$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft File: vO4SgFOJtXjDX9i0JVpggdJoP3w.mft (raw, json) Hash identifier: DeGeXvUL1YUJFmb2NGy+LkmTwWTA6kyBsWErn4dSExQ= Subject key identifier: 02:D4:99:18:5C:8F:D7:63:16:8F:54:19:49:88:48:8A:31:B5:A2:BE Authority key identifier: BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C Certificate issuer: /CN=A91B4B33/serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft Manifest number: CB Signing time: Sat 05 Jul 2025 05:58:23 +0000 Manifest this update: Sat 05 Jul 2025 05:58:23 +0000 Manifest next update: Sat 12 Jul 2025 05:58:23 +0000 Files and hashes: 1: vO4SgFOJtXjDX9i0JVpggdJoP3w.crl (hash: iL7GvIWYnAj5V8m550AXzRPt/l0OD/AtzEm2JK3ihUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Validity Not Before: Jul 5 05:58:23 2025 GMT Not After : Jul 12 05:58:23 2025 GMT Subject: CN=6868beff-65e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5f:7e:9c:71:97:18:92:cb:11:31:c0:6a:4b: bd:28:0a:12:6d:65:41:29:2e:a9:98:b9:b9:6f:1f: 6f:4d:53:d1:7b:fa:33:36:ce:52:4b:ef:f8:14:b9: 9d:81:a5:4b:c0:01:1e:95:67:03:9b:f0:2d:76:c6: d4:b4:73:1d:11:77:2f:08:f3:8b:9a:92:c9:b9:24: 9c:43:ab:2f:db:38:1a:17:9d:d5:c0:4d:32:19:2b: 5c:88:a6:6f:d4:b2:ac:78:30:08:18:16:5e:63:72: 07:bb:43:b9:e7:d0:23:3b:f0:f8:cc:5f:df:d1:f5: b1:c1:93:01:28:dd:79:b5:01:6e:bf:14:45:78:7f: e9:8b:6a:b4:55:7a:43:28:ef:c1:80:a5:51:16:16: 2c:6f:b0:70:66:0f:89:7e:6f:97:4b:ba:4e:b1:3d: 12:6b:fc:a8:a5:cd:5f:7b:28:a2:51:55:4d:94:ac: f8:97:93:28:ed:16:61:9a:1a:68:66:26:dc:b8:9b: 5b:65:9c:ca:c2:62:96:46:7d:c6:72:9b:33:04:79: a5:64:c4:8d:5c:a1:81:54:5c:de:a0:e4:79:b1:98: 2c:de:12:67:b0:4c:5d:c8:40:2e:62:38:ef:90:c5: ff:ad:15:e0:fe:1f:13:c7:dc:82:c6:a7:62:74:d8: 98:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D4:99:18:5C:8F:D7:63:16:8F:54:19:49:88:48:8A:31:B5:A2:BE X509v3 Authority Key Identifier: keyid:BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:fd:38:88:c8:a8:6e:91:18:11:73:20:f1:de:a1:cb:88:83: ff:f4:51:17:bf:ae:d4:0e:75:a2:d7:90:de:3c:3c:24:9c:40: 6f:9c:bd:8a:58:bf:72:5e:1e:5a:81:ee:14:33:de:a1:e7:2d: fa:9f:13:ec:cf:86:cc:90:5c:c1:b8:1f:35:56:79:58:a8:63: 11:05:e3:e7:f6:48:86:91:c0:d6:71:17:37:eb:a1:03:0d:f7: 5b:02:68:0c:3e:ff:5d:97:c7:a2:9f:16:8c:ab:76:d1:70:a0: ed:a1:97:a5:7f:7a:4b:d6:c8:b7:20:74:72:68:4b:0c:18:3f: f1:c0:c5:08:b4:45:c0:e3:8c:3b:4f:90:84:8e:0d:71:bb:5e: 96:76:7b:42:3f:31:fb:ba:95:a0:85:70:92:9d:9b:9b:d5:a7: f0:20:e4:72:58:70:97:da:48:5e:dc:17:0d:fc:12:94:c5:e5: 3e:3f:83:c5:aa:da:0a:7d:9e:50:fa:d5:03:8a:65:f5:89:2c: 5e:34:0f:4b:74:69:7a:d6:7c:f3:2a:a9:d3:31:24:71:ed:e2: 4f:ea:31:38:92:10:73:df:85:de:da:0a:5e:83:f0:ae:16:e8: 73:9a:c4:b7:29:d1:99:c4:cb:38:db:89:6b:5a:6c:59:ae:b3: cb:a7:16:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEJDRUUxMjgwNTM4OUI1NzhDMzVGRDhCNDI1NUE2MDgx RDI2ODNGN0MwHhcNMjUwNzA1MDU1ODIzWhcNMjUwNzEyMDU1ODIzWjAYMRYwFAYD VQQDEw02ODY4YmVmZi02NWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3V9+nHGXGJLLETHAaku9KAoSbWVBKS6pmLm5bx9vTVPRe/ozNs5SS+/4FLmd gaVLwAEelWcDm/AtdsbUtHMdEXcvCPOLmpLJuSScQ6sv2zgaF53VwE0yGStciKZv 1LKseDAIGBZeY3IHu0O559AjO/D4zF/f0fWxwZMBKN15tQFuvxRFeH/pi2q0VXpD KO/BgKVRFhYsb7BwZg+Jfm+XS7pOsT0Sa/yopc1feyiiUVVNlKz4l5Mo7RZhmhpo ZibcuJtbZZzKwmKWRn3GcpszBHmlZMSNXKGBVFzeoOR5sZgs3hJnsExdyEAuYjjv kMX/rRXg/h8Tx9yCxqdidNiYTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALUmRhc j9djFo9UGUmISIoxtaK+MB8GA1UdIwQYMBaAFLzuEoBTibV4w1/YtCVaYIHSaD98 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8yNDRGODQ5QTIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRYakRYOWkwSlZwZ2dkSm9Q M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZPNFNnRk9KdFhqRFg5aTBKVnBnZ2RKb1Azdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8yNDRGODQ5QTIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRY akRYOWkwSlZwZ2dkSm9QM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDC/TiIyKhukRgRcyDx3qHLiIP/9FEXv67UDnWi15DePDwknEBvnL2K WL9yXh5age4UM96h5y36nxPsz4bMkFzBuB81VnlYqGMRBePn9kiGkcDWcRc366ED DfdbAmgMPv9dl8einxaMq3bRcKDtoZelf3pL1si3IHRyaEsMGD/xwMUItEXA44w7 T5CEjg1xu16WdntCPzH7upWghXCSnZub1afwIORyWHCX2khe3BcN/BKUxeU+P4PF qtoKfZ5Q+tUDimX1iSxeNA9LdGl61nzzKqnTMSRx7eJP6jE4khBz34Xe2gpeg/Cu FuhzmsS3KdGZxMs424lrWmxZrrPLpxY2 -----END CERTIFICATE-----Generated at Sun Jul 6 01:13:18 2025 by rpki-client