$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft File: E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft (raw, json) Hash identifier: EOD3t6coSUiTMbSXj/Z9dji3MuVpsliDLfkUyt864Uc= Subject key identifier: 4F:A5:68:42:2B:42:BD:24:6F:B2:6D:6C:57:0C:9E:30:50:69:E7:2A Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C Certificate issuer: /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Certificate serial: 053C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft Manifest number: 0534 Signing time: Sat 28 Jun 2025 23:06:00 +0000 Manifest this update: Sat 28 Jun 2025 23:06:00 +0000 Manifest next update: Sat 05 Jul 2025 23:06:00 +0000 Files and hashes: 1: E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl (hash: 95iO0JmOGTQAkRhfcRGCm8zbVuFiPREwwWG/QeLb5KA=) 2: A211F86C4B5911F0BE7E4B20C4F9AE02.roa (hash: XwsS2RzzCdlWi9BeOyAl8cDAZdHimA77E7p4salt3tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1340 (0x53c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8B5, serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Validity Not Before: Jun 28 23:06:00 2025 GMT Not After : Jul 5 23:06:00 2025 GMT Subject: CN=68607558-20f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c5:77:ed:cf:23:9d:b8:aa:2e:7d:22:ee:e9: 78:a0:f0:29:a4:8a:71:7c:74:4a:56:bb:ff:a1:5f: a0:b1:2a:21:dd:72:2f:45:ec:f1:2f:b1:a4:81:99: 25:1c:c8:f1:df:8c:c8:94:47:4f:06:69:b3:34:44: e3:46:ec:fd:3e:a9:d8:ef:e5:8f:ed:d8:35:36:a0: b6:0e:b6:6f:cf:f3:cb:b2:9f:1e:0e:6d:9a:b3:95: c8:92:c3:2d:b5:53:ab:bb:11:fc:8d:30:70:ef:af: fe:96:68:1d:ee:03:a8:43:3c:74:21:da:39:27:bc: 77:9d:fa:0f:30:54:15:40:3b:ec:fd:be:87:e6:83: 09:30:fd:05:ac:8a:d1:2f:f4:ed:07:4b:ca:42:bf: 83:0a:5a:be:1e:ab:50:f3:a2:9b:6a:d9:42:94:95: e3:d5:06:6a:09:b6:dc:35:06:29:c2:63:9b:d4:47: 46:ff:d4:13:5f:09:02:75:92:ca:12:91:3c:0a:36: 82:87:01:33:a3:e1:5d:46:0b:11:00:9a:40:60:40: ff:d0:14:36:ac:14:5b:43:fd:9c:c8:8f:5f:73:63: ec:e8:91:f5:df:cf:de:a0:dc:3e:54:e7:8d:46:1a: bd:22:32:0a:25:50:1f:b7:c8:76:cd:3f:1a:5f:90: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A5:68:42:2B:42:BD:24:6F:B2:6D:6C:57:0C:9E:30:50:69:E7:2A X509v3 Authority Key Identifier: keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:80:39:80:43:75:29:96:8b:17:80:5e:f7:10:9e:99:e4:7e: ca:26:c4:23:0f:3d:9a:3e:50:e8:ba:cc:60:44:1f:3e:20:68: b3:f9:c9:25:3d:91:da:0f:e5:1d:b1:88:d5:fb:dd:fd:dc:f3: 2f:c3:b9:98:af:8e:20:41:d8:fc:09:1c:0f:37:b9:9e:fc:0f: bd:27:55:ae:c8:b2:2e:52:77:26:33:99:b8:94:8d:d6:a0:cb: 95:ee:01:98:3d:fa:8d:6c:e0:77:37:e9:8c:ed:0f:45:05:de: 9a:2f:c2:f5:64:53:f3:8e:9a:6b:a3:21:9f:40:47:15:23:03: 9b:1a:1c:cb:27:1e:01:55:10:43:9a:e7:7e:46:f4:bb:ad:ee: 39:46:7e:21:36:68:cc:31:30:9d:e0:03:f3:6b:66:19:84:23: 8f:2d:d4:4a:40:fe:37:c3:50:85:29:ba:bf:51:3d:74:86:8a: c1:a3:d0:b5:56:e3:e3:ec:f9:93:1c:07:c0:8a:0b:0c:03:b1: 85:cd:8e:21:8d:dd:62:24:a2:e9:6d:c9:7f:d4:eb:51:c7:13: fa:30:8e:19:32:2a:93:ef:c7:3e:76:06:ce:b0:bd:98:e8:c6: 2d:e0:47:56:7b:9d:84:f3:ed:57:a9:8f:82:76:6c:78:26:bc: 70:4d:87:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4QjUxMTAvBgNVBAUTKDEzOEY5QThDRjIwN0RBMDA4QjQwMUM2REU4RDkxMzEw RkUyNUVBNEMwHhcNMjUwNjI4MjMwNjAwWhcNMjUwNzA1MjMwNjAwWjAYMRYwFAYD VQQDEw02ODYwNzU1OC0yMGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA98V37c8jnbiqLn0i7ul4oPAppIpxfHRKVrv/oV+gsSoh3XIvRezxL7GkgZkl HMjx34zIlEdPBmmzNETjRuz9PqnY7+WP7dg1NqC2DrZvz/PLsp8eDm2as5XIksMt tVOruxH8jTBw76/+lmgd7gOoQzx0Ido5J7x3nfoPMFQVQDvs/b6H5oMJMP0FrIrR L/TtB0vKQr+DClq+HqtQ86KbatlClJXj1QZqCbbcNQYpwmOb1EdG/9QTXwkCdZLK EpE8CjaChwEzo+FdRgsRAJpAYED/0BQ2rBRbQ/2cyI9fc2Ps6JH138/eoNw+VOeN Rhq9IjIKJVAft8h2zT8aX5DDAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+laEIr Qr0kb7JtbFcMnjBQaecqMB8GA1UdIwQYMBaAFBOPmozyB9oAi0AcbejZExD+JepM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCNS8yMzlEMkE0MkZG RjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJnQ0xRQnh0Nk5rVEVQNGw2 a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0LWFqUElIMmdDTFFCeHQ2TmtURVA0bDZrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhCNS8yMzlEMkE0MkZGRjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJn Q0xRQnh0Nk5rVEVQNGw2a3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHgDmAQ3UplosXgF73EJ6Z5H7KJsQjDz2aPlDousxgRB8+IGiz+ckl PZHaD+UdsYjV+9393PMvw7mYr44gQdj8CRwPN7me/A+9J1WuyLIuUncmM5m4lI3W oMuV7gGYPfqNbOB3N+mM7Q9FBd6aL8L1ZFPzjpproyGfQEcVIwObGhzLJx4BVRBD mud+RvS7re45Rn4hNmjMMTCd4APza2YZhCOPLdRKQP43w1CFKbq/UT10horBo9C1 VuPj7PmTHAfAigsMA7GFzY4hjd1iJKLpbcl/1OtRxxP6MI4ZMiqT78c+dgbOsL2Y 6MYt4EdWe52E8+1XqY+Cdmx4JrxwTYcI -----END CERTIFICATE-----Generated at Mon Jun 30 02:46:26 2025 by rpki-client