$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft File: 4_fO9uelaeRrLZA5MitpdVMcJWY.mft (raw, json) Hash identifier: 9sfulcMJ7X/jaa3DNU+8py/tfK3rrgBEoSPcJ8vQC7Y= Subject key identifier: CA:E1:78:AE:59:EB:1E:29:70:BA:91:20:47:8F:F2:A2:C7:7F:C4:D2 Authority key identifier: E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 Certificate issuer: /CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft Manifest number: 01D8 Signing time: Sat 05 Jul 2025 03:02:15 +0000 Manifest this update: Sat 05 Jul 2025 03:02:14 +0000 Manifest next update: Sat 12 Jul 2025 03:02:14 +0000 Files and hashes: 1: 4_fO9uelaeRrLZA5MitpdVMcJWY.crl (hash: C5AW/b/N1aRZ9mpkfU3qia+YwOtmZDtd7n8WXZsm4Bk=) 2: 24F87CC2810611EDA756F886C4F9AE02.roa (hash: 8hmKlSyIYm+hEMbljQN7ZPJxD7JA/JzX6lz/de7dJIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0077, serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Validity Not Before: Jul 5 03:02:14 2025 GMT Not After : Jul 12 03:02:14 2025 GMT Subject: CN=686895b6-8f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:c9:f2:29:e7:3a:74:cb:6b:0a:87:58:ac: bb:7e:43:50:f7:af:f5:e2:62:4a:e8:72:4d:ea:63: 84:d6:e8:f7:52:52:e3:1d:ba:c7:8f:da:88:6c:ac: 74:0b:17:00:4a:e4:5c:3a:93:28:79:1c:13:79:cb: 4b:4e:a4:08:61:50:6a:00:40:f3:b2:bc:6f:07:4a: f4:25:54:84:dc:58:ca:aa:0c:84:05:7f:01:97:90: 14:03:56:34:43:e0:37:ef:1e:98:27:cb:1b:fb:1c: ec:eb:e7:68:93:87:6f:cd:15:83:20:e9:cf:e3:98: 6d:f1:85:ef:8c:a0:87:20:85:9b:eb:6c:a1:cf:1a: f0:95:9c:da:f7:66:57:26:c2:85:a3:1e:44:7b:f4: df:d6:9b:7e:c4:96:e0:fe:5b:1e:8b:ff:a1:6c:8e: 16:1f:14:29:19:cc:28:00:b4:76:7c:20:fb:43:fc: 2c:a4:de:3a:cd:5b:1e:65:2c:b0:d7:45:91:5d:d1: c9:8a:5e:3d:05:14:b5:95:fa:0d:a3:db:a9:7a:b4: b4:35:28:46:21:c3:33:f9:94:7c:1b:34:03:37:22: 10:7e:a6:cf:d4:ee:d6:be:39:9d:9e:ae:76:be:ae: 7b:46:10:ff:33:90:7d:e0:cf:0a:1b:0b:a4:2b:ce: e2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E1:78:AE:59:EB:1E:29:70:BA:91:20:47:8F:F2:A2:C7:7F:C4:D2 X509v3 Authority Key Identifier: keyid:E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:91:be:62:f6:47:f5:4e:e9:43:ba:20:f5:1c:03:ae:be:96: dd:1d:4f:cb:47:a6:e2:4a:9b:cb:50:8c:fb:dd:f4:77:a9:09: 60:e1:02:2e:8e:77:89:11:a0:90:42:aa:ed:60:b4:85:e3:85: f5:fc:c9:1a:29:ba:1c:e7:e2:20:87:70:9e:dd:26:b7:fc:dd: 16:3c:bb:4e:7e:4e:3c:ff:e3:b0:ed:9a:de:04:9f:79:aa:85: 71:70:f4:7d:5a:cf:8b:c4:d0:ff:4e:08:ee:d4:ec:1b:0d:79: cc:8b:a9:42:0c:bf:31:b0:4d:74:dd:c9:ab:95:93:a4:f3:b0: 8b:11:53:38:17:0c:bc:1f:73:a4:5f:90:a7:79:36:23:45:03: de:6c:d7:e2:93:22:57:b2:43:a0:2e:06:f1:2a:e7:16:c8:f6: 70:aa:a5:31:3b:77:e4:9c:63:a5:d8:74:77:5d:88:cb:91:d5: 79:92:1b:9e:7d:6a:78:1d:bb:42:b2:02:3d:19:b6:22:80:b7: f3:74:22:38:5d:67:b9:c1:52:58:fb:79:9c:d8:ec:0e:75:81: b6:d1:31:d5:20:c6:37:6e:36:9a:7e:2a:8b:98:72:52:27:1c: f5:3e:e0:25:34:fb:6c:2b:1e:1f:5d:c3:09:0b:c0:63:53:fb: 15:51:be:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAwNzcxMTAvBgNVBAUTKEUzRjdDRUY2RTdBNTY5RTQ2QjJEOTAzOTMyMkI2OTc1 NTMxQzI1NjYwHhcNMjUwNzA1MDMwMjE0WhcNMjUwNzEyMDMwMjE0WjAYMRYwFAYD VQQDEw02ODY4OTViNi04ZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdbJ8innOnTLawqHWKy7fkNQ96/14mJK6HJN6mOE1uj3UlLjHbrHj9qIbKx0 CxcASuRcOpMoeRwTectLTqQIYVBqAEDzsrxvB0r0JVSE3FjKqgyEBX8Bl5AUA1Y0 Q+A37x6YJ8sb+xzs6+dok4dvzRWDIOnP45ht8YXvjKCHIIWb62yhzxrwlZza92ZX JsKFox5Ee/Tf1pt+xJbg/lsei/+hbI4WHxQpGcwoALR2fCD7Q/wspN46zVseZSyw 10WRXdHJil49BRS1lfoNo9uperS0NShGIcMz+ZR8GzQDNyIQfqbP1O7Wvjmdnq52 vq57RhD/M5B94M8KGwukK87iZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrheK5Z 6x4pcLqRIEeP8qLHf8TSMB8GA1UdIwQYMBaAFOP3zvbnpWnkay2QOTIraXVTHCVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDA3Ny81MDZBRTIzMDgx MDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFlUnJMWkE1TWl0cGRWTWNK V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfZk85dWVsYWVSckxaQTVNaXRwZFZNY0pXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDA3Ny81MDZBRTIzMDgxMDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFl UnJMWkE1TWl0cGRWTWNKV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdkb5i9kf1TulDuiD1HAOuvpbdHU/LR6biSpvLUIz73fR3qQlg4QIu jneJEaCQQqrtYLSF44X1/MkaKboc5+Igh3Ce3Sa3/N0WPLtOfk48/+Ow7ZreBJ95 qoVxcPR9Ws+LxND/Tgju1OwbDXnMi6lCDL8xsE103cmrlZOk87CLEVM4Fwy8H3Ok X5CneTYjRQPebNfikyJXskOgLgbxKucWyPZwqqUxO3fknGOl2HR3XYjLkdV5khue fWp4HbtCsgI9GbYigLfzdCI4XWe5wVJY+3mc2OwOdYG20THVIMY3bjaafiqLmHJS Jxz1PuAlNPtsKx4fXcMJC8BjU/sVUb54 -----END CERTIFICATE-----Generated at Sat Jul 5 05:25:57 2025 by rpki-client