$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft File: 4uYwZnXV9U0ge2eCqWx6qWex_JE.mft (raw, json) Hash identifier: XO+zSl1DwmmyFiDw4oaQ0yRPbEIIcd3CM2Dt+SmEeJ8= Subject key identifier: D0:19:4F:6B:D4:FE:18:34:9C:B4:1F:D0:A0:89:DC:F8:E0:FC:40:76 Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 Certificate issuer: /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft Manifest number: 71 Signing time: Tue 01 Jul 2025 07:41:58 +0000 Manifest this update: Tue 01 Jul 2025 07:41:58 +0000 Manifest next update: Tue 08 Jul 2025 07:41:58 +0000 Files and hashes: 1: 4uYwZnXV9U0ge2eCqWx6qWex_JE.crl (hash: Qxpw7mzNlNYeJm9flUodwZu9EexBl8BFvzluhACYUuQ=) 2: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (hash: +DamE3tU9Fo7eBYdyyuSzK/6/nm5KtgHW7yUMIG6MHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Validity Not Before: Jul 1 07:41:58 2025 GMT Not After : Jul 8 07:41:58 2025 GMT Subject: CN=68639146-d171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4a:1c:df:f5:18:18:5a:39:dd:73:77:a7:d2: 54:92:5f:e3:d1:9f:f1:66:78:fe:07:b9:f6:44:9d: e9:49:a6:7a:54:01:9b:9b:a4:43:9d:67:a7:ff:0f: cd:ac:11:d2:89:13:2f:bd:40:63:51:91:3c:b5:7e: f3:2e:6d:90:43:aa:8c:7f:f1:28:e8:76:34:a5:7b: 26:cc:9b:87:c5:14:41:62:9b:56:89:ed:16:7c:70: a7:c8:d7:5a:f9:a4:e9:5f:17:57:a8:b2:68:f1:be: 78:18:cd:81:c1:ee:60:1a:63:df:17:57:3b:18:f7: e9:06:31:0a:a6:44:d9:ad:d0:ab:d1:bd:12:ad:74: ba:d4:c2:22:77:7c:00:55:ff:1f:63:4f:be:9b:86: 81:c4:6b:d9:98:24:9e:4d:d7:4d:11:13:51:93:c1: 17:ce:09:95:02:b2:e9:71:9e:b5:14:dc:f5:80:30: e5:6e:84:2a:c3:2e:cb:01:4a:7e:98:9c:e6:33:52: 41:b7:a3:d6:21:77:1c:2c:3c:55:cd:8d:90:a5:88: 45:04:1d:37:50:e5:2f:d9:1a:ac:ca:74:4f:04:8a: 26:21:6d:3b:b2:d4:59:79:21:95:e5:3a:25:3f:55: 72:7d:be:e5:14:94:f5:95:e9:9d:ce:d0:d1:3e:9d: 39:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:19:4F:6B:D4:FE:18:34:9C:B4:1F:D0:A0:89:DC:F8:E0:FC:40:76 X509v3 Authority Key Identifier: keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ed:03:36:97:ef:a1:4c:13:88:4a:65:08:85:ab:70:63:0d: 4c:33:9a:eb:14:21:54:b0:68:5a:67:ef:75:13:f6:df:7b:61: 18:e2:fa:5e:a2:ac:3e:6f:b1:7e:34:ae:ae:46:5f:1a:58:04: e4:59:b4:4f:d2:ef:46:ed:66:69:d6:8e:7f:f7:29:de:33:17: f2:42:1a:46:07:f1:df:ad:a7:3e:f8:d7:60:53:50:43:7d:8f: 2e:42:9e:17:8b:fb:64:da:72:7c:b1:5d:3d:eb:89:3f:be:66: a8:d8:6c:b5:5b:2e:06:c8:f4:64:29:0e:1e:a8:60:ac:6b:ae: 58:1d:cb:48:a6:6d:22:1d:ff:b1:65:8a:b1:e0:bd:58:e4:89: 92:61:55:2b:d1:7a:5e:04:78:3a:36:9c:7c:3e:ed:be:16:93: b3:bb:b1:5c:a5:50:ce:8b:95:5f:12:1e:2a:d0:c7:50:9c:80: a4:a6:77:49:61:6e:f7:18:a1:27:fa:a5:61:eb:3a:22:43:86: 3f:6e:30:05:45:3c:da:9e:8c:4f:31:3d:6c:48:51:2b:7c:72: 7d:19:aa:2e:77:47:2c:22:dd:f3:bb:ea:c0:24:4b:ea:d4:d4: 20:fb:a7:4a:81:95:d3:ad:05:c2:f3:e3:f9:1b:ba:c1:06:41: a4:c4:22:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEFDODExMC8GA1UEBRMoRTJFNjMwNjY3NUQ1RjU0RDIwN0I2NzgyQTk2QzdBQTk2 N0IxRkM5MTAeFw0yNTA3MDEwNzQxNThaFw0yNTA3MDgwNzQxNThaMBgxFjAUBgNV BAMTDTY4NjM5MTQ2LWQxNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuShzf9RgYWjndc3en0lSSX+PRn/FmeP4HufZEnelJpnpUAZubpEOdZ6f/D82s EdKJEy+9QGNRkTy1fvMubZBDqox/8SjodjSleybMm4fFFEFim1aJ7RZ8cKfI11r5 pOlfF1eosmjxvngYzYHB7mAaY98XVzsY9+kGMQqmRNmt0KvRvRKtdLrUwiJ3fABV /x9jT76bhoHEa9mYJJ5N100RE1GTwRfOCZUCsulxnrUU3PWAMOVuhCrDLssBSn6Y nOYzUkG3o9YhdxwsPFXNjZCliEUEHTdQ5S/ZGqzKdE8EiiYhbTuy1Fl5IZXlOiU/ VXJ9vuUUlPWV6Z3O0NE+nTkRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0BlPa9T+ GDSctB/QoInc+OD8QHYwHwYDVR0jBBgwFoAU4uYwZnXV9U0ge2eCqWx6qWex/JEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QUM4L0U5QkUwNURDQjEz QzExRUZBQUY5RDczMUM0RjlBRTAyLzR1WXdablhWOVUwZ2UyZUNxV3g2cVdleF9K RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNHVZd1puWFY5VTBnZTJlQ3FXeDZxV2V4X0pFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QUM4L0U5QkUwNURDQjEzQzExRUZBQUY5RDczMUM0RjlBRTAyLzR1WXdablhWOVUw Z2UyZUNxV3g2cVdleF9KRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC/tAzaX76FME4hKZQiFq3BjDUwzmusUIVSwaFpn73UT9t97YRji+l6i rD5vsX40rq5GXxpYBORZtE/S70btZmnWjn/3Kd4zF/JCGkYH8d+tpz7412BTUEN9 jy5CnheL+2TacnyxXT3riT++ZqjYbLVbLgbI9GQpDh6oYKxrrlgdy0imbSId/7Fl irHgvVjkiZJhVSvRel4EeDo2nHw+7b4Wk7O7sVylUM6LlV8SHirQx1CcgKSmd0lh bvcYoSf6pWHrOiJDhj9uMAVFPNqejE8xPWxIUSt8cn0Zqi53Rywi3fO76sAkS+rU 1CD7p0qBldOtBcLz4/kbusEGQaTEIpI= -----END CERTIFICATE-----Generated at Wed Jul 2 06:51:11 2025 by rpki-client