:1D:A0:AA:EE:93:0F:1E:13:D7:9A Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft Manifest number: 0E Signing time: Thu 19 Jun 2025 07:28:17 +0000 Manifest this update: Thu 19 Jun 2025 07:28:17 +0000 Manifest next update: Thu 26 Jun 2025 07:28:17 +0000 Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: 1QxCl7X8qCYChHBapG1PHubZM4m/QWH2mFVRLxbJrdE=) 2: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: iR9RmJIaK9kKAtKzjMGd269EeycB0OEwfaUigxvrCq4=) 3: F88154843B9D11F091B39D67C4F9AE02.roa (hash: nNxkYkRl2gKLDvZBsXppHYQmBwtDL7vgL/l44dOoypk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Validity Not Before: Jun 19 07:28:17 2025 GMT Not After : Jun 26 07:28:17 2025 GMT Subject: CN=6853bc11-a2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:44:a7:72:e2:1c:46:b2:23:97:56:a1:9d:37: 11:54:69:93:46:ab:f7:88:67:e3:14:08:34:d2:41: 37:9d:3b:f5:fb:84:9a:b7:9e:08:a3:ed:8f:c4:43: 97:bf:91:ed:eb:0d:7a:68:4f:b7:ca:da:61:95:2a: 7b:10:bd:20:9d:ec:1d:bc:b5:76:42:42:4d:6f:62: b4:7d:28:71:21:80:6e:eb:24:29:e6:02:9e:00:d6: 47:cd:5e:2f:08:07:0c:1f:44:70:8b:ee:bc:49:c3: c8:c6:ec:2e:39:60:d5:e8:33:de:ea:0d:38:21:eb: 2a:ac:36:7d:91:7f:ae:5b:6f:09:d5:10:ee:4b:05: 3b:da:7b:80:92:67:b9:a6:25:3b:11:ab:1d:3a:35: d8:ce:81:60:36:5e:d0:10:3c:29:27:eb:45:c1:20: ca:8f:b0:39:6f:47:bc:7d:e9:d5:37:f3:a0:9b:9d: 1c:bd:f1:9e:10:89:e0:22:f1:9d:ce:0d:e5:c4:ea: 19:97:c2:fe:0f:c9:ec:d9:68:3e:ef:7d:3e:24:b4: 26:ad:2c:e2:ac:dd:54:b1:e4:41:59:d3:f8:35:f4: 09:b4:30:10:cd:e9:e9:8a:33:c6:be:8c:7c:2e:57: bb:31:b5:e7:79:04:f2:eb:04:e0:2d:20:94:a3:cd: 58:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:83:14:F9:2A:5F:D3:5C:6B:48:1D:A0:AA:EE:93:0F:1E:13:D7:9A X509v3 Authority Key Identifier: keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ff:6f:19:83:13:b8:86:ab:9d:fa:e9:e6:f4:e0:17:c2:9c: 2a:78:2c:dd:a2:18:35:61:1b:bf:75:a0:5f:0d:1b:c7:cf:e6: 54:f9:e2:7c:c7:be:5f:55:1a:07:45:40:98:fe:05:d1:7f:07: e0:1f:6d:2b:62:cc:f4:1b:71:7f:b4:55:df:cd:52:b0:df:5f: 84:c3:f2:b0:63:ad:f2:f0:99:7e:ba:1a:05:d1:80:43:ec:81: 1f:f3:db:86:52:49:b8:78:83:e0:ea:be:c2:4d:45:3a:90:b7: 41:ca:f1:1d:2f:81:9e:1b:5b:24:05:15:d7:ae:f2:32:e6:a9: b5:2f:56:a2:f2:2d:9d:3f:a6:dc:f4:a7:cf:aa:64:39:21:bb: ec:10:af:31:73:49:74:d4:4d:15:31:bb:61:78:c2:25:2a:8a: ba:b4:5b:94:b7:94:ae:11:0f:26:95:19:41:95:b4:c9:87:8a: 40:4d:b7:68:b3:49:00:61:7c:2d:d0:aa:d2:01:61:43:39:b3: 5c:8b:6c:bd:7c:e8:8a:26:cf:95:97:59:e9:9d:cd:49:2b:71: 22:03:59:8d:d3:c8:97:e3:70:e4:c4:04:29:e9:8e:3d:7b:94: bd:58:7c:fa:99:5b:57:5e:21:9f:2c:57:77:70:a8:44:47:04: fe:b9:23:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NkMxMDExMC8GA1UEBRMoRTJCMERGQTY5MEQyQzdFQUM0MzYzNjc1NkU0MzdCN0My NjI2RjRCQjAeFw0yNTA2MTkwNzI4MTdaFw0yNTA2MjYwNzI4MTdaMBgxFjAUBgNV BAMTDTY4NTNiYzExLWEyZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzRKdy4hxGsiOXVqGdNxFUaZNGq/eIZ+MUCDTSQTedO/X7hJq3ngij7Y/EQ5e/ ke3rDXpoT7fK2mGVKnsQvSCd7B28tXZCQk1vYrR9KHEhgG7rJCnmAp4A1kfNXi8I BwwfRHCL7rxJw8jG7C45YNXoM97qDTgh6yqsNn2Rf65bbwnVEO5LBTvae4CSZ7mm JTsRqx06NdjOgWA2XtAQPCkn60XBIMqPsDlvR7x96dU386CbnRy98Z4QieAi8Z3O DeXE6hmXwv4PyezZaD7vfT4ktCatLOKs3VSx5EFZ0/g19Am0MBDN6emKM8a+jHwu V7sxted5BPLrBOAtIJSjzVgbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+oMU+Spf 01xrSB2gqu6TDx4T15owHwYDVR0jBBgwFoAU4rDfppDSx+rENjZ1bkN7fCYm9Lsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2QzEwLzBFOTQwNUJBM0I5 RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlM cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNHJEZnBwRFN4LXJFTmpaMWJrTjdmQ1ltOUxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2 QzEwLzBFOTQwNUJBM0I5RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1y RU5qWjFia043ZkNZbTlMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGr/bxmDE7iGq5366eb04BfCnCp4LN2iGDVhG791oF8NG8fP5lT54nzH vl9VGgdFQJj+BdF/B+AfbStizPQbcX+0Vd/NUrDfX4TD8rBjrfLwmX66GgXRgEPs gR/z24ZSSbh4g+DqvsJNRTqQt0HK8R0vgZ4bWyQFFdeu8jLmqbUvVqLyLZ0/ptz0 p8+qZDkhu+wQrzFzSXTUTRUxu2F4wiUqirq0W5S3lK4RDyaVGUGVtMmHikBNt2iz SQBhfC3QqtIBYUM5s1yLbL186Iomz5WXWemdzUkrcSIDWY3TyJfjcOTEBCnpjj17 lL1YfPqZW1deIZ8sV3dwqERHBP65Iyk= -----END CERTIFICATE-----Generated at Thu Jun 19 15:04:22 2025 by rpki-client