$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json) Hash identifier: 4ZpL0fhOwzyND3iljq6xGP5is37cw/3gYfw2ZPR1elk= Subject key identifier: AB:5D:7F:54:CD:25:FE:AC:B4:72:C2:0B:97:8B:CE:38:47:0E:16:B4 Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft Manifest number: F1 Signing time: Tue 17 Jun 2025 04:21:44 +0000 Manifest this update: Tue 17 Jun 2025 04:21:43 +0000 Manifest next update: Tue 24 Jun 2025 04:21:43 +0000 Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: PXdc9e8ge4d12suqUFDgAKCmGVru1OVEj2LP7nl92kc=) 2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: Sbd7uixAB+aEWkmSGOrUVMGizlHems1ClmWbyRlTiKs=) 3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: dfJCTgGMLuVcX+tEuN4HdomKZZyzPfpEj+AQkrGQApI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Validity Not Before: Jun 17 04:21:43 2025 GMT Not After : Jun 24 04:21:43 2025 GMT Subject: CN=6850ed58-3131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e4:a2:fc:68:e6:34:0f:ae:ed:e3:58:04:2b: 3e:c6:4c:48:01:22:9f:45:ae:e2:cc:b0:6e:dd:93: d4:c6:ff:65:7b:c6:91:50:1e:e7:ad:d5:3c:bd:f1: 66:a8:74:8b:09:30:d8:00:e6:c3:92:ba:2e:5a:8b: f7:ba:a9:e0:d9:38:5b:09:47:4a:ac:e8:df:25:68: 90:99:4c:f9:7c:74:ad:ec:20:c1:e9:4b:96:72:a6: 0e:7b:c8:be:a9:93:88:d7:17:e2:6b:43:13:7f:7b: 34:26:b9:0a:23:d2:02:c8:3b:28:af:20:4f:3f:0f: 54:6d:2a:81:4e:81:e5:4c:fc:0b:60:5d:4d:35:83: 64:9c:80:7c:41:ca:b5:68:e9:04:34:cc:5f:21:81: 7f:be:2e:ec:40:07:ba:01:8e:fe:ee:15:9b:13:e0: 30:33:42:cf:1e:d4:23:ba:9d:7c:ee:70:a8:c0:19: 89:1a:90:1d:62:85:4f:30:fd:b1:03:11:56:35:51: 4d:cb:76:04:e9:c4:bd:90:8b:4f:e7:d7:c3:5b:0e: 53:4a:b1:72:b4:17:8c:1e:46:ab:e1:0d:26:2f:df: b0:3d:f3:c1:a1:02:7f:19:7d:cf:77:9b:b1:d5:7d: 45:0d:5d:ef:d3:e7:bb:4f:be:f5:18:6d:6b:c9:e2: c7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5D:7F:54:CD:25:FE:AC:B4:72:C2:0B:97:8B:CE:38:47:0E:16:B4 X509v3 Authority Key Identifier: keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:92:25:36:b4:b7:db:5e:1e:4c:be:39:58:7f:d9:52:9a:dc: 35:e6:6c:bc:a9:96:03:16:2d:db:32:40:a9:f0:50:a2:57:6c: 22:90:ab:f3:df:9a:1f:91:ab:0a:38:b2:76:7f:66:da:c6:af: 29:b2:34:eb:cc:2b:8e:50:41:6d:07:45:8b:5b:d3:99:97:6e: 50:ce:42:4f:3e:f5:2d:b8:70:41:a4:49:e8:36:90:a7:ac:59: e7:aa:e3:55:f5:e6:eb:10:e3:0b:84:59:1f:f1:bd:68:95:e0: 67:c5:73:4f:ce:91:1f:0b:2e:16:1c:03:4f:fd:b8:13:b3:7d: ae:54:aa:aa:d0:48:b1:1a:66:c5:90:11:3b:6a:64:dc:fe:c4: 80:d2:05:44:e7:ad:14:3a:d3:c4:76:a6:bd:1c:4a:17:e0:d0: d4:6b:45:7a:04:f2:eb:ee:ae:cc:da:90:ff:0f:1e:1a:77:a2: ee:c5:bf:01:0d:40:f0:4e:76:80:08:08:2f:f9:80:4e:86:55: e3:28:10:33:61:20:2a:f2:18:3b:9d:e4:8c:55:cb:50:6b:10: fb:cc:c9:4b:e9:c7:d3:48:6d:7a:e6:50:c1:2e:e0:74:e8:df: e4:34:90:f1:91:3e:90:bd:80:54:ab:b1:71:22:e4:9d:96:31: 48:86:0c:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ4QkUxMTAvBgNVBAUTKEUzRjE4RDQxMjAyNkYzMUJBNDQzRUEzM0Y1NjcwNkZG QjJGMEYxNjIwHhcNMjUwNjE3MDQyMTQzWhcNMjUwNjI0MDQyMTQzWjAYMRYwFAYD VQQDEw02ODUwZWQ1OC0zMTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuSi/GjmNA+u7eNYBCs+xkxIASKfRa7izLBu3ZPUxv9le8aRUB7nrdU8vfFm qHSLCTDYAObDkrouWov3uqng2ThbCUdKrOjfJWiQmUz5fHSt7CDB6UuWcqYOe8i+ qZOI1xfia0MTf3s0JrkKI9ICyDsoryBPPw9UbSqBToHlTPwLYF1NNYNknIB8Qcq1 aOkENMxfIYF/vi7sQAe6AY7+7hWbE+AwM0LPHtQjup187nCowBmJGpAdYoVPMP2x AxFWNVFNy3YE6cS9kItP59fDWw5TSrFytBeMHkar4Q0mL9+wPfPBoQJ/GX3Pd5ux 1X1FDV3v0+e7T771GG1ryeLHzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtdf1TN Jf6stHLCC5eLzjhHDha0MB8GA1UdIwQYMBaAFOPxjUEgJvMbpEPqM/VnBv+y8PFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDhCRS9DNjhFRkY5RUU1 RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4dWtRLW96OVdjR183THc4 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDhCRS9DNjhFRkY5RUU1RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4 dWtRLW96OVdjR183THc4V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9kiU2tLfbXh5MvjlYf9lSmtw15my8qZYDFi3bMkCp8FCiV2wikKvz 35ofkasKOLJ2f2baxq8psjTrzCuOUEFtB0WLW9OZl25QzkJPPvUtuHBBpEnoNpCn rFnnquNV9ebrEOMLhFkf8b1oleBnxXNPzpEfCy4WHANP/bgTs32uVKqq0EixGmbF kBE7amTc/sSA0gVE560UOtPEdqa9HEoX4NDUa0V6BPLr7q7M2pD/Dx4ad6Luxb8B DUDwTnaACAgv+YBOhlXjKBAzYSAq8hg7neSMVctQaxD7zMlL6cfTSG165lDBLuB0 6N/kNJDxkT6QvYBUq7FxIuSdljFIhgwE -----END CERTIFICATE-----Generated at Wed Jun 18 15:27:16 2025 by rpki-client