$ rpki-client -vvf rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/4hlMc0IL1P2sKL9jO7OvjNcg0LE.mft File: 4hlMc0IL1P2sKL9jO7OvjNcg0LE.mft (raw, json) Hash identifier: USHWOM+Jegfa1bHBdQ6nQRqyA2truUF2mOKWLTy9ziA= Subject key identifier: 51:C5:51:99:17:1A:6F:5F:6A:59:82:20:E2:AF:45:75:F5:F1:14:FB Authority key identifier: E2:19:4C:73:42:0B:D4:FD:AC:28:BF:63:3B:B3:AF:8C:D7:20:D0:B1 Certificate issuer: /CN=A91536B7/serialNumber=E2194C73420BD4FDAC28BF633BB3AF8CD720D0B1 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hlMc0IL1P2sKL9jO7OvjNcg0LE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/4hlMc0IL1P2sKL9jO7OvjNcg0LE.mft Manifest number: 504C Signing time: Sat 28 Jun 2025 16:17:07 +0000 Manifest this update: Sat 28 Jun 2025 16:17:06 +0000 Manifest next update: Sat 05 Jul 2025 16:17:06 +0000 Files and hashes: 1: 4hlMc0IL1P2sKL9jO7OvjNcg0LE.crl (hash: QUfvIGvwsVWJZfrdEM4bLGuBHWr+N4r/wg+LFE/Hs6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/4hlMc0IL1P2sKL9jO7OvjNcg0LE.crl rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/4hlMc0IL1P2sKL9jO7OvjNcg0LE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hlMc0IL1P2sKL9jO7OvjNcg0LE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536B7, serialNumber=E2194C73420BD4FDAC28BF633BB3AF8CD720D0B1 Validity Not Before: Jun 28 16:17:06 2025 GMT Not After : Jul 5 16:17:06 2025 GMT Subject: CN=68601583-1723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:f1:2e:49:f3:ad:14:55:8e:4f:38:1a:a7: 1a:bf:c8:91:57:f3:b4:a6:f5:27:d6:d0:e9:a7:98: 2f:75:97:83:bf:91:f2:c4:56:e1:dc:a0:a9:31:57: 0d:86:84:1b:f6:a0:1f:d7:e8:f8:da:37:53:67:a4: ac:0a:62:25:d1:09:f3:bd:af:54:9c:6b:2e:63:a0: f1:49:58:be:cb:15:b4:18:e4:d1:51:a5:ca:b7:2f: 0c:c4:1d:41:18:ca:f9:68:46:25:59:f3:5f:f3:5c: ac:1f:cb:1f:18:e9:5c:04:85:d3:8a:8c:88:e2:aa: 96:9a:83:5b:81:b2:2d:31:99:71:dc:20:e9:b4:13: ea:07:e3:94:ab:a7:11:62:90:ce:d1:4a:96:60:06: d8:b1:d9:ef:dc:3a:c8:d9:6d:31:ec:c7:bc:b4:2a: aa:c1:72:e1:99:70:90:ca:b1:d8:ee:f0:8b:1a:65: ce:6e:d4:ed:74:3d:25:2c:b2:c8:b4:9c:d4:6c:37: 66:96:85:d5:f6:5d:e4:89:65:e4:0f:d4:3f:aa:9b: ab:ef:39:76:99:24:48:27:8f:0c:81:40:44:77:bc: 21:20:3d:b5:74:9d:1d:13:02:a5:ed:53:30:de:88: 90:af:63:a2:fd:f6:46:af:4b:e7:ea:6a:61:9b:5e: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C5:51:99:17:1A:6F:5F:6A:59:82:20:E2:AF:45:75:F5:F1:14:FB X509v3 Authority Key Identifier: