$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft File: 4ISfBUORggKxeEROX_IviZ-eMg4.mft (raw, json) Hash identifier: FzcoN7IpNRUYmQoFrH0ttEF46YcC9/7LV6d66ZtLthY= Subject key identifier: CF:D0:98:9D:DA:1E:16:A6:BD:1E:88:A9:FB:3E:2D:95:12:0D:83:F1 Authority key identifier: E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E Certificate issuer: /CN=A91F7DBA/serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Certificate serial: 04C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft Manifest number: 04BF Signing time: Thu 12 Jun 2025 23:26:14 +0000 Manifest this update: Thu 12 Jun 2025 23:26:14 +0000 Manifest next update: Thu 19 Jun 2025 23:26:14 +0000 Files and hashes: 1: 4ISfBUORggKxeEROX_IviZ-eMg4.crl (hash: a2yN4ayhU/uFI9Myn5BcPSDO+s2MOwvhZ/GqafT07is=) 2: 145F8B6434D211EEA9BD8F64C4F9AE02.roa (hash: MOCtEXuSWTSIWA+J+aTGfRvUWTN01u8L13mcqeEHJ4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DBA, serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Validity Not Before: Jun 12 23:26:14 2025 GMT Not After : Jun 19 23:26:14 2025 GMT Subject: CN=684b6216-680e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:70:61:ba:be:14:b3:07:cf:66:72:f9:79: f1:73:fc:a4:1c:42:8e:3b:e3:e2:ca:b7:b7:06:8d: 97:dd:1d:f7:fc:92:fe:38:ea:45:be:3a:b8:3a:e6: dc:b7:2a:3f:64:d8:cb:1b:db:27:33:a7:93:ef:65: e0:dc:01:2d:ef:d0:6e:ee:27:bf:0a:7c:48:b3:89: 78:65:5f:af:11:19:08:2b:61:c0:fa:4d:b1:6e:29: 77:a7:2e:1a:8c:8d:49:f3:f4:27:c9:35:9b:d4:40: 91:64:29:95:c8:f5:98:4c:6e:6d:ad:d6:53:c8:cf: d1:53:ed:28:e1:4b:6a:dc:e5:f7:36:f2:80:ba:5c: 5d:de:0b:29:00:79:81:e3:c4:bc:23:19:2b:94:40: 3f:5f:6e:32:69:48:82:27:5c:a8:4a:fa:34:69:aa: 8a:6a:f4:5e:e9:ea:93:f8:4a:2f:b5:52:7e:e3:41: 95:d2:80:28:46:46:ec:e0:42:91:3e:e8:24:07:3e: a2:12:e9:ca:ba:34:31:d4:6f:f3:85:f9:f8:b7:44: 66:80:dd:1d:01:5a:b2:d8:90:4f:69:fb:5d:91:4d: df:e0:a4:ec:7b:20:92:52:d9:61:55:50:fc:1c:f4: 30:61:ad:f9:d9:35:f9:42:c7:c0:8b:18:36:09:5f: fa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D0:98:9D:DA:1E:16:A6:BD:1E:88:A9:FB:3E:2D:95:12:0D:83:F1 X509v3 Authority Key Identifier: keyid:E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:f8:22:59:4d:ed:7d:ca:32:eb:05:68:88:24:66:b3:4a:62: 91:af:f5:48:4a:d4:1e:0e:33:2d:9c:99:70:6f:82:e0:35:9d: 7a:30:01:9c:bb:27:a1:64:41:a3:c4:f0:5a:60:2e:53:9b:1a: 1f:e5:be:1e:ee:78:c8:d7:f7:4d:fc:1c:b2:5e:d0:61:7b:23: a0:6b:93:ea:dc:01:08:b0:c6:66:bb:13:0d:b0:78:b1:6b:5a: a3:22:db:1f:49:16:9c:79:9a:e7:fc:e4:dd:16:d8:9a:3b:5b: 5d:d2:64:44:d9:3e:af:1c:8f:12:93:46:7a:11:5b:6e:4f:f8: 88:b3:17:2b:f9:d2:88:5d:1f:01:b1:b8:0a:dd:25:83:fd:9d: 1d:f2:05:a4:ce:c6:c5:0f:33:c9:00:31:f1:ec:c1:2b:a3:f8: f1:b2:4e:5a:4c:09:af:93:c3:d8:cc:a3:27:ce:b3:dc:b3:3c: 2f:e6:50:ce:04:00:a9:16:a4:cc:7f:46:da:67:5a:3d:0e:85: 1c:2c:b7:99:15:05:f0:ec:b7:e3:ba:9b:34:a9:f4:10:5b:8f: 3b:0f:08:1c:16:38:56:46:08:11:b3:78:36:84:fc:f1:2e:59: 34:1d:f4:ac:7d:64:43:f2:ab:90:7b:9d:94:d3:d3:41:83:b9: 9b:1c:37:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQkExMTAvBgNVBAUTKEUwODQ5RjA1NDM5MTgyMDJCMTc4NDQ0RTVGRjIyRjg5 OUY5RTMyMEUwHhcNMjUwNjEyMjMyNjE0WhcNMjUwNjE5MjMyNjE0WjAYMRYwFAYD VQQDEw02ODRiNjIxNi02ODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshBwYbq+FLMHz2Zy+Xnxc/ykHEKOO+Piyre3Bo2X3R33/JL+OOpFvjq4Oubc tyo/ZNjLG9snM6eT72Xg3AEt79Bu7ie/CnxIs4l4ZV+vERkIK2HA+k2xbil3py4a jI1J8/QnyTWb1ECRZCmVyPWYTG5trdZTyM/RU+0o4Utq3OX3NvKAulxd3gspAHmB 48S8IxkrlEA/X24yaUiCJ1yoSvo0aaqKavRe6eqT+EovtVJ+40GV0oAoRkbs4EKR PugkBz6iEunKujQx1G/zhfn4t0RmgN0dAVqy2JBPaftdkU3f4KTseyCSUtlhVVD8 HPQwYa352TX5QsfAixg2CV/6cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/QmJ3a HhamvR6Iqfs+LZUSDYPxMB8GA1UdIwQYMBaAFOCEnwVDkYICsXhETl/yL4mfnjIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RCQS8yOEVCNzE0NjJC RDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdnS3hlRVJPWF9JdmlaLWVN ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJU2ZCVU9SZ2dLeGVFUk9YX0l2aVotZU1nNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RCQS8yOEVCNzE0NjJCRDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdn S3hlRVJPWF9JdmlaLWVNZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw+CJZTe19yjLrBWiIJGazSmKRr/VIStQeDjMtnJlwb4LgNZ16MAGc uyehZEGjxPBaYC5Tmxof5b4e7njI1/dN/ByyXtBheyOga5Pq3AEIsMZmuxMNsHix a1qjItsfSRaceZrn/OTdFtiaO1td0mRE2T6vHI8Sk0Z6EVtuT/iIsxcr+dKIXR8B sbgK3SWD/Z0d8gWkzsbFDzPJADHx7MEro/jxsk5aTAmvk8PYzKMnzrPcszwv5lDO BACpFqTMf0baZ1o9DoUcLLeZFQXw7Lfjups0qfQQW487DwgcFjhWRggRs3g2hPzx Llk0HfSsfWRD8quQe52U09NBg7mbHDcS -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:34 2025 by rpki-client