$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft File: 4H5XaJwnqZNhHLq6l7GU0xeWz28.mft (raw, json) Hash identifier: ZUj9whQZlje7QsbqVyMRQpoyOvVixSHRJSqUxEMByPE= Subject key identifier: 15:97:52:2E:7D:AC:71:8B:F5:DC:54:2C:F2:63:35:CB:79:4E:CA:CA Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F Certificate issuer: /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft Manifest number: 13 Signing time: Tue 01 Jul 2025 08:50:33 +0000 Manifest this update: Tue 01 Jul 2025 08:50:33 +0000 Manifest next update: Tue 08 Jul 2025 08:50:33 +0000 Files and hashes: 1: 4H5XaJwnqZNhHLq6l7GU0xeWz28.crl (hash: Pt7HEiQYVa2IKGW6nVQZLKT5eAc2s8NazA5kSjSwFZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Validity Not Before: Jul 1 08:50:33 2025 GMT Not After : Jul 8 08:50:33 2025 GMT Subject: CN=6863a159-db74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:e3:20:10:3b:1d:46:d5:a6:7b:7b:6c:93: 6f:74:42:1f:ac:56:c7:13:9d:d0:3c:c2:2b:d0:be: 4d:3d:5b:39:e5:86:7a:da:b4:69:d6:22:c3:0b:be: 2a:03:08:d8:f0:86:42:86:84:f7:cc:68:6d:f2:70: f8:95:45:92:15:2b:dc:c0:18:92:2a:a0:62:10:30: 6d:ab:e7:4b:66:5b:08:72:81:a8:57:43:47:8e:0f: 25:f7:e8:ab:34:e5:ed:a6:5b:72:22:76:e1:bc:c7: e3:30:98:b2:c7:b4:a9:be:6f:59:c6:26:59:9b:1e: 3b:07:06:c0:2d:f4:29:f1:ee:ea:9d:70:f1:eb:13: f7:38:fc:36:8e:1c:b0:15:69:02:9d:d6:5b:86:5d: 42:a4:73:a0:de:c6:67:c2:f2:57:e4:bb:b7:47:90: fc:f4:77:cd:37:d7:6f:0a:11:bc:30:7e:d1:d7:bd: 2a:09:bc:f4:58:4f:98:48:a8:c8:d0:4c:5b:ec:62: b4:99:38:80:e9:cf:41:d1:30:43:f1:70:a6:24:e6: 21:51:ff:49:1e:b4:db:f4:51:2f:de:6f:f1:f7:9f: 07:3c:6e:88:b0:44:cb:ba:ef:d9:76:96:d4:ae:c8: dd:8a:b8:4d:86:e0:a1:77:ad:1b:fe:f0:f1:fd:f1: 2a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:97:52:2E:7D:AC:71:8B:F5:DC:54:2C:F2:63:35:CB:79:4E:CA:CA X509v3 Authority Key Identifier: keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:5f:10:29:89:c6:db:1d:24:92:19:3c:8f:4a:73:b7:f5:f8: ff:13:e1:48:ce:85:eb:22:2a:9b:3f:cd:9e:85:1e:56:ba:23: ab:1e:48:32:bd:00:40:ee:67:54:69:3c:16:88:6e:2c:ee:89: 06:d1:3b:9d:7c:79:70:19:dc:a6:f1:7f:a9:bd:55:df:71:04: ef:08:1c:e8:a0:91:d6:cf:20:af:8a:e1:6a:3e:dc:92:bb:ed: 67:b7:17:9b:19:69:9d:a0:77:8a:6f:63:f9:7d:6a:c3:10:49: a4:25:db:21:e4:4f:e5:49:ab:0d:78:5e:24:f8:10:87:f5:64: 34:d7:48:59:6f:eb:a2:de:f3:ab:62:af:d2:f5:42:49:00:69: 12:7c:81:9b:49:2d:f0:b8:e8:f4:86:dd:a9:7d:0e:6b:12:cf: c0:f4:b9:c3:24:1f:60:89:19:3c:39:01:3c:9a:54:92:b4:52: 3a:b1:35:e3:55:90:f0:00:12:67:c0:91:a3:e6:de:c6:f6:4f: 68:bc:7c:38:28:4a:5c:60:3e:2c:45:90:7c:51:0c:40:1b:bb: 39:41:f1:13:97:d3:e3:b3:e6:b8:53:19:7b:ce:cf:26:2c:98: c6:8e:02:6b:ec:05:22:45:bf:ce:1a:62:c2:d1:cd:68:9e:01: 17:1d:e4:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0U1QjExMC8GA1UEBRMoRTA3RTU3Njg5QzI3QTk5MzYxMUNCQUJBOTdCMTk0RDMx Nzk2Q0Y2RjAeFw0yNTA3MDEwODUwMzNaFw0yNTA3MDgwODUwMzNaMBgxFjAUBgNV BAMTDTY4NjNhMTU5LWRiNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzQuMgEDsdRtWme3tsk290Qh+sVscTndA8wivQvk09WznlhnratGnWIsMLvioD CNjwhkKGhPfMaG3ycPiVRZIVK9zAGJIqoGIQMG2r50tmWwhygahXQ0eODyX36Ks0 5e2mW3IiduG8x+MwmLLHtKm+b1nGJlmbHjsHBsAt9Cnx7uqdcPHrE/c4/DaOHLAV aQKd1luGXUKkc6DexmfC8lfku7dHkPz0d803128KEbwwftHXvSoJvPRYT5hIqMjQ TFvsYrSZOIDpz0HRMEPxcKYk5iFR/0ketNv0US/eb/H3nwc8boiwRMu679l2ltSu yN2KuE2G4KF3rRv+8PH98So/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFZdSLn2s cYv13FQs8mM1y3lOysowHwYDVR0jBBgwFoAU4H5XaJwnqZNhHLq6l7GU0xeWz28w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RTVCL0UxNEY3MjI0M0M2 RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpOaEhMcTZsN0dVMHhlV3oy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEg1WGFKd25xWk5oSExxNmw3R1UweGVXejI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RTVCL0UxNEY3MjI0M0M2RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpO aEhMcTZsN0dVMHhlV3oyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGdfECmJxtsdJJIZPI9Kc7f1+P8T4UjOhesiKps/zZ6FHla6I6seSDK9 AEDuZ1RpPBaIbizuiQbRO518eXAZ3Kbxf6m9Vd9xBO8IHOigkdbPIK+K4Wo+3JK7 7We3F5sZaZ2gd4pvY/l9asMQSaQl2yHkT+VJqw14XiT4EIf1ZDTXSFlv66Le86ti r9L1QkkAaRJ8gZtJLfC46PSG3al9DmsSz8D0ucMkH2CJGTw5ATyaVJK0UjqxNeNV kPAAEmfAkaPm3sb2T2i8fDgoSlxgPixFkHxRDEAbuzlB8ROX0+Oz5rhTGXvOzyYs mMaOAmvsBSJFv84aYsLRzWieARcd5Jg= -----END CERTIFICATE-----Generated at Thu Jul 3 06:54:49 2025 by rpki-client