$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft File: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json) Hash identifier: T7BUL1rtf64OC1mlwr5rm0X/dY6H8uvumDz1etmPeQY= Subject key identifier: 0B:3D:25:D8:6E:B9:C2:4F:57:DA:BE:4A:B5:52:DE:6E:CC:7D:64:3F Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft Manifest number: 13 Signing time: Tue 01 Jul 2025 08:49:29 +0000 Manifest this update: Tue 01 Jul 2025 08:49:29 +0000 Manifest next update: Tue 08 Jul 2025 08:49:29 +0000 Files and hashes: 1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: cqvajTOw+lDHebUUFP2qP/s6usk8VRRHte9S5KzjPP8=) 2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: EdyHrGdK241FduLFJE474YipzEeOWQ4qQLPgbqAJOd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Validity Not Before: Jul 1 08:49:29 2025 GMT Not After : Jul 8 08:49:29 2025 GMT Subject: CN=6863a119-862e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:3a:9f:70:97:56:5a:d1:bf:a9:74:f9:6e: ac:bf:f1:f5:ca:fa:80:8b:fb:f4:c8:da:f5:8e:2a: 83:89:3f:b3:5f:06:a0:74:5d:79:59:11:26:cd:d6: c2:03:9f:66:63:77:c3:c6:2b:ad:41:6a:0f:1d:4e: 55:d9:e1:55:68:a6:da:2d:fe:fa:ca:d5:ba:9d:80: 1f:e0:64:a2:c5:ea:98:5c:4d:41:2d:15:c8:59:74: 84:2d:00:7c:0c:fd:be:26:04:a1:1a:be:30:7e:03: a7:9b:29:f8:90:67:62:b8:e1:60:39:7b:12:2b:56: ad:9b:ec:0f:2b:0d:5c:56:ae:36:cf:14:01:83:08: 33:97:4b:7d:ed:a3:bb:c3:97:fe:1d:a9:2d:41:a3: 04:38:33:7e:8b:3d:6f:84:84:07:d2:86:95:ed:f3: b1:4a:a6:89:cc:53:23:d8:0d:68:89:a1:ca:b2:57: 7d:33:a1:83:74:bf:7c:79:55:67:b3:93:63:67:30: 27:2f:cd:4d:b1:7c:5f:b1:ea:24:44:74:37:7f:3d: 03:16:da:6c:0f:65:2a:c0:f9:b1:4c:bf:7c:81:2b: ad:31:38:1e:73:ba:cc:c0:05:ea:83:31:23:2e:e6: 2f:71:25:40:03:01:f4:0f:f8:cf:5b:24:8d:db:dd: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3D:25:D8:6E:B9:C2:4F:57:DA:BE:4A:B5:52:DE:6E:CC:7D:64:3F X509v3 Authority Key Identifier: keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:f0:11:37:94:d6:c3:a1:16:c0:71:54:63:34:f5:17:89:3c: a2:96:b0:c0:d4:28:61:dc:8f:29:39:d3:45:37:fa:ba:e6:34: fa:5c:7d:c6:0b:a8:f7:e5:3a:b2:76:9b:b5:2f:9b:2c:8c:7d: c6:da:f4:ba:a2:59:5d:e2:aa:da:16:e1:d3:cf:a1:ca:a3:01: b0:41:2a:88:92:6e:1d:2d:f2:ad:f6:30:7b:30:62:bf:3a:13: 07:51:98:62:ae:31:09:6a:d8:d5:a8:4e:43:4d:15:17:aa:b2: 34:65:65:8d:f0:8e:c7:a2:4f:00:cb:f6:85:63:00:96:ee:55: 08:9c:c6:ed:cf:74:62:b1:c7:02:d9:f8:01:5f:dc:cd:5b:45: fc:70:8e:88:f2:e3:5b:54:5a:4d:51:00:98:0f:24:5a:d2:d9: 20:e5:6a:39:dc:df:5f:ea:0a:97:e9:f7:5a:2b:5f:c2:c3:75: 81:d7:6f:d0:ab:a9:dc:cd:3a:a6:76:c4:46:3c:3d:88:8e:ae: 18:27:ae:74:29:50:0c:1e:ef:30:b4:b8:7a:da:73:cf:2f:c9: 6d:c7:59:ed:07:dd:88:d8:be:a5:8c:e5:b2:84:4c:d4:a0:6b: 0e:49:8e:61:ea:41:b1:92:df:a9:ad:7d:35:da:12:74:fc:f1: d3:b1:bb:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkE0RjExMC8GA1UEBRMoRTAzOThENTRBQ0Q5REIzM0VENEZDQUE4RDIyODA1RDQ1 RTgwQ0JCNjAeFw0yNTA3MDEwODQ5MjlaFw0yNTA3MDgwODQ5MjlaMBgxFjAUBgNV BAMTDTY4NjNhMTE5LTg2MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXODqfcJdWWtG/qXT5bqy/8fXK+oCL+/TI2vWOKoOJP7NfBqB0XXlZESbN1sID n2Zjd8PGK61Bag8dTlXZ4VVoptot/vrK1bqdgB/gZKLF6phcTUEtFchZdIQtAHwM /b4mBKEavjB+A6ebKfiQZ2K44WA5exIrVq2b7A8rDVxWrjbPFAGDCDOXS33to7vD l/4dqS1BowQ4M36LPW+EhAfShpXt87FKponMUyPYDWiJocqyV30zoYN0v3x5VWez k2NnMCcvzU2xfF+x6iREdDd/PQMW2mwPZSrA+bFMv3yBK60xOB5zuszABeqDMSMu 5i9xJUADAfQP+M9bJI3b3ePLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCz0l2G65 wk9X2r5KtVLebsx9ZD8wHwYDVR0jBBgwFoAU4DmNVKzZ2zPtT8qo0igF1F6Ay7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTRGLzU4N0YzNURBM0I3 NzExRjA5N0E4QkIyNEM0RjlBRTAyLzREbU5WS3paMnpQdFQ4cW8waWdGMUY2QXk3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNERtTlZLeloyelB0VDhxbzBpZ0YxRjZBeTdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTRGLzU4N0YzNURBM0I3NzExRjA5N0E4QkIyNEM0RjlBRTAyLzREbU5WS3paMnpQ dFQ4cW8waWdGMUY2QXk3WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANPwETeU1sOhFsBxVGM09ReJPKKWsMDUKGHcjyk500U3+rrmNPpcfcYL qPflOrJ2m7UvmyyMfcba9LqiWV3iqtoW4dPPocqjAbBBKoiSbh0t8q32MHswYr86 EwdRmGKuMQlq2NWoTkNNFReqsjRlZY3wjseiTwDL9oVjAJbuVQicxu3PdGKxxwLZ +AFf3M1bRfxwjojy41tUWk1RAJgPJFrS2SDlajnc31/qCpfp91orX8LDdYHXb9Cr qdzNOqZ2xEY8PYiOrhgnrnQpUAwe7zC0uHrac88vyW3HWe0H3YjYvqWM5bKETNSg aw5JjmHqQbGS36mtfTXaEnT88dOxu6s= -----END CERTIFICATE-----Generated at Thu Jul 3 08:05:19 2025 by rpki-client