$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: QcfEANRxvZPZUaMaUROonaADNRj2t5EOwntMGM/7M8I= Subject key identifier: 6A:46:26:DE:80:C6:54:C9:78:1E:42:24:48:17:31:71:BD:50:5E:0B Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 07C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 07B6 Signing time: Sat 28 Jun 2025 20:51:43 +0000 Manifest this update: Sat 28 Jun 2025 20:51:42 +0000 Manifest next update: Sat 05 Jul 2025 20:51:42 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: TOxfDbMBbNRRMyIXF4w+RVRMLnk3R/a+d/u72jcfcKY=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: nebZkphHnCGcHsK4OPuyoN2DWSVg+M+V/082vsrCEns=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: tXMl2RtLfZvDGfhyJ5diezkCwv50p552Np4xQThv520=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1984 (0x7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Jun 28 20:51:42 2025 GMT Not After : Jul 5 20:51:42 2025 GMT Subject: CN=686055de-e3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:21:05:4c:36:26:75:e5:52:09:c0:5a:0e:31: 9f:dc:51:ed:6b:d6:7b:19:c3:53:80:c3:bb:64:8b: 2a:b8:5f:86:c0:3d:3e:19:a8:06:24:05:86:df:39: c5:1e:60:9f:9c:e5:7b:5e:6a:86:0b:5f:2f:29:76: 95:63:de:36:29:c2:21:8f:ad:0c:bb:a7:0f:91:62: 0a:c5:ba:11:d8:04:13:a9:a4:91:02:41:d9:8a:cb: fc:1e:45:c9:7c:6a:6b:31:6c:af:46:b4:09:5c:99: db:0d:17:bc:80:a6:13:35:9a:3c:83:8f:37:16:d1: 33:b3:83:d6:21:b6:c7:1f:70:4e:51:84:49:f5:25: e9:b9:d3:02:b7:b5:ee:58:41:79:9c:d4:bc:3d:4b: 68:e6:11:26:b7:11:bc:d1:ee:01:38:b0:fe:d7:5f: 5c:85:98:66:f3:a2:87:b8:d3:52:4a:a2:ec:16:04: ee:7e:bd:83:94:96:b4:78:72:51:3a:3c:00:13:21: 46:a0:fc:b4:ea:62:3c:ed:cd:c8:02:12:4f:5c:63: 12:30:5f:ec:f4:f8:20:6e:7f:4c:4d:a8:09:2c:47: 6a:ad:87:1d:74:e0:a0:d0:9b:44:5a:f1:eb:89:04: 09:4f:e8:6e:f6:d3:c0:f0:3d:6d:9f:a6:40:bb:91: fb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:46:26:DE:80:C6:54:C9:78:1E:42:24:48:17:31:71:BD:50:5E:0B X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c9:9c:ca:24:58:46:3a:ab:6f:41:09:3f:75:49:59:55:f8: 27:d0:ea:70:39:dc:bf:5c:36:0d:fa:87:bb:49:54:7c:73:7c: e8:69:5b:be:10:2f:3e:c4:14:d2:96:8d:01:9e:d9:67:fb:5f: 44:05:e1:5e:f1:a2:76:89:7f:47:e5:60:90:89:71:7d:65:15: 81:5d:a3:3c:4f:bb:47:8f:b2:cb:08:b1:ef:a3:c0:b4:11:4e: b0:13:15:95:f4:93:75:c5:56:5c:f2:37:bc:1f:6a:71:92:9e: 2d:9f:d2:f9:63:e3:d5:50:11:b3:e9:eb:24:68:48:03:bb:e7: bf:39:7e:e5:49:d8:9b:cc:98:14:04:8e:fd:de:30:03:d2:0b: b9:02:ef:f9:26:e9:a4:ab:09:76:70:1b:68:65:7b:68:c8:6e: 4e:19:47:ba:df:44:2d:7c:bc:4c:f9:23:01:cc:5b:75:87:77: 35:44:ae:58:fe:96:00:19:b6:75:1b:46:25:3c:8a:28:b5:7d: 9b:7f:5e:96:6c:fa:a0:e3:cb:ae:bf:e3:ea:33:ad:7e:1d:ad: b0:65:c9:94:be:3b:fc:ed:08:69:5d:d1:8e:4b:99:ca:f6:46: 1b:ab:9e:0e:44:c5:18:f4:1c:b8:70:29:ea:26:c5:2f:73:51: 0d:ae:79:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjUwNjI4MjA1MTQyWhcNMjUwNzA1MjA1MTQyWjAYMRYwFAYD VQQDEw02ODYwNTVkZS1lM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCEFTDYmdeVSCcBaDjGf3FHta9Z7GcNTgMO7ZIsquF+GwD0+GagGJAWG3znF HmCfnOV7XmqGC18vKXaVY942KcIhj60Mu6cPkWIKxboR2AQTqaSRAkHZisv8HkXJ fGprMWyvRrQJXJnbDRe8gKYTNZo8g483FtEzs4PWIbbHH3BOUYRJ9SXpudMCt7Xu WEF5nNS8PUto5hEmtxG80e4BOLD+119chZhm86KHuNNSSqLsFgTufr2DlJa0eHJR OjwAEyFGoPy06mI87c3IAhJPXGMSMF/s9Pggbn9MTagJLEdqrYcddOCg0JtEWvHr iQQJT+hu9tPA8D1tn6ZAu5H7owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpGJt6A xlTJeB5CJEgXMXG9UF4LMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLyZzKJFhGOqtvQQk/dUlZVfgn0OpwOdy/XDYN+oe7SVR8c3zoaVu+ EC8+xBTSlo0Bntln+19EBeFe8aJ2iX9H5WCQiXF9ZRWBXaM8T7tHj7LLCLHvo8C0 EU6wExWV9JN1xVZc8je8H2pxkp4tn9L5Y+PVUBGz6eskaEgDu+e/OX7lSdibzJgU BI793jAD0gu5Au/5Jumkqwl2cBtoZXtoyG5OGUe630QtfLxM+SMBzFt1h3c1RK5Y /pYAGbZ1G0YlPIootX2bf16WbPqg48uuv+PqM61+Ha2wZcmUvjv87QhpXdGOS5nK 9kYbq54ORMUY9By4cCnqJsUvc1ENrnmK -----END CERTIFICATE-----Generated at Mon Jun 30 21:47:50 2025 by rpki-client