keyid:E2:19:4C:73:42:0B:D4:FD:AC:28:BF:63:3B:B3:AF:8C:D7:20:D0:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/4hlMc0IL1P2sKL9jO7OvjNcg0LE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hlMc0IL1P2sKL9jO7OvjNcg0LE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/4hlMc0IL1P2sKL9jO7OvjNcg0LE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:e8:e6:21:0b:a3:d2:f8:c1:b7:72:92:98:26:00:f4:da:ee: 28:26:58:7b:74:3b:63:f9:f0:14:e7:4f:cf:fb:bc:f0:83:d3: 08:dc:de:7c:75:85:93:37:66:a1:40:43:98:a9:0e:6f:70:46: 1a:36:60:4d:1c:6f:52:e1:f5:8a:05:85:5c:c4:bb:6b:a3:9e: 17:b6:7b:91:e6:9c:ce:54:a4:31:e6:75:d3:dc:bf:59:af:15: 04:14:16:35:41:9d:39:85:21:ec:6a:dc:50:c9:6b:c6:89:37: 3d:11:d9:b3:ac:71:d5:df:5f:30:b0:e0:c6:1c:61:ff:a1:14: 2a:ed:eb:48:fc:3e:44:e1:14:fb:df:b9:b5:17:2a:9c:d4:09: fb:ca:51:ed:6e:0f:4d:1c:13:16:9d:89:6d:4b:04:b7:5c:86: 06:09:e8:b7:08:97:21:9e:dc:7f:f2:e9:da:b4:21:4b:6a:49: df:51:0a:06:2f:20:71:08:e0:38:92:f5:e6:38:b8:4f:5a:4c: b8:89:67:ca:72:6c:da:76:11:e9:ec:cd:25:00:2a:d2:a3:ba: 04:77:21:fe:cc:18:f0:d4:33:c7:ac:42:0c:88:f1:d2:8b:ba: 82:6e:75:e0:d1:79:4d:2a:c5:b0:28:bf:56:0d:47:b7:31:8c: 76:c6:11:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzZCNzExMC8GA1UEBRMoRTIxOTRDNzM0MjBCRDRGREFDMjhCRjYzM0JCM0FGOENE NzIwRDBCMTAeFw0yNTA2MjgxNjE3MDZaFw0yNTA3MDUxNjE3MDZaMBgxFjAUBgNV BAMTDTY4NjAxNTgzLTE3MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtSvEuSfOtFFWOTzgapxq/yJFX87Sm9SfW0OmnmC91l4O/kfLEVuHcoKkxVw2G hBv2oB/X6PjaN1NnpKwKYiXRCfO9r1Scay5joPFJWL7LFbQY5NFRpcq3LwzEHUEY yvloRiVZ81/zXKwfyx8Y6VwEhdOKjIjiqpaag1uBsi0xmXHcIOm0E+oH45SrpxFi kM7RSpZgBtix2e/cOsjZbTHsx7y0KqrBcuGZcJDKsdju8IsaZc5u1O10PSUsssi0 nNRsN2aWhdX2XeSJZeQP1D+qm6vvOXaZJEgnjwyBQER3vCEgPbV0nR0TAqXtUzDe iJCvY6L99kavS+fqamGbXgI5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUcVRmRca b19qWYIg4q9FdfXxFPswHwYDVR0jBBgwFoAU4hlMc0IL1P2sKL9jO7OvjNcg0LEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNkI3L0YxQ0QyN0I0NzNB RDExRTdBQ0JEMDI1RUM0RjlBRTAyLzRobE1jMElMMVAyc0tMOWpPN092ak5jZzBM RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGhsTWMwSUwxUDJzS0w5ak83T3ZqTmNnMExFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz NkI3L0YxQ0QyN0I0NzNBRDExRTdBQ0JEMDI1RUM0RjlBRTAyLzRobE1jMElMMVAy c0tMOWpPN092ak5jZzBMRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMTo5iELo9L4wbdykpgmAPTa7igmWHt0O2P58BTnT8/7vPCD0wjc3nx1 hZM3ZqFAQ5ipDm9wRho2YE0cb1Lh9YoFhVzEu2ujnhe2e5HmnM5UpDHmddPcv1mv FQQUFjVBnTmFIexq3FDJa8aJNz0R2bOscdXfXzCw4MYcYf+hFCrt60j8PkThFPvf ubUXKpzUCfvKUe1uD00cExadiW1LBLdchgYJ6LcIlyGe3H/y6dq0IUtqSd9RCgYv IHEI4DiS9eY4uE9aTLiJZ8pybNp2EenszSUAKtKjugR3If7MGPDUM8esQgyI8dKL uoJudeDReU0qxbAov1YNR7cxjHbGET0= -----END CERTIFICATE-----Generated at Mon Jun 30 12:37:47 2025 by rpki-client