$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft File: B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json) Hash identifier: 51rnnsYBN+7+lvCdd6WVEYSC8N2BzbDprAvjx0I3Qts= Subject key identifier: 8F:8F:38:B0:D4:F1:F6:8E:75:4D:FE:53:3A:E8:DE:A2:F9:B2:0C:97 Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Certificate serial: 1E49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft Manifest number: 1E2A Signing time: Mon 30 Jun 2025 16:13:42 +0000 Manifest this update: Mon 30 Jun 2025 16:13:41 +0000 Manifest next update: Mon 07 Jul 2025 16:13:41 +0000 Files and hashes: 1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: miNKKjt+KrKR+hW/VRDwNEMww+qTNyAjbVOrXM4jRS4=) 2: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: 3kkH5EW9k5TTFg+XHHqI2feA7kJawsJC4SpKye1S2b4=) 3: BD314CEA619711EE81211277C4F9AE02.roa (hash: pyylUNX9LlmDbhjQ7Mn/l8NCaA1ACQcAW5FWWwcceq0=) 4: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: 01F6A8KAEiWwfIj9UacQjLscVPBcvyK/XHWq85nJWZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7753 (0x1e49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Validity Not Before: Jun 30 16:13:41 2025 GMT Not After : Jul 7 16:13:41 2025 GMT Subject: CN=6862b7b6-6a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ff:c7:86:c2:f1:41:aa:61:84:83:5c:ae:e2: 71:ac:19:50:a2:ac:b1:7d:34:1b:38:05:14:55:fc: 32:08:df:3b:82:f2:a1:8b:e4:1a:d3:bf:5a:27:d8: 90:75:93:c2:85:9a:e5:c0:ba:e4:43:d2:fe:86:77: 21:d2:db:dd:b8:51:8b:26:64:a8:3d:7e:ef:ad:9c: 5c:d5:63:50:10:1a:06:bd:71:c5:4f:bd:fd:5a:69: ec:8c:f4:6b:35:94:5d:d6:32:69:95:c4:ef:1c:8e: 3e:76:d5:8b:90:bc:16:e3:17:11:18:30:61:7a:3d: 23:d1:51:7e:37:e1:a2:2d:94:7e:42:e9:94:07:4a: 7b:9a:df:32:fb:3a:d9:9b:8e:74:6c:7f:2e:3a:da: c5:0d:be:39:88:ae:30:0c:c3:1a:82:a8:d1:66:93: a9:72:eb:9b:54:40:54:d8:52:fb:2e:5d:bb:9b:86: a6:89:a6:b0:87:f5:fd:bc:51:0f:90:44:2c:56:3f: f1:49:1d:6d:4c:f5:95:7e:69:55:87:52:4e:21:b4: 40:a3:09:a3:3c:d7:cf:6b:b5:e7:25:65:d2:03:c0: 70:86:92:06:72:a3:39:a9:07:c6:87:88:41:5f:8d: 56:d0:a0:11:fb:53:ef:c7:03:7d:1b:08:2b:4d:4c: 4d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8F:38:B0:D4:F1:F6:8E:75:4D:FE:53:3A:E8:DE:A2:F9:B2:0C:97 X509v3 Authority Key Identifier: keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:1d:36:1b:b7:89:d2:2c:35:5f:c7:2c:7d:45:80:2d:c1:6f: 30:4f:a6:41:32:69:e3:04:68:9e:eb:89:99:a2:2a:e1:3b:09: ef:4a:d9:64:10:f4:ee:b3:26:2e:a2:80:a6:0f:5a:56:30:64: be:cf:28:cd:7f:75:29:db:f2:37:80:4d:55:31:8f:70:26:e4: 11:1b:91:82:a6:5c:f4:65:d8:48:ef:fa:03:ed:5a:36:8c:a9: d9:38:f1:2c:f7:b4:b3:6d:79:23:83:b6:5a:4e:2a:2b:3d:28: 37:72:e7:99:79:6f:4c:af:b6:3e:66:68:46:f5:2a:9b:b1:73: a0:a0:22:cd:dd:cb:18:71:29:f0:20:1d:b4:5a:8a:cf:49:bc: 1b:56:33:39:9c:52:7f:10:9b:34:fd:12:1a:18:af:4b:59:dc: 5a:07:65:07:92:5c:ea:bf:43:8d:ec:03:9b:71:dc:ee:54:06: ba:dd:bd:92:65:4d:70:f8:c6:a5:4e:62:a7:b1:f6:4a:49:89: 57:43:cf:82:79:46:ff:96:80:77:a8:19:00:22:31:c9:d6:08: bc:ad:62:d1:f0:2f:a2:b9:60:db:a5:66:ca:bf:8b:e0:5b:c5: 96:1f:3a:94:56:a3:28:82:55:a8:94:d8:f3:99:dc:fd:28:bc: ae:58:e3:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDQjYxMTAvBgNVBAUTKDA3ODE2NzVDQzY0RkFCMkI4NDVEQTdGNTExNTU0OTgw NDJFQ0U0NjcwHhcNMjUwNjMwMTYxMzQxWhcNMjUwNzA3MTYxMzQxWjAYMRYwFAYD VQQDEw02ODYyYjdiNi02YTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz//HhsLxQaphhINcruJxrBlQoqyxfTQbOAUUVfwyCN87gvKhi+Qa079aJ9iQ dZPChZrlwLrkQ9L+hnch0tvduFGLJmSoPX7vrZxc1WNQEBoGvXHFT739WmnsjPRr NZRd1jJplcTvHI4+dtWLkLwW4xcRGDBhej0j0VF+N+GiLZR+QumUB0p7mt8y+zrZ m450bH8uOtrFDb45iK4wDMMagqjRZpOpcuubVEBU2FL7Ll27m4amiaawh/X9vFEP kEQsVj/xSR1tTPWVfmlVh1JOIbRAowmjPNfPa7XnJWXSA8BwhpIGcqM5qQfGh4hB X41W0KAR+1PvxwN9GwgrTUxNVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+POLDU 8faOdU3+Uzro3qL5sgyXMB8GA1UdIwQYMBaAFAeBZ1zGT6srhF2n9RFVSYBC7ORn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRENCNi82N0M2QUE0QThB RjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5dUVYYWYxRVZWSmdFTHM1 R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I0Rm5YTVpQcXl1RVhhZjFFVlZKZ0VMczVHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RENCNi82N0M2QUE0QThBRjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5 dUVYYWYxRVZWSmdFTHM1R2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASHTYbt4nSLDVfxyx9RYAtwW8wT6ZBMmnjBGie64mZoirhOwnvStlk EPTusyYuooCmD1pWMGS+zyjNf3Up2/I3gE1VMY9wJuQRG5GCplz0ZdhI7/oD7Vo2 jKnZOPEs97SzbXkjg7ZaTiorPSg3cueZeW9Mr7Y+ZmhG9SqbsXOgoCLN3csYcSnw IB20WorPSbwbVjM5nFJ/EJs0/RIaGK9LWdxaB2UHklzqv0ON7AObcdzuVAa63b2S ZU1w+MalTmKnsfZKSYlXQ8+CeUb/loB3qBkAIjHJ1gi8rWLR8C+iuWDbpWbKv4vg W8WWHzqUVqMoglWolNjzmdz9KLyuWOMl -----END CERTIFICATE-----Generated at Wed Jul 2 04:23:17 2025 by rpki-client