$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft File: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json) Hash identifier: Dku3vOEe28ScK3AWCWykDbZ6GIGtzgzEFqMy5hrc8A8= Subject key identifier: 0B:D6:A7:DA:A8:64:B7:8F:01:17:9B:16:5D:1E:98:0E:01:36:7D:B2 Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE Certificate issuer: /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft Manifest number: 018A Signing time: Tue 01 Jul 2025 03:57:34 +0000 Manifest this update: Tue 01 Jul 2025 03:57:33 +0000 Manifest next update: Tue 08 Jul 2025 03:57:33 +0000 Files and hashes: 1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: 2pZeHF5323Zx6VrFvgw9rRlFqZMjf1XDReMJ4TkNcFg=) 2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: g/bQAw9THkYcNZaMLuiJQ2Zt7avDBvnfO+P6mLE3afM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273A9, serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE Validity Not Before: Jul 1 03:57:33 2025 GMT Not After : Jul 8 03:57:33 2025 GMT Subject: CN=68635cae-732b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f9:1e:c3:84:07:2d:d4:bb:08:01:aa:3a:d1: 9e:bf:5d:33:82:57:eb:0c:85:fb:98:bb:cf:53:1a: e6:fa:f7:d2:15:6a:4f:1d:b1:c5:ba:7e:43:8f:02: f1:c0:d2:a9:92:81:5b:4a:bb:34:84:d1:24:b9:d2: 5b:41:92:cc:a3:8e:ce:3e:02:36:3e:d6:4f:6f:97: 4c:aa:ac:0e:70:8d:1c:d3:96:49:a7:c1:54:cf:b8: b2:83:b1:61:46:73:79:27:85:84:ed:c5:4d:47:04: 24:c6:20:75:fa:fc:8d:b4:b5:2b:72:81:86:69:2c: 12:e3:24:28:de:af:02:68:13:d9:0b:33:cf:98:5b: 79:6a:4f:89:0a:8f:ff:94:41:0e:5a:ef:1c:88:7b: 7f:26:21:86:a9:9a:06:ec:0e:a0:8f:e0:22:8f:d4: 23:80:0f:c9:ea:8b:58:55:3e:2b:83:67:59:8b:5e: 30:c5:4c:e3:46:74:fb:a7:eb:86:91:3c:af:af:7a: 85:6b:2a:95:ca:2b:18:a2:71:77:a3:f0:d5:fe:96: c0:19:69:bb:76:06:f4:11:13:6c:90:4b:e6:ae:b1: be:da:ee:87:81:25:67:a4:65:40:d0:bf:0a:6b:b2: 3d:61:35:5f:0b:d7:ae:b8:a9:96:7e:48:62:72:b5: 40:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D6:A7:DA:A8:64:B7:8F:01:17:9B:16:5D:1E:98:0E:01:36:7D:B2 X509v3 Authority Key Identifier: keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e9:0d:e2:b2:1c:4d:91:bc:65:e4:b1:02:b5:85:12:53:e2: c4:79:73:94:32:f4:2a:f1:b7:cf:40:03:6b:0d:18:5b:93:1e: cf:0d:f6:1e:7a:3e:ed:23:70:2f:90:78:ca:c6:76:c9:9d:81: 80:97:46:e4:8a:0a:a0:d8:24:b6:6f:86:e6:91:7c:4e:29:cc: d8:0f:08:22:8c:70:4e:10:c0:64:1c:36:c8:4f:d8:68:a5:e7: 71:6a:54:44:bd:4e:58:56:b4:2f:2e:a1:52:e1:52:18:68:e8: c9:b4:47:78:70:59:98:be:64:63:a9:d8:39:7b:87:c5:97:72: a2:cf:a8:50:cb:95:e5:d8:43:a4:d2:7c:95:4d:e5:f0:3d:3b: 41:f3:99:66:82:0b:f3:55:df:8f:f4:4c:7b:9d:83:c9:7f:d5: f6:33:59:80:8e:7d:a0:fe:f9:6c:11:28:4f:08:62:dc:2b:5a: 12:58:00:6f:5f:c8:96:25:54:c9:bf:d1:6c:ca:50:e3:77:73: 49:40:75:bb:1d:a9:ea:a0:20:b9:20:09:cb:1d:23:cd:45:a3: cf:b5:ae:1e:6c:59:c8:04:ac:89:bf:a5:a3:45:b0:d1:d5:43: 41:41:aa:d5:53:3e:da:9d:02:e2:44:26:50:5d:f5:e9:a4:1b: ce:33:ee:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczQTkxMTAvBgNVBAUTKEUwQjQ0NThCOUFCRDMyMDM1MTczNTNFQzgwQkUzMTBD MzY1NTREQUUwHhcNMjUwNzAxMDM1NzMzWhcNMjUwNzA4MDM1NzMzWjAYMRYwFAYD VQQDEw02ODYzNWNhZS03MzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvkew4QHLdS7CAGqOtGev10zglfrDIX7mLvPUxrm+vfSFWpPHbHFun5DjwLx wNKpkoFbSrs0hNEkudJbQZLMo47OPgI2PtZPb5dMqqwOcI0c05ZJp8FUz7iyg7Fh RnN5J4WE7cVNRwQkxiB1+vyNtLUrcoGGaSwS4yQo3q8CaBPZCzPPmFt5ak+JCo// lEEOWu8ciHt/JiGGqZoG7A6gj+Aij9QjgA/J6otYVT4rg2dZi14wxUzjRnT7p+uG kTyvr3qFayqVyisYonF3o/DV/pbAGWm7dgb0ERNskEvmrrG+2u6HgSVnpGVA0L8K a7I9YTVfC9euuKmWfkhicrVABQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvWp9qo ZLePARebFl0emA4BNn2yMB8GA1UdIwQYMBaAFOC0RYuavTIDUXNT7IC+MQw2VU2u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNBOS9EOEVGMTNDMkZB Q0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1nTlJjMVBzZ0w0eEREWlZU YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMUkZpNXE5TWdOUmMxUHNnTDR4RERaVlRhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNBOS9EOEVGMTNDMkZBQ0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1n TlJjMVBzZ0w0eEREWlZUYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA96Q3ishxNkbxl5LECtYUSU+LEeXOUMvQq8bfPQANrDRhbkx7PDfYe ej7tI3AvkHjKxnbJnYGAl0bkigqg2CS2b4bmkXxOKczYDwgijHBOEMBkHDbIT9ho pedxalREvU5YVrQvLqFS4VIYaOjJtEd4cFmYvmRjqdg5e4fFl3Kiz6hQy5Xl2EOk 0nyVTeXwPTtB85lmggvzVd+P9Ex7nYPJf9X2M1mAjn2g/vlsEShPCGLcK1oSWABv X8iWJVTJv9FsylDjd3NJQHW7HanqoCC5IAnLHSPNRaPPta4ebFnIBKyJv6WjRbDR 1UNBQarVUz7anQLiRCZQXfXppBvOM+6z -----END CERTIFICATE-----Generated at Wed Jul 2 21:44:39 2025 by rpki-client