$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft File: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft (raw, json) Hash identifier: ENf9pOGCLR+jC/GNaTei+u6UwmZL9U3iNZ2jXa6X7kU= Subject key identifier: B0:D5:E0:ED:A8:13:B2:42:83:F0:8E:55:8F:66:0C:E0:F5:27:E5:D6 Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 Certificate issuer: /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Certificate serial: 038A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft Manifest number: 0386 Signing time: Thu 03 Jul 2025 01:12:48 +0000 Manifest this update: Thu 03 Jul 2025 01:12:47 +0000 Manifest next update: Thu 10 Jul 2025 01:12:47 +0000 Files and hashes: 1: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl (hash: /vqe3Vl6GQ03c6kNw5W1XsMwUwK7lW0cYdkmCPl8KK4=) 2: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (hash: +7SXGk64WdhbzbBHPQcKc3z8KwO03i6JIK3eFusKvxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE1C, serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Validity Not Before: Jul 3 01:12:47 2025 GMT Not After : Jul 10 01:12:47 2025 GMT Subject: CN=6865d910-fb0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:76:68:92:cf:fe:ad:08:00:a8:69:d5:ee: 7d:01:5e:70:7d:0b:71:fc:bb:d6:b9:25:6a:b9:c7: 80:42:ae:83:b6:e8:f4:58:8a:db:b9:c8:f8:fe:b7: 2f:17:4a:1e:8b:b6:2c:26:ed:87:6f:a7:d2:f0:c2: 19:e1:cf:b2:00:05:81:58:74:81:c8:88:e4:70:95: 35:04:fe:fb:4a:5e:40:64:80:65:15:b4:c3:67:43: 02:4a:de:bb:5a:88:32:53:46:68:a1:c2:46:0c:dc: ce:37:5a:86:94:db:ce:88:d6:e4:06:31:1c:23:99: 28:8d:1d:fa:b9:e4:27:73:a7:93:6d:97:dc:22:5d: fa:c1:88:05:5d:54:17:4b:e4:08:aa:ea:70:88:7c: ca:cb:a3:a9:dd:67:76:ba:41:9d:c6:0c:5b:eb:a8: 72:5a:71:76:7e:de:78:80:d8:1b:48:9e:ad:54:38: b4:2a:1d:aa:4d:05:6f:da:af:3a:50:be:e2:23:20: 3f:dd:ab:5f:9c:3a:88:a6:33:87:f1:99:14:2d:9f: 1b:c5:da:4d:a6:78:f3:c9:36:8a:3e:a1:d6:8a:3e: 85:0b:bd:f3:00:0c:f2:0c:d9:6f:04:1b:7e:53:f3: d2:34:95:9a:74:f1:95:d0:b6:f5:e9:5f:04:75:8c: 34:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D5:E0:ED:A8:13:B2:42:83:F0:8E:55:8F:66:0C:E0:F5:27:E5:D6 X509v3 Authority Key Identifier: keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:f6:eb:94:6c:6f:da:58:3d:c6:9c:c0:9b:de:b6:e9:6c:a6: 5f:8c:e7:8e:d5:2f:26:ca:5c:ee:f3:25:d4:d5:fe:f4:41:0e: 0c:e6:19:8b:a0:46:78:6c:9a:a4:54:91:ec:9e:04:43:3e:18: 63:d2:d3:e1:72:a4:b7:0b:9d:0b:fa:8e:70:b2:80:5d:2e:5c: 16:27:b4:16:d2:cd:45:3f:b1:f2:17:54:a1:b8:8c:15:ef:d4: b5:23:73:ce:30:86:1c:67:03:c4:34:2f:47:6a:3e:a3:84:c1: f7:53:25:6f:63:f8:cc:88:40:0b:d9:5f:f2:67:27:a9:f5:73: fb:e4:08:2c:db:a8:52:31:e0:6f:ea:c1:da:da:ea:bd:f3:d1: b1:f1:e0:3b:3d:bf:6d:12:18:f2:e6:53:17:b6:2a:61:3c:cc: a4:78:72:46:2c:75:9f:4c:a9:70:64:83:84:60:8e:17:d7:69: 23:9a:bf:92:bb:51:5d:eb:85:e1:c4:c8:1b:46:ac:84:e6:28: f0:bd:db:ce:62:ef:ea:19:4f:50:c5:df:ea:4e:04:03:4a:af: 68:e8:1f:81:be:40:01:04:16:c6:4d:67:0c:c0:db:09:72:4b: e8:09:83:5c:03:c0:04:ac:0b:1e:20:57:02:c1:4b:a3:02:73: e8:2b:aa:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMUMxMTAvBgNVBAUTKEUyRTA0M0E5MzJFQ0UwNDM5RTJBOEVGMURDNDA2NEQz MjE0QzI3RTYwHhcNMjUwNzAzMDExMjQ3WhcNMjUwNzEwMDExMjQ3WjAYMRYwFAYD VQQDEw02ODY1ZDkxMC1mYjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApk12aJLP/q0IAKhp1e59AV5wfQtx/LvWuSVquceAQq6Dtuj0WIrbucj4/rcv F0oei7YsJu2Hb6fS8MIZ4c+yAAWBWHSByIjkcJU1BP77Sl5AZIBlFbTDZ0MCSt67 WogyU0ZoocJGDNzON1qGlNvOiNbkBjEcI5kojR36ueQnc6eTbZfcIl36wYgFXVQX S+QIqupwiHzKy6Op3Wd2ukGdxgxb66hyWnF2ft54gNgbSJ6tVDi0Kh2qTQVv2q86 UL7iIyA/3atfnDqIpjOH8ZkULZ8bxdpNpnjzyTaKPqHWij6FC73zAAzyDNlvBBt+ U/PSNJWadPGV0Lb16V8EdYw0vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDV4O2o E7JCg/COVY9mDOD1J+XWMB8GA1UdIwQYMBaAFOLgQ6ky7OBDniqO8dxAZNMhTCfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxQy9GMDc0NzNBRUFB NjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRFT2VLbzd4M0VCazB5Rk1K LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1QkRxVExzNEVPZUtvN3gzRUJrMHlGTUotWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUxQy9GMDc0NzNBRUFBNjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRF T2VLbzd4M0VCazB5Rk1KLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl9uuUbG/aWD3GnMCb3rbpbKZfjOeO1S8mylzu8yXU1f70QQ4M5hmL oEZ4bJqkVJHsngRDPhhj0tPhcqS3C50L+o5wsoBdLlwWJ7QW0s1FP7HyF1ShuIwV 79S1I3POMIYcZwPENC9Haj6jhMH3UyVvY/jMiEAL2V/yZyep9XP75Ags26hSMeBv 6sHa2uq989Gx8eA7Pb9tEhjy5lMXtiphPMykeHJGLHWfTKlwZIOEYI4X12kjmr+S u1Fd64XhxMgbRqyE5ijwvdvOYu/qGU9Qxd/qTgQDSq9o6B+BvkABBBbGTWcMwNsJ ckvoCYNcA8AErAseIFcCwUujAnPoK6q1 -----END CERTIFICATE-----Generated at Thu Jul 3 08:13:55 2025 by rpki-client