$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft File: 4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json) Hash identifier: wk3xhg1NcAXA709rm9UU2q8PQrnT2K3z5EvSvMzWnUk= Subject key identifier: 94:DD:84:C3:D2:12:DE:E6:BE:C4:59:4B:EC:92:15:F7:39:3C:92:BB Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 Certificate issuer: /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft Manifest number: 01DB Signing time: Thu 03 Jul 2025 02:50:09 +0000 Manifest this update: Thu 03 Jul 2025 02:50:08 +0000 Manifest next update: Thu 10 Jul 2025 02:50:08 +0000 Files and hashes: 1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: Kpw2DCr2tpxsZ+jiQja3LZtPmfhwHYVH4bHcsFpRHCY=) 2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: zRdos/o+mb+OSdMpMggoSh17MEeYkJt0eDW/UfdGZq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7F6A, serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Validity Not Before: Jul 3 02:50:08 2025 GMT Not After : Jul 10 02:50:08 2025 GMT Subject: CN=6865efe1-a121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:1e:a7:d7:97:60:52:e4:1d:40:1f:73:64: e1:6a:0c:66:a8:77:f7:32:44:b8:f4:78:49:90:2a: d6:eb:2a:13:78:44:0f:97:8e:43:58:5a:13:ab:e1: 2a:75:c7:8d:5e:35:4f:98:01:4d:2c:80:96:8e:5e: 7b:74:60:d8:b3:f6:4f:fb:de:40:c2:a4:cb:0c:35: 7b:8e:cd:8b:f5:5d:d2:ca:cc:91:04:77:be:3a:c1: e5:63:79:8a:62:9e:8a:9e:95:c7:36:c4:20:42:41: 44:98:b7:e4:56:a0:43:d8:6b:c4:b8:cb:ce:2b:7a: 0f:9e:2c:ce:22:6b:ca:3a:be:24:4e:74:48:ac:4f: e0:cd:47:d1:76:cb:c0:fe:6b:65:89:91:06:f9:86: 7e:28:78:0a:76:8e:e0:c5:15:b8:a6:32:76:12:1b: 1a:5d:cc:b1:f4:72:86:83:19:ae:b8:48:e0:63:76: a4:d8:b1:ed:36:69:4f:cd:2c:c7:0f:59:aa:d4:57: 3c:2e:8e:67:3e:be:dd:13:2f:73:d8:87:59:4f:c1: be:5a:6e:e4:67:b2:78:d5:05:4d:58:2b:d7:f2:d8: 06:c6:01:6f:ea:53:ea:ae:2c:6c:b7:67:4e:ca:ed: 71:67:3b:f3:2e:f0:2e:b1:42:90:22:9d:f7:ae:cb: e1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DD:84:C3:D2:12:DE:E6:BE:C4:59:4B:EC:92:15:F7:39:3C:92:BB X509v3 Authority Key Identifier: keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:40:67:19:c3:e5:58:0a:fd:8a:00:c1:78:c2:a2:f7:c6:5d: dc:ce:f1:ca:67:79:79:94:5d:08:ea:82:c9:51:e8:54:9f:dc: 9f:79:f2:e8:b1:bc:64:36:98:a3:62:7a:dd:34:c7:8e:a3:11: 30:56:ec:85:ad:b2:c7:d8:cc:2e:59:d5:ff:f8:c9:0a:d6:67: 16:1a:61:df:5a:2f:18:27:eb:1e:9f:1b:5b:f2:6d:e6:57:7b: 58:a8:7f:38:20:97:c6:d1:0a:e3:45:09:3e:24:eb:2f:66:27: a2:a8:b3:9a:4d:30:f8:c8:15:e3:0d:61:40:b2:6f:ce:a6:e7: be:5b:da:0b:5f:d1:68:82:25:4f:e7:36:b6:28:73:52:db:73: d5:33:b7:5d:e3:16:9f:62:3a:55:53:9a:f0:ae:86:36:38:b8: f4:70:92:1b:e9:26:56:8a:5b:95:27:1c:84:c1:d6:13:c5:6e: 54:f6:ba:b2:ed:7b:ed:7f:0e:84:9c:52:3b:1f:86:73:46:d4: 2d:96:09:47:0a:1f:08:71:57:0f:24:3c:63:08:9b:49:a9:51: 58:80:3a:eb:ff:5d:9c:fa:c0:76:2d:53:cc:dd:d1:20:09:e4: 66:2d:64:10:ac:d1:88:1d:db:94:19:e0:1d:ee:c9:c9:d6:fb: 76:09:84:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdGNkExMTAvBgNVBAUTKEUzM0RCNzkzQkJFRkU0NkNCQ0Y3NURCMzRFNzA5NDI3 QTcyRUYwRjMwHhcNMjUwNzAzMDI1MDA4WhcNMjUwNzEwMDI1MDA4WjAYMRYwFAYD VQQDEw02ODY1ZWZlMS1hMTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeEep9eXYFLkHUAfc2ThagxmqHf3MkS49HhJkCrW6yoTeEQPl45DWFoTq+Eq dceNXjVPmAFNLICWjl57dGDYs/ZP+95AwqTLDDV7js2L9V3SysyRBHe+OsHlY3mK Yp6KnpXHNsQgQkFEmLfkVqBD2GvEuMvOK3oPnizOImvKOr4kTnRIrE/gzUfRdsvA /mtliZEG+YZ+KHgKdo7gxRW4pjJ2EhsaXcyx9HKGgxmuuEjgY3ak2LHtNmlPzSzH D1mq1Fc8Lo5nPr7dEy9z2IdZT8G+Wm7kZ7J41QVNWCvX8tgGxgFv6lPqrixst2dO yu1xZzvzLvAusUKQIp33rsvh7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTdhMPS Et7mvsRZS+ySFfc5PJK7MB8GA1UdIwQYMBaAFOM9t5O77+RsvPdds05wlCenLvDz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0Y2QS8wNjc5MjUwMDdG NDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVHeTg5MTJ6VG5DVUo2Y3U4 UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzR6MjNrN3Z2NUd5ODkxMnpUbkNVSjZjdThQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0Y2QS8wNjc5MjUwMDdGNDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVH eTg5MTJ6VG5DVUo2Y3U4UE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAQGcZw+VYCv2KAMF4wqL3xl3czvHKZ3l5lF0I6oLJUehUn9yfefLo sbxkNpijYnrdNMeOoxEwVuyFrbLH2MwuWdX/+MkK1mcWGmHfWi8YJ+senxtb8m3m V3tYqH84IJfG0QrjRQk+JOsvZieiqLOaTTD4yBXjDWFAsm/Opue+W9oLX9FogiVP 5za2KHNS23PVM7dd4xafYjpVU5rwroY2OLj0cJIb6SZWiluVJxyEwdYTxW5U9rqy 7Xvtfw6EnFI7H4ZzRtQtlglHCh8IcVcPJDxjCJtJqVFYgDrr/12c+sB2LVPM3dEg CeRmLWQQrNGIHduUGeAd7snJ1vt2CYRl -----END CERTIFICATE-----Generated at Thu Jul 3 13:24:00 2025 by rpki-client