$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft File: 4-j_B54D_aQzRoidk3ZblZ9uHVk.mft (raw, json) Hash identifier: dSwMlyP2F/WH6tsSPVk8L0c3KYKfEpQtyPB4ZSRnEDk= Subject key identifier: F2:C3:88:FE:59:5B:8D:8B:29:DF:2E:24:61:B7:08:90:31:D8:21:BB Authority key identifier: E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59 Certificate issuer: /CN=A91D09B8/serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft Manifest number: C3 Signing time: Tue 01 Jul 2025 06:24:55 +0000 Manifest this update: Tue 01 Jul 2025 06:24:54 +0000 Manifest next update: Tue 08 Jul 2025 06:24:54 +0000 Files and hashes: 1: 4-j_B54D_aQzRoidk3ZblZ9uHVk.crl (hash: Eg3FA4rcC9n4RmpWreS3qq6JDXh31Fs57DKmH5KRtVo=) 2: 7594FBFA2C7311EFA27A6526C4F9AE02.roa (hash: MW4brkS6iGYL+cXbHPuK8G2FUwzp/GEC0uyblPeDq90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09B8, serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59 Validity Not Before: Jul 1 06:24:54 2025 GMT Not After : Jul 8 06:24:54 2025 GMT Subject: CN=68637f37-d8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:71:99:94:a5:29:7b:6f:f7:dd:d5:24:a5:6b: 01:26:b7:81:80:85:6c:37:4c:4e:70:ea:5f:98:82: 16:41:0b:6b:03:83:8c:8e:e6:c3:a8:1f:8b:0f:d5: 83:79:f0:15:f7:d3:fe:9e:8e:fb:21:bb:b5:d1:c3: d0:99:b5:6d:b9:36:5d:d0:05:fc:3f:38:9c:16:7a: f0:d7:3e:68:07:88:82:b5:12:4b:db:b7:63:d2:dc: 44:3d:63:e0:9c:ab:60:70:e1:ec:47:b8:f6:e8:b1: 6d:e5:ab:3c:d5:03:b0:41:04:82:6c:7f:9b:4f:e8: 5e:84:dc:46:f2:8c:59:19:d8:6a:17:3e:b4:08:2a: 7f:07:08:55:cb:c8:bd:b8:72:2a:aa:ff:e2:f7:ee: ab:fd:12:09:0f:b4:a6:a8:e7:90:4e:c2:cf:eb:ed: 1f:95:0c:c1:98:94:3d:0b:4c:08:73:24:07:7c:68: eb:63:e5:f2:a6:51:7c:7a:b0:e5:9e:e2:07:74:2b: fb:70:6d:ce:3d:5a:77:80:d0:08:8b:e3:e3:b5:e7: d6:b5:26:49:47:61:24:96:ca:af:d2:df:e8:39:fc: c1:30:a9:f3:28:cb:27:6c:2c:d7:c7:4f:d0:f6:4e: 7f:c1:2f:ee:3d:3f:78:8c:f0:15:77:19:8d:57:e3: 9e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C3:88:FE:59:5B:8D:8B:29:DF:2E:24:61:B7:08:90:31:D8:21:BB X509v3 Authority Key Identifier: keyid:E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:56:69:45:9e:aa:b8:ef:95:58:7e:5e:a5:e1:94:4f:ec:92: a1:42:0c:de:96:71:70:8f:d8:1c:66:c9:aa:96:4c:61:ba:82: c4:af:85:d1:dd:a6:c2:55:42:49:d4:5b:c7:87:fe:34:c7:ff: 77:30:29:6c:b5:d3:fd:b6:81:5b:b3:63:f6:a5:80:83:8f:27: 41:4e:98:10:a1:c1:53:94:7a:5d:7d:ab:ca:10:e5:b8:fa:dc: 55:b4:70:6d:32:69:b6:93:d2:83:4b:1f:e9:c9:b2:dd:63:de: 50:a5:86:d5:b3:85:70:dc:55:d8:cf:30:a7:03:62:37:68:c0: 54:9a:7f:f8:8a:4f:68:ac:01:db:46:72:73:50:0a:6a:59:85: 94:e3:00:9d:b4:9d:75:18:bd:d2:47:8e:f6:ab:30:35:76:55: 5e:13:7c:7a:9d:de:73:f5:b8:71:5f:90:e4:34:70:f7:c1:1b: b4:85:3a:63:da:64:31:4a:a3:00:c5:7e:24:9f:b8:3c:41:9e: cd:9e:e7:bd:61:ab:2a:50:09:35:9b:00:f2:89:1c:ab:2f:9f: a4:75:64:27:77:ff:4c:d5:51:13:79:01:1a:4a:cb:1b:bb:93: 3e:39:5c:5d:c4:76:3d:6a:fa:09:70:3e:dd:1c:54:23:f4:4a: c4:ec:66:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5QjgxMTAvBgNVBAUTKEUzRThGRjA3OUUwM0ZEQTQzMzQ2ODg5RDkzNzY1Qjk1 OUY2RTFENTkwHhcNMjUwNzAxMDYyNDU0WhcNMjUwNzA4MDYyNDU0WjAYMRYwFAYD VQQDEw02ODYzN2YzNy1kOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXGZlKUpe2/33dUkpWsBJreBgIVsN0xOcOpfmIIWQQtrA4OMjubDqB+LD9WD efAV99P+no77Ibu10cPQmbVtuTZd0AX8PzicFnrw1z5oB4iCtRJL27dj0txEPWPg nKtgcOHsR7j26LFt5as81QOwQQSCbH+bT+hehNxG8oxZGdhqFz60CCp/BwhVy8i9 uHIqqv/i9+6r/RIJD7SmqOeQTsLP6+0flQzBmJQ9C0wIcyQHfGjrY+XyplF8erDl nuIHdCv7cG3OPVp3gNAIi+PjtefWtSZJR2Eklsqv0t/oOfzBMKnzKMsnbCzXx0/Q 9k5/wS/uPT94jPAVdxmNV+Oe/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLDiP5Z W42LKd8uJGG3CJAx2CG7MB8GA1UdIwQYMBaAFOPo/weeA/2kM0aInZN2W5Wfbh1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlCOC82QUI5OUUyNjJD NzIxMUVGQjg5QjBGODRDNEY5QUUwMi80LWpfQjU0RF9hUXpSb2lkazNaYmxaOXVI VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtal9CNTREX2FRelJvaWRrM1pibFo5dUhWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlCOC82QUI5OUUyNjJDNzIxMUVGQjg5QjBGODRDNEY5QUUwMi80LWpfQjU0RF9h UXpSb2lkazNaYmxaOXVIVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4VmlFnqq475VYfl6l4ZRP7JKhQgzelnFwj9gcZsmqlkxhuoLEr4XR 3abCVUJJ1FvHh/40x/93MClstdP9toFbs2P2pYCDjydBTpgQocFTlHpdfavKEOW4 +txVtHBtMmm2k9KDSx/pybLdY95QpYbVs4Vw3FXYzzCnA2I3aMBUmn/4ik9orAHb RnJzUApqWYWU4wCdtJ11GL3SR472qzA1dlVeE3x6nd5z9bhxX5DkNHD3wRu0hTpj 2mQxSqMAxX4kn7g8QZ7Nnue9YasqUAk1mwDyiRyrL5+kdWQnd/9M1VETeQEaSssb u5M+OVxdxHY9avoJcD7dHFQj9ErE7GZF -----END CERTIFICATE-----Generated at Tue Jul 1 17:14:56 2025 by rpki-client