$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft File: 4RvPp2LU9ssvatCdA6lA4P6qAfg.mft (raw, json) Hash identifier: et1WxCi+UmsanQJiOI7SJEedT+aTRJxllI9SKycIIkA= Subject key identifier: 58:83:FD:B7:00:A9:83:21:37:DE:57:B2:97:C7:E9:4B:3C:DF:6E:17 Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 Certificate issuer: /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Certificate serial: 1EF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft Manifest number: 1EE9 Signing time: Wed 02 Jul 2025 16:09:46 +0000 Manifest this update: Wed 02 Jul 2025 16:09:45 +0000 Manifest next update: Wed 09 Jul 2025 16:09:45 +0000 Files and hashes: 1: 4RvPp2LU9ssvatCdA6lA4P6qAfg.crl (hash: lfIlomicFIFNUmjGCLq0KWrS/y/4+57Ec6CjgVClp8Q=) 2: DB92DE200AEF11ECB7243C0FC4F9AE02.roa (hash: jUBoH/NsE+2KO1Z4hcom5Ddnhv0XpfeG1RJbEdRDm9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7920 (0x1ef0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Validity Not Before: Jul 2 16:09:45 2025 GMT Not After : Jul 9 16:09:45 2025 GMT Subject: CN=686559ca-f898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:be:8e:8a:0a:20:f9:74:91:ce:8f:be:dc:ab: 09:e8:b7:22:c4:dd:87:dc:b8:c6:d8:1f:78:ac:39: 31:b6:d8:a0:ff:63:80:2f:be:7f:c6:2a:cb:af:ef: 2c:b8:c7:0f:4a:5f:73:b7:a5:66:80:2c:f4:d2:67: 6f:04:8f:34:f9:ad:eb:a4:81:6a:48:c3:a6:45:39: 2e:2f:74:52:a9:87:6a:c6:09:4b:3d:3c:e5:61:93: ae:28:1e:2d:9f:76:13:1e:bd:53:9d:82:ca:2a:d9: b8:59:0e:b0:68:5f:7a:25:66:2e:3d:a6:bf:1a:2b: 8f:10:36:90:5f:c3:6c:85:95:4c:e2:ed:80:86:76: 33:92:08:98:9b:1a:54:9e:e9:6b:2a:63:06:4a:2e: a8:bd:95:1b:b5:71:46:80:63:51:69:97:0c:97:65: dd:35:3c:aa:92:d6:ea:52:53:f1:e3:77:25:bf:f2: df:fe:ec:7d:55:7d:a5:43:30:74:6e:79:1b:b7:09: a5:92:05:ee:70:cf:ec:b9:69:b4:c3:f4:33:b3:06: ed:47:c7:0a:e5:6d:1e:e8:d7:45:c4:13:04:29:3e: 8a:dc:31:b7:2d:30:34:ad:e7:ce:4b:7a:06:7e:82: 69:1f:55:ee:4a:bc:97:18:b7:d2:f8:eb:8e:05:64: 51:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:83:FD:B7:00:A9:83:21:37:DE:57:B2:97:C7:E9:4B:3C:DF:6E:17 X509v3 Authority Key Identifier: keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:11:be:1f:43:53:b3:c6:df:c8:cd:86:16:35:d0:68:44:87: 7d:2e:41:c7:66:82:44:71:b1:c8:65:3a:3c:34:e5:1f:af:e1: 52:40:ac:4f:17:34:aa:ce:a8:0d:0c:d1:48:ba:be:78:6e:87: c1:07:f0:84:69:ec:3c:0f:de:86:f5:75:f3:32:40:a3:ce:50: 0f:b2:b1:ee:37:b9:83:93:c2:5c:3b:26:86:46:ff:c2:8f:12: 41:da:4f:9e:6e:78:c1:cc:94:bf:26:88:82:bb:e6:a7:2e:15: 73:c3:6b:99:06:70:31:d9:0e:dc:35:56:76:83:88:82:53:99: 1f:fb:14:5c:24:d5:85:b8:18:ba:24:37:c3:15:44:84:c1:18: 57:18:d8:31:d0:e6:dc:a1:e9:be:ce:96:45:7d:98:da:27:7d: 37:12:a3:12:1b:5e:bf:bb:1a:94:95:ab:6a:a6:cb:04:1d:fb: 0f:0b:2e:ca:d9:48:f1:92:de:0e:30:43:76:a6:74:3d:b1:e6: 98:ba:dd:e6:f0:e1:f1:00:78:66:41:81:7b:ab:7b:e9:06:73: 16:a9:50:ee:10:82:ef:a1:3c:45:8b:96:ec:20:e7:f7:73:a9: 4f:cc:12:be:c4:e2:36:dc:e6:dd:74:a5:bd:d0:ec:fe:b9:7f: 75:6b:7e:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAwRjUxMTAvBgNVBAUTKEUxMUJDRkE3NjJENEY2Q0IyRjZBRDA5RDAzQTk0MEUw RkVBQTAxRjgwHhcNMjUwNzAyMTYwOTQ1WhcNMjUwNzA5MTYwOTQ1WjAYMRYwFAYD VQQDEw02ODY1NTljYS1mODk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7L6Oigog+XSRzo++3KsJ6LcixN2H3LjG2B94rDkxttig/2OAL75/xirLr+8s uMcPSl9zt6VmgCz00mdvBI80+a3rpIFqSMOmRTkuL3RSqYdqxglLPTzlYZOuKB4t n3YTHr1TnYLKKtm4WQ6waF96JWYuPaa/GiuPEDaQX8NshZVM4u2AhnYzkgiYmxpU nulrKmMGSi6ovZUbtXFGgGNRaZcMl2XdNTyqktbqUlPx43clv/Lf/ux9VX2lQzB0 bnkbtwmlkgXucM/suWm0w/QzswbtR8cK5W0e6NdFxBMEKT6K3DG3LTA0refOS3oG foJpH1XuSryXGLfS+OuOBWRRTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiD/bcA qYMhN95XspfH6Us8324XMB8GA1UdIwQYMBaAFOEbz6di1PbLL2rQnQOpQOD+qgH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDBGNS9EOUU5NTJGNDVF RjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlzc3ZhdENkQTZsQTRQNnFB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSdlBwMkxVOXNzdmF0Q2RBNmxBNFA2cUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDBGNS9EOUU5NTJGNDVFRjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlz c3ZhdENkQTZsQTRQNnFBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcEb4fQ1Ozxt/IzYYWNdBoRId9LkHHZoJEcbHIZTo8NOUfr+FSQKxP FzSqzqgNDNFIur54bofBB/CEaew8D96G9XXzMkCjzlAPsrHuN7mDk8JcOyaGRv/C jxJB2k+ebnjBzJS/JoiCu+anLhVzw2uZBnAx2Q7cNVZ2g4iCU5kf+xRcJNWFuBi6 JDfDFUSEwRhXGNgx0Obcoem+zpZFfZjaJ303EqMSG16/uxqUlatqpssEHfsPCy7K 2Ujxkt4OMEN2pnQ9seaYut3m8OHxAHhmQYF7q3vpBnMWqVDuEILvoTxFi5bsIOf3 c6lPzBK+xOI23ObddKW90Oz+uX91a35i -----END CERTIFICATE-----Generated at Thu Jul 3 06:04:30 2025 by rpki-client