$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft File: F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json) Hash identifier: CCHPEXX6x9LoLZLnWggrJPqbM8LMVI9EC9i2p5jI7OY= Subject key identifier: 46:E6:AA:66:19:7B:EE:BB:5B:B1:D5:40:6D:4B:1B:27:EC:04:0D:C7 Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 Certificate issuer: /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft Manifest number: 16 Signing time: Wed 02 Jul 2025 21:06:59 +0000 Manifest this update: Wed 02 Jul 2025 21:06:59 +0000 Manifest next update: Wed 09 Jul 2025 21:06:59 +0000 Files and hashes: 1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: 5VFFE+53i91tHlTcUKBz8LewXxrmt+NI729XZXAUssg=) 2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: 8eHBf/IW6Kdn5rzP/J/PseLHB5iblvBzJEKUGKo/wC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Validity Not Before: Jul 2 21:06:59 2025 GMT Not After : Jul 9 21:06:59 2025 GMT Subject: CN=68659f73-99dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c5:7a:1c:18:8c:ac:b7:17:dc:32:3c:67:db: 63:d0:e1:5f:89:28:8b:49:05:79:dc:f5:93:d4:de: e6:c1:9e:2e:ba:1e:fc:fb:08:b2:69:67:b0:00:ad: e7:59:b7:aa:e3:04:86:a5:98:ee:fb:ad:26:2f:a8: 43:15:7a:0d:7c:34:21:12:f7:f2:0f:10:af:ad:c6: 09:e7:2c:7e:57:b5:9a:ac:b7:3a:d9:65:e1:bd:de: 93:be:e4:17:a9:3b:3a:63:b5:fe:73:30:aa:29:f2: dc:18:03:80:bf:c4:98:96:a7:35:07:fa:08:ff:9b: cd:f7:4a:d4:ba:3b:92:b5:69:75:0a:d6:dd:cb:88: 74:e3:59:f2:fd:86:65:e3:93:1c:9d:54:5c:d3:d0: 5e:23:84:dc:40:70:6b:1a:54:48:33:cd:4c:e2:63: 2d:a3:65:00:ea:01:89:3e:c8:17:04:82:37:09:0f: e1:7a:d1:f4:c2:a6:23:7d:21:f4:11:95:33:ee:15: 31:1d:ba:57:5d:9f:39:80:39:1a:e8:4f:42:1e:28: 7e:09:f5:59:96:0b:85:ad:2e:60:20:2c:7e:03:7c: b4:bb:e9:f6:5c:82:f0:c7:17:fc:ad:27:39:01:4c: 42:13:cd:44:ff:22:aa:97:da:2f:6d:8d:bb:5b:43: 3e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E6:AA:66:19:7B:EE:BB:5B:B1:D5:40:6D:4B:1B:27:EC:04:0D:C7 X509v3 Authority Key Identifier: keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:68:4c:94:cf:41:5d:fe:0c:ae:99:9b:9c:a1:57:81:6d:9a: 47:23:ca:4f:76:48:a1:0d:12:37:ab:82:69:cc:f8:a8:e0:4a: f4:8d:93:67:62:f9:43:9b:dd:70:7c:62:c2:f9:ab:31:f8:b1: b7:49:c4:f7:d5:7a:33:7f:28:ac:e8:e4:0f:0b:18:27:bc:1a: 43:9c:c8:0f:d5:0d:4c:8c:ae:7d:0f:f0:b5:95:46:0e:4b:70: 58:19:49:ec:33:ec:48:ba:24:f2:fe:5b:49:b8:82:81:17:3b: 6f:f6:86:0a:e1:95:59:dd:2a:d1:bb:a2:30:c4:24:80:84:2f: 5f:5b:88:a2:58:64:f0:2d:88:24:c3:b9:5d:fe:6b:f5:29:9d: 3f:04:38:5b:56:d3:67:76:b9:2c:a7:51:1c:cf:dc:24:7a:ab: ee:10:d3:31:f9:6d:6f:33:30:c8:10:bd:9c:60:71:6e:bc:e2: ae:37:01:ed:fd:56:51:63:5b:86:6f:48:b0:bf:56:56:b0:40: 68:cb:03:4b:cb:21:42:d2:0a:59:8c:31:48:81:86:72:8a:59: 6b:a0:b0:d8:60:c6:8a:4a:83:7e:f2:b1:41:5e:eb:c3:d0:7b: ee:4a:e1:39:0b:90:53:28:df:15:fb:9a:c7:36:70:9c:bd:f6: 37:98:de:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDU0MzExMC8GA1UEBRMoMTc4MDA5NkNDOTBBQjZBRUFGMDhENzlBQjE4QzU0QzdC NzdBNTNBMDAeFw0yNTA3MDIyMTA2NTlaFw0yNTA3MDkyMTA2NTlaMBgxFjAUBgNV BAMTDTY4NjU5ZjczLTk5ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWxXocGIystxfcMjxn22PQ4V+JKItJBXnc9ZPU3ubBni66Hvz7CLJpZ7AAredZ t6rjBIalmO77rSYvqEMVeg18NCES9/IPEK+txgnnLH5XtZqstzrZZeG93pO+5Bep Ozpjtf5zMKop8twYA4C/xJiWpzUH+gj/m833StS6O5K1aXUK1t3LiHTjWfL9hmXj kxydVFzT0F4jhNxAcGsaVEgzzUziYy2jZQDqAYk+yBcEgjcJD+F60fTCpiN9IfQR lTPuFTEdulddnzmAORroT0IeKH4J9VmWC4WtLmAgLH4DfLS76fZcgvDHF/ytJzkB TEITzUT/IqqX2i9tjbtbQz6rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURuaqZhl7 7rtbsdVAbUsbJ+wEDccwHwYDVR0jBBgwFoAUF4AJbMkKtq6vCNeasYxUx7d6U6Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NTQzL0FCNzE5RkNFM0I2 NTExRjA4NzQyREEzOUM0RjlBRTAyL0Y0QUpiTWtLdHE2dkNOZWFzWXhVeDdkNlU2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjRBSmJNa0t0cTZ2Q05lYXNZeFV4N2Q2VTZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 NTQzL0FCNzE5RkNFM0I2NTExRjA4NzQyREEzOUM0RjlBRTAyL0Y0QUpiTWtLdHE2 dkNOZWFzWXhVeDdkNlU2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI9oTJTPQV3+DK6Zm5yhV4Ftmkcjyk92SKENEjergmnM+KjgSvSNk2di +UOb3XB8YsL5qzH4sbdJxPfVejN/KKzo5A8LGCe8GkOcyA/VDUyMrn0P8LWVRg5L cFgZSewz7Ei6JPL+W0m4goEXO2/2hgrhlVndKtG7ojDEJICEL19biKJYZPAtiCTD uV3+a/UpnT8EOFtW02d2uSynURzP3CR6q+4Q0zH5bW8zMMgQvZxgcW684q43Ae39 VlFjW4ZvSLC/VlawQGjLA0vLIULSClmMMUiBhnKKWWugsNhgxopKg37ysUFe68PQ e+5K4TkLkFMo3xX7msc2cJy99jeY3gY= -----END CERTIFICATE-----Generated at Thu Jul 3 23:44:42 2025 by rpki-client