$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft File: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft (raw, json) Hash identifier: vqD5TeE45VDBFNyyswi8O11kAxiy1bQuQE430yS4CFo= Subject key identifier: A9:EE:0D:7C:7F:87:A1:53:D1:19:DE:D3:92:85:7A:6A:B1:89:D1:79 Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A Certificate issuer: /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A Certificate serial: 1928 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft Manifest number: 191C Signing time: Wed 02 Jul 2025 16:33:27 +0000 Manifest this update: Wed 02 Jul 2025 16:33:25 +0000 Manifest next update: Wed 09 Jul 2025 16:33:25 +0000 Files and hashes: 1: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl (hash: cLiFM9I2Jeg6awmn0D9u9m2wvv5umJrA63BQsB6ZEBg=) 2: 66BEBEDE83CB11E796105342C4F9AE02.roa (hash: /U/CsYIhht9s+NW7SN7K/1R2JyIlhuy3zjDWLZs60Yg=) 3: 09C0DFCE202011F098619934C4F9AE02.roa (hash: VTcOwA4/ZHFl9NF0jVq8bKcfk95wITIQIkP9/wxqkas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6440 (0x1928) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1306, serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A Validity Not Before: Jul 2 16:33:25 2025 GMT Not After : Jul 9 16:33:25 2025 GMT Subject: CN=68655f56-b2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b4:57:2c:60:bf:e0:f7:1c:48:91:da:c3:9f: ea:0a:fb:52:28:22:ae:9a:e3:bc:e8:38:11:bb:e8: 2f:cd:d7:ea:0d:d0:83:fc:93:fe:0a:a5:90:c5:c3: 70:1a:02:0d:f4:ef:55:8e:68:e3:b5:01:01:64:fc: ff:9d:d4:5c:16:d9:e9:10:41:52:2d:d2:25:1f:0f: fa:42:cd:98:14:7e:c1:45:ce:83:31:eb:c6:e4:0d: 7b:d8:fb:f0:b7:99:41:82:a8:78:39:a6:24:ee:bf: 89:49:27:10:72:54:88:18:da:46:4d:bf:cf:01:e2: 08:1d:31:2d:7b:1c:e3:71:9c:00:d7:2f:f1:27:eb: bb:02:01:a0:72:7b:a1:46:08:d2:e9:34:55:04:eb: 74:d6:8c:10:61:9b:c5:6e:61:e8:06:35:23:68:7d: 32:e9:f4:29:f6:1f:d5:3a:39:67:d9:fb:88:d5:0c: ca:d6:e1:92:ce:84:37:34:ba:c4:3a:2c:ae:26:ff: 5f:0c:3f:40:65:50:0e:5b:bc:d4:fa:16:fd:c8:3b: f9:64:00:40:4a:a8:07:89:99:dc:ef:03:a6:f9:61: 75:91:fc:e3:8b:7b:13:5a:03:64:cd:79:4f:5a:80: 00:dd:7c:96:1a:59:d8:92:dc:78:75:7e:3b:75:2a: aa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EE:0D:7C:7F:87:A1:53:D1:19:DE:D3:92:85:7A:6A:B1:89:D1:79 X509v3 Authority Key Identifier: keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:03:8a:f2:f5:9f:9c:d7:44:b3:eb:aa:e9:ca:c5:2d:ad:13: 7f:41:87:bd:88:60:35:a8:87:ed:5e:b9:61:4d:3e:16:21:d8: c3:16:d2:39:93:81:d6:bf:da:c2:93:5a:e3:2a:b1:50:48:25: 2a:1b:3d:b3:16:82:b0:ba:e9:0e:63:1d:04:df:9e:5a:b0:f7: b4:67:42:88:2d:59:8a:6f:68:3a:c1:d2:77:a6:3b:98:9d:04: 04:bc:84:d3:ad:87:3b:8b:bf:db:cf:cb:83:11:57:e2:74:8d: d8:2a:c1:6d:65:9b:e3:1f:ec:bb:58:ac:59:53:51:1d:6d:8b: 2e:3d:1b:27:2c:3c:cd:f9:18:50:4c:a7:0d:cc:e9:d6:57:41: 6e:59:3b:49:cd:6f:f4:e6:f4:d6:b4:73:db:df:48:d4:88:b2: c5:80:be:c1:b3:41:6e:da:db:9b:a5:71:43:85:f3:6e:5c:be: 27:1b:2d:00:f0:cf:af:97:e0:c2:58:d0:de:46:0f:fa:7e:07: 26:cd:a3:b2:67:6f:e1:77:cc:b2:c6:be:16:fd:00:50:20:d9: 9a:85:67:9c:f8:b3:ef:ea:26:3d:0b:e8:74:e9:d6:55:fc:73: 41:41:97:1a:7c:64:e6:f4:66:6e:7c:87:20:f9:e0:ed:ab:89: e5:a1:48:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEzMDYxMTAvBgNVBAUTKEUwNEZCMkFBNjI3RDk3Qjk4OUFFQ0ZFODY5NzRFM0M1 RjMwMzEyMUEwHhcNMjUwNzAyMTYzMzI1WhcNMjUwNzA5MTYzMzI1WjAYMRYwFAYD VQQDEw02ODY1NWY1Ni1iMmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LRXLGC/4PccSJHaw5/qCvtSKCKumuO86DgRu+gvzdfqDdCD/JP+CqWQxcNw GgIN9O9VjmjjtQEBZPz/ndRcFtnpEEFSLdIlHw/6Qs2YFH7BRc6DMevG5A172Pvw t5lBgqh4OaYk7r+JSScQclSIGNpGTb/PAeIIHTEtexzjcZwA1y/xJ+u7AgGgcnuh RgjS6TRVBOt01owQYZvFbmHoBjUjaH0y6fQp9h/VOjln2fuI1QzK1uGSzoQ3NLrE OiyuJv9fDD9AZVAOW7zU+hb9yDv5ZABASqgHiZnc7wOm+WF1kfzji3sTWgNkzXlP WoAA3XyWGlnYktx4dX47dSqqPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnuDXx/ h6FT0Rne05KFemqxidF5MB8GA1UdIwQYMBaAFOBPsqpifZe5ia7P6Gl048XzAxIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTMwNi9GRTQ5NzQ5ODgz Q0ExMUU3QjgyNDBBNDJDNEY5QUUwMi80RS15cW1KOWw3bUpyc19vYVhUanhmTURF aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRFLXlxbUo5bDdtSnJzX29hWFRqeGZNREVoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTMwNi9GRTQ5NzQ5ODgzQ0ExMUU3QjgyNDBBNDJDNEY5QUUwMi80RS15cW1KOWw3 bUpyc19vYVhUanhmTURFaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFA4ry9Z+c10Sz66rpysUtrRN/QYe9iGA1qIftXrlhTT4WIdjDFtI5 k4HWv9rCk1rjKrFQSCUqGz2zFoKwuukOYx0E355asPe0Z0KILVmKb2g6wdJ3pjuY nQQEvITTrYc7i7/bz8uDEVfidI3YKsFtZZvjH+y7WKxZU1EdbYsuPRsnLDzN+RhQ TKcNzOnWV0FuWTtJzW/05vTWtHPb30jUiLLFgL7Bs0Fu2tubpXFDhfNuXL4nGy0A 8M+vl+DCWNDeRg/6fgcmzaOyZ2/hd8yyxr4W/QBQINmahWec+LPv6iY9C+h06dZV /HNBQZcafGTm9GZufIcg+eDtq4nloUgp -----END CERTIFICATE-----Generated at Fri Jul 4 08:30:45 2025 by rpki-client