$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft File: g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json) Hash identifier: oMTLJ4hJyWL5GHAsYLPx71wdonPXu8u/QBZfWAtHQzU= Subject key identifier: A0:33:68:7E:9A:BA:A1:11:DB:85:6D:4C:BD:EB:C9:E5:FD:F6:F0:96 Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41 Certificate issuer: /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft Manifest number: 66 Signing time: Thu 03 Jul 2025 07:22:57 +0000 Manifest this update: Thu 03 Jul 2025 07:22:56 +0000 Manifest next update: Thu 10 Jul 2025 07:22:56 +0000 Files and hashes: 1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: nipPx+O4HAl2FCdLQX4t5oNnLn56nJ487ZS9gUCn1Hs=) 2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: zf4VXC00w+/l84Z7TgltHAME/FckYYEPpSyVri8Ai2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241 Validity Not Before: Jul 3 07:22:56 2025 GMT Not After : Jul 10 07:22:56 2025 GMT Subject: CN=68662fd1-5c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:f5:21:dd:d7:d0:d7:6a:be:56:0e:4c:39: b5:d4:a0:e8:cd:b4:98:85:ca:7a:b3:08:97:ea:00: e7:0e:04:15:8e:fa:d7:62:2d:ad:41:d5:e3:43:ba: 4b:34:bb:27:2e:99:8c:17:6b:f2:dd:43:db:3f:3a: dd:59:c8:39:69:ce:2a:cf:b2:70:da:45:87:be:40: 43:e2:d1:7d:af:e2:be:87:21:51:04:54:9c:6a:02: 06:21:e5:97:c6:6c:2e:4a:d3:4c:6e:9b:dc:d9:65: 93:3f:d3:bc:22:66:74:eb:6c:1a:f0:42:0e:e8:2b: 9a:cb:5f:16:88:de:78:e0:11:a7:ac:26:e0:c6:6a: 18:52:12:39:81:37:65:70:86:4b:e1:6a:78:99:72: c2:c7:3c:58:99:96:f5:16:78:b3:3d:a0:62:0c:35: 26:2e:09:8c:ec:22:af:d5:6f:2a:4c:b8:76:4c:a5: 74:dd:bd:f4:d4:54:93:eb:9c:0d:03:93:15:7b:2c: a7:c1:83:9c:ba:57:6f:29:21:77:d2:34:e5:c6:24: 8a:8f:74:9b:82:fd:4c:42:a3:e9:9a:db:f3:20:58: d1:7c:8d:9a:c7:59:7c:44:67:88:cb:97:2a:bb:de: 1e:75:1f:26:a2:5f:1f:a7:66:80:da:e7:68:6f:0d: 63:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:33:68:7E:9A:BA:A1:11:DB:85:6D:4C:BD:EB:C9:E5:FD:F6:F0:96 X509v3 Authority Key Identifier: keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:7b:d1:51:a4:e8:a6:48:0f:0c:7f:77:32:64:2a:05:4a:2c: 74:9c:d3:00:02:c6:c4:dc:3a:18:2a:ee:71:37:fa:61:81:82: 5d:53:f3:ee:4a:51:21:78:87:a0:42:15:f4:f7:83:1c:11:e1: 34:a1:8f:39:32:33:47:75:1d:30:44:60:59:4d:b8:d4:40:5b: de:f1:19:f2:83:34:1b:60:ce:48:97:0d:89:07:e0:9d:ec:af: df:b9:1b:bc:03:56:5b:92:92:37:37:3c:60:8d:2b:58:cb:1d: d7:30:a8:83:7d:45:58:8b:50:e2:bf:bb:f6:70:18:04:9f:6c: c1:34:5b:0a:72:78:b0:54:bc:9d:35:9c:f6:56:3e:9d:9f:34: 12:be:bd:d8:43:52:ec:52:03:26:9b:47:d1:5a:a2:73:2f:b9: 6d:cc:2c:2e:e8:4c:62:22:cd:6f:4c:3f:34:e3:82:8b:cb:c0: 06:34:17:b5:da:2c:e6:a4:39:0e:25:4b:08:d3:13:46:54:f9: f4:75:96:ae:02:c8:59:cc:28:81:85:f0:3b:f9:28:45:f3:cc: 2a:62:2d:67:a0:5c:1d:08:4a:b5:01:33:f7:56:7d:ec:9f:68: 5c:30:49:ad:db:fa:cf:50:76:8d:44:20:ff:ac:06:43:48:c4: 9a:a2:5f:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkI5QTExMC8GA1UEBRMoODM4RkJEMEIzOTVFQTkwNzA2QzZDMjg5QUMyNkIwRDcz OEEwNDI0MTAeFw0yNTA3MDMwNzIyNTZaFw0yNTA3MTAwNzIyNTZaMBgxFjAUBgNV BAMTDTY4NjYyZmQxLTVjMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEXfUh3dfQ12q+Vg5MObXUoOjNtJiFynqzCJfqAOcOBBWO+tdiLa1B1eNDuks0 uycumYwXa/LdQ9s/Ot1ZyDlpzirPsnDaRYe+QEPi0X2v4r6HIVEEVJxqAgYh5ZfG bC5K00xum9zZZZM/07wiZnTrbBrwQg7oK5rLXxaI3njgEaesJuDGahhSEjmBN2Vw hkvhaniZcsLHPFiZlvUWeLM9oGIMNSYuCYzsIq/VbypMuHZMpXTdvfTUVJPrnA0D kxV7LKfBg5y6V28pIXfSNOXGJIqPdJuC/UxCo+ma2/MgWNF8jZrHWXxEZ4jLlyq7 3h51HyaiXx+nZoDa52hvDWO3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoDNofpq6 oRHbhW1MvevJ5f328JYwHwYDVR0jBBgwFoAUg4+9CzleqQcGxsKJrCaw1zigQkEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCQjlBLzQxMzkwQkNBQ0ZG MzExRUY5MDYyRTUyMUM0RjlBRTAyL2c0LTlDemxlcVFjR3hzS0pyQ2F3MXppZ1Fr RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZzQtOUN6bGVxUWNHeHNLSnJDYXcxemlnUWtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC QjlBLzQxMzkwQkNBQ0ZGMzExRUY5MDYyRTUyMUM0RjlBRTAyL2c0LTlDemxlcVFj R3hzS0pyQ2F3MXppZ1FrRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALF70VGk6KZIDwx/dzJkKgVKLHSc0wACxsTcOhgq7nE3+mGBgl1T8+5K USF4h6BCFfT3gxwR4TShjzkyM0d1HTBEYFlNuNRAW97xGfKDNBtgzkiXDYkH4J3s r9+5G7wDVluSkjc3PGCNK1jLHdcwqIN9RViLUOK/u/ZwGASfbME0WwpyeLBUvJ01 nPZWPp2fNBK+vdhDUuxSAyabR9FaonMvuW3MLC7oTGIizW9MPzTjgovLwAY0F7Xa LOakOQ4lSwjTE0ZU+fR1lq4CyFnMKIGF8Dv5KEXzzCpiLWegXB0ISrUBM/dWfeyf aFwwSa3b+s9Qdo1EIP+sBkNIxJqiX2Q= -----END CERTIFICATE-----Generated at Thu Jul 3 10:05:30 2025 by rpki-